This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/44b4fe93-7296-48b4-aa0d-c8a5a3dfd59a/0/BE77663F7F3591A0E64D8D5AC98F2635919B4B3B.mft
File:                     BE77663F7F3591A0E64D8D5AC98F2635919B4B3B.mft (raw, json)
Hash identifier:          D+NiSDr15gJD3X7bRrjBKNtmX8ac6sy4NSIScthzGNg=
Subject key identifier:   ED:51:E2:D6:34:68:78:BD:D2:AB:C3:C3:6B:59:DE:28:FD:48:66:10
Authority key identifier: BE:77:66:3F:7F:35:91:A0:E6:4D:8D:5A:C9:8F:26:35:91:9B:4B:3B
Certificate issuer:       /CN=BE77663F7F3591A0E64D8D5AC98F2635919B4B3B
Certificate serial:       2D2BD1763ADED4D07EBC02BEE61631F767EE9E82
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE77663F7F3591A0E64D8D5AC98F2635919B4B3B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/44b4fe93-7296-48b4-aa0d-c8a5a3dfd59a/0/BE77663F7F3591A0E64D8D5AC98F2635919B4B3B.mft
Manifest number:          01EA
Signing time:             Sat 24 Jan 2026 10:51:22 +0000
Manifest this update:     Sat 24 Jan 2026 10:46:22 +0000
Manifest next update:     Tue 27 Jan 2026 15:16:22 +0000
Files and hashes:         1: 3130332e3132312e3131302e302f32332d3234203d3e20313335343738.roa (hash: FTYnPWS24KutCEB77kSb6hW+KB2BZNWH+4XZLzuJC2Y=)
                          2: BE77663F7F3591A0E64D8D5AC98F2635919B4B3B.crl (hash: m95lIw8HH9hi139y5Hsdvgf7OV90Oj8j+g9XUclziSU=)
                          3: 3130332e3132312e3130382e302f32332d3234203d3e20313335343738.roa (hash: w5I/RiOjY8frWwGU7LEaZXsggiMBZTucFm8ZgJxFBJY=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/44b4fe93-7296-48b4-aa0d-c8a5a3dfd59a/0/BE77663F7F3591A0E64D8D5AC98F2635919B4B3B.crl
                          rsync://repo-rpki.idnic.net/repo/44b4fe93-7296-48b4-aa0d-c8a5a3dfd59a/0/BE77663F7F3591A0E64D8D5AC98F2635919B4B3B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE77663F7F3591A0E64D8D5AC98F2635919B4B3B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Jan 2026 15:16:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:2b:d1:76:3a:de:d4:d0:7e:bc:02:be:e6:16:31:f7:67:ee:9e:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE77663F7F3591A0E64D8D5AC98F2635919B4B3B
        Validity
            Not Before: Jan 24 10:46:22 2026 GMT
            Not After : Jan 27 15:16:22 2026 GMT
        Subject: CN=ED51E2D6346878BDD2ABC3C36B59DE28FD486610
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:01:0a:74:ea:0b:67:cb:cb:1b:3a:6d:e2:46:
                    10:7a:43:c0:0c:4b:b9:60:2f:7a:b9:f0:5e:dc:b1:
                    43:02:68:09:3c:72:01:b7:23:75:b0:a1:d8:50:a3:
                    c3:3f:08:6b:5b:2f:64:7c:45:61:1f:4a:78:83:0f:
                    af:59:b0:c1:cc:56:ec:39:62:8f:6f:22:e5:13:30:
                    77:73:4c:4f:c1:7b:16:f8:41:40:1d:cb:a0:8b:cc:
                    b0:ee:9e:88:81:bf:33:d5:df:4f:dc:5c:9d:4b:9c:
                    51:72:ce:b3:06:8d:c0:0f:c1:25:4c:2e:1c:b9:70:
                    4e:de:0f:f3:04:0a:ce:89:71:7e:fa:e5:23:16:51:
                    32:25:96:8d:23:36:b5:aa:ed:25:41:3b:e8:5f:5d:
                    12:d0:e7:bc:16:30:fe:4d:4f:d3:05:d3:ff:66:31:
                    34:8d:a1:b8:02:10:b9:db:72:74:fa:55:00:6b:ba:
                    1b:02:d3:32:2f:22:2f:4c:a5:27:6b:a1:5e:64:ca:
                    fe:89:11:51:fd:7b:b1:15:60:e2:30:0b:ff:66:92:
                    20:eb:32:bc:30:14:7b:a0:8e:20:0a:c6:c5:44:3c:
                    ef:e2:7d:6e:95:4d:c0:36:4d:bb:da:dc:22:79:f0:
                    c1:7f:61:7b:4c:11:92:2d:c3:b7:6e:e1:50:b7:10:
                    de:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:51:E2:D6:34:68:78:BD:D2:AB:C3:C3:6B:59:DE:28:FD:48:66:10
            X509v3 Authority Key Identifier:
                keyid:BE:77:66:3F:7F:35:91:A0:E6:4D:8D:5A:C9:8F:26:35:91:9B:4B:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/44b4fe93-7296-48b4-aa0d-c8a5a3dfd59a/0/BE77663F7F3591A0E64D8D5AC98F2635919B4B3B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE77663F7F3591A0E64D8D5AC98F2635919B4B3B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/44b4fe93-7296-48b4-aa0d-c8a5a3dfd59a/0/BE77663F7F3591A0E64D8D5AC98F2635919B4B3B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:c6:fe:6a:99:d3:8e:c1:ff:21:5d:a6:51:1e:e7:a2:f5:05:
         8f:56:eb:dd:d8:77:d2:37:c1:64:8f:96:e5:87:26:3c:e4:7f:
         f5:4a:a7:5b:75:81:8d:fe:fc:49:f5:f5:69:5a:45:07:7c:22:
         ee:a3:43:be:0b:7a:85:40:8d:a0:3b:44:a0:f3:92:23:75:ac:
         fc:a8:4c:7f:12:a5:65:a8:65:4e:5d:d0:32:78:e6:0e:d3:26:
         3c:b7:59:c9:6d:ab:26:e5:06:b7:cc:a2:29:6a:f4:03:0b:fe:
         74:62:65:64:b0:ea:0c:ca:4f:92:14:77:5e:53:25:24:96:07:
         5c:37:c3:89:1f:a1:10:7d:0c:25:db:d4:32:ed:a1:17:e9:0d:
         79:80:cf:e8:ae:57:7a:68:27:8d:90:a3:0e:f3:71:3c:5d:c7:
         47:b2:17:0e:a5:80:e5:f5:9c:0c:5f:1e:b7:58:ef:a4:5b:fb:
         33:9f:f7:60:33:c0:b9:a4:b2:59:9b:78:96:b5:75:17:66:29:
         de:9d:7e:01:7f:c2:ee:44:87:19:30:ee:8a:49:90:88:02:ef:
         4d:33:24:62:70:d2:ee:8e:a2:44:ae:d7:41:9a:0e:a0:01:a4:
         24:6f:5b:1c:d8:5e:42:31:18:6b:84:be:76:7c:65:5f:d8:f0:
         59:0e:da:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:03:26 2026 by rpki-client