This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416.mft
File:                     B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416.mft (raw, json)
Hash identifier:          zZdHVGFnU8ItLeCLbf8SNPhj28V3NEk9bErbbsJWxDY=
Subject key identifier:   5D:B3:E0:98:1B:4F:D6:00:EF:0B:29:09:E0:AC:F3:38:AD:05:67:72
Authority key identifier: B2:C1:8E:11:C8:53:0B:DF:4E:E3:33:F5:DE:BD:0B:05:5F:9D:A4:16
Certificate issuer:       /CN=B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416
Certificate serial:       54BD59981C39C2E2F61D2A6075B70AFCA14FFFE2
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416.mft
Manifest number:          0258
Signing time:             Mon 02 Feb 2026 02:40:52 +0000
Manifest this update:     Mon 02 Feb 2026 02:35:52 +0000
Manifest next update:     Thu 05 Feb 2026 03:12:52 +0000
Files and hashes:         1: B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416.crl (hash: wxPlRv687BCx+bxuf/Q6uND6guGtU02564m9PsbT1bc=)
                          2: 3130332e36382e3133372e302f32342d3234203d3e203338353131.roa (hash: kW0dkbVl3axDrA3JYmOP/J+VOWaOXAqel6hQB21C0fo=)
                          3: 3130332e36382e3133362e302f32342d3234203d3e20313335343535.roa (hash: Vqh39P+3nWLH6GpYM+8FhU68z1hzASxU3wAlgsuT274=)
                          4: 3130332e36382e3133372e302f32342d3234203d3e20313335343535.roa (hash: B/Oe9y1prQPdwN9dHWS523CLyIs4euOM6VNMTv5PS6I=)
                          5: 3130332e36382e3133362e302f32332d3233203d3e203338353131.roa (hash: Xfgb/bosimr9cD6CvubfYOrFF8ltCqJCXBNQnnNDr+E=)
                          6: 3130332e36382e3133362e302f32332d3234203d3e20313335343535.roa (hash: 3shwJ2AKcESaufbVwJ1tBPOkyd6LqDrGvkFRzpot0c8=)
                          7: 323030313a6466333a313230303a3a2f34382d3438203d3e20313335343535.roa (hash: PbwEzJXRFcDlg8qq7i8GVSnaGAPkcyZUmZy35AgEFf0=)
                          8: 3130332e36382e3133362e302f32342d3234203d3e203338353131.roa (hash: ef8K/s+loJfcDNcQd9jMxXM6ibzQu1hDbe8Y7AKrwdI=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416.crl
                          rsync://repo-rpki.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Feb 2026 03:12:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:bd:59:98:1c:39:c2:e2:f6:1d:2a:60:75:b7:0a:fc:a1:4f:ff:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416
        Validity
            Not Before: Feb  2 02:35:52 2026 GMT
            Not After : Feb  5 03:12:52 2026 GMT
        Subject: CN=5DB3E0981B4FD600EF0B2909E0ACF338AD056772
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:37:95:9b:25:51:7b:2a:19:9e:7f:cf:2b:ed:
                    29:d8:6c:46:93:78:dd:1e:03:59:de:b8:bd:dd:89:
                    42:90:37:8e:49:64:0a:7a:9f:f8:20:bf:e1:78:0b:
                    bd:db:cc:7b:8d:cd:9d:18:e1:b9:19:33:af:bd:d1:
                    9b:9f:06:49:8f:e0:7b:50:c6:37:20:1c:0f:52:7e:
                    72:c3:03:1b:b0:d1:a5:f5:d8:b5:ac:e8:96:35:f5:
                    4b:5e:79:7f:b1:9c:80:a6:7e:47:80:f3:a1:27:3d:
                    e5:8a:b1:cd:a6:e6:b0:71:3a:0a:44:b8:a3:49:85:
                    ee:4c:e3:4b:e8:a2:58:51:13:49:8c:73:83:8f:6e:
                    10:31:2b:c4:90:ca:a5:37:29:e1:16:18:a4:1e:90:
                    50:f0:b5:c1:54:ee:62:7e:be:39:81:67:d3:a0:74:
                    c7:8a:ed:d9:d4:ea:b6:f4:b5:0f:85:7d:3a:32:7f:
                    e0:c9:bd:47:08:d8:91:58:99:8e:0f:ae:4e:aa:a6:
                    f0:99:fc:a0:23:e5:6f:e7:d3:23:90:66:0c:25:f5:
                    36:75:77:5f:a2:ee:86:12:76:e8:32:fd:9e:8e:b0:
                    61:fa:a4:3f:79:6f:6d:46:f8:da:79:87:b4:0f:d2:
                    e3:5e:45:25:9c:8b:f0:d7:55:06:96:12:bc:c9:19:
                    4b:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:B3:E0:98:1B:4F:D6:00:EF:0B:29:09:E0:AC:F3:38:AD:05:67:72
            X509v3 Authority Key Identifier:
                keyid:B2:C1:8E:11:C8:53:0B:DF:4E:E3:33:F5:DE:BD:0B:05:5F:9D:A4:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:83:1f:91:12:6c:c6:4a:96:d8:4d:00:c4:d4:d6:40:7a:22:
         bf:3b:4a:7c:26:28:4c:c8:22:dc:db:6e:92:74:a3:22:0c:d3:
         6c:e1:71:bc:0c:7c:cf:90:5f:1a:48:34:f3:0c:5f:65:8b:7f:
         b2:70:7b:11:5a:ab:06:e0:28:48:35:ae:0a:4e:d8:4f:0d:be:
         6c:ba:88:3f:6e:7d:72:58:15:19:0d:bc:ad:70:e9:67:8f:03:
         9c:73:95:ca:6f:94:0c:af:a1:78:e8:b8:83:b6:fe:d8:f7:32:
         65:c2:47:70:a1:8f:2a:e9:f0:b9:8e:ea:27:b9:7b:59:eb:c2:
         95:87:98:91:1a:ee:bb:81:42:a0:d1:ee:d8:f5:f9:07:9a:4b:
         9e:e5:b4:05:d3:9b:b0:b0:95:a2:c2:3d:b2:69:e2:36:90:72:
         b9:aa:0b:c6:30:a8:df:8d:d4:98:de:cd:0e:e7:7d:53:03:ef:
         bc:42:50:47:84:56:23:a5:9b:36:bd:3e:a3:2b:80:a0:9c:b4:
         c7:e8:ad:a2:8a:76:ae:11:b7:ba:b0:53:0e:43:17:f1:a7:fa:
         1b:88:46:c6:0e:0e:1b:99:53:19:1a:69:34:5d:ed:2d:d4:ef:
         e1:1d:31:60:4f:a8:95:f6:80:82:55:78:87:c5:c0:62:11:da:
         21:24:6f:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 12:50:48 2026 by rpki-client