This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/aee2088a-c9ff-4d84-be4e-141d5b80b543/0/42467B1885830A9908EAE67935311639B090AA77.mft
File:                     42467B1885830A9908EAE67935311639B090AA77.mft (raw, json)
Hash identifier:          rQnL/pUQK1616nvYPAoqC3NK8ve9alpxpDIm4Gb+zW4=
Subject key identifier:   E8:4A:7F:7D:0A:07:3F:C2:8F:47:CA:80:54:DF:75:A4:F5:83:8A:F7
Authority key identifier: 42:46:7B:18:85:83:0A:99:08:EA:E6:79:35:31:16:39:B0:90:AA:77
Certificate issuer:       /CN=42467B1885830A9908EAE67935311639B090AA77
Certificate serial:       6413612D6F036B988455DA5D2B5372399AB23DFB
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42467B1885830A9908EAE67935311639B090AA77.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/aee2088a-c9ff-4d84-be4e-141d5b80b543/0/42467B1885830A9908EAE67935311639B090AA77.mft
Manifest number:          017B
Signing time:             Sat 31 Jan 2026 03:21:47 +0000
Manifest this update:     Sat 31 Jan 2026 03:16:47 +0000
Manifest next update:     Tue 03 Feb 2026 13:27:47 +0000
Files and hashes:         1: 42467B1885830A9908EAE67935311639B090AA77.crl (hash: SvTNSCsSQbW+OK1lQVz9LN5RYkCqTGWuCUhzpahG6g4=)
                          2: 3130332e37362e3130362e302f32332d3234203d3e20313531353737.roa (hash: DxKIyMO6WjD2qxH8BuKIvj+fKDvOwuaoHadDVnwc7A0=)
                          3: 3130332e37362e3130372e302f32342d3234203d3e20313531353737.roa (hash: ZWtRALMquKEFwYIWcUiF1poTwDnT8MPEPPx4FTc8PK0=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/aee2088a-c9ff-4d84-be4e-141d5b80b543/0/42467B1885830A9908EAE67935311639B090AA77.crl
                          rsync://repo-rpki.idnic.net/repo/aee2088a-c9ff-4d84-be4e-141d5b80b543/0/42467B1885830A9908EAE67935311639B090AA77.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42467B1885830A9908EAE67935311639B090AA77.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Feb 2026 13:27:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:13:61:2d:6f:03:6b:98:84:55:da:5d:2b:53:72:39:9a:b2:3d:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42467B1885830A9908EAE67935311639B090AA77
        Validity
            Not Before: Jan 31 03:16:47 2026 GMT
            Not After : Feb  3 13:27:47 2026 GMT
        Subject: CN=E84A7F7D0A073FC28F47CA8054DF75A4F5838AF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:2e:d7:c5:64:4e:7e:3e:39:f0:b2:48:a0:8b:
                    86:ae:da:bd:f0:b3:8a:78:6d:0a:db:2a:33:ba:41:
                    27:28:5b:bf:83:3a:85:99:96:70:2a:42:dd:f4:31:
                    38:b6:87:e4:ba:21:35:0c:35:3c:0e:66:f3:27:80:
                    11:35:8a:fa:ce:dd:bc:ed:da:44:ec:65:51:15:75:
                    88:35:ed:96:3e:55:48:88:3b:bb:7a:03:d4:16:b3:
                    6c:0b:18:c6:aa:21:5f:30:a8:71:54:d3:6e:a0:84:
                    97:40:b2:05:f6:1b:62:41:0c:90:a5:b9:a1:8e:13:
                    cc:d8:da:34:01:ce:99:a4:d3:41:83:6f:d8:45:cc:
                    6d:bf:c1:f2:11:a9:a3:2c:7e:d9:0d:31:91:dc:01:
                    d1:b7:ba:a0:26:db:09:72:b4:22:95:c4:ed:cf:9a:
                    bf:1f:85:7d:50:93:a5:98:11:e6:b8:0f:5f:c1:2f:
                    ba:68:bc:4d:ad:c6:2a:43:f1:17:48:bb:5d:a9:d7:
                    2f:91:7a:f0:13:80:65:00:bb:d0:2c:a2:9f:ea:a6:
                    57:0b:af:b2:05:bf:bd:8d:a7:bc:ec:2b:ac:a9:4d:
                    e3:ff:09:7a:67:38:11:6d:52:4d:37:7f:8a:c4:fb:
                    1b:d4:90:99:b6:2b:3e:94:b7:1e:97:af:2d:f8:42:
                    c5:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:4A:7F:7D:0A:07:3F:C2:8F:47:CA:80:54:DF:75:A4:F5:83:8A:F7
            X509v3 Authority Key Identifier:
                keyid:42:46:7B:18:85:83:0A:99:08:EA:E6:79:35:31:16:39:B0:90:AA:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/aee2088a-c9ff-4d84-be4e-141d5b80b543/0/42467B1885830A9908EAE67935311639B090AA77.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42467B1885830A9908EAE67935311639B090AA77.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aee2088a-c9ff-4d84-be4e-141d5b80b543/0/42467B1885830A9908EAE67935311639B090AA77.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:e1:8b:e6:ac:17:17:71:32:77:29:a1:bc:12:fb:19:26:52:
         30:7b:02:df:6c:9e:09:06:30:7b:0a:ed:d4:b0:c5:12:a8:21:
         7d:4a:82:71:26:6b:da:eb:5c:bf:ae:1a:16:1b:11:ab:13:8f:
         ad:3a:6e:83:4a:ae:8d:cd:fd:ed:8f:79:3e:a7:7b:53:60:ff:
         f1:d4:57:f7:fd:a4:4b:92:3e:bb:1f:4d:ab:f7:ed:2b:cc:4c:
         d5:54:af:32:8d:80:7e:49:67:de:a8:bb:7e:75:0c:ec:37:1b:
         80:5c:9a:0d:5f:de:19:2e:c5:00:df:ae:94:83:91:03:20:3b:
         d2:a8:4d:e3:bc:b2:d4:fc:51:fa:dd:6a:8b:9f:7f:7d:87:f0:
         1c:14:56:d4:6e:47:98:36:33:bc:b3:f5:4d:df:0f:81:fc:3a:
         97:cc:b5:04:4f:46:c7:d2:34:49:85:e4:92:2c:80:b0:46:a7:
         e7:ec:bf:fb:ff:dd:37:b4:01:0e:80:17:a4:32:cf:a6:5e:f4:
         bc:a9:2b:3e:05:59:15:46:63:a9:44:ba:07:a1:36:01:18:1e:
         6d:06:f7:39:fe:9d:f0:ea:f6:36:f4:cc:c1:96:d0:5c:f1:ac:
         58:1e:1b:02:84:41:b8:14:24:5a:21:eb:8b:0e:47:5b:50:ff:
         c6:c5:41:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 10:03:40 2026 by rpki-client