This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/a062111d-0a13-4407-af33-34c22a9d7aec/0/7033B8C0DC6A80E5CC4686B93BA393AFCE571B42.mft
File:                     7033B8C0DC6A80E5CC4686B93BA393AFCE571B42.mft (raw, json)
Hash identifier:          JdpUEjbKgeFBUtfimkIpTYQ3CiUiURkFRWA2Dl0WtYM=
Subject key identifier:   44:72:E1:4F:F3:70:13:9E:55:70:2F:CF:AE:1D:81:8E:BB:60:83:3B
Authority key identifier: 70:33:B8:C0:DC:6A:80:E5:CC:46:86:B9:3B:A3:93:AF:CE:57:1B:42
Certificate issuer:       /CN=7033B8C0DC6A80E5CC4686B93BA393AFCE571B42
Certificate serial:       7F939FCCF67A6B02A8E7ACA92591AE2174F21394
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7033B8C0DC6A80E5CC4686B93BA393AFCE571B42.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a062111d-0a13-4407-af33-34c22a9d7aec/0/7033B8C0DC6A80E5CC4686B93BA393AFCE571B42.mft
Manifest number:          8B
Signing time:             Sat 31 Jan 2026 19:31:32 +0000
Manifest this update:     Sat 31 Jan 2026 19:26:32 +0000
Manifest next update:     Wed 04 Feb 2026 01:42:32 +0000
Files and hashes:         1: 7033B8C0DC6A80E5CC4686B93BA393AFCE571B42.crl (hash: dKUtDoPF5bqwZi5IokmE9EGF8L1MZAeCCZUi3qkSGfs=)
                          2: 3130332e31372e37362e302f32332d3233203d3e20313331373831.roa (hash: D+JQCz3+j+wwVLgvW5xdKrECzq+QJKVH4ZaDUGKOTUY=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a062111d-0a13-4407-af33-34c22a9d7aec/0/7033B8C0DC6A80E5CC4686B93BA393AFCE571B42.crl
                          rsync://repo-rpki.idnic.net/repo/a062111d-0a13-4407-af33-34c22a9d7aec/0/7033B8C0DC6A80E5CC4686B93BA393AFCE571B42.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7033B8C0DC6A80E5CC4686B93BA393AFCE571B42.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Feb 2026 01:42:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:93:9f:cc:f6:7a:6b:02:a8:e7:ac:a9:25:91:ae:21:74:f2:13:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7033B8C0DC6A80E5CC4686B93BA393AFCE571B42
        Validity
            Not Before: Jan 31 19:26:32 2026 GMT
            Not After : Feb  4 01:42:32 2026 GMT
        Subject: CN=4472E14FF370139E55702FCFAE1D818EBB60833B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:d6:fe:0b:b5:d3:f1:ae:bc:a0:9f:47:d1:33:
                    38:87:a7:72:8a:a8:31:6e:f2:f6:ee:ca:11:74:a4:
                    06:aa:73:3b:d4:58:e4:e0:18:62:0c:5a:40:fd:03:
                    8c:53:2a:26:e6:c1:21:ea:c8:67:af:3a:2f:8b:06:
                    79:6a:40:56:f2:e5:66:6e:df:40:9e:21:20:34:e0:
                    9e:e5:1d:42:34:3d:e2:83:05:03:aa:ce:1f:b6:fb:
                    a9:14:df:4f:d8:b7:0a:1a:2d:3c:c8:21:01:86:5c:
                    2f:52:c6:7d:ec:d5:4e:66:5d:7e:89:5b:e8:dd:0c:
                    6e:8d:31:12:cf:57:6d:43:d8:e5:85:8d:de:96:85:
                    49:02:46:16:99:0d:90:b8:ac:f3:5e:f7:61:0e:8a:
                    12:dc:9d:04:35:d2:ee:e6:3e:63:17:07:67:22:ca:
                    28:c4:65:f0:e3:61:a3:e5:3d:09:07:f6:62:99:2d:
                    14:55:4b:4d:7b:46:ff:90:04:62:ce:3e:12:57:ed:
                    5a:25:ba:b9:4b:7d:94:42:94:45:63:73:fd:b0:c7:
                    ae:f5:e3:49:cd:6e:ed:98:48:54:81:26:05:0f:96:
                    50:10:f8:87:48:10:26:47:ec:21:5f:5b:73:ae:84:
                    3a:c7:3e:71:01:56:12:b2:f9:c0:03:c2:30:ed:6e:
                    1d:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:72:E1:4F:F3:70:13:9E:55:70:2F:CF:AE:1D:81:8E:BB:60:83:3B
            X509v3 Authority Key Identifier:
                keyid:70:33:B8:C0:DC:6A:80:E5:CC:46:86:B9:3B:A3:93:AF:CE:57:1B:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a062111d-0a13-4407-af33-34c22a9d7aec/0/7033B8C0DC6A80E5CC4686B93BA393AFCE571B42.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7033B8C0DC6A80E5CC4686B93BA393AFCE571B42.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a062111d-0a13-4407-af33-34c22a9d7aec/0/7033B8C0DC6A80E5CC4686B93BA393AFCE571B42.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:36:b2:3c:5e:89:c5:4c:f4:fb:1e:4f:53:e9:18:43:4e:e8:
         c2:34:a0:42:d1:87:8e:7f:25:08:6c:e5:95:bb:af:f6:4a:10:
         43:c1:88:1d:32:49:17:85:8b:89:91:ae:28:c2:48:19:e6:f6:
         9a:8e:8c:a1:66:cb:47:4f:d3:f3:8c:66:c1:c2:81:a1:61:a6:
         75:91:8a:ae:a4:85:d1:68:3d:7c:e5:8c:18:58:24:90:f3:db:
         db:f0:3d:a2:81:b1:f6:7c:b4:f4:be:2a:83:73:ce:6a:e6:f7:
         e8:cc:00:4d:67:62:9b:5a:d3:45:53:f9:65:9b:ce:eb:20:f4:
         fa:4e:59:44:0e:9e:04:1d:49:f2:17:63:25:01:ad:f2:a2:bf:
         f6:52:ad:15:0e:7d:c6:d3:9b:ed:00:35:fa:e0:a6:f7:fc:37:
         ea:89:8a:a3:8e:0b:88:3c:ad:e6:20:cd:79:fb:e7:53:5d:2d:
         5f:08:a8:85:71:ed:8c:69:59:9a:1f:ca:ed:33:b6:5e:ad:ae:
         c9:52:12:3c:48:95:10:7c:1e:db:04:69:e3:d9:8b:48:cd:68:
         f0:14:90:2e:25:7d:5f:cb:74:94:50:6c:0f:43:d9:a7:47:5c:
         1f:43:19:42:1f:9c:25:c7:2a:9c:46:8f:e7:6d:ce:53:64:65:
         e5:91:e7:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 12:50:41 2026 by rpki-client