This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/bf66bfa6-dc4c-4108-932c-204b62e86272/0/7F9ECE743A3074E61F56CD11161AA58A6BB4092C.mft
File:                     7F9ECE743A3074E61F56CD11161AA58A6BB4092C.mft (raw, json)
Hash identifier:          fdiPu5jRioPTRSKzCG8AMynwZQpVo+R4PfDQ4gk0iYk=
Subject key identifier:   8F:75:F9:27:19:D0:D3:88:37:6D:FF:CD:84:41:C9:15:CA:CB:02:0C
Authority key identifier: 7F:9E:CE:74:3A:30:74:E6:1F:56:CD:11:16:1A:A5:8A:6B:B4:09:2C
Certificate issuer:       /CN=7F9ECE743A3074E61F56CD11161AA58A6BB4092C
Certificate serial:       277F3DF3D53CCEA6BF7C38D9239D548DBBC72EBE
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7F9ECE743A3074E61F56CD11161AA58A6BB4092C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/bf66bfa6-dc4c-4108-932c-204b62e86272/0/7F9ECE743A3074E61F56CD11161AA58A6BB4092C.mft
Manifest number:          70
Signing time:             Mon 02 Feb 2026 02:01:23 +0000
Manifest this update:     Mon 02 Feb 2026 01:56:23 +0000
Manifest next update:     Thu 05 Feb 2026 04:22:23 +0000
Files and hashes:         1: 3130332e3133342e36362e302f32332d3234203d3e203435333132.roa (hash: AvEPI0bAoOmymUfdeDC6gmwMLJ9H1XDm/x+gGjdHvOw=)
                          2: 7F9ECE743A3074E61F56CD11161AA58A6BB4092C.crl (hash: 5EFVhdrBqXftduyFPFB5LWs8s5rTkcYsSby2zo+KQRA=)
                          3: 3130332e3133342e36372e302f32342d3234203d3e203435333132.roa (hash: E6gkUAkUB565OD/KSAK3yf+TxFTGQrj7xHTIY9Gqph4=)
                          4: 3130332e3133342e36362e302f32342d3234203d3e203435333132.roa (hash: WRfY/rBH6p7PK9emmqpsCXbVvrKz6VH5x4tTkw/6VAg=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/bf66bfa6-dc4c-4108-932c-204b62e86272/0/7F9ECE743A3074E61F56CD11161AA58A6BB4092C.crl
                          rsync://repo-rpki.idnic.net/repo/bf66bfa6-dc4c-4108-932c-204b62e86272/0/7F9ECE743A3074E61F56CD11161AA58A6BB4092C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7F9ECE743A3074E61F56CD11161AA58A6BB4092C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Feb 2026 04:22:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:7f:3d:f3:d5:3c:ce:a6:bf:7c:38:d9:23:9d:54:8d:bb:c7:2e:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F9ECE743A3074E61F56CD11161AA58A6BB4092C
        Validity
            Not Before: Feb  2 01:56:23 2026 GMT
            Not After : Feb  5 04:22:23 2026 GMT
        Subject: CN=8F75F92719D0D388376DFFCD8441C915CACB020C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:1c:51:5e:8e:fd:bf:9f:93:a4:37:9e:88:38:
                    ed:05:58:45:5d:64:fb:79:f1:f1:10:27:d6:8d:ed:
                    97:bc:d4:21:92:42:04:58:b3:d0:40:4c:d1:39:c2:
                    6a:97:56:42:e2:f6:43:38:47:16:79:8c:ec:91:a2:
                    0f:ec:14:21:80:fe:32:62:fa:45:f6:d3:f8:0a:ba:
                    05:eb:83:47:9b:8b:cc:f7:f2:ce:f7:01:ad:2c:49:
                    23:68:63:e3:91:bc:a1:46:f0:bb:1d:74:10:13:24:
                    a6:7d:c9:5d:9d:d5:70:a1:68:e7:6e:7a:3c:6b:3d:
                    66:9a:d6:4f:b7:21:b8:45:db:57:30:ec:d0:0a:f8:
                    4f:03:09:2c:42:09:1f:3c:c4:9b:3c:c1:4d:c1:9e:
                    4d:bc:91:f1:c8:ff:ee:7f:8a:99:05:2c:36:26:bd:
                    92:b3:bd:bc:9a:63:f6:36:f0:68:65:95:8a:be:fe:
                    b5:de:c1:48:5f:cc:76:ed:74:b8:a4:e8:37:a7:35:
                    a5:fb:82:af:06:c4:34:4b:4e:40:2a:48:3d:78:e2:
                    d7:4f:aa:92:37:a7:36:a1:78:73:17:50:15:78:a4:
                    a6:5b:97:38:3b:36:0b:73:85:0f:f8:91:96:47:a5:
                    65:14:54:88:ca:14:28:f2:ac:44:f5:86:c0:20:a4:
                    21:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:75:F9:27:19:D0:D3:88:37:6D:FF:CD:84:41:C9:15:CA:CB:02:0C
            X509v3 Authority Key Identifier:
                keyid:7F:9E:CE:74:3A:30:74:E6:1F:56:CD:11:16:1A:A5:8A:6B:B4:09:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/bf66bfa6-dc4c-4108-932c-204b62e86272/0/7F9ECE743A3074E61F56CD11161AA58A6BB4092C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7F9ECE743A3074E61F56CD11161AA58A6BB4092C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bf66bfa6-dc4c-4108-932c-204b62e86272/0/7F9ECE743A3074E61F56CD11161AA58A6BB4092C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:7a:7b:c0:55:c7:86:66:72:04:08:c3:a8:3a:33:f4:9f:7e:
         eb:b7:62:77:b3:a8:ad:4b:ff:08:4c:47:ce:86:ac:2d:1f:ac:
         de:71:82:86:5d:e4:54:b6:97:cc:e0:ec:91:d6:f0:2b:7f:9d:
         25:06:87:08:a7:97:a6:da:ab:84:80:a4:f9:c1:e3:d0:e1:d9:
         4e:0c:65:aa:4e:3a:36:fa:29:42:fb:4b:a8:ba:9c:e3:d4:d2:
         15:ee:b2:eb:9b:3c:06:bf:00:ad:2a:f7:33:4d:0b:59:09:f6:
         df:f0:1d:3d:78:52:c5:83:02:bb:86:f3:f1:6f:45:6a:49:1c:
         fd:ec:ad:8a:73:13:e7:80:2a:5a:66:1b:46:36:31:a1:23:5d:
         aa:c2:f0:f1:d5:c5:17:e9:49:a0:9b:6c:ec:01:79:fd:d3:42:
         03:86:3e:97:e0:6e:82:9a:f0:97:d1:17:54:2b:8a:f6:07:98:
         4f:c7:4e:ae:16:b0:12:61:de:60:f4:39:66:5d:b2:20:7c:89:
         1f:0a:62:45:e2:5f:60:82:72:04:d7:5a:e6:69:a4:d2:01:14:
         8e:02:7c:1f:fc:7f:c2:e1:3e:8b:91:f8:6b:bb:44:cc:80:00:
         30:b6:3a:07:da:a2:95:27:2f:e7:bb:28:8c:71:f5:74:64:6e:
         09:6d:79:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 10:05:09 2026 by rpki-client