This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/85dd4f16-570e-4c8c-a992-db89ea3bad36/0/B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582.mft
File:                     B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582.mft (raw, json)
Hash identifier:          vSDwB5OTzFok9vq94+sekvMBKkAZ0wg3O6slyvdSpHU=
Subject key identifier:   64:78:98:2D:E2:A2:38:21:3A:C0:C5:E0:F1:29:9E:F6:15:84:6B:7F
Authority key identifier: B2:07:7B:9B:AF:0B:F3:E5:FC:B8:45:13:B1:D7:44:5E:30:CE:65:82
Certificate issuer:       /CN=B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582
Certificate serial:       4CA9F3996668CFABDCFB156963D3B39A906523CA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/85dd4f16-570e-4c8c-a992-db89ea3bad36/0/B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582.mft
Manifest number:          04BA
Signing time:             Sun 25 Jan 2026 00:02:13 +0000
Manifest this update:     Sat 24 Jan 2026 23:57:13 +0000
Manifest next update:     Wed 28 Jan 2026 03:06:13 +0000
Files and hashes:         1: B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582.crl (hash: N26T5eSZSRV2/66I6rEa/OjQiaLsw0d79aBaxytfhfU=)
                          2: 3130332e3135372e362e302f32342d3234203d3e20313431313036.roa (hash: 2XQOc628Et0oqO8CO0VRKDq3/7F6VNJ+Q07NK/QPZuc=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/85dd4f16-570e-4c8c-a992-db89ea3bad36/0/B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582.crl
                          rsync://repo-rpki.idnic.net/repo/85dd4f16-570e-4c8c-a992-db89ea3bad36/0/B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Jan 2026 03:06:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:a9:f3:99:66:68:cf:ab:dc:fb:15:69:63:d3:b3:9a:90:65:23:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582
        Validity
            Not Before: Jan 24 23:57:13 2026 GMT
            Not After : Jan 28 03:06:13 2026 GMT
        Subject: CN=6478982DE2A238213AC0C5E0F1299EF615846B7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:49:7a:1c:8f:01:b0:aa:0f:9d:78:d0:5e:62:
                    f4:bc:81:cf:ee:0e:0f:cb:9b:7d:3e:d7:09:b9:a5:
                    49:10:95:5d:39:14:da:5c:60:50:f3:fb:f3:b2:31:
                    6b:a8:70:83:bf:d5:74:c7:9a:c6:ad:15:61:84:61:
                    a3:ce:be:60:ea:49:1b:83:29:54:a1:ba:b3:8e:ee:
                    c4:55:9b:a7:b0:50:08:1c:b8:4e:a4:77:5f:69:74:
                    cb:ee:17:c7:b6:68:70:92:c5:92:67:ef:0c:a3:43:
                    3f:5d:d7:6b:0a:92:3e:c0:7c:b5:72:20:84:0e:f6:
                    ef:e7:83:d7:af:7a:70:a1:d4:12:46:c0:6f:96:59:
                    15:04:d0:84:70:4c:3f:36:3a:3b:77:e6:11:d7:46:
                    ea:f9:6e:8a:c4:c1:e9:04:03:99:e0:dd:3c:dc:01:
                    34:78:74:f2:65:f0:21:e8:c9:8e:f8:12:c2:f3:1f:
                    81:09:e4:9d:04:a3:76:d4:f3:bd:63:63:4a:26:f0:
                    2a:f9:21:48:c2:7b:eb:fc:1f:57:1b:54:e3:3f:e8:
                    bf:03:8b:f2:bc:0a:b0:03:38:0f:ad:05:de:be:64:
                    c2:92:d0:87:91:47:f5:bf:65:65:3a:3d:a4:23:6d:
                    f1:2b:ef:56:b2:57:69:a4:38:79:f0:e2:28:16:51:
                    67:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:78:98:2D:E2:A2:38:21:3A:C0:C5:E0:F1:29:9E:F6:15:84:6B:7F
            X509v3 Authority Key Identifier:
                keyid:B2:07:7B:9B:AF:0B:F3:E5:FC:B8:45:13:B1:D7:44:5E:30:CE:65:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/85dd4f16-570e-4c8c-a992-db89ea3bad36/0/B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/85dd4f16-570e-4c8c-a992-db89ea3bad36/0/B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:31:54:75:a5:d4:bd:74:8f:2e:21:ef:aa:a9:aa:fb:52:2e:
         bb:21:68:d9:0d:00:b3:96:ec:8b:32:b0:97:b1:d0:13:05:27:
         2f:1e:9d:89:69:19:a3:2b:48:e3:bd:e7:f3:20:9a:eb:f0:ad:
         63:7e:e3:1c:d2:ac:33:23:54:d3:f7:a9:8c:40:82:35:b6:65:
         f0:8a:34:a7:07:70:65:ad:a6:06:e7:19:0d:58:66:b4:f4:f4:
         71:f7:c9:e1:79:38:07:15:3b:e2:dc:60:1b:e1:30:d5:fe:c7:
         03:1c:17:50:73:96:38:66:40:ab:83:6d:20:de:8e:f8:1f:cd:
         4f:1d:72:6c:c5:c9:2f:e5:a6:80:26:0a:7d:56:36:21:c2:70:
         d8:b1:f3:ec:c5:6e:ab:c4:e8:21:82:26:03:17:6b:67:68:5d:
         6a:9b:4e:38:f2:11:c1:aa:67:95:60:6f:02:c4:83:19:d4:10:
         04:bf:d6:9c:6d:98:e9:e2:ba:cf:4a:19:bb:26:2a:79:ef:91:
         c3:81:b5:fa:86:03:22:99:27:aa:41:5e:a9:d9:3a:69:ea:1e:
         fd:b7:d6:fa:41:bb:a0:01:4a:65:c8:8b:10:c0:6d:89:25:67:
         86:34:b3:56:5a:08:72:04:3f:9c:8b:3a:56:7d:ed:bf:67:46:
         71:9e:0f:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:44:42 2026 by rpki-client