This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/a63097f0-3978-49ce-b69c-4b20b4dcfb7e/0/B0734A32D13A96FCB3FDF982C2EEC500150411CA.mft
File:                     B0734A32D13A96FCB3FDF982C2EEC500150411CA.mft (raw, json)
Hash identifier:          cZEn5fpA4hQPaSdHTd8adHZVfp4QxEGvYo4K7LueO1g=
Subject key identifier:   04:7A:8F:8B:3B:A6:E8:51:9D:5E:C9:6A:D9:C7:4A:A1:E1:49:C0:70
Authority key identifier: B0:73:4A:32:D1:3A:96:FC:B3:FD:F9:82:C2:EE:C5:00:15:04:11:CA
Certificate issuer:       /CN=B0734A32D13A96FCB3FDF982C2EEC500150411CA
Certificate serial:       26868CFDA4A377059DC10868AC4C75DF86AF8B69
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0734A32D13A96FCB3FDF982C2EEC500150411CA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a63097f0-3978-49ce-b69c-4b20b4dcfb7e/0/B0734A32D13A96FCB3FDF982C2EEC500150411CA.mft
Manifest number:          0254
Signing time:             Sat 31 Jan 2026 08:11:14 +0000
Manifest this update:     Sat 31 Jan 2026 08:06:14 +0000
Manifest next update:     Tue 03 Feb 2026 14:12:14 +0000
Files and hashes:         1: 3130332e3138372e3232362e302f32332d3234203d3e20313439373238.roa (hash: fcX6dDB/6jZr5p1excLhOSLezwfpNz/DNvOt6VHyTLo=)
                          2: B0734A32D13A96FCB3FDF982C2EEC500150411CA.crl (hash: Kum1i/MD7jX5lCxuRDbCyOADOtbckNM8lL2kBsxVT7Y=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a63097f0-3978-49ce-b69c-4b20b4dcfb7e/0/B0734A32D13A96FCB3FDF982C2EEC500150411CA.crl
                          rsync://repo-rpki.idnic.net/repo/a63097f0-3978-49ce-b69c-4b20b4dcfb7e/0/B0734A32D13A96FCB3FDF982C2EEC500150411CA.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0734A32D13A96FCB3FDF982C2EEC500150411CA.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Feb 2026 14:12:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:86:8c:fd:a4:a3:77:05:9d:c1:08:68:ac:4c:75:df:86:af:8b:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0734A32D13A96FCB3FDF982C2EEC500150411CA
        Validity
            Not Before: Jan 31 08:06:14 2026 GMT
            Not After : Feb  3 14:12:14 2026 GMT
        Subject: CN=047A8F8B3BA6E8519D5EC96AD9C74AA1E149C070
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:3b:d3:c4:cd:0e:32:f0:ef:c1:23:fe:10:2e:
                    3a:54:8b:10:f9:aa:db:df:19:8b:88:cb:46:93:8c:
                    48:b9:ef:fd:c6:ec:1b:09:44:06:cf:8e:cc:b5:e3:
                    bf:29:c2:9b:81:48:e4:70:26:78:64:8f:62:b2:a2:
                    8b:ca:67:04:20:fc:71:09:28:7f:27:29:6f:3d:30:
                    20:c5:29:9f:16:6c:ae:84:0c:1d:24:e3:ef:40:5d:
                    c8:83:14:b8:fb:d0:9b:2c:bd:ff:08:1c:e0:8c:7f:
                    78:98:5c:6b:85:cf:f2:41:35:8c:e8:6e:ca:dc:4e:
                    3d:7f:39:91:d5:67:a7:a0:af:d4:7a:14:c4:2b:87:
                    58:a3:47:a0:f0:a7:63:80:80:fd:c6:7e:49:95:2f:
                    66:ff:3a:1e:7d:c1:9e:6e:b9:6c:02:1e:b5:60:4c:
                    23:38:37:de:c1:66:14:46:f0:14:05:38:08:e3:0b:
                    e0:17:8e:aa:ee:b9:27:9b:f3:27:38:36:06:5e:db:
                    3a:81:59:14:12:86:6a:25:9a:8f:80:4e:3d:ff:7e:
                    24:1c:4e:70:08:6c:f5:f4:ce:89:a5:12:0e:13:03:
                    05:30:3c:19:ef:5f:ef:e2:a0:a1:25:4f:81:6d:d4:
                    25:e6:5b:05:58:40:f9:08:06:ad:6e:77:ed:9c:54:
                    c1:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:7A:8F:8B:3B:A6:E8:51:9D:5E:C9:6A:D9:C7:4A:A1:E1:49:C0:70
            X509v3 Authority Key Identifier:
                keyid:B0:73:4A:32:D1:3A:96:FC:B3:FD:F9:82:C2:EE:C5:00:15:04:11:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a63097f0-3978-49ce-b69c-4b20b4dcfb7e/0/B0734A32D13A96FCB3FDF982C2EEC500150411CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0734A32D13A96FCB3FDF982C2EEC500150411CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a63097f0-3978-49ce-b69c-4b20b4dcfb7e/0/B0734A32D13A96FCB3FDF982C2EEC500150411CA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:02:86:b9:55:8f:e9:0a:2a:7e:c4:56:44:f9:75:8f:fc:ef:
         34:1c:cc:82:03:6e:4f:4f:d4:56:bf:0f:f0:d7:39:11:2d:63:
         b2:f8:eb:b5:c3:0b:17:d8:a5:8f:80:68:f6:1d:60:3a:1d:fd:
         75:62:7a:31:b9:95:7a:61:33:64:e9:db:d2:56:b2:40:f1:d4:
         83:49:09:db:2f:47:4c:70:d6:24:46:42:90:71:88:fc:a6:f2:
         49:2d:48:9e:8e:82:97:9a:33:a6:76:8c:08:b2:08:8b:43:e3:
         1a:9a:a6:94:8a:02:77:9b:80:51:d6:b3:7e:fa:0e:7b:2d:6f:
         23:01:98:94:c3:87:5f:ed:96:73:2c:b2:15:35:fe:39:4f:53:
         1d:d7:6f:13:9d:f6:65:4c:59:ba:51:22:11:53:76:a7:2c:d1:
         b3:e2:fd:b0:93:df:1f:41:52:d6:94:ef:82:ce:47:ff:74:ce:
         7f:d5:09:26:f8:a7:b7:24:5a:6e:e6:da:52:b2:aa:07:39:5c:
         a2:bb:52:d4:a9:c8:fd:fe:7f:02:41:be:e6:4c:67:54:f5:85:
         89:2d:96:3a:5a:e0:d4:c6:8d:c3:9c:33:33:29:ce:0e:8e:3c:
         34:2d:5d:fb:4e:e0:57:bd:57:e8:d9:d8:7d:c7:00:b8:18:03:
         9f:62:08:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 10:03:49 2026 by rpki-client