This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.mft
File:                     9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.mft (raw, json)
Hash identifier:          78sMxorG0qaNEcwP0teLPPfszSo0rghBvJydG5SfhdA=
Subject key identifier:   5E:C8:64:B4:43:06:47:B4:32:6E:8D:BE:BA:B2:40:B5:02:D1:27:EA
Authority key identifier: 9B:2F:00:47:6D:6A:C1:BA:AB:05:C5:A6:25:DC:00:C2:A5:9F:99:D7
Certificate issuer:       /CN=9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7
Certificate serial:       7997BA5D4FBF1F334F0EA2ADA5BFFDD5D98CEFBC
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.mft
Manifest number:          024B
Signing time:             Sun 01 Feb 2026 12:21:08 +0000
Manifest this update:     Sun 01 Feb 2026 12:16:08 +0000
Manifest next update:     Wed 04 Feb 2026 20:59:08 +0000
Files and hashes:         1: 9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.crl (hash: xseiGk+BTVkN+hhImNdjj9JQVYkD6SzjGNQHMdXB6Yc=)
                          2: 3131332e35392e3233352e302f32342d3234203d3e203435323936.roa (hash: Rl+vIZHqpKLQ+zEdVxcDzBikcA2vcYpw3IxauTfHLDQ=)
                          3: 3131332e35392e3233322e302f32322d3234203d3e203435323936.roa (hash: kqGfNPGo8vr6qEuioNQey/aEeNu4t6Mg5faJoQyQKYs=)
                          4: 323430303a623038303a3a2f33322d3332203d3e203435323936.roa (hash: mAhuKWaZwCU2ddZVNRemmjaIEoWPi+10pFfmb3yzyIg=)
                          5: 323430303a623038303a343532393a3a2f34382d3438203d3e203435323936.roa (hash: nQIMnNv0zD1kzZE1OsmGchXVsI7eh3j6LWcU1vJtAB8=)
                          6: 3131332e35392e3233332e302f32342d3234203d3e203435323936.roa (hash: L+chPyitKggq6YV3uJXNnAD2SduLB4kVYgMaedVJt6w=)
                          7: 3131332e35392e3233342e302f32332d3234203d3e203435323936.roa (hash: tNlmP7pZ6Y/fxhCmjBMnla95rEILFfMcM572+/x8IhI=)
                          8: 3131332e35392e3233342e302f32342d3234203d3e203435323936.roa (hash: lEeS6vsNWcZ17S5/mxWNgu2oa8p6QhZGfAbhq4nCm2A=)
                          9: 3131332e35392e3233322e302f32332d3234203d3e203435323936.roa (hash: o92oWma+qVg7kDpp1dBbsZyfIxt7kWwBQcOjSnqRqMk=)
                          10: 3131332e35392e3233322e302f32342d3234203d3e203435323936.roa (hash: FvX6HOu240BmC0Xjx609uR2xk59ob67iwFxIeabyR18=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.crl
                          rsync://repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Feb 2026 20:59:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:97:ba:5d:4f:bf:1f:33:4f:0e:a2:ad:a5:bf:fd:d5:d9:8c:ef:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7
        Validity
            Not Before: Feb  1 12:16:08 2026 GMT
            Not After : Feb  4 20:59:08 2026 GMT
        Subject: CN=5EC864B4430647B4326E8DBEBAB240B502D127EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:6f:f8:1d:eb:3d:2b:ee:74:19:95:f6:e3:30:
                    79:0a:1e:f6:e5:0a:94:15:f8:ab:f5:1c:8f:35:7a:
                    bb:c5:30:c1:97:a4:18:87:c3:9c:44:23:92:74:bf:
                    3b:c0:26:c3:37:2a:49:03:31:64:4a:0a:5c:6b:68:
                    40:2a:e9:49:5a:c2:ad:b7:d4:0c:11:d7:64:ff:4d:
                    d4:1b:91:28:87:0e:f1:9e:72:51:3d:ef:13:f5:a5:
                    b2:d5:4a:4a:70:ba:d4:5f:54:4e:9d:a8:dd:cd:9f:
                    7b:cb:a5:82:68:e5:f3:b9:f4:4c:24:fd:c9:38:1b:
                    16:d9:39:fb:3d:91:08:bd:9b:ae:0d:e7:9c:06:f8:
                    ee:f3:52:41:e3:59:80:30:47:15:59:24:7b:86:39:
                    74:f8:25:21:15:03:5c:ea:06:8e:65:98:e5:55:17:
                    de:c3:bc:89:0c:a3:b7:ee:63:14:a4:98:c1:55:ce:
                    44:7d:21:c7:96:5f:32:7c:af:a9:86:14:fb:14:63:
                    57:5f:28:65:09:99:cf:77:02:2c:80:a8:b6:9e:6b:
                    3e:64:e1:99:b0:0b:f5:ef:32:2a:7e:ad:98:b0:15:
                    0d:dc:b8:90:1a:91:e1:76:c7:d4:dd:b6:55:d4:53:
                    60:e3:0c:54:60:12:e1:6f:c3:06:ee:85:6c:8a:d3:
                    7f:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:C8:64:B4:43:06:47:B4:32:6E:8D:BE:BA:B2:40:B5:02:D1:27:EA
            X509v3 Authority Key Identifier:
                keyid:9B:2F:00:47:6D:6A:C1:BA:AB:05:C5:A6:25:DC:00:C2:A5:9F:99:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:d6:c4:bc:d2:05:07:f6:88:bf:68:23:be:05:7c:3e:ad:55:
         a8:31:b7:ae:24:a7:a8:5d:8f:a8:35:80:39:2c:28:d2:99:d2:
         a4:8d:2c:ff:5b:0e:ce:67:e5:e2:37:65:57:d6:ab:02:f2:3d:
         5d:8b:b0:bb:78:6a:9e:c6:89:b4:02:e9:1d:ca:c8:de:5f:57:
         1e:31:e1:a5:12:23:25:2f:5f:1f:83:7b:05:62:ac:0e:54:3d:
         3e:e1:f2:c8:a3:17:73:64:6e:43:41:43:10:fe:be:5a:95:fa:
         cf:ec:cc:29:99:64:f6:a6:d8:99:e3:62:c6:ee:4e:1f:72:0d:
         91:22:af:a9:aa:75:9f:f0:ad:c0:9b:29:e4:60:aa:33:e3:44:
         4c:9a:5d:0a:c9:d9:d5:ea:db:7a:1e:3a:9b:c1:48:09:01:13:
         54:b0:e3:0d:c4:62:5f:16:8a:62:f0:4e:16:78:0d:5a:33:0e:
         ce:ee:99:e1:0c:ef:d1:9b:fa:7a:df:7c:0d:d7:26:3e:35:83:
         b8:a9:a5:ba:99:db:fc:39:85:b5:cf:5c:54:45:ab:2e:97:03:
         3b:ed:45:4b:a8:e3:cd:b2:51:72:4c:f0:80:37:76:61:fc:e1:
         36:98:47:cf:0f:7a:05:88:2c:bb:1d:1b:42:6d:8f:a1:3e:ac:
         29:fb:19:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:50:42 2026 by rpki-client