This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/3360f078-8a20-48d1-82b8-e1f50a155201/0/B93759B19E4C1F8FFB6E9D1E2E674E4E317D7E94.mft
File:                     B93759B19E4C1F8FFB6E9D1E2E674E4E317D7E94.mft (raw, json)
Hash identifier:          LDxL7neHj6ev37BJhyPG3uSXxoRyXZTSKJBw3RFEeo4=
Subject key identifier:   45:1E:6D:80:30:18:23:0F:1D:56:44:E8:6D:B5:F3:1F:74:3B:50:F9
Authority key identifier: B9:37:59:B1:9E:4C:1F:8F:FB:6E:9D:1E:2E:67:4E:4E:31:7D:7E:94
Certificate issuer:       /CN=B93759B19E4C1F8FFB6E9D1E2E674E4E317D7E94
Certificate serial:       18857D71D934082BEC55CA6AF5981D030DA7F370
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B93759B19E4C1F8FFB6E9D1E2E674E4E317D7E94.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3360f078-8a20-48d1-82b8-e1f50a155201/0/B93759B19E4C1F8FFB6E9D1E2E674E4E317D7E94.mft
Manifest number:          023A
Signing time:             Sun 25 Jan 2026 15:32:26 +0000
Manifest this update:     Sun 25 Jan 2026 15:27:26 +0000
Manifest next update:     Wed 28 Jan 2026 16:20:26 +0000
Files and hashes:         1: B93759B19E4C1F8FFB6E9D1E2E674E4E317D7E94.crl (hash: RNuNDoUvcAsRwuj6UEvLPezz1HBC+hgcpmuQwKvV0xw=)
                          2: 3130332e3135302e3135382e302f32342d3234203d3e20313430333937.roa (hash: XFDD1vzbK3fH2oVTZT7/I8pF/szQ/Q1UsEfrzMZOTGI=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/3360f078-8a20-48d1-82b8-e1f50a155201/0/B93759B19E4C1F8FFB6E9D1E2E674E4E317D7E94.crl
                          rsync://repo-rpki.idnic.net/repo/3360f078-8a20-48d1-82b8-e1f50a155201/0/B93759B19E4C1F8FFB6E9D1E2E674E4E317D7E94.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B93759B19E4C1F8FFB6E9D1E2E674E4E317D7E94.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Jan 2026 16:20:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:85:7d:71:d9:34:08:2b:ec:55:ca:6a:f5:98:1d:03:0d:a7:f3:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B93759B19E4C1F8FFB6E9D1E2E674E4E317D7E94
        Validity
            Not Before: Jan 25 15:27:26 2026 GMT
            Not After : Jan 28 16:20:26 2026 GMT
        Subject: CN=451E6D803018230F1D5644E86DB5F31F743B50F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:1f:ee:ed:2b:e4:c7:6e:b3:10:62:0e:0b:e6:
                    c3:3a:0a:a6:46:32:c6:4b:26:7a:96:7b:62:7c:db:
                    39:74:39:32:64:28:00:50:45:fe:31:a7:13:d7:25:
                    de:2a:f1:96:32:18:c0:79:eb:cc:f8:1c:30:f8:22:
                    c6:d7:8d:00:2d:23:99:ab:7c:db:3d:a5:7d:e2:e2:
                    e8:ab:c6:ce:69:cf:69:18:ec:b9:7a:26:fa:de:c1:
                    c1:17:22:11:3f:db:c6:db:00:e4:4b:9f:07:27:d7:
                    b6:45:24:85:04:75:6d:bd:72:ff:0f:bd:1c:1c:c4:
                    b3:c0:68:af:27:fe:61:a8:77:b7:d3:29:73:d7:18:
                    70:fd:73:5c:b3:8a:51:bc:5b:57:ae:e5:e3:b4:52:
                    b0:9d:92:bc:fc:cc:8e:b6:54:b4:bf:bc:49:7d:e1:
                    51:96:56:cf:0c:67:0d:b1:18:b3:9a:c7:29:bd:14:
                    11:26:00:60:07:ff:90:e5:5b:e1:ce:63:89:d4:45:
                    c9:cb:83:9e:d8:25:32:d3:93:48:05:57:58:57:ef:
                    e6:0a:04:c8:13:77:bd:50:92:af:98:87:f9:f2:ba:
                    67:fb:b8:e1:97:df:c9:5a:cd:a7:6a:50:eb:d9:41:
                    49:14:f9:65:8c:a9:15:65:ed:29:79:61:de:0a:ee:
                    2d:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:1E:6D:80:30:18:23:0F:1D:56:44:E8:6D:B5:F3:1F:74:3B:50:F9
            X509v3 Authority Key Identifier:
                keyid:B9:37:59:B1:9E:4C:1F:8F:FB:6E:9D:1E:2E:67:4E:4E:31:7D:7E:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3360f078-8a20-48d1-82b8-e1f50a155201/0/B93759B19E4C1F8FFB6E9D1E2E674E4E317D7E94.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B93759B19E4C1F8FFB6E9D1E2E674E4E317D7E94.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3360f078-8a20-48d1-82b8-e1f50a155201/0/B93759B19E4C1F8FFB6E9D1E2E674E4E317D7E94.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:c4:bf:c7:ed:27:0c:b5:c0:79:7c:ab:d9:29:b7:80:1d:30:
         1b:52:2b:9b:7d:2f:ca:62:d4:dd:07:86:7e:c4:97:cb:5d:85:
         bd:eb:35:83:3e:cf:bf:9e:bd:53:ef:e5:19:46:1e:c1:69:d4:
         da:e7:e4:da:42:34:2f:b2:77:37:37:81:8c:9a:fa:d2:6a:53:
         a8:fd:d3:9c:89:60:d6:8e:ea:e5:13:4e:d9:36:b9:65:b5:cb:
         fc:07:7a:74:a7:5e:5a:0d:1b:75:a6:4b:fa:a3:da:29:32:f3:
         15:b8:d8:69:da:f2:a3:42:08:1b:4c:e8:67:95:80:35:d2:d0:
         ee:46:36:cc:48:aa:e2:cf:3a:54:b2:49:02:b2:9a:01:07:97:
         a1:80:08:2d:b1:c0:d6:a6:1c:0d:9a:8f:c5:e0:4a:41:d2:8e:
         a9:df:29:c2:fd:ae:8d:27:92:35:2c:a0:3d:7e:c1:c7:56:6c:
         27:69:b4:b9:62:99:4c:ce:35:19:5c:a5:15:30:39:50:9e:fd:
         32:69:68:ec:38:d4:27:6a:dd:9a:66:79:93:d3:d1:e0:a2:f4:
         02:c2:07:6b:05:49:1e:45:fc:74:21:11:20:34:24:df:9b:46:
         cf:11:1b:d7:36:de:f8:e7:64:7a:a0:3f:a5:29:25:96:1a:be:
         6f:b0:b5:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 07:35:05 2026 by rpki-client