This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/d04d6427-3f03-4d21-b8cc-bbfd2a3f8c33/0/7FD3F92F13241B80062CC31B0EC8A3D129871D90.mft
File:                     7FD3F92F13241B80062CC31B0EC8A3D129871D90.mft (raw, json)
Hash identifier:          V8Qhbie8AiO+6FkIxkdRKwAeVaX+XM9bBGUHybOokFs=
Subject key identifier:   D8:A4:EC:96:EA:88:8E:DC:97:AD:F9:5C:B6:6B:D2:AA:36:7F:42:54
Authority key identifier: 7F:D3:F9:2F:13:24:1B:80:06:2C:C3:1B:0E:C8:A3:D1:29:87:1D:90
Certificate issuer:       /CN=7FD3F92F13241B80062CC31B0EC8A3D129871D90
Certificate serial:       3564A49812355EA541DC1B9B86DEE0FB120B1E35
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7FD3F92F13241B80062CC31B0EC8A3D129871D90.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d04d6427-3f03-4d21-b8cc-bbfd2a3f8c33/0/7FD3F92F13241B80062CC31B0EC8A3D129871D90.mft
Manifest number:          03C6
Signing time:             Sat 31 Jan 2026 21:31:26 +0000
Manifest this update:     Sat 31 Jan 2026 21:26:26 +0000
Manifest next update:     Wed 04 Feb 2026 00:43:26 +0000
Files and hashes:         1: 7FD3F92F13241B80062CC31B0EC8A3D129871D90.crl (hash: rUgQuo0sAnQMdPd5XaHrimrNrIMvS6wEEKC4sQ179wQ=)
                          2: 3130332e3136342e3133362e302f32332d3234203d3e203137393935.roa (hash: pfyWIoLnfhreu/uz7HLcqt4VfjgUWRecSpJkmtZIEHI=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d04d6427-3f03-4d21-b8cc-bbfd2a3f8c33/0/7FD3F92F13241B80062CC31B0EC8A3D129871D90.crl
                          rsync://repo-rpki.idnic.net/repo/d04d6427-3f03-4d21-b8cc-bbfd2a3f8c33/0/7FD3F92F13241B80062CC31B0EC8A3D129871D90.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7FD3F92F13241B80062CC31B0EC8A3D129871D90.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Feb 2026 00:43:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:64:a4:98:12:35:5e:a5:41:dc:1b:9b:86:de:e0:fb:12:0b:1e:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7FD3F92F13241B80062CC31B0EC8A3D129871D90
        Validity
            Not Before: Jan 31 21:26:26 2026 GMT
            Not After : Feb  4 00:43:26 2026 GMT
        Subject: CN=D8A4EC96EA888EDC97ADF95CB66BD2AA367F4254
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:31:f0:47:8d:8f:3f:04:67:66:55:a9:98:34:
                    32:1d:31:ff:e7:f5:fd:c9:1c:1e:13:01:fc:01:23:
                    11:a8:33:58:b9:74:39:7c:c1:92:b3:1a:f5:89:08:
                    79:f4:9d:04:e2:2b:41:11:89:ca:45:27:c0:d7:7d:
                    83:da:86:c4:e6:a4:b3:eb:76:93:b5:2f:08:31:42:
                    22:9f:18:dd:2a:61:9c:38:c6:70:6e:aa:75:89:3f:
                    1c:ea:49:ba:28:89:70:cd:ea:4e:a6:fd:09:d2:b5:
                    d1:c0:d3:59:9a:0b:d0:2d:68:a5:bd:84:fc:4b:dd:
                    5c:98:7d:b3:8d:9d:bf:13:a4:88:18:c7:d6:70:48:
                    50:41:52:d5:ef:77:6e:e6:23:fc:b3:be:e6:e7:df:
                    ed:1d:ed:75:05:f7:eb:90:7b:42:e4:df:3e:5b:40:
                    b2:25:86:81:fc:72:b7:b1:b4:c9:98:1d:e2:8e:85:
                    36:2e:04:e7:da:35:52:ff:64:b3:4b:cc:c8:fb:63:
                    bf:10:2b:f7:5b:40:d7:61:1b:1e:18:b0:70:9b:7b:
                    15:cc:95:e4:29:42:ca:61:fb:2a:56:18:dc:16:dd:
                    c5:e8:d9:27:a7:70:68:f6:c5:a3:e5:02:ff:ab:fa:
                    c3:c4:89:00:54:8b:07:db:09:5b:01:5c:3a:83:2c:
                    88:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:A4:EC:96:EA:88:8E:DC:97:AD:F9:5C:B6:6B:D2:AA:36:7F:42:54
            X509v3 Authority Key Identifier:
                keyid:7F:D3:F9:2F:13:24:1B:80:06:2C:C3:1B:0E:C8:A3:D1:29:87:1D:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d04d6427-3f03-4d21-b8cc-bbfd2a3f8c33/0/7FD3F92F13241B80062CC31B0EC8A3D129871D90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7FD3F92F13241B80062CC31B0EC8A3D129871D90.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d04d6427-3f03-4d21-b8cc-bbfd2a3f8c33/0/7FD3F92F13241B80062CC31B0EC8A3D129871D90.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:53:97:54:70:e8:f3:65:47:e3:dc:b2:82:e4:45:c3:9e:68:
         ff:56:ea:af:44:e7:5c:64:90:9d:cf:33:c1:d4:86:37:9d:a4:
         ea:74:c7:e0:96:a8:fd:8c:bf:61:08:8b:4d:f6:cb:3d:95:98:
         20:6a:81:db:d0:8a:bb:ad:02:43:2d:e5:bd:59:fc:4a:79:d9:
         f5:f2:9b:bf:a4:0a:4b:bc:03:b9:b0:9a:78:c1:e8:0c:50:b6:
         96:a1:f2:80:ea:22:0d:ec:2a:f9:ee:9e:00:51:ea:f8:88:76:
         47:69:af:0d:1c:60:82:ca:a1:a2:91:1f:86:60:5b:ae:2f:93:
         d5:f7:24:fe:99:29:3b:18:01:b4:ab:b5:8d:6b:0f:55:46:36:
         01:70:a1:78:25:d4:02:e4:c7:7e:60:23:99:09:67:10:8e:43:
         4f:c8:63:03:36:3c:42:f1:95:c1:b8:2a:f3:7b:69:a6:00:57:
         06:6d:05:a4:9c:fa:2d:bb:cf:d7:ee:02:8f:e8:0d:77:73:04:
         95:9f:a7:b4:52:b0:3b:24:38:80:fe:df:3a:26:ef:ba:4a:b5:
         15:4e:ab:4b:40:55:7d:f8:a4:6a:13:d0:1d:55:fa:bb:ad:af:
         f3:a3:ce:61:66:ff:50:88:b8:8e:dc:85:a4:19:57:36:31:12:
         a4:f1:24:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 10:02:19 2026 by rpki-client