This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/f2b30f16-e876-48cb-936b-702c3055113d/0/BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.mft
File:                     BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.mft (raw, json)
Hash identifier:          NZx3b61yaPmOgbnpNi4WSaJTPV5+gv9eq3N+oGNufXU=
Subject key identifier:   91:40:B3:35:D7:42:EF:0D:C8:EA:7D:20:7E:74:69:4E:91:A7:22:D1
Authority key identifier: BB:9F:73:96:40:FA:A3:D9:05:27:D7:B5:7D:2D:1D:99:93:A4:2B:D1
Certificate issuer:       /CN=BB9F739640FAA3D90527D7B57D2D1D9993A42BD1
Certificate serial:       6AF1DDFBD6FC29A9602D451AC8746C1084BFE2F5
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f2b30f16-e876-48cb-936b-702c3055113d/0/BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.mft
Manifest number:          020E
Signing time:             Sun 01 Feb 2026 04:20:56 +0000
Manifest this update:     Sun 01 Feb 2026 04:15:56 +0000
Manifest next update:     Wed 04 Feb 2026 11:15:56 +0000
Files and hashes:         1: BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.crl (hash: jbe/tQBj+FEky6d3MGmBWGcZC+2QqQEks5cH+0UIN1M=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f2b30f16-e876-48cb-936b-702c3055113d/0/BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.crl
                          rsync://repo-rpki.idnic.net/repo/f2b30f16-e876-48cb-936b-702c3055113d/0/BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Feb 2026 11:15:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:f1:dd:fb:d6:fc:29:a9:60:2d:45:1a:c8:74:6c:10:84:bf:e2:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB9F739640FAA3D90527D7B57D2D1D9993A42BD1
        Validity
            Not Before: Feb  1 04:15:56 2026 GMT
            Not After : Feb  4 11:15:56 2026 GMT
        Subject: CN=9140B335D742EF0DC8EA7D207E74694E91A722D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:43:33:a3:68:13:b9:64:a9:d0:7c:9b:97:df:
                    4d:5c:72:da:6e:30:8f:b7:30:d6:1d:c4:c8:33:ad:
                    2f:62:84:a7:38:d5:69:66:6f:30:ae:9a:ec:93:d1:
                    bf:23:24:93:11:88:e4:a5:b1:bf:4c:7b:e1:d6:ab:
                    6c:78:51:ff:d7:74:56:3d:62:e2:22:01:c8:5a:bf:
                    47:b5:1a:d6:bc:8a:e8:69:ca:f8:a5:74:94:af:43:
                    9b:70:1e:d6:49:cb:fb:a4:fd:27:e6:c0:bf:4f:bd:
                    d6:c4:9f:5f:6f:71:4b:f6:a0:4c:ea:0c:78:f1:2d:
                    36:c3:17:b2:bd:04:b2:a6:17:e5:2a:8a:a3:e0:e5:
                    07:e8:ef:ad:92:7d:ad:1b:16:9a:69:b9:fa:70:f8:
                    e1:7a:12:32:fd:7d:5d:3a:e2:0f:58:a8:43:89:44:
                    cc:03:56:12:d6:f0:1d:b7:15:ca:f3:9c:2e:75:91:
                    a9:2f:9f:f9:1d:5b:60:f4:03:b8:83:92:3f:07:12:
                    de:53:24:be:0e:6b:5e:d6:0e:97:60:44:62:1b:ba:
                    73:37:22:65:35:51:eb:d8:9b:46:38:9b:15:8a:b4:
                    28:47:dc:91:b4:1a:18:07:5c:cb:69:9c:86:37:00:
                    0d:88:7f:ed:c5:5b:e9:b5:0c:55:08:0a:79:f7:65:
                    17:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:40:B3:35:D7:42:EF:0D:C8:EA:7D:20:7E:74:69:4E:91:A7:22:D1
            X509v3 Authority Key Identifier:
                keyid:BB:9F:73:96:40:FA:A3:D9:05:27:D7:B5:7D:2D:1D:99:93:A4:2B:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f2b30f16-e876-48cb-936b-702c3055113d/0/BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f2b30f16-e876-48cb-936b-702c3055113d/0/BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:a0:36:0e:34:f2:59:f5:ae:2c:39:a9:2d:11:78:1c:69:b7:
         32:e0:c7:f9:63:c0:f0:2e:fc:f8:15:eb:90:30:52:78:3d:6f:
         b3:33:2b:dd:a5:7d:bb:9f:76:b1:1e:00:d9:7f:d7:3a:be:0e:
         f7:11:77:73:ad:2e:25:85:fd:02:aa:1c:d9:30:a3:e6:32:52:
         b9:57:34:b2:a3:80:2b:ae:2d:cf:3c:60:bb:70:5c:5e:5c:de:
         3d:30:ef:2e:de:7e:84:d2:bf:62:94:95:1b:6d:be:cb:b6:c7:
         00:dc:0e:65:94:6a:5f:e7:6c:65:c6:0e:d4:4c:bb:f3:27:66:
         ed:b8:ad:37:49:a5:3f:b0:83:ff:f9:18:e8:9c:8d:45:3f:27:
         3d:f3:df:60:48:02:cc:88:c0:bf:81:3a:4d:49:74:02:56:7b:
         90:5b:32:3e:3a:9b:3e:27:4c:f9:7e:6f:2e:d5:2c:aa:9b:9e:
         17:fa:7e:04:d8:cb:ca:ee:48:fa:ea:08:02:5b:4f:8e:3f:f4:
         b5:36:a0:e3:cc:dc:91:25:e0:9f:ae:97:53:ba:c1:c3:cb:ce:
         ee:ca:bd:d2:e3:fd:2f:d7:69:a1:96:6c:7e:cc:e2:8d:be:b3:
         d3:02:f5:e2:7c:3d:ec:56:52:25:92:07:8a:6f:b7:4a:a6:4b:
         bb:3b:da:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:49:51 2026 by rpki-client