This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/bce0fe5a-e468-49d9-931b-ab4b924a45c2/0/067116F928280AE09336BC39D005AAC13695F63C.mft
File:                     067116F928280AE09336BC39D005AAC13695F63C.mft (raw, json)
Hash identifier:          j5xsDc8ANhGdbWR6vcp3MaNIpA4RHodLdxI4uGo/qOc=
Subject key identifier:   AD:E9:97:26:C9:99:FA:FB:C0:04:7E:A0:8A:D4:08:C6:FD:F0:F4:74
Authority key identifier: 06:71:16:F9:28:28:0A:E0:93:36:BC:39:D0:05:AA:C1:36:95:F6:3C
Certificate issuer:       /CN=067116F928280AE09336BC39D005AAC13695F63C
Certificate serial:       62A0B1360C64AD1BAC4D11F1628FD7E0AC2D0DFF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/067116F928280AE09336BC39D005AAC13695F63C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/bce0fe5a-e468-49d9-931b-ab4b924a45c2/0/067116F928280AE09336BC39D005AAC13695F63C.mft
Manifest number:          0211
Signing time:             Sat 31 Jan 2026 00:21:53 +0000
Manifest this update:     Sat 31 Jan 2026 00:16:53 +0000
Manifest next update:     Tue 03 Feb 2026 09:58:53 +0000
Files and hashes:         1: 067116F928280AE09336BC39D005AAC13695F63C.crl (hash: 5Nvf7jM1MwmMsunPhMzCYv5Ikt+LXWPKm2GS+V4z7Ms=)
                          2: 3130332e38322e3234362e302f32342d3234203d3e20313432333730.roa (hash: vY8WV98Jcmzb4ODBeT1hqvxozKSfqOYtlfGMabwL6vk=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/bce0fe5a-e468-49d9-931b-ab4b924a45c2/0/067116F928280AE09336BC39D005AAC13695F63C.crl
                          rsync://repo-rpki.idnic.net/repo/bce0fe5a-e468-49d9-931b-ab4b924a45c2/0/067116F928280AE09336BC39D005AAC13695F63C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/067116F928280AE09336BC39D005AAC13695F63C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Feb 2026 09:58:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:a0:b1:36:0c:64:ad:1b:ac:4d:11:f1:62:8f:d7:e0:ac:2d:0d:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=067116F928280AE09336BC39D005AAC13695F63C
        Validity
            Not Before: Jan 31 00:16:53 2026 GMT
            Not After : Feb  3 09:58:53 2026 GMT
        Subject: CN=ADE99726C999FAFBC0047EA08AD408C6FDF0F474
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:3c:3d:79:06:f1:d7:f9:b3:d5:68:b1:c1:f5:
                    5c:bd:bb:bd:87:de:6e:79:3b:ea:c2:53:21:6f:3a:
                    14:f6:3a:b8:be:69:f8:97:79:2f:72:07:7a:63:0c:
                    2f:e4:f5:21:d0:a7:e6:2f:1f:3e:39:55:72:11:c8:
                    48:26:bd:53:0b:14:c3:a2:f7:ce:a9:01:da:db:c1:
                    0e:6e:3c:8e:1d:57:b8:e6:51:5d:f9:6f:fd:db:04:
                    1c:14:93:8b:61:98:72:57:1a:6b:2f:72:ad:01:f9:
                    09:29:7b:62:91:e4:ed:7a:eb:d2:43:18:a3:76:8b:
                    4a:55:f6:6c:fb:f4:3d:d9:f9:1c:e0:4d:07:3f:2c:
                    c4:2d:de:b5:10:08:03:26:a4:fd:b4:04:29:f6:f2:
                    00:ff:19:c8:69:1a:a7:ca:23:fa:fb:c7:b4:d4:04:
                    5e:b1:bc:f2:f3:23:38:ad:e8:57:b5:5e:1c:34:fb:
                    4c:e2:71:49:9c:58:56:f4:a1:d6:65:6e:68:da:14:
                    14:b2:73:9d:e6:2e:c8:0a:b4:24:9d:18:98:7d:93:
                    b6:dd:ae:58:83:34:8d:fc:c4:6a:15:ac:95:b2:da:
                    2b:69:59:3c:a0:4b:a7:5a:4a:38:18:29:19:5b:c3:
                    9b:50:09:c1:3b:2f:7e:98:f3:fa:fd:2f:4e:04:8f:
                    c0:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:E9:97:26:C9:99:FA:FB:C0:04:7E:A0:8A:D4:08:C6:FD:F0:F4:74
            X509v3 Authority Key Identifier:
                keyid:06:71:16:F9:28:28:0A:E0:93:36:BC:39:D0:05:AA:C1:36:95:F6:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/bce0fe5a-e468-49d9-931b-ab4b924a45c2/0/067116F928280AE09336BC39D005AAC13695F63C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/067116F928280AE09336BC39D005AAC13695F63C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bce0fe5a-e468-49d9-931b-ab4b924a45c2/0/067116F928280AE09336BC39D005AAC13695F63C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:6c:cb:62:1d:0e:4e:6b:01:1d:65:5d:d7:18:09:87:2f:39:
         c4:59:f6:e4:3c:c9:6a:c1:6f:ed:09:26:f3:42:2b:5a:5c:7a:
         3d:5a:21:99:c3:b5:f9:89:f8:43:3a:4e:21:53:97:58:dd:98:
         7b:39:17:0f:0d:ed:db:8f:d5:3f:42:24:ab:fe:3b:8d:a2:23:
         37:0b:ec:5d:b2:ba:8c:6c:f1:9c:04:9d:71:a9:25:72:5a:70:
         4a:9d:a1:65:3f:33:ff:11:06:02:4a:f8:76:5b:bd:31:a3:8c:
         4d:69:8f:9c:c1:9c:e7:17:a6:31:cc:bb:46:c3:9c:82:72:c3:
         28:04:13:80:50:e0:f9:a8:d7:8c:89:05:3a:de:34:38:a0:97:
         a1:61:d3:fb:ce:9a:66:84:78:f0:44:46:d4:6c:a8:30:4c:ee:
         1f:6e:4e:2f:a0:02:24:bb:e9:e9:6d:10:60:bb:10:26:8e:85:
         ac:84:cb:78:93:85:21:18:38:0d:df:96:97:1d:8a:03:4a:f8:
         4a:f5:1b:d5:ce:03:56:1c:a0:85:49:b5:05:af:b9:4f:cf:75:
         c8:ea:f0:0d:72:1e:07:73:42:c5:90:9a:48:7d:2b:50:64:22:
         0b:61:4e:6d:82:b1:d5:27:18:d9:12:6b:40:81:8a:31:46:43:
         fb:f2:34:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:43:44 2026 by rpki-client