This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/40d34e77-6cf6-4187-9083-1c7a8819e965/0/B62E442C8D2C70D0F5AB5E2A3A1F11B2D0B4D8BD.mft
File:                     B62E442C8D2C70D0F5AB5E2A3A1F11B2D0B4D8BD.mft (raw, json)
Hash identifier:          FafiY9d/oDHifAvbWsZW55LDVUeef61CTP6rYpTdkhg=
Subject key identifier:   E9:94:90:F3:2E:64:44:3A:87:F0:08:E1:28:05:EB:C5:A3:AB:31:56
Authority key identifier: B6:2E:44:2C:8D:2C:70:D0:F5:AB:5E:2A:3A:1F:11:B2:D0:B4:D8:BD
Certificate issuer:       /CN=B62E442C8D2C70D0F5AB5E2A3A1F11B2D0B4D8BD
Certificate serial:       54003BE1E45E97F377AE2EE218E300056DE257C1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B62E442C8D2C70D0F5AB5E2A3A1F11B2D0B4D8BD.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/40d34e77-6cf6-4187-9083-1c7a8819e965/0/B62E442C8D2C70D0F5AB5E2A3A1F11B2D0B4D8BD.mft
Manifest number:          0229
Signing time:             Sat 24 Jan 2026 18:51:47 +0000
Manifest this update:     Sat 24 Jan 2026 18:46:47 +0000
Manifest next update:     Wed 28 Jan 2026 00:05:47 +0000
Files and hashes:         1: B62E442C8D2C70D0F5AB5E2A3A1F11B2D0B4D8BD.crl (hash: gaZiCNccnDeef62+4Y3ybpaqb+XE5hfIIZx7sI+MV30=)
                          2: 3130332e3134392e3233392e302f32342d3234203d3e20313430333834.roa (hash: qwBhVFJ/29JkjYJBmiXis9vZ9dZgJ/dBqQTkQKD7IUk=)
                          3: 3130332e3134392e3233382e302f32332d3233203d3e20313430333834.roa (hash: n/ZxzBzZ2gRpYTiml4oQKNkriGvajLH2YwRAWcXMQ3M=)
                          4: 3130332e3134392e3233382e302f32342d3234203d3e20313430333834.roa (hash: nzGXD+WO9jNdAgLBDWw3XXsmMEFx1ERW+wySreu0Q7o=)
                          5: 323430353a663234303a3a2f33322d3332203d3e20313430333834.roa (hash: jCC55QoiailnQ1RFdBW81Arc7TozD6cSp8bDswcvT9g=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/40d34e77-6cf6-4187-9083-1c7a8819e965/0/B62E442C8D2C70D0F5AB5E2A3A1F11B2D0B4D8BD.crl
                          rsync://repo-rpki.idnic.net/repo/40d34e77-6cf6-4187-9083-1c7a8819e965/0/B62E442C8D2C70D0F5AB5E2A3A1F11B2D0B4D8BD.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B62E442C8D2C70D0F5AB5E2A3A1F11B2D0B4D8BD.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Jan 2026 00:05:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:00:3b:e1:e4:5e:97:f3:77:ae:2e:e2:18:e3:00:05:6d:e2:57:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B62E442C8D2C70D0F5AB5E2A3A1F11B2D0B4D8BD
        Validity
            Not Before: Jan 24 18:46:47 2026 GMT
            Not After : Jan 28 00:05:47 2026 GMT
        Subject: CN=E99490F32E64443A87F008E12805EBC5A3AB3156
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:51:d6:3d:2c:10:14:89:ab:6b:72:8d:64:09:
                    1a:d9:de:05:31:72:3f:29:51:e2:db:ea:1b:c0:42:
                    17:90:ce:d1:66:9b:66:38:7c:35:fb:9b:03:51:82:
                    8e:d2:79:ef:b0:82:ef:58:bc:23:4a:ad:3c:92:6c:
                    c2:47:2e:da:90:8b:46:1c:0c:e6:62:b7:80:81:da:
                    9d:0a:8f:b2:36:de:fe:eb:05:e0:26:40:90:01:ac:
                    62:29:6c:fc:45:01:ed:86:7e:98:0f:68:ee:f0:35:
                    58:33:76:fc:31:ff:11:ea:63:b2:70:da:80:c9:f8:
                    72:3b:14:40:12:23:29:a9:f6:4b:cb:6f:12:84:d1:
                    e3:f3:8f:dc:16:f1:90:0f:b6:72:b5:d5:63:b3:80:
                    11:71:cc:ff:0f:74:29:b0:70:3d:60:cc:3f:24:e0:
                    89:87:6f:81:b5:2d:51:b7:bd:5e:e0:b2:e8:a3:28:
                    1c:23:42:3a:b5:a0:0e:81:22:86:ee:36:74:ce:0b:
                    ce:16:a0:12:15:d5:6d:3e:05:37:7b:29:9a:2f:8b:
                    dc:f2:f7:cd:80:ec:d8:71:b2:6e:82:6b:98:04:4c:
                    e6:18:bc:9d:ed:3b:f5:88:29:f4:62:44:f6:a9:ae:
                    39:89:89:d1:b6:c2:c6:0a:c1:40:7f:d2:64:63:fa:
                    03:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:94:90:F3:2E:64:44:3A:87:F0:08:E1:28:05:EB:C5:A3:AB:31:56
            X509v3 Authority Key Identifier:
                keyid:B6:2E:44:2C:8D:2C:70:D0:F5:AB:5E:2A:3A:1F:11:B2:D0:B4:D8:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/40d34e77-6cf6-4187-9083-1c7a8819e965/0/B62E442C8D2C70D0F5AB5E2A3A1F11B2D0B4D8BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B62E442C8D2C70D0F5AB5E2A3A1F11B2D0B4D8BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/40d34e77-6cf6-4187-9083-1c7a8819e965/0/B62E442C8D2C70D0F5AB5E2A3A1F11B2D0B4D8BD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:2f:ff:1e:18:ff:be:d7:a5:b1:0f:aa:ca:5e:5d:82:39:b3:
         97:18:40:3e:b5:28:e8:cb:5c:66:4a:fe:54:65:57:ab:3e:22:
         1c:08:35:c6:35:10:0e:ec:8f:c2:0d:e2:e2:99:59:b4:92:44:
         49:53:17:52:52:c7:a1:79:00:87:0f:53:c0:17:1d:ba:44:50:
         db:39:91:df:b7:62:9a:c6:ff:e3:fd:c1:eb:68:be:a4:35:6b:
         bb:6a:40:cc:6d:84:d8:21:b7:7f:ab:ee:b5:e2:47:0e:b7:fc:
         6c:64:7c:70:c8:1c:e8:02:ed:35:56:63:e8:bf:d1:be:8a:41:
         d0:e4:85:5b:a6:7e:d4:79:98:11:ad:c1:0d:8f:6b:70:7a:dc:
         01:99:6e:1d:8a:96:06:28:3e:d9:5f:6e:f1:90:14:f7:f9:15:
         bc:b4:aa:2f:72:e1:01:3f:62:06:94:84:41:c8:b7:6f:ab:b6:
         c4:cd:e5:bf:03:03:59:8b:5c:23:10:6a:b2:68:c2:c0:c8:10:
         ef:41:cd:a3:51:42:05:c2:2b:45:19:61:a8:1d:20:f7:53:c3:
         b8:a7:9d:24:3d:2f:a1:ab:4f:e2:5c:d8:27:37:88:57:a4:5c:
         8d:7c:c6:64:05:85:e4:2b:0c:30:b4:c8:33:d0:06:a9:5e:b0:
         a7:ae:38:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:36:39 2026 by rpki-client