This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/c4431751-664b-47a0-a520-d97f5c12618c/0/690E7BC726C787991D438BDDB48990A7A17D8D15.mft
File:                     690E7BC726C787991D438BDDB48990A7A17D8D15.mft (raw, json)
Hash identifier:          +JcKqiHItujIImjAF6K1oUAQk+zN5lUnLdpzW3890sA=
Subject key identifier:   65:7A:C4:51:D4:AC:41:C6:00:B5:F7:FD:B9:CD:C8:A4:0B:59:F9:72
Authority key identifier: 69:0E:7B:C7:26:C7:87:99:1D:43:8B:DD:B4:89:90:A7:A1:7D:8D:15
Certificate issuer:       /CN=690E7BC726C787991D438BDDB48990A7A17D8D15
Certificate serial:       3106F04F56FF3043B703F2F3A346BB96FA9DCB48
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/690E7BC726C787991D438BDDB48990A7A17D8D15.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c4431751-664b-47a0-a520-d97f5c12618c/0/690E7BC726C787991D438BDDB48990A7A17D8D15.mft
Manifest number:          016B
Signing time:             Sat 31 Jan 2026 17:31:36 +0000
Manifest this update:     Sat 31 Jan 2026 17:26:36 +0000
Manifest next update:     Tue 03 Feb 2026 21:48:36 +0000
Files and hashes:         1: 3130332e32362e3230382e302f32322d3234203d3e203138313033.roa (hash: 6bqd3P1jvnQnjsCjRtIIfzvZLlg5nv5q33H6TglsIt4=)
                          2: 690E7BC726C787991D438BDDB48990A7A17D8D15.crl (hash: AZeL/KEMc/dnLbWXL56N3wcfHBx7L3CcBMof0WCAhJc=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c4431751-664b-47a0-a520-d97f5c12618c/0/690E7BC726C787991D438BDDB48990A7A17D8D15.crl
                          rsync://repo-rpki.idnic.net/repo/c4431751-664b-47a0-a520-d97f5c12618c/0/690E7BC726C787991D438BDDB48990A7A17D8D15.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/690E7BC726C787991D438BDDB48990A7A17D8D15.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Feb 2026 21:48:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:06:f0:4f:56:ff:30:43:b7:03:f2:f3:a3:46:bb:96:fa:9d:cb:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=690E7BC726C787991D438BDDB48990A7A17D8D15
        Validity
            Not Before: Jan 31 17:26:36 2026 GMT
            Not After : Feb  3 21:48:36 2026 GMT
        Subject: CN=657AC451D4AC41C600B5F7FDB9CDC8A40B59F972
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:eb:cb:c3:ad:7f:46:fb:d8:bd:20:d8:0d:d2:
                    18:1a:c7:fd:14:df:61:f5:ce:ee:2b:44:97:25:db:
                    09:2c:a8:36:84:4f:c1:8e:ca:98:0f:f9:03:d7:d4:
                    43:bf:de:d2:79:5e:59:51:33:61:78:0b:a5:b3:89:
                    ca:30:5f:00:ec:4e:af:8f:88:56:91:f9:8c:2e:6e:
                    e1:11:c0:25:75:c3:30:4d:0f:bb:d7:bd:4c:5e:92:
                    a6:80:bd:33:40:2c:01:41:da:67:b7:0b:1d:b4:0d:
                    db:72:b8:1d:f9:e1:0c:4a:1a:f0:a5:d6:79:31:ba:
                    3f:f1:60:b8:79:ff:86:ee:4d:1e:ff:63:b8:c4:1c:
                    86:77:be:43:33:97:eb:d8:19:6b:76:18:49:c9:1b:
                    f2:6f:6f:d7:48:ae:4a:1c:1c:29:56:8a:2b:b4:ca:
                    25:14:c4:50:de:0e:6d:1c:db:05:c9:65:e6:73:94:
                    09:12:55:82:85:5e:48:f6:ef:92:75:2e:f7:66:f1:
                    2c:8d:73:af:30:54:db:06:6f:72:6d:86:5f:a1:6e:
                    aa:70:d1:4d:5e:8a:7e:01:ce:f2:87:42:44:f2:5f:
                    79:ee:72:04:40:fe:5e:72:60:c9:81:f7:0e:70:ce:
                    12:02:7e:f0:f1:c3:14:9a:f5:7e:9c:6f:5e:53:cc:
                    a9:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:7A:C4:51:D4:AC:41:C6:00:B5:F7:FD:B9:CD:C8:A4:0B:59:F9:72
            X509v3 Authority Key Identifier:
                keyid:69:0E:7B:C7:26:C7:87:99:1D:43:8B:DD:B4:89:90:A7:A1:7D:8D:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c4431751-664b-47a0-a520-d97f5c12618c/0/690E7BC726C787991D438BDDB48990A7A17D8D15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/690E7BC726C787991D438BDDB48990A7A17D8D15.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c4431751-664b-47a0-a520-d97f5c12618c/0/690E7BC726C787991D438BDDB48990A7A17D8D15.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:07:80:82:c1:40:55:0f:24:36:03:b6:68:c1:1d:28:c2:a4:
         4f:ea:a2:60:cc:fc:15:25:f0:a5:35:56:8f:4c:08:3f:e6:d0:
         5f:ea:ac:ac:39:a3:f5:54:8c:a1:f3:c5:87:53:e6:7c:0c:63:
         62:98:08:e9:46:ad:5d:dc:0f:d5:6f:55:89:63:f8:3f:c5:6b:
         52:8d:96:9c:8a:c4:3a:95:a0:29:07:d1:14:64:7a:ee:7d:b0:
         a2:ca:cc:ec:dc:ac:8f:17:7c:2a:b1:97:f2:e8:7b:3c:67:10:
         c7:68:d6:a9:b0:2e:e6:fe:b9:71:1b:52:d4:10:e7:54:ca:71:
         d2:52:b4:b8:25:80:ac:cf:83:cc:75:51:a8:96:1c:c4:8d:f3:
         34:22:0b:4b:ee:b9:2a:2e:3c:9f:d0:40:f0:98:f0:7f:b2:04:
         5d:23:34:db:c3:de:f3:3a:6f:86:09:de:39:44:ba:1d:a6:47:
         45:83:2a:11:f0:a6:2e:36:2c:19:18:7a:75:26:b6:65:35:27:
         61:2d:92:18:20:57:3b:9f:ef:fb:bd:0c:ba:68:76:aa:67:b1:
         31:05:62:54:80:39:f5:48:ba:a1:ae:a0:3d:56:af:5d:4a:14:
         6a:34:cf:10:28:83:d2:1d:92:b9:6a:25:b9:86:d3:ff:71:51:
         a2:6f:cf:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 10:06:34 2026 by rpki-client