This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.mft
File:                     A9ECE2086AFC3046DE0F6A07858FF1851AD68517.mft (raw, json)
Hash identifier:          0AP3NM5ri3z9bOO5Ov1C017qfX6mBcK13pdaHqUwVqY=
Subject key identifier:   C9:D4:1F:6E:E0:26:97:47:6A:86:96:0F:D9:31:52:51:C3:A0:F3:09
Authority key identifier: A9:EC:E2:08:6A:FC:30:46:DE:0F:6A:07:85:8F:F1:85:1A:D6:85:17
Certificate issuer:       /CN=A9ECE2086AFC3046DE0F6A07858FF1851AD68517
Certificate serial:       30F665FF1E0BA63502C1E94B313B5C48DF0D7EC4
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.mft
Manifest number:          02D0
Signing time:             Sun 01 Feb 2026 10:51:11 +0000
Manifest this update:     Sun 01 Feb 2026 10:46:11 +0000
Manifest next update:     Wed 04 Feb 2026 12:52:11 +0000
Files and hashes:         1: 3130332e372e38362e302f32332d3234203d3e20313331363934.roa (hash: APpcCxdCQsZeZ4X6Dve/zLkKutoUIXdYu4ws8c5i5zE=)
                          2: 3130332e372e38372e302f32342d3234203d3e20313331363934.roa (hash: +JM0TomazNNUIzDrdeT/2lCB49TQVdyUwiNybNA2Lao=)
                          3: 3130332e372e38342e302f32342d3234203d3e20313331363934.roa (hash: +OuFRQQCgw1PD5PrziLmo5M1zEaNfWHIcGtXO9rN0mk=)
                          4: 3130332e372e38362e302f32342d3234203d3e20313331363934.roa (hash: +uqH4dZVRd/BNuma17esD+DC5t8XckmCgoWEZgqVoMc=)
                          5: A9ECE2086AFC3046DE0F6A07858FF1851AD68517.crl (hash: 9n9RBCY4iQT3NrW4/+xqefqP4uQONde0B5/FV3gFazI=)
                          6: 3130332e372e38342e302f32332d3234203d3e20313331363934.roa (hash: JILAlyEUCKaQwya6IqmIgI2ApwRDLktJQgK62DvR8co=)
                          7: 3130332e372e38342e302f32322d3234203d3e20313331363934.roa (hash: 71BPyF6TQbJ+TmKpEFmEYqSO/ws8/NivO3sz64KU1XU=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.crl
                          rsync://repo-rpki.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Feb 2026 12:52:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:f6:65:ff:1e:0b:a6:35:02:c1:e9:4b:31:3b:5c:48:df:0d:7e:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9ECE2086AFC3046DE0F6A07858FF1851AD68517
        Validity
            Not Before: Feb  1 10:46:11 2026 GMT
            Not After : Feb  4 12:52:11 2026 GMT
        Subject: CN=C9D41F6EE02697476A86960FD9315251C3A0F309
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:5d:d9:b1:3d:1b:ad:f4:a6:09:e6:f8:76:a3:
                    11:73:ce:d1:56:e5:c5:70:08:46:44:9d:87:00:fc:
                    07:8a:20:b0:33:45:f7:3b:1b:ee:b8:48:fd:16:1b:
                    01:a8:7e:07:6d:04:20:5d:6f:2e:72:12:0d:3c:86:
                    7b:72:2f:33:db:60:7c:79:0b:a8:0c:00:83:5e:c0:
                    de:9c:48:8d:d3:45:8b:a2:38:9f:55:03:2d:83:72:
                    3c:d2:8e:56:5b:b0:32:25:5a:20:b0:49:69:32:fc:
                    e7:7c:f3:70:f5:72:0b:6a:a1:2b:d3:5c:aa:6c:d1:
                    fd:61:62:87:12:56:b8:18:b4:f8:a8:82:dd:44:b2:
                    63:59:41:74:e2:f8:44:f5:d4:69:bb:c0:9f:e3:f5:
                    b1:3e:5c:49:c1:de:08:cf:89:12:8d:d2:ea:09:fe:
                    28:8a:a6:20:a0:e0:e7:20:1c:e9:52:fa:b1:60:fa:
                    06:a6:c7:b0:aa:f3:be:b8:ea:68:c1:92:8a:a5:31:
                    56:91:ea:ee:4f:41:43:e4:76:72:69:7c:84:54:54:
                    e8:96:e1:4b:25:9a:ac:67:46:c7:db:b0:1c:4b:21:
                    5c:21:39:ca:27:8a:6f:86:27:02:45:0f:09:af:ce:
                    c4:b5:2e:11:0e:db:47:77:7c:df:2a:0f:e3:ee:85:
                    68:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:D4:1F:6E:E0:26:97:47:6A:86:96:0F:D9:31:52:51:C3:A0:F3:09
            X509v3 Authority Key Identifier:
                keyid:A9:EC:E2:08:6A:FC:30:46:DE:0F:6A:07:85:8F:F1:85:1A:D6:85:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:16:4a:35:27:db:7e:ab:24:9d:0c:ec:16:98:6e:e5:e1:85:
         ec:06:99:ba:45:79:dc:55:15:de:bb:a9:e8:fe:7d:b7:23:c2:
         0b:2a:9a:d5:47:9b:81:9e:98:65:fd:3f:f0:4e:a9:97:6c:2e:
         55:0e:b1:5a:c4:af:39:4b:09:ed:04:53:0c:c6:1b:0b:ae:60:
         87:1f:30:86:22:6f:f3:a7:8d:78:9c:c0:05:40:e8:ab:70:86:
         91:fd:84:32:7a:e2:00:65:fa:ff:14:33:68:94:c3:d4:75:d9:
         39:54:b1:85:6c:2a:88:eb:96:4c:f9:35:23:2d:8f:f0:0c:c4:
         48:e3:77:f2:a5:0d:68:1f:7a:c1:b9:f0:98:4f:62:97:f1:bd:
         95:60:b2:45:fe:52:3f:0d:02:38:b6:f6:aa:41:af:36:42:6e:
         83:bb:78:5d:df:3e:57:9f:b5:22:b6:b7:d7:23:73:95:c3:a8:
         e1:a5:27:93:ed:96:82:ce:18:2b:e8:83:a4:d7:80:7f:26:93:
         02:08:50:12:7f:e1:d5:01:06:09:53:c7:a5:ff:cf:99:92:64:
         8b:28:f2:4e:60:c0:b0:36:d3:1c:7e:f9:44:44:23:45:da:0c:
         66:09:e9:06:59:4f:80:6f:01:9b:2f:b1:75:57:c8:c4:62:97:
         a0:dd:30:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:45:16 2026 by rpki-client