This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/6be7de9f-bfd2-485c-8ba2-924eed52a305/0/6E8749982F80EA7EAC3A4C80016FACEC049A89FB.mft
File:                     6E8749982F80EA7EAC3A4C80016FACEC049A89FB.mft (raw, json)
Hash identifier:          8QL3hG+mDlkwpjd1e3FQx1e6oCXRmJlRG0wAiJkIgQ8=
Subject key identifier:   40:5E:64:3D:84:FD:6B:7C:BA:E0:9C:66:5D:F9:C8:6C:C1:2F:1B:08
Authority key identifier: 6E:87:49:98:2F:80:EA:7E:AC:3A:4C:80:01:6F:AC:EC:04:9A:89:FB
Certificate issuer:       /CN=6E8749982F80EA7EAC3A4C80016FACEC049A89FB
Certificate serial:       333BFD4404E3033E2014BE6E6D6B467637C7BE59
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6E8749982F80EA7EAC3A4C80016FACEC049A89FB.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6be7de9f-bfd2-485c-8ba2-924eed52a305/0/6E8749982F80EA7EAC3A4C80016FACEC049A89FB.mft
Manifest number:          01C9
Signing time:             Sat 24 Jan 2026 10:01:39 +0000
Manifest this update:     Sat 24 Jan 2026 09:56:39 +0000
Manifest next update:     Tue 27 Jan 2026 10:05:39 +0000
Files and hashes:         1: 6E8749982F80EA7EAC3A4C80016FACEC049A89FB.crl (hash: qg/E5JCp3Cnhue1Jx/40a0xoJ6YmUgmq2tRQ3+Ku+Pk=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/6be7de9f-bfd2-485c-8ba2-924eed52a305/0/6E8749982F80EA7EAC3A4C80016FACEC049A89FB.crl
                          rsync://repo-rpki.idnic.net/repo/6be7de9f-bfd2-485c-8ba2-924eed52a305/0/6E8749982F80EA7EAC3A4C80016FACEC049A89FB.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6E8749982F80EA7EAC3A4C80016FACEC049A89FB.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Jan 2026 10:05:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:3b:fd:44:04:e3:03:3e:20:14:be:6e:6d:6b:46:76:37:c7:be:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6E8749982F80EA7EAC3A4C80016FACEC049A89FB
        Validity
            Not Before: Jan 24 09:56:39 2026 GMT
            Not After : Jan 27 10:05:39 2026 GMT
        Subject: CN=405E643D84FD6B7CBAE09C665DF9C86CC12F1B08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:10:95:c1:ba:9e:aa:01:db:c5:ca:e4:0f:cd:
                    a1:a8:5f:9c:93:2b:f3:a1:c5:96:09:74:8f:4c:ac:
                    89:d1:98:11:08:0f:d4:18:0f:30:1e:91:4b:7c:25:
                    4f:93:51:35:75:43:0b:c0:7e:86:17:a5:0c:f7:c6:
                    9d:e1:07:41:62:33:95:29:4c:55:09:17:1e:5b:75:
                    0f:f2:8e:82:a1:38:f8:46:b9:01:27:f1:ea:19:f6:
                    8a:fa:6b:30:e6:45:59:7d:dd:9b:43:39:50:2c:c1:
                    30:38:4d:a5:c5:cc:73:ae:38:76:fc:3c:60:b7:99:
                    22:e7:9f:10:75:84:85:d7:d3:d5:31:b6:2b:be:88:
                    0a:c4:0e:83:de:19:39:08:ae:a4:10:b4:61:e1:11:
                    be:cc:f4:81:7d:32:44:38:aa:0b:d9:2c:72:d9:d6:
                    79:43:d4:74:d3:91:96:91:ae:6f:65:91:0b:69:71:
                    99:7c:3d:6a:d0:bc:2f:9a:5b:fa:64:23:5f:cb:d9:
                    b8:6f:d4:21:cf:08:a5:ff:cb:7e:20:10:b1:b0:4e:
                    ef:f9:fd:8f:eb:9c:65:07:a7:58:40:ad:83:97:38:
                    2c:f5:30:aa:35:89:b1:1c:a5:ff:14:20:6a:bc:37:
                    fc:ee:02:6f:3e:be:b3:bc:c8:2b:e8:41:ae:c2:e4:
                    42:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:5E:64:3D:84:FD:6B:7C:BA:E0:9C:66:5D:F9:C8:6C:C1:2F:1B:08
            X509v3 Authority Key Identifier:
                keyid:6E:87:49:98:2F:80:EA:7E:AC:3A:4C:80:01:6F:AC:EC:04:9A:89:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6be7de9f-bfd2-485c-8ba2-924eed52a305/0/6E8749982F80EA7EAC3A4C80016FACEC049A89FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6E8749982F80EA7EAC3A4C80016FACEC049A89FB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6be7de9f-bfd2-485c-8ba2-924eed52a305/0/6E8749982F80EA7EAC3A4C80016FACEC049A89FB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:82:ec:5d:b9:ef:15:49:3d:7a:a5:ed:2b:cc:5f:4d:71:e8:
         b1:00:7d:80:bf:2f:eb:92:90:73:8f:24:e3:3c:64:20:e7:af:
         d6:88:ab:cc:5b:e8:4f:8a:11:2d:15:06:23:f9:d1:3c:be:4d:
         a4:b5:f1:f3:58:d1:b3:b8:ab:48:72:fb:56:81:42:59:40:12:
         c2:7a:7c:47:f8:41:c0:3f:b1:48:2d:17:e3:85:93:5b:ae:4e:
         31:6a:a6:81:96:7a:7a:a3:27:59:dd:28:d6:c1:b4:95:64:bc:
         6c:7e:65:e9:7e:da:7d:d5:55:62:37:b5:de:16:8e:b5:8c:70:
         37:99:95:9d:92:ca:d8:92:58:8c:60:42:8c:09:d2:17:83:41:
         b7:d8:d5:c0:34:f7:69:84:14:dc:19:19:5b:a5:ef:b5:2b:87:
         95:78:f4:1f:73:a6:19:67:e3:f2:d6:4a:7a:b8:64:24:fb:53:
         93:2f:7c:51:0a:ae:c1:78:18:45:5a:d7:da:a7:40:06:81:76:
         3f:b6:af:c8:34:d3:97:ad:86:4e:c5:2c:bb:bf:d1:b7:0e:4b:
         38:9c:d3:b6:5e:b0:b2:90:a1:1a:66:36:f9:9c:89:7a:31:b1:
         4e:b9:b6:0c:c2:67:a5:6a:04:d9:e5:59:c7:8f:d8:67:de:01:
         8b:b8:54:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:58:41 2026 by rpki-client