This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/d21646be-3d6a-4257-b77c-b33c10f35d32/0/AE20FE4D558717B21540D21662C30716B19723F3.mft
File:                     AE20FE4D558717B21540D21662C30716B19723F3.mft (raw, json)
Hash identifier:          0zr9ptlKejZAr4W32sMUplwRc+97LaJ2fHHEfztRnB4=
Subject key identifier:   82:67:2B:88:3A:E8:AC:17:C6:8A:0D:12:0D:58:CD:FA:10:11:B8:C4
Authority key identifier: AE:20:FE:4D:55:87:17:B2:15:40:D2:16:62:C3:07:16:B1:97:23:F3
Certificate issuer:       /CN=AE20FE4D558717B21540D21662C30716B19723F3
Certificate serial:       7664B59D6EAA0A51DA59C75C9B09BEFFE5FB729B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE20FE4D558717B21540D21662C30716B19723F3.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d21646be-3d6a-4257-b77c-b33c10f35d32/0/AE20FE4D558717B21540D21662C30716B19723F3.mft
Manifest number:          0281
Signing time:             Sun 01 Feb 2026 11:50:40 +0000
Manifest this update:     Sun 01 Feb 2026 11:45:40 +0000
Manifest next update:     Wed 04 Feb 2026 13:44:40 +0000
Files and hashes:         1: AE20FE4D558717B21540D21662C30716B19723F3.crl (hash: sNolYWaILX2xK9/pK4m0NXodNWLnl5UkA+L6SUdOka0=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d21646be-3d6a-4257-b77c-b33c10f35d32/0/AE20FE4D558717B21540D21662C30716B19723F3.crl
                          rsync://repo-rpki.idnic.net/repo/d21646be-3d6a-4257-b77c-b33c10f35d32/0/AE20FE4D558717B21540D21662C30716B19723F3.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE20FE4D558717B21540D21662C30716B19723F3.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Feb 2026 13:44:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:64:b5:9d:6e:aa:0a:51:da:59:c7:5c:9b:09:be:ff:e5:fb:72:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE20FE4D558717B21540D21662C30716B19723F3
        Validity
            Not Before: Feb  1 11:45:40 2026 GMT
            Not After : Feb  4 13:44:40 2026 GMT
        Subject: CN=82672B883AE8AC17C68A0D120D58CDFA1011B8C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:e6:a3:58:73:e8:3d:38:2a:c9:41:cb:2a:61:
                    32:31:3e:04:11:b3:74:77:9d:5c:70:17:2e:83:6e:
                    39:b6:08:17:90:df:f3:cc:1f:21:41:21:88:b5:e9:
                    41:da:a9:96:c7:2a:60:1d:4a:c2:07:02:b0:34:01:
                    60:c2:6a:49:65:fc:f3:92:41:35:75:eb:a2:34:a1:
                    a1:52:a4:11:af:e9:eb:8e:96:30:f0:ed:fb:af:f1:
                    ea:35:65:ed:34:8c:77:cb:9b:51:0a:b3:8e:18:e9:
                    8e:8f:7d:5a:41:30:d4:12:82:dc:75:d6:70:9e:9c:
                    fd:16:5f:9a:8a:f8:20:e3:c9:29:a3:6c:2a:c1:09:
                    96:59:64:6e:28:a7:cb:30:4c:07:63:11:5a:54:e5:
                    66:5f:9c:15:ea:11:d0:88:4e:c9:82:10:32:f4:48:
                    ca:57:69:33:40:cb:40:5e:db:2a:88:da:4f:c9:e6:
                    d8:de:0e:ed:12:06:66:94:34:37:b1:ee:e0:f3:9e:
                    e8:7a:bf:96:04:0b:9a:87:71:ba:be:14:e0:93:5a:
                    48:bb:cc:f5:ae:78:45:18:10:ec:02:d5:16:06:bd:
                    b2:54:f1:85:8c:2d:82:84:73:71:d8:9d:07:65:1f:
                    96:f9:86:75:59:1f:f4:fd:34:12:30:4c:ab:39:87:
                    c1:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:67:2B:88:3A:E8:AC:17:C6:8A:0D:12:0D:58:CD:FA:10:11:B8:C4
            X509v3 Authority Key Identifier:
                keyid:AE:20:FE:4D:55:87:17:B2:15:40:D2:16:62:C3:07:16:B1:97:23:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d21646be-3d6a-4257-b77c-b33c10f35d32/0/AE20FE4D558717B21540D21662C30716B19723F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE20FE4D558717B21540D21662C30716B19723F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d21646be-3d6a-4257-b77c-b33c10f35d32/0/AE20FE4D558717B21540D21662C30716B19723F3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:23:8c:da:5e:e9:f1:1f:e8:ee:ce:8f:86:71:7d:b7:82:9b:
         0f:f0:af:cf:4d:83:11:cf:88:56:92:76:95:e6:eb:9d:f5:42:
         a7:e3:15:ae:34:4b:08:7a:68:54:7b:f5:ab:c1:cc:ca:bd:a8:
         a7:6e:b4:b7:de:76:45:65:e1:ea:11:12:fa:4f:c6:1e:ea:bf:
         cb:ef:65:92:7f:a3:b5:1a:03:16:e8:e7:4a:e6:27:91:87:1f:
         f4:29:0a:d0:1e:2c:b6:2a:e4:33:ac:12:ef:7b:b5:3b:fa:54:
         45:a3:0d:ed:e9:d3:76:87:c5:8e:09:2f:2e:3f:03:db:23:95:
         16:95:e5:9f:e6:6b:a9:3b:34:0a:58:be:9f:58:38:23:15:59:
         f5:0a:4b:3e:4a:04:2f:b1:62:6f:58:a7:53:b7:fc:5e:3a:7a:
         e6:db:f9:f6:56:3b:fb:ab:42:83:14:fd:6e:3c:d7:29:4a:a6:
         4a:1e:9b:dd:1e:3b:eb:bb:73:42:88:3f:4a:e0:77:98:06:a0:
         1a:c9:9e:93:f1:a0:c2:14:4b:d4:e0:2c:35:8e:32:bb:cb:8e:
         a7:b4:da:01:c5:1a:84:36:dc:21:6a:20:6c:f7:d4:29:46:a2:
         42:ba:93:87:3e:b6:bd:ae:f9:3d:68:c4:74:2e:46:24:6d:8b:
         3c:dc:62:76
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUdmS1nW6qClHaWcdcmwm+/+X7cpswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUUyMEZFNEQ1NTg3MTdCMjE1NDBEMjE2NjJDMzA3MTZC
MTk3MjNGMzAeFw0yNjAyMDExMTQ1NDBaFw0yNjAyMDQxMzQ0NDBaMDMxMTAvBgNV
BAMTKDgyNjcyQjg4M0FFOEFDMTdDNjhBMEQxMjBENThDREZBMTAxMUI4QzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC85qNYc+g9OCrJQcsqYTIxPgQR
s3R3nVxwFy6Dbjm2CBeQ3/PMHyFBIYi16UHaqZbHKmAdSsIHArA0AWDCakll/POS
QTV166I0oaFSpBGv6euOljDw7fuv8eo1Ze00jHfLm1EKs44Y6Y6PfVpBMNQSgtx1
1nCenP0WX5qK+CDjySmjbCrBCZZZZG4op8swTAdjEVpU5WZfnBXqEdCITsmCEDL0
SMpXaTNAy0Be2yqI2k/J5tjeDu0SBmaUNDex7uDznuh6v5YEC5qHcbq+FOCTWki7
zPWueEUYEOwC1RYGvbJU8YWMLYKEc3HYnQdlH5b5hnVZH/T9NBIwTKs5h8GjAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUgmcriDrorBfGig0SDVjN+hARuMQwHwYDVR0j
BBgwFoAUriD+TVWHF7IVQNIWYsMHFrGXI/MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k
MjE2NDZiZS0zZDZhLTQyNTctYjc3Yy1iMzNjMTBmMzVkMzIvMC9BRTIwRkU0RDU1
ODcxN0IyMTU0MEQyMTY2MkMzMDcxNkIxOTcyM0YzLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQUUyMEZFNEQ1NTg3MTdCMjE1NDBEMjE2NjJDMzA3MTZCMTk3
MjNGMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDIxNjQ2YmUtM2Q2YS00MjU3LWI3
N2MtYjMzYzEwZjM1ZDMyLzAvQUUyMEZFNEQ1NTg3MTdCMjE1NDBEMjE2NjJDMzA3
MTZCMTk3MjNGMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAD4jjNpe6fEf6O7Oj4ZxfbeCmw/wr89NgxHP
iFaSdpXm6531QqfjFa40Swh6aFR79avBzMq9qKdutLfedkVl4eoREvpPxh7qv8vv
ZZJ/o7UaAxbo50rmJ5GHH/QpCtAeLLYq5DOsEu97tTv6VEWjDe3p03aHxY4JLy4/
A9sjlRaV5Z/ma6k7NApYvp9YOCMVWfUKSz5KBC+xYm9Yp1O3/F46eubb+fZWO/ur
QoMU/W481ylKpkoem90eO+u7c0KIP0rgd5gGoBrJnpPxoMIUS9TgLDWOMrvLjqe0
2gHFGoQ23CFqIGz31ClGokK6k4c+tr2u+T1oxHQuRiRtizzcYnY=
-----END CERTIFICATE-----
Generated at Mon Feb 2 09:58:31 2026 by rpki-client