This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/ac32eee1-10f7-457d-a8c5-5f7f741a63da/0/7195906BF48238F96B0510D75000910A519133F7.mft
File:                     7195906BF48238F96B0510D75000910A519133F7.mft (raw, json)
Hash identifier:          jDCZStbJu0rMJ0OdEqnfCiAW1oIyAQadaCxSJdyuLLk=
Subject key identifier:   BF:B6:23:15:E3:B2:B5:2A:5F:62:71:38:77:85:73:F3:46:92:A1:5F
Authority key identifier: 71:95:90:6B:F4:82:38:F9:6B:05:10:D7:50:00:91:0A:51:91:33:F7
Certificate issuer:       /CN=7195906BF48238F96B0510D75000910A519133F7
Certificate serial:       220580C8F03D77E92E9480A4E88DCDDC46E67E64
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7195906BF48238F96B0510D75000910A519133F7.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ac32eee1-10f7-457d-a8c5-5f7f741a63da/0/7195906BF48238F96B0510D75000910A519133F7.mft
Manifest number:          01DE
Signing time:             Sat 31 Jan 2026 07:51:37 +0000
Manifest this update:     Sat 31 Jan 2026 07:46:37 +0000
Manifest next update:     Tue 03 Feb 2026 17:29:37 +0000
Files and hashes:         1: 3130332e3136382e3135312e302f32342d3234203d3e20313432333131.roa (hash: s6WBhLaUVIxSMrwUa1GyQKxiSJ5Lxm0zhF+JRIxoxjM=)
                          2: 3130332e3136382e3135302e302f32332d3233203d3e20313432333131.roa (hash: vej87BChpsakmxUSnkAXWyF/hseNZHZfP/+A76YToPE=)
                          3: 7195906BF48238F96B0510D75000910A519133F7.crl (hash: JYMxkvpastMN0svO2eyYwHP5I3HkkQYfNfwgZQLKBp4=)
                          4: 3130332e3136382e3135302e302f32342d3234203d3e20313432333131.roa (hash: FbNYGlqllOlMcgZqW/AYQTW3Ig+jNpTHmcZ/SLk/YWc=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ac32eee1-10f7-457d-a8c5-5f7f741a63da/0/7195906BF48238F96B0510D75000910A519133F7.crl
                          rsync://repo-rpki.idnic.net/repo/ac32eee1-10f7-457d-a8c5-5f7f741a63da/0/7195906BF48238F96B0510D75000910A519133F7.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7195906BF48238F96B0510D75000910A519133F7.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Feb 2026 17:29:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:05:80:c8:f0:3d:77:e9:2e:94:80:a4:e8:8d:cd:dc:46:e6:7e:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7195906BF48238F96B0510D75000910A519133F7
        Validity
            Not Before: Jan 31 07:46:37 2026 GMT
            Not After : Feb  3 17:29:37 2026 GMT
        Subject: CN=BFB62315E3B2B52A5F627138778573F34692A15F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:54:22:8e:af:72:84:7f:6e:33:88:56:92:96:
                    26:58:11:ea:bc:22:53:11:47:8a:b4:c2:e6:e3:1e:
                    cb:57:a7:4b:fb:fe:70:8f:a3:1b:7b:ee:93:3e:42:
                    95:d0:ea:c7:eb:32:a5:09:6b:ce:85:ba:8c:0d:5c:
                    31:66:89:4f:a7:a3:ea:cf:f0:d2:91:52:cf:cc:e4:
                    3e:a2:d3:3b:48:c4:4a:9d:96:91:4b:3e:dc:22:97:
                    a1:86:1d:70:28:e0:7e:f0:eb:59:5a:59:2d:28:b0:
                    ac:dc:95:83:9b:f2:3b:d9:a3:c5:34:36:77:91:9d:
                    8b:d2:f7:bc:4e:1e:99:b7:c6:5d:37:67:fd:54:de:
                    72:ac:ee:70:41:b4:75:6a:d7:9b:d7:50:db:0b:c2:
                    21:5c:58:9b:b4:80:d0:f6:e6:e8:5f:3c:9b:3c:49:
                    f3:05:54:b9:3d:26:e3:1e:8a:7c:62:0a:7d:a4:03:
                    ec:d0:88:08:43:60:f2:d2:ff:44:12:7f:ce:f1:ac:
                    ac:e8:d4:62:e0:00:8f:57:5a:8d:e4:bf:13:28:1b:
                    93:4f:55:b9:55:52:88:a7:dc:37:82:a4:63:a3:22:
                    ee:80:91:c2:64:3a:48:41:e3:0a:10:c8:2d:0d:5d:
                    50:6e:8b:60:99:bd:28:b0:8e:7b:27:3f:95:7b:36:
                    05:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:B6:23:15:E3:B2:B5:2A:5F:62:71:38:77:85:73:F3:46:92:A1:5F
            X509v3 Authority Key Identifier:
                keyid:71:95:90:6B:F4:82:38:F9:6B:05:10:D7:50:00:91:0A:51:91:33:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ac32eee1-10f7-457d-a8c5-5f7f741a63da/0/7195906BF48238F96B0510D75000910A519133F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7195906BF48238F96B0510D75000910A519133F7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ac32eee1-10f7-457d-a8c5-5f7f741a63da/0/7195906BF48238F96B0510D75000910A519133F7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:09:b0:b6:b6:18:8f:88:e2:e2:28:a4:da:08:90:b5:19:2f:
         03:4c:f5:92:3e:d3:2f:2d:b8:aa:f3:f6:ad:99:16:d9:f9:06:
         01:d4:7a:6e:9f:11:c0:ff:6c:98:4b:37:1e:0e:99:4f:0d:9b:
         31:e8:e1:5e:ed:f8:bb:28:f3:09:d7:4e:0a:b1:75:c6:86:26:
         73:30:24:c5:9d:6c:ab:bb:43:c0:87:15:41:7d:c8:67:1d:c1:
         b7:2a:74:b9:d9:82:38:2c:2f:fc:59:4f:52:ee:84:5e:e3:93:
         27:92:60:3f:97:de:f2:5a:82:46:b3:df:9a:ff:60:5e:85:5e:
         6e:2b:79:c8:35:11:cd:14:4c:c3:be:98:6f:fc:a5:e2:71:01:
         80:8e:a4:46:d3:b5:f2:09:f3:2b:5d:96:e8:4f:0e:fe:3d:d3:
         45:86:69:16:fe:f9:df:04:b4:a1:ab:ef:2c:93:4e:85:67:4a:
         a2:80:b3:6c:71:ae:13:60:21:90:ca:55:b4:c1:df:1b:10:f3:
         7d:9a:19:0a:0b:9c:65:fa:3b:02:ab:39:fb:47:2c:eb:25:47:
         d1:31:49:61:27:ab:89:73:6d:bb:a0:68:c2:1d:9d:f2:f1:1d:
         b2:7e:34:b3:c7:7d:48:db:6c:0d:0a:76:88:8c:4b:ec:df:14:
         b1:dd:52:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 10:05:08 2026 by rpki-client