This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/dd029c22-2215-48c1-9ab6-bb13c01b43b1/0/3B764ECE3DB30DE57C6036DCCBAE958BED349AE0.mft
File:                     3B764ECE3DB30DE57C6036DCCBAE958BED349AE0.mft (raw, json)
Hash identifier:          DPPCdaXvKPNx0kGIEEYqioslJ9PWCcglfIe25JINSUM=
Subject key identifier:   45:FA:06:94:0D:6C:7D:F0:4D:84:13:70:9C:B3:A8:21:30:C2:FC:AC
Authority key identifier: 3B:76:4E:CE:3D:B3:0D:E5:7C:60:36:DC:CB:AE:95:8B:ED:34:9A:E0
Certificate issuer:       /CN=3B764ECE3DB30DE57C6036DCCBAE958BED349AE0
Certificate serial:       26C70715350479475655F55B6BA7A46B75CCD060
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B764ECE3DB30DE57C6036DCCBAE958BED349AE0.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/dd029c22-2215-48c1-9ab6-bb13c01b43b1/0/3B764ECE3DB30DE57C6036DCCBAE958BED349AE0.mft
Manifest number:          0202
Signing time:             Sun 01 Feb 2026 23:31:28 +0000
Manifest this update:     Sun 01 Feb 2026 23:26:28 +0000
Manifest next update:     Thu 05 Feb 2026 07:29:28 +0000
Files and hashes:         1: 3B764ECE3DB30DE57C6036DCCBAE958BED349AE0.crl (hash: FBwpNmjj+fmc488v0kKARWf5op+WMLkIFe2fJ28Nclk=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/dd029c22-2215-48c1-9ab6-bb13c01b43b1/0/3B764ECE3DB30DE57C6036DCCBAE958BED349AE0.crl
                          rsync://repo-rpki.idnic.net/repo/dd029c22-2215-48c1-9ab6-bb13c01b43b1/0/3B764ECE3DB30DE57C6036DCCBAE958BED349AE0.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B764ECE3DB30DE57C6036DCCBAE958BED349AE0.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Feb 2026 05:24:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:c7:07:15:35:04:79:47:56:55:f5:5b:6b:a7:a4:6b:75:cc:d0:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B764ECE3DB30DE57C6036DCCBAE958BED349AE0
        Validity
            Not Before: Feb  1 23:26:28 2026 GMT
            Not After : Feb  5 07:29:28 2026 GMT
        Subject: CN=45FA06940D6C7DF04D8413709CB3A82130C2FCAC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:f7:5d:e1:a2:97:4f:2f:3c:38:11:49:5b:db:
                    1b:aa:cf:b6:96:f2:9e:e2:24:3b:1c:a1:07:17:4b:
                    3e:81:2c:cb:5a:9f:cd:cd:5e:9a:a0:67:af:45:e9:
                    98:be:c1:bb:12:a7:fd:24:dc:66:89:65:fd:60:04:
                    c1:aa:fc:62:7b:66:5a:cd:4a:d0:9e:cd:c1:58:aa:
                    61:6d:38:4e:d5:a6:f2:c4:11:f1:cd:63:11:fa:26:
                    ae:11:33:f7:91:a0:7b:ba:4c:53:cc:a4:7a:af:ce:
                    73:ac:5b:74:f3:30:4f:ed:88:ae:f0:43:45:f8:61:
                    04:89:44:16:4b:35:8c:26:f9:bb:27:d9:79:50:4f:
                    36:03:95:a6:a3:7b:18:09:84:20:23:7a:a8:6c:5e:
                    93:6a:35:2a:c7:8b:d5:f3:c2:bf:a7:7c:c0:95:80:
                    bb:75:16:32:f4:fb:54:ef:ba:23:97:57:15:f0:b5:
                    58:c8:45:ae:25:ee:07:c1:50:86:97:89:3a:46:44:
                    82:0f:cd:95:52:04:32:8a:8d:09:0d:fa:1e:90:d1:
                    0d:5d:25:e2:e2:e4:9a:64:ff:dc:97:75:36:2f:2d:
                    2f:76:28:38:13:4f:ef:32:02:c9:22:2e:b6:40:1f:
                    9d:1d:1b:55:f7:b1:3d:e0:e9:66:37:5c:44:8f:02:
                    c0:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:FA:06:94:0D:6C:7D:F0:4D:84:13:70:9C:B3:A8:21:30:C2:FC:AC
            X509v3 Authority Key Identifier:
                keyid:3B:76:4E:CE:3D:B3:0D:E5:7C:60:36:DC:CB:AE:95:8B:ED:34:9A:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/dd029c22-2215-48c1-9ab6-bb13c01b43b1/0/3B764ECE3DB30DE57C6036DCCBAE958BED349AE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B764ECE3DB30DE57C6036DCCBAE958BED349AE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dd029c22-2215-48c1-9ab6-bb13c01b43b1/0/3B764ECE3DB30DE57C6036DCCBAE958BED349AE0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:b1:ab:93:08:d8:a3:7c:b5:fc:8f:08:7d:b0:22:f9:5b:35:
         25:f7:6f:27:88:e5:91:b4:02:53:fd:b0:6c:b2:63:78:6f:44:
         f1:08:26:42:8f:b5:b4:02:0e:7a:3b:5a:39:b5:8c:74:d2:ae:
         d5:bb:e3:bf:a2:39:ef:b2:0f:11:e9:96:ec:71:c7:9a:21:27:
         03:a3:d5:88:c9:99:de:be:aa:b1:28:d0:67:e0:81:a7:98:08:
         0a:a3:18:bc:6f:de:6c:93:3f:02:84:5a:b1:8e:22:08:d4:b9:
         03:29:67:3e:a5:7c:9c:7c:4f:ec:db:67:f7:8f:26:49:12:15:
         e9:30:57:36:78:b3:5d:61:fb:34:e4:e7:0e:d9:89:98:93:fb:
         19:f1:92:c9:d5:e1:c0:24:42:a2:76:c6:d6:3b:ee:5e:8c:d5:
         d5:f9:85:4c:fd:b9:a3:cb:cc:67:a5:5c:dc:15:62:cc:42:13:
         7e:6c:d2:b0:f8:50:63:69:bb:25:06:3e:9c:8a:b9:53:f9:ab:
         70:d9:e5:d4:c2:e3:93:c0:03:5a:f4:9a:af:a3:0e:c8:72:da:
         7e:2c:7e:7e:77:89:43:01:02:af:31:77:d1:1b:a1:ba:9f:50:
         c4:75:29:0c:9c:34:93:6a:69:29:ab:45:99:4f:e9:4c:8a:65:
         0e:fe:e9:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:45:00 2026 by rpki-client