This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.mft
File:                     B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.mft (raw, json)
Hash identifier:          15aCRbCQoIeBmirA6R1c86K14gnfjZZ9aCt7FJnOptM=
Subject key identifier:   F7:B8:F3:92:94:29:25:1B:F4:A5:57:D3:0E:00:31:C3:8D:EC:B6:43
Authority key identifier: B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA
Certificate issuer:       /CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA
Certificate serial:       6EFEFAFB63CC3C948407C1C1D7DF60FFF5E1329A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.mft
Manifest number:          073E
Signing time:             Sat 24 Jan 2026 19:00:04 +0000
Manifest this update:     Sat 24 Jan 2026 18:55:04 +0000
Manifest next update:     Wed 28 Jan 2026 06:07:04 +0000
Files and hashes:         1: B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.crl (hash: O+8zXTUEQLTGbZ5Lc5EWPw07PCE9gIYmD30Su1JRKOg=)
                          2: AS24203.roa (hash: C68gmTP9H6AGgXibFFHApE8cuP0Li5Pg7Pn1ljOTa6g=)
                          3: AS17885.roa (hash: RX8oo/DiJqJzJBqmubTqeGmmpOVT1csa63gvxFqyKec=)
                          4: AS139994.roa (hash: mQEJNXJ3XVh/s4Uqn72Xq0FcwJo74FkotAw0eOv4kCI=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.crl
                          rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Jan 2026 06:07:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:fe:fa:fb:63:cc:3c:94:84:07:c1:c1:d7:df:60:ff:f5:e1:32:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA
        Validity
            Not Before: Jan 24 18:55:04 2026 GMT
            Not After : Jan 28 06:07:04 2026 GMT
        Subject: CN=F7B8F3929429251BF4A557D30E0031C38DECB643
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:45:0c:03:a1:28:d6:a7:41:7f:eb:41:25:8b:
                    ab:4f:73:18:ae:19:26:f8:1d:7f:9f:36:c2:e9:60:
                    a9:3b:51:44:22:2b:86:cc:ec:d0:eb:7f:f5:3e:b2:
                    ae:ac:6c:42:a9:f4:8f:87:1b:bf:41:d1:aa:d1:f8:
                    ba:53:9b:cc:ec:ff:39:67:ff:34:9f:b7:74:d9:2a:
                    6a:92:8d:b9:fe:b4:c9:2a:cf:11:78:24:8c:c8:38:
                    80:d7:dd:50:ba:09:27:dc:27:ec:f5:d1:ae:c6:f7:
                    dd:41:de:7a:8c:b4:cb:f5:96:f5:cc:07:18:b1:7f:
                    c6:ea:53:95:17:2a:29:ab:c4:c8:ab:ea:9d:0c:71:
                    82:ca:8b:43:d1:83:c7:41:a0:ae:f1:08:60:c4:94:
                    9e:43:b7:55:62:67:b5:1e:0c:fb:c9:4b:07:d7:66:
                    9c:ea:00:6c:e1:4e:b9:05:5c:61:c3:63:50:24:84:
                    34:09:1d:d3:76:06:87:69:64:e8:3a:89:ad:0e:81:
                    33:62:ba:b0:66:63:bb:7b:de:a2:64:7f:36:76:ed:
                    c7:3f:3b:92:ae:66:f3:94:3c:fb:3e:a7:4a:51:98:
                    33:f9:fb:43:7e:b2:8e:21:c8:6b:f4:85:85:1d:33:
                    a2:48:df:86:71:04:40:2a:aa:cf:6e:81:9b:d8:c8:
                    b3:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:B8:F3:92:94:29:25:1B:F4:A5:57:D3:0E:00:31:C3:8D:EC:B6:43
            X509v3 Authority Key Identifier:
                keyid:B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:cb:03:99:d7:34:e2:d1:69:d0:9e:ec:d6:79:d8:0a:9f:16:
         19:81:ae:f3:66:98:b4:2d:ed:4a:4e:57:a8:c4:6e:a2:be:91:
         b0:08:ea:27:c9:0b:2c:c4:ee:2e:f0:96:47:ad:e1:fb:5b:d8:
         36:e0:9f:6f:cd:5a:7d:e7:43:1a:ad:f8:47:77:46:ce:22:17:
         69:d1:03:71:d7:2f:63:bb:8f:72:5a:ee:58:98:fa:84:94:64:
         1c:63:42:1c:ae:93:85:e2:07:4c:df:02:c3:a2:0b:c0:05:0e:
         30:cb:51:37:9c:56:51:a4:2a:00:af:f6:bd:25:f6:ea:87:7b:
         e2:bd:38:17:a8:01:bc:16:fb:00:3e:6d:c4:29:4f:ee:98:d6:
         17:83:0b:93:8e:94:90:e2:96:dc:87:38:2f:86:96:ea:dc:ba:
         ff:8a:ba:b3:a0:c5:a5:d7:03:74:61:f3:4e:12:44:66:2d:fc:
         2d:4c:aa:ee:35:0f:7b:98:14:e3:9d:32:a1:55:1e:1e:91:78:
         2f:35:aa:ad:f3:ba:e8:78:28:19:58:53:f3:da:9f:c6:65:e5:
         58:50:08:91:f1:46:81:15:4e:41:a0:82:e2:cc:db:2d:0c:25:
         f2:95:e5:b8:4f:9a:1c:84:78:3b:26:76:94:c5:7d:e6:00:27:
         7b:8e:5f:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:53:13 2026 by rpki-client