This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/aae6379e-b886-436e-b0ed-3aaff9c08501/0/B90B0AED87ECD7C87066450AB56ADE2996647CD5.mft
File:                     B90B0AED87ECD7C87066450AB56ADE2996647CD5.mft (raw, json)
Hash identifier:          aBpCue9Z0JwPHWy1EtoJWUetZIq4MOyWPvWWGwgSVjg=
Subject key identifier:   1D:C6:ED:E0:B9:81:D3:2D:17:58:4F:62:3B:AD:0B:0F:5B:EC:51:38
Authority key identifier: B9:0B:0A:ED:87:EC:D7:C8:70:66:45:0A:B5:6A:DE:29:96:64:7C:D5
Certificate issuer:       /CN=B90B0AED87ECD7C87066450AB56ADE2996647CD5
Certificate serial:       70FFF65C7BF3845C89EA13C5999E77D33945EE00
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B90B0AED87ECD7C87066450AB56ADE2996647CD5.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/aae6379e-b886-436e-b0ed-3aaff9c08501/0/B90B0AED87ECD7C87066450AB56ADE2996647CD5.mft
Manifest number:          02B7
Signing time:             Sun 01 Feb 2026 02:01:33 +0000
Manifest this update:     Sun 01 Feb 2026 01:56:33 +0000
Manifest next update:     Wed 04 Feb 2026 03:09:33 +0000
Files and hashes:         1: B90B0AED87ECD7C87066450AB56ADE2996647CD5.crl (hash: H2blg+Thwgd4z55u6+nhGVV/fBEjYS9dU9zEbm9nanc=)
                          2: 3130332e3137302e33322e302f32332d3234203d3e20313432333631.roa (hash: 3ZtCwnCQD5p9GJGLBXeZADVLlPJnY+bs7SHq9opzmnQ=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/aae6379e-b886-436e-b0ed-3aaff9c08501/0/B90B0AED87ECD7C87066450AB56ADE2996647CD5.crl
                          rsync://repo-rpki.idnic.net/repo/aae6379e-b886-436e-b0ed-3aaff9c08501/0/B90B0AED87ECD7C87066450AB56ADE2996647CD5.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B90B0AED87ECD7C87066450AB56ADE2996647CD5.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Feb 2026 03:09:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:ff:f6:5c:7b:f3:84:5c:89:ea:13:c5:99:9e:77:d3:39:45:ee:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B90B0AED87ECD7C87066450AB56ADE2996647CD5
        Validity
            Not Before: Feb  1 01:56:33 2026 GMT
            Not After : Feb  4 03:09:33 2026 GMT
        Subject: CN=1DC6EDE0B981D32D17584F623BAD0B0F5BEC5138
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:33:91:ed:9f:03:18:a6:52:c3:7d:21:51:2f:
                    e5:95:e1:b8:e3:11:42:1d:0e:1e:d3:e6:f8:8d:70:
                    91:b9:66:9f:2b:92:a4:e7:96:46:79:62:0b:fd:04:
                    91:cd:77:57:d6:27:a6:7c:46:c2:67:7c:36:26:37:
                    b0:22:90:36:dd:bd:80:32:6d:13:fa:d7:47:9b:3d:
                    a2:72:59:b0:7d:ff:30:71:7a:bc:90:0a:5e:98:da:
                    00:82:45:d5:b7:be:3b:f0:de:1a:a5:0a:c5:58:39:
                    52:7e:de:1a:63:a1:49:07:1b:2f:42:9b:58:fe:1e:
                    64:49:81:5d:fd:53:00:56:5b:0c:63:61:91:e1:bb:
                    33:d2:87:29:01:4d:81:2b:4e:27:47:f3:06:8e:75:
                    aa:29:3a:a2:a9:57:39:db:6c:93:47:04:46:a3:46:
                    67:fe:d3:72:a2:88:da:61:14:0a:78:7e:2e:02:11:
                    83:0b:28:e7:40:d2:64:20:ed:7b:e5:a4:85:4f:17:
                    ae:c4:05:e6:96:a3:0c:53:ab:fd:46:ca:7f:74:56:
                    c5:50:5c:32:bf:6d:67:aa:37:49:f7:3e:23:22:43:
                    cf:ef:4d:20:03:a0:42:73:99:71:85:81:da:d1:d6:
                    5a:bd:05:7e:6c:af:51:6b:ac:0e:7f:79:d6:55:3a:
                    2b:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:C6:ED:E0:B9:81:D3:2D:17:58:4F:62:3B:AD:0B:0F:5B:EC:51:38
            X509v3 Authority Key Identifier:
                keyid:B9:0B:0A:ED:87:EC:D7:C8:70:66:45:0A:B5:6A:DE:29:96:64:7C:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/aae6379e-b886-436e-b0ed-3aaff9c08501/0/B90B0AED87ECD7C87066450AB56ADE2996647CD5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B90B0AED87ECD7C87066450AB56ADE2996647CD5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aae6379e-b886-436e-b0ed-3aaff9c08501/0/B90B0AED87ECD7C87066450AB56ADE2996647CD5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:8a:28:b9:80:36:25:1e:b9:61:6d:90:3a:9c:0d:d9:ee:ff:
         ff:4c:7a:bb:a6:94:94:2b:33:7c:65:8e:bb:31:18:5b:56:0c:
         76:80:a9:19:2b:92:d9:0a:73:b9:1f:04:15:0c:43:65:68:a5:
         93:bb:ac:a5:3c:c7:2b:88:11:77:20:0b:ee:30:2c:bb:48:9c:
         32:39:be:c2:be:3b:af:3e:1b:09:1a:c2:4c:97:8e:53:f2:b1:
         1c:cb:fc:e0:f6:24:d8:b3:59:b9:0f:6e:b1:fa:b2:5d:10:be:
         7a:07:5f:9e:1c:5f:25:59:ad:08:83:17:2b:91:6a:50:f7:ae:
         67:72:1c:38:ad:04:28:93:fc:e3:5f:3d:a0:16:e6:f8:aa:c3:
         0e:26:7f:a0:ab:da:80:fb:e3:de:30:5e:52:6a:6b:6d:53:d2:
         5b:9a:25:81:ac:73:aa:5e:4d:30:2c:5d:ab:77:28:ca:7f:1d:
         c4:a5:91:2e:7b:81:c7:d8:80:24:f3:35:46:a3:e1:00:57:d7:
         36:81:ac:28:83:46:5d:05:84:5e:c0:9a:47:40:cb:e0:82:53:
         3a:66:af:07:47:bf:78:57:c2:1c:c2:9d:f0:40:6a:47:90:33:
         10:cb:26:57:29:62:08:98:4c:e6:df:1b:4b:5e:ee:dd:21:a1:
         9e:41:9d:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:43:09 2026 by rpki-client