This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/bd871303-021a-4a0b-9efb-ae2db6c90d84/0/ACE2DABAA249D56AD968AD7D60A09642B626CA4D.mft
File:                     ACE2DABAA249D56AD968AD7D60A09642B626CA4D.mft (raw, json)
Hash identifier:          sKGWdcNvHyqY4nl4OMWiqftr29S2iqrs62Vyn4fZoZM=
Subject key identifier:   38:F2:0B:22:37:FD:7F:91:5D:0B:D3:A4:31:C3:D5:3B:6D:62:F5:C3
Authority key identifier: AC:E2:DA:BA:A2:49:D5:6A:D9:68:AD:7D:60:A0:96:42:B6:26:CA:4D
Certificate issuer:       /CN=ACE2DABAA249D56AD968AD7D60A09642B626CA4D
Certificate serial:       22E191B354E37BF2FC7423E831A4116AB96057B0
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ACE2DABAA249D56AD968AD7D60A09642B626CA4D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/bd871303-021a-4a0b-9efb-ae2db6c90d84/0/ACE2DABAA249D56AD968AD7D60A09642B626CA4D.mft
Manifest number:          0174
Signing time:             Sat 31 Jan 2026 12:01:10 +0000
Manifest this update:     Sat 31 Jan 2026 11:56:10 +0000
Manifest next update:     Tue 03 Feb 2026 20:41:10 +0000
Files and hashes:         1: ACE2DABAA249D56AD968AD7D60A09642B626CA4D.crl (hash: jDKX+jKJPkKsrJCY10D7RQ2UQuMZISohPkclYYu360M=)
                          2: 3230332e332e39302e302f32342d3234203d3e20313531353938.roa (hash: qxf//YzvZquiMhJd5iJXlsIhTKmJQsFvO/D1AKj+2BM=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/bd871303-021a-4a0b-9efb-ae2db6c90d84/0/ACE2DABAA249D56AD968AD7D60A09642B626CA4D.crl
                          rsync://repo-rpki.idnic.net/repo/bd871303-021a-4a0b-9efb-ae2db6c90d84/0/ACE2DABAA249D56AD968AD7D60A09642B626CA4D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ACE2DABAA249D56AD968AD7D60A09642B626CA4D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Feb 2026 20:41:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:e1:91:b3:54:e3:7b:f2:fc:74:23:e8:31:a4:11:6a:b9:60:57:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ACE2DABAA249D56AD968AD7D60A09642B626CA4D
        Validity
            Not Before: Jan 31 11:56:10 2026 GMT
            Not After : Feb  3 20:41:10 2026 GMT
        Subject: CN=38F20B2237FD7F915D0BD3A431C3D53B6D62F5C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:9f:97:f1:50:20:26:1b:05:3f:0d:1f:9d:e8:
                    63:40:15:a1:f9:32:f4:4d:d0:af:39:98:c7:98:a9:
                    94:7a:01:21:05:3f:53:eb:56:69:d7:e3:9c:b2:8c:
                    a5:68:3e:3f:2b:38:a7:f8:76:8b:2b:6b:d2:8e:7a:
                    72:ee:af:c7:81:2f:a2:c7:4e:6c:c5:b3:ff:c6:77:
                    e6:ba:d6:2e:c3:86:5f:8d:89:6c:c6:49:4b:ea:c4:
                    f6:2f:47:e2:39:05:1d:4d:8d:f4:a4:65:57:47:2d:
                    98:a3:8d:36:45:e5:7a:1f:28:85:3c:4f:d7:c2:15:
                    fc:db:cb:84:cc:2b:ee:aa:e0:ab:39:07:81:16:dc:
                    3a:fd:2b:f1:2f:be:a3:3c:8a:dd:4b:52:c2:9c:e6:
                    47:25:b8:d0:e2:a8:8b:34:a9:bc:cc:13:8f:3b:1a:
                    41:f1:59:5d:93:ba:a3:71:0c:0c:2c:da:8d:e3:50:
                    bf:51:d6:c5:72:16:53:50:21:6d:d7:89:40:9e:c7:
                    3c:6e:bc:40:13:99:66:7a:44:bd:59:41:cc:a2:2b:
                    1c:93:65:8c:c5:aa:5e:99:eb:c6:be:8b:2c:0a:65:
                    9a:73:5a:69:03:18:59:4d:e8:1e:99:94:6c:5f:ab:
                    71:81:2b:37:e5:79:07:84:00:61:f5:47:19:b4:20:
                    de:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:F2:0B:22:37:FD:7F:91:5D:0B:D3:A4:31:C3:D5:3B:6D:62:F5:C3
            X509v3 Authority Key Identifier:
                keyid:AC:E2:DA:BA:A2:49:D5:6A:D9:68:AD:7D:60:A0:96:42:B6:26:CA:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/bd871303-021a-4a0b-9efb-ae2db6c90d84/0/ACE2DABAA249D56AD968AD7D60A09642B626CA4D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ACE2DABAA249D56AD968AD7D60A09642B626CA4D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bd871303-021a-4a0b-9efb-ae2db6c90d84/0/ACE2DABAA249D56AD968AD7D60A09642B626CA4D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:b9:38:60:3d:8b:18:ee:0c:c8:2b:02:e7:79:1e:e4:79:ac:
         2d:b7:fb:e3:f8:e9:aa:a5:73:9e:4f:23:7f:79:28:51:88:b5:
         cc:ee:67:e2:f4:3c:df:3c:73:7e:22:dc:dc:d1:57:1e:b4:f7:
         f6:eb:2e:81:ea:02:8c:fa:e8:77:18:ce:17:b9:1d:94:d6:0c:
         84:b8:28:98:37:ca:9d:66:65:a2:02:29:76:25:ac:3c:b2:d6:
         55:80:b1:b0:64:ec:15:f0:de:d4:26:91:ec:7b:90:39:0f:b2:
         46:6d:af:97:d1:2c:b9:52:e5:1d:71:51:02:71:39:4f:7a:71:
         4f:2b:cc:7a:8d:a3:6d:87:bd:a9:06:cf:52:93:dd:e5:21:a4:
         2b:07:fb:27:15:86:c2:d4:2d:99:7a:ee:e1:50:76:9e:98:1b:
         59:a5:a3:32:97:d6:90:09:56:27:a1:0e:9a:3b:25:4a:f0:de:
         62:93:a1:be:fe:dd:2f:63:af:a0:ad:31:ac:46:20:bc:10:4d:
         11:a0:97:10:74:13:59:b8:ed:ac:1b:36:f2:38:be:1b:6d:03:
         64:7f:25:d4:62:11:cf:32:b3:09:71:b2:6a:5d:83:93:88:e0:
         54:68:d4:27:24:22:c0:f3:15:a8:e3:c5:5c:54:f5:dd:b4:32:
         7a:ca:86:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 10:02:17 2026 by rpki-client