This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/fae24907-a6f2-4a55-aa6f-18c7db143fe8/0/BD6194D3C25B637B15DAEB654B288A451054ABE0.mft
File:                     BD6194D3C25B637B15DAEB654B288A451054ABE0.mft (raw, json)
Hash identifier:          NZZ5SS43UDDJeFHrbM+xck6QMXVX2xEsR/Id3I4OwsA=
Subject key identifier:   62:AC:16:FE:10:CB:B7:17:52:3C:7F:BF:81:84:6E:35:64:3D:66:0E
Authority key identifier: BD:61:94:D3:C2:5B:63:7B:15:DA:EB:65:4B:28:8A:45:10:54:AB:E0
Certificate issuer:       /CN=BD6194D3C25B637B15DAEB654B288A451054ABE0
Certificate serial:       5DFFDC5FD48A79BC2F1343A0AE3A3F8FD529CF4E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD6194D3C25B637B15DAEB654B288A451054ABE0.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/fae24907-a6f2-4a55-aa6f-18c7db143fe8/0/BD6194D3C25B637B15DAEB654B288A451054ABE0.mft
Manifest number:          01E8
Signing time:             Mon 02 Feb 2026 00:51:16 +0000
Manifest this update:     Mon 02 Feb 2026 00:46:16 +0000
Manifest next update:     Thu 05 Feb 2026 02:06:16 +0000
Files and hashes:         1: BD6194D3C25B637B15DAEB654B288A451054ABE0.crl (hash: NzWCH4pQoX3Ee575BI49SqQZfVIotWI4M3vYLhbYvZU=)
                          2: 3130332e37392e3133302e302f32332d3233203d3e20313430343433.roa (hash: RNdh1+r+BNYLHAu4V1jupY7hG6iYrh06nO6HbqG1vXI=)
                          3: 3130332e37392e3133302e302f32342d3234203d3e20313430343433.roa (hash: BlB54vUebVCTB7wA7qoqMH+xgyxkQDhZWNMRec/AbvE=)
                          4: 3130332e37392e3133312e302f32342d3234203d3e20313430343433.roa (hash: 10mUGoiah4HNNhQPC/xIeaHPveRue0pYK34O0LI+OcA=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/fae24907-a6f2-4a55-aa6f-18c7db143fe8/0/BD6194D3C25B637B15DAEB654B288A451054ABE0.crl
                          rsync://repo-rpki.idnic.net/repo/fae24907-a6f2-4a55-aa6f-18c7db143fe8/0/BD6194D3C25B637B15DAEB654B288A451054ABE0.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD6194D3C25B637B15DAEB654B288A451054ABE0.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Feb 2026 02:06:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:ff:dc:5f:d4:8a:79:bc:2f:13:43:a0:ae:3a:3f:8f:d5:29:cf:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD6194D3C25B637B15DAEB654B288A451054ABE0
        Validity
            Not Before: Feb  2 00:46:16 2026 GMT
            Not After : Feb  5 02:06:16 2026 GMT
        Subject: CN=62AC16FE10CBB717523C7FBF81846E35643D660E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:99:eb:36:9c:3b:15:15:2d:64:cb:f6:cc:49:
                    98:8a:33:e6:dc:50:f6:0a:28:59:f4:54:0d:cc:b5:
                    31:74:07:0c:78:b7:d4:41:ca:64:8d:51:ba:1c:d8:
                    4b:b0:9a:2f:e5:ce:42:d0:69:cb:2c:76:85:c7:65:
                    02:06:eb:52:15:17:96:7f:ac:47:3a:3e:47:8a:d4:
                    86:57:7a:81:c9:f7:c2:01:89:d1:30:60:09:ec:17:
                    20:35:98:4a:cb:04:00:61:be:d6:b0:3b:16:16:16:
                    ce:b4:2d:b1:41:13:37:37:a3:da:10:63:7f:25:d4:
                    55:fd:ad:cb:e3:24:35:1b:62:39:f6:d7:18:79:bf:
                    c5:65:28:02:9d:33:26:d9:a8:d5:b1:63:77:bf:5a:
                    d4:a3:51:95:81:06:01:47:1a:db:f9:0b:b1:df:2a:
                    77:db:00:f2:65:c7:67:62:47:63:57:08:06:28:ba:
                    86:54:c9:39:67:6f:2e:b4:fb:ac:64:10:7c:75:73:
                    70:b5:4f:9d:b5:d6:b0:c6:79:01:ee:56:6a:4f:87:
                    1c:e0:b1:d7:c6:c2:81:e5:10:84:f9:03:7f:9f:9a:
                    8d:19:60:b4:a0:68:7d:1a:7b:5d:cd:22:be:d3:32:
                    e6:79:1d:4b:96:5b:28:c5:34:16:cc:85:7b:75:79:
                    46:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:AC:16:FE:10:CB:B7:17:52:3C:7F:BF:81:84:6E:35:64:3D:66:0E
            X509v3 Authority Key Identifier:
                keyid:BD:61:94:D3:C2:5B:63:7B:15:DA:EB:65:4B:28:8A:45:10:54:AB:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/fae24907-a6f2-4a55-aa6f-18c7db143fe8/0/BD6194D3C25B637B15DAEB654B288A451054ABE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD6194D3C25B637B15DAEB654B288A451054ABE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fae24907-a6f2-4a55-aa6f-18c7db143fe8/0/BD6194D3C25B637B15DAEB654B288A451054ABE0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:63:a3:a3:19:12:1e:83:13:96:07:9a:2f:29:cd:32:11:c9:
         94:9e:00:0f:3c:bd:2d:c5:cb:e8:a0:32:4b:49:10:2f:44:4b:
         01:a2:c9:8b:44:9c:7f:6b:e8:dc:89:25:f2:76:1e:99:cd:da:
         d5:b0:76:18:bf:84:72:74:71:ed:6d:8d:3f:98:55:f2:2f:12:
         95:75:8f:70:07:2c:11:02:69:0e:df:c4:5d:30:b7:15:27:73:
         7b:0b:18:b4:b2:84:e9:03:ca:1c:11:27:74:5e:e1:b0:e1:52:
         54:f1:ce:6b:d3:2a:02:70:ee:68:b7:cf:2a:86:d4:ab:c7:2e:
         24:ba:55:3a:b4:0f:b5:ec:f7:30:38:4f:5d:cb:8c:27:b8:21:
         9f:65:48:40:c0:53:8b:5b:3e:20:f1:7f:c0:20:a4:97:2f:5d:
         ec:7e:f4:9c:94:2d:13:98:c7:85:02:40:4a:c1:5a:ff:cf:f9:
         40:d8:66:c2:2a:ae:16:02:bb:dc:d6:6e:69:e2:5e:b8:a9:2c:
         61:14:42:d7:b3:f6:2a:c4:a6:71:e9:07:e6:a4:a9:a1:ce:78:
         64:24:84:18:05:8e:13:71:c0:5c:7a:b9:4d:6e:8a:79:cf:11:
         52:6a:21:55:13:60:b8:fa:62:8b:5b:15:b9:36:4a:e7:5b:55:
         8c:bd:7d:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 10:05:14 2026 by rpki-client