This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/c965dd39-48d0-4578-8fe5-66d953384e50/0/8902A1A2A87110119F8477271D6D224973A35F04.mft
File:                     8902A1A2A87110119F8477271D6D224973A35F04.mft (raw, json)
Hash identifier:          lmzEH/yRqELLuqw5CII2qGi1O2FFnFiC8XCkX6SwxLQ=
Subject key identifier:   8E:6F:9D:76:4A:B9:75:C4:09:51:BF:A3:3B:F6:F7:C6:89:95:C7:65
Authority key identifier: 89:02:A1:A2:A8:71:10:11:9F:84:77:27:1D:6D:22:49:73:A3:5F:04
Certificate issuer:       /CN=8902A1A2A87110119F8477271D6D224973A35F04
Certificate serial:       3918A8BDAAA177C7D4B2F2095F5ACFCBC78B926A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8902A1A2A87110119F8477271D6D224973A35F04.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c965dd39-48d0-4578-8fe5-66d953384e50/0/8902A1A2A87110119F8477271D6D224973A35F04.mft
Manifest number:          02D0
Signing time:             Sun 01 Feb 2026 15:30:03 +0000
Manifest this update:     Sun 01 Feb 2026 15:25:03 +0000
Manifest next update:     Wed 04 Feb 2026 17:34:03 +0000
Files and hashes:         1: 8902A1A2A87110119F8477271D6D224973A35F04.crl (hash: ExJ8C5WchwE/a603Fz+OBAuQrSQgDdAF56CyZU3On+0=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c965dd39-48d0-4578-8fe5-66d953384e50/0/8902A1A2A87110119F8477271D6D224973A35F04.crl
                          rsync://repo-rpki.idnic.net/repo/c965dd39-48d0-4578-8fe5-66d953384e50/0/8902A1A2A87110119F8477271D6D224973A35F04.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8902A1A2A87110119F8477271D6D224973A35F04.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Feb 2026 17:34:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:18:a8:bd:aa:a1:77:c7:d4:b2:f2:09:5f:5a:cf:cb:c7:8b:92:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8902A1A2A87110119F8477271D6D224973A35F04
        Validity
            Not Before: Feb  1 15:25:03 2026 GMT
            Not After : Feb  4 17:34:03 2026 GMT
        Subject: CN=8E6F9D764AB975C40951BFA33BF6F7C68995C765
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:d3:62:1a:08:7d:0a:ec:6d:90:af:9f:3c:9c:
                    4a:6c:25:5c:b4:93:fd:f5:ab:35:71:9d:c6:91:f4:
                    c9:e6:bf:7f:0b:fc:8c:8d:12:b5:d9:cd:c3:15:c0:
                    ce:25:11:a8:ac:d7:a6:07:36:06:65:a4:1f:34:4e:
                    88:79:85:35:38:47:db:f5:c1:38:42:1f:5b:9c:ac:
                    b8:00:17:db:ac:0b:5d:9a:c1:9b:14:a9:e1:10:86:
                    6e:8f:99:05:7e:dd:c1:8c:31:8e:f7:74:83:de:ed:
                    ac:5c:17:a6:ed:13:c9:91:e2:d8:e5:6c:82:3a:91:
                    a5:ee:3d:79:5d:48:7c:9e:4c:f4:48:ed:f4:4e:cd:
                    41:39:33:32:84:3a:12:4d:e4:9e:d8:d2:d4:f9:40:
                    25:ba:ad:a8:e3:8a:50:16:de:63:8a:c9:37:c8:44:
                    77:75:4c:59:9b:b6:c5:4d:61:c4:dd:cc:5b:71:f8:
                    1d:07:eb:6c:2a:86:f5:84:b2:dd:36:d4:31:3b:78:
                    04:c6:60:99:fd:8d:7d:11:81:ed:98:47:43:30:23:
                    81:d1:b3:f0:48:db:7d:ba:72:2f:e9:93:a8:cb:70:
                    e4:f9:b7:cd:01:79:60:d4:3d:09:50:ba:26:68:19:
                    04:97:89:87:a0:f5:9f:f4:29:c3:aa:b2:6a:51:60:
                    fd:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:6F:9D:76:4A:B9:75:C4:09:51:BF:A3:3B:F6:F7:C6:89:95:C7:65
            X509v3 Authority Key Identifier:
                keyid:89:02:A1:A2:A8:71:10:11:9F:84:77:27:1D:6D:22:49:73:A3:5F:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c965dd39-48d0-4578-8fe5-66d953384e50/0/8902A1A2A87110119F8477271D6D224973A35F04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8902A1A2A87110119F8477271D6D224973A35F04.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c965dd39-48d0-4578-8fe5-66d953384e50/0/8902A1A2A87110119F8477271D6D224973A35F04.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:e9:ca:6b:9c:37:07:a5:98:ca:3c:1b:a7:b2:9e:3c:ec:9e:
         1f:d2:17:6f:24:b3:fe:6e:24:88:c8:34:fa:54:1d:e4:93:27:
         f4:1c:93:c5:0e:f3:c7:bc:82:61:f4:99:0d:3c:51:e6:5e:7d:
         14:93:ca:fb:cc:d7:8b:d7:4a:ba:c9:63:cb:b0:44:8e:4c:d4:
         2e:4a:1e:d3:55:fe:6a:e7:b2:44:20:08:f5:09:32:44:e1:00:
         06:17:87:fb:84:38:b4:8a:9d:cf:ce:6f:90:2f:6d:b6:68:6d:
         43:71:b0:ea:11:d0:f6:23:f1:15:5b:91:04:3e:d9:31:44:71:
         23:5e:4a:99:a4:c6:ea:59:6f:a0:c7:28:12:bc:21:05:9c:0d:
         cc:a3:da:46:74:39:d2:4d:19:15:d4:87:0d:a4:db:3c:8c:83:
         3f:7d:88:72:03:16:6d:b7:2f:14:07:89:e2:89:f5:bb:65:65:
         96:47:6b:96:cd:c4:f0:ea:5b:6a:e8:dc:d4:34:db:2b:96:09:
         8a:53:fc:5e:29:a4:ec:57:9e:8a:bc:a9:bf:a0:f5:61:4f:ac:
         86:7f:93:b9:17:42:5e:49:66:17:08:31:cc:c5:4c:8a:7a:3e:
         3a:b1:73:9b:6e:f7:4e:b7:eb:a5:46:9d:ad:2e:85:03:b0:98:
         32:11:5a:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 12:50:49 2026 by rpki-client