This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/f1e46365-74d3-4e60-952a-f9428096001d/0/A45C7486216530EA5E88FE961534FA7EAE72A79C.mft
File:                     A45C7486216530EA5E88FE961534FA7EAE72A79C.mft (raw, json)
Hash identifier:          MxX8J2parq1IVcMeNWS8aq8Q5GHGg9M/v4piPyB4Rhw=
Subject key identifier:   F0:63:AE:99:21:F2:41:64:D0:14:D1:13:C2:9A:7A:68:C3:0B:A9:A3
Authority key identifier: A4:5C:74:86:21:65:30:EA:5E:88:FE:96:15:34:FA:7E:AE:72:A7:9C
Certificate issuer:       /CN=A45C7486216530EA5E88FE961534FA7EAE72A79C
Certificate serial:       28843479F5D0A07478159412F9BEFDF0AEA3011E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A45C7486216530EA5E88FE961534FA7EAE72A79C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f1e46365-74d3-4e60-952a-f9428096001d/0/A45C7486216530EA5E88FE961534FA7EAE72A79C.mft
Manifest number:          0147
Signing time:             Sun 01 Feb 2026 12:21:37 +0000
Manifest this update:     Sun 01 Feb 2026 12:16:37 +0000
Manifest next update:     Wed 04 Feb 2026 19:10:37 +0000
Files and hashes:         1: A45C7486216530EA5E88FE961534FA7EAE72A79C.crl (hash: apHUR8J5EgtrhYgLCDlT8vg08F3wTTHVXm6RoG+mmM0=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f1e46365-74d3-4e60-952a-f9428096001d/0/A45C7486216530EA5E88FE961534FA7EAE72A79C.crl
                          rsync://repo-rpki.idnic.net/repo/f1e46365-74d3-4e60-952a-f9428096001d/0/A45C7486216530EA5E88FE961534FA7EAE72A79C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A45C7486216530EA5E88FE961534FA7EAE72A79C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Feb 2026 19:10:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:84:34:79:f5:d0:a0:74:78:15:94:12:f9:be:fd:f0:ae:a3:01:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A45C7486216530EA5E88FE961534FA7EAE72A79C
        Validity
            Not Before: Feb  1 12:16:37 2026 GMT
            Not After : Feb  4 19:10:37 2026 GMT
        Subject: CN=F063AE9921F24164D014D113C29A7A68C30BA9A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:66:25:6f:08:42:08:2e:01:7d:b6:be:0a:fb:
                    ef:82:1b:4b:08:00:a8:e1:8c:3c:cd:f9:3c:3d:82:
                    b8:2e:98:fa:22:c4:64:cc:ae:e4:28:d1:b1:ae:70:
                    da:fa:c0:d2:f1:3e:4b:e9:29:13:68:51:64:e4:0d:
                    4d:9e:9d:c9:72:3d:7a:5b:d8:b2:56:cf:bc:e4:20:
                    8a:d9:10:5b:b1:ee:35:c6:34:36:ab:79:22:22:b3:
                    24:f7:a1:8c:1d:08:75:7f:ed:41:9f:d4:68:39:2f:
                    cf:4f:24:80:ca:a5:42:75:93:54:f1:85:7f:70:32:
                    f4:be:7d:6a:86:cb:a4:58:1e:75:86:64:d8:6e:67:
                    9f:0e:4b:e1:4b:3e:29:d9:21:72:af:1c:2a:8f:07:
                    7b:a8:21:ab:87:54:9f:de:b0:24:10:46:ec:a0:38:
                    cd:b6:ec:6d:fd:36:b0:35:87:b9:04:22:6e:d4:fb:
                    70:7c:8b:b9:3a:1f:2b:a7:39:f5:59:c1:8c:e9:49:
                    d3:63:61:f4:b0:ee:38:dc:c4:6f:ae:be:81:92:d7:
                    3b:88:92:40:6a:95:bc:39:8a:d9:5b:5b:6e:b3:7f:
                    bd:b5:a0:15:b0:02:42:44:57:3b:ad:ad:b4:1e:0c:
                    92:c4:44:a0:cc:36:aa:82:ab:02:46:da:55:69:03:
                    91:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:63:AE:99:21:F2:41:64:D0:14:D1:13:C2:9A:7A:68:C3:0B:A9:A3
            X509v3 Authority Key Identifier:
                keyid:A4:5C:74:86:21:65:30:EA:5E:88:FE:96:15:34:FA:7E:AE:72:A7:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f1e46365-74d3-4e60-952a-f9428096001d/0/A45C7486216530EA5E88FE961534FA7EAE72A79C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A45C7486216530EA5E88FE961534FA7EAE72A79C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f1e46365-74d3-4e60-952a-f9428096001d/0/A45C7486216530EA5E88FE961534FA7EAE72A79C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e8:d9:04:7d:d8:d9:f9:5f:1b:80:b3:16:0f:e5:dd:1a:0c:b0:
         2f:28:1e:5d:c3:d4:64:b3:e0:74:43:de:c2:ff:6a:61:04:44:
         a6:65:4f:41:56:de:7d:6e:f1:d1:07:f4:83:42:9f:4f:d5:d8:
         5a:7e:4a:65:fa:47:ba:99:bc:af:95:d7:03:81:27:d4:30:ba:
         56:5a:87:89:0a:e4:83:93:17:f9:52:7a:e2:b3:da:ab:90:08:
         a8:82:ff:49:1f:e5:c0:24:68:94:74:0c:e7:60:67:96:27:74:
         47:e6:f4:1d:96:02:09:e2:60:c6:2a:ff:09:64:80:dc:de:ed:
         8f:b3:5f:e7:d9:d5:92:29:2f:4f:4f:15:15:ec:81:2b:32:f5:
         c5:f6:0e:ec:79:6e:8b:d3:9b:cf:92:31:63:40:0f:9f:da:62:
         a9:63:99:a5:ca:41:bd:86:de:5c:18:d6:69:18:33:08:76:7f:
         b2:f4:38:ba:45:b6:cd:c4:6c:94:4c:cd:89:3d:dd:94:5d:58:
         05:87:20:43:e8:77:ea:ed:53:30:af:5a:8f:77:87:14:d4:86:
         a8:99:fd:4c:eb:53:de:36:7c:40:6c:ae:69:8e:99:24:26:1a:
         5f:b7:c1:38:d9:ff:77:e7:02:ab:78:12:63:19:9d:39:c7:7b:
         f4:93:7f:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 10:06:33 2026 by rpki-client