This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/c763e71a-9c85-4176-8fa4-b7a29afb977d/0/B8C9E376A2072364112036DA7A7BBB4CAE4AC37C.mft
File:                     B8C9E376A2072364112036DA7A7BBB4CAE4AC37C.mft (raw, json)
Hash identifier:          ncTsXTUJiSm1hFgHgHI2gIKIrmY6uJm5Vy6KZ2sx15g=
Subject key identifier:   B0:48:EB:55:13:06:E5:5D:29:88:57:04:E7:44:A0:67:F1:5A:39:5B
Authority key identifier: B8:C9:E3:76:A2:07:23:64:11:20:36:DA:7A:7B:BB:4C:AE:4A:C3:7C
Certificate issuer:       /CN=B8C9E376A2072364112036DA7A7BBB4CAE4AC37C
Certificate serial:       66977B3F7FD438217397FE3CE89E64A458BA1570
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8C9E376A2072364112036DA7A7BBB4CAE4AC37C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c763e71a-9c85-4176-8fa4-b7a29afb977d/0/B8C9E376A2072364112036DA7A7BBB4CAE4AC37C.mft
Manifest number:          016B
Signing time:             Sat 31 Jan 2026 03:50:05 +0000
Manifest this update:     Sat 31 Jan 2026 03:45:05 +0000
Manifest next update:     Tue 03 Feb 2026 11:57:05 +0000
Files and hashes:         1: B8C9E376A2072364112036DA7A7BBB4CAE4AC37C.crl (hash: 9tRVIVLKZcLGxQh9PkDUi72mgcawbDv4rXQ0pApjafw=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c763e71a-9c85-4176-8fa4-b7a29afb977d/0/B8C9E376A2072364112036DA7A7BBB4CAE4AC37C.crl
                          rsync://repo-rpki.idnic.net/repo/c763e71a-9c85-4176-8fa4-b7a29afb977d/0/B8C9E376A2072364112036DA7A7BBB4CAE4AC37C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8C9E376A2072364112036DA7A7BBB4CAE4AC37C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Feb 2026 11:57:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:97:7b:3f:7f:d4:38:21:73:97:fe:3c:e8:9e:64:a4:58:ba:15:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8C9E376A2072364112036DA7A7BBB4CAE4AC37C
        Validity
            Not Before: Jan 31 03:45:05 2026 GMT
            Not After : Feb  3 11:57:05 2026 GMT
        Subject: CN=B048EB551306E55D29885704E744A067F15A395B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:96:b9:7e:62:7d:0c:b7:86:46:4f:88:5c:07:
                    4a:4b:f8:9f:bd:ef:8d:af:f2:fc:40:0f:a6:ab:24:
                    43:6b:f7:04:a5:47:ce:ef:5a:95:54:ae:25:77:7f:
                    de:c8:b3:e7:49:0f:dd:95:9a:62:8f:9c:bc:07:d6:
                    07:40:02:c2:ac:12:4b:ff:84:ee:55:c3:1d:8c:bd:
                    34:21:75:bb:dc:69:43:af:14:1c:ea:3d:ce:f3:2e:
                    50:17:00:03:12:2e:b2:0a:04:05:fd:0f:b4:90:40:
                    bb:b3:77:1c:10:f9:42:79:8e:e4:06:6c:fd:65:a3:
                    eb:cf:23:0f:c6:c3:8b:a9:a8:20:bc:87:96:aa:41:
                    24:bd:a6:7e:28:22:bc:f9:66:0f:79:ed:50:4e:13:
                    99:1c:24:d7:5f:96:63:8e:67:b7:2f:c9:30:92:ea:
                    0b:1f:4f:04:28:72:c7:9f:e2:11:27:cf:b7:a1:49:
                    92:59:64:8a:b3:ee:7a:64:c5:4a:98:7f:d5:1c:23:
                    94:c7:c8:ed:3e:d6:d6:0e:0d:44:7a:88:f2:96:0f:
                    6e:22:23:9c:ac:39:3f:41:7e:11:b5:b7:00:f7:a2:
                    61:61:97:7d:68:71:63:5c:62:83:38:b5:89:c3:ff:
                    5e:47:3a:b0:f9:0c:83:0f:72:f0:a4:a9:60:62:71:
                    10:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:48:EB:55:13:06:E5:5D:29:88:57:04:E7:44:A0:67:F1:5A:39:5B
            X509v3 Authority Key Identifier:
                keyid:B8:C9:E3:76:A2:07:23:64:11:20:36:DA:7A:7B:BB:4C:AE:4A:C3:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c763e71a-9c85-4176-8fa4-b7a29afb977d/0/B8C9E376A2072364112036DA7A7BBB4CAE4AC37C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8C9E376A2072364112036DA7A7BBB4CAE4AC37C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c763e71a-9c85-4176-8fa4-b7a29afb977d/0/B8C9E376A2072364112036DA7A7BBB4CAE4AC37C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ed:70:1e:60:cf:2d:f3:e1:46:b8:a6:0a:49:01:f2:87:b6:92:
         c6:55:94:5d:76:67:10:e6:e9:e2:5c:ef:41:da:5f:b6:26:fc:
         71:ca:5c:74:a6:54:d8:74:ab:6d:2a:f0:c7:74:f6:d0:2a:a5:
         f2:93:67:f9:39:75:a7:f0:c4:fb:52:09:6e:9d:54:cf:8f:49:
         d1:02:e3:f7:1c:ec:f1:73:ec:37:6d:7a:6f:dd:2d:4d:0a:8d:
         03:31:f3:20:fc:60:b1:c1:6f:e8:75:4d:69:09:50:4a:4b:36:
         da:68:e7:43:73:db:43:5a:af:88:4f:7e:f8:9f:25:71:36:43:
         f1:d2:de:b0:d5:bc:5a:e6:e6:ce:09:d2:7d:e1:6f:fa:b7:1d:
         3e:a7:88:3b:0d:65:fa:bb:bc:c9:84:d6:a0:ee:b4:19:86:57:
         47:c5:1b:34:0f:aa:4c:e8:38:e7:af:a1:91:89:7a:56:d4:7e:
         c9:1b:b3:d6:70:19:b8:a4:7f:ec:bc:53:b6:d9:b7:9f:41:b8:
         e7:7a:89:fe:42:9a:92:6b:fa:31:43:e8:c9:2d:75:9a:b4:bf:
         72:b0:3e:44:98:cb:37:00:b6:ef:d4:05:28:a2:da:aa:0a:9b:
         a2:35:11:89:23:8f:68:f1:f8:da:a4:be:8d:b5:27:55:ab:83:
         b1:3e:86:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 10:05:08 2026 by rpki-client