This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/864c3155-c8ff-4207-a2dc-51e005530b52/0/B94F48BCAB6D8B0A28B3955504975C159FAC076A.mft
File:                     B94F48BCAB6D8B0A28B3955504975C159FAC076A.mft (raw, json)
Hash identifier:          SoswOap3UamPwtamXsOnRr3TJo9hwXSfW25kxyrP20Y=
Subject key identifier:   94:EE:EB:EC:06:90:58:02:53:A6:3B:FB:2C:43:BB:95:8E:95:26:E8
Authority key identifier: B9:4F:48:BC:AB:6D:8B:0A:28:B3:95:55:04:97:5C:15:9F:AC:07:6A
Certificate issuer:       /CN=B94F48BCAB6D8B0A28B3955504975C159FAC076A
Certificate serial:       7DA5DF6E1FF43C2ADFB8210AEB71F311F12A1A5B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B94F48BCAB6D8B0A28B3955504975C159FAC076A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/864c3155-c8ff-4207-a2dc-51e005530b52/0/B94F48BCAB6D8B0A28B3955504975C159FAC076A.mft
Manifest number:          0541
Signing time:             Sat 24 Jan 2026 10:31:19 +0000
Manifest this update:     Sat 24 Jan 2026 10:26:19 +0000
Manifest next update:     Tue 27 Jan 2026 21:57:19 +0000
Files and hashes:         1: 3130332e3131392e3133392e302f32342d3234203d3e20313337333831.roa (hash: NXiX7VHYL2V/PG5eFGBukXkPCYGw4lMLoRT1ir2CDOE=)
                          2: B94F48BCAB6D8B0A28B3955504975C159FAC076A.crl (hash: prHiIFyOoXLYTaqvT4HVLawmeUsV154Q4KUqs/XLvm0=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/864c3155-c8ff-4207-a2dc-51e005530b52/0/B94F48BCAB6D8B0A28B3955504975C159FAC076A.crl
                          rsync://repo-rpki.idnic.net/repo/864c3155-c8ff-4207-a2dc-51e005530b52/0/B94F48BCAB6D8B0A28B3955504975C159FAC076A.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B94F48BCAB6D8B0A28B3955504975C159FAC076A.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Jan 2026 21:57:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:a5:df:6e:1f:f4:3c:2a:df:b8:21:0a:eb:71:f3:11:f1:2a:1a:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B94F48BCAB6D8B0A28B3955504975C159FAC076A
        Validity
            Not Before: Jan 24 10:26:19 2026 GMT
            Not After : Jan 27 21:57:19 2026 GMT
        Subject: CN=94EEEBEC0690580253A63BFB2C43BB958E9526E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:85:88:61:ce:98:53:ed:2a:3e:da:ff:79:dd:
                    d9:0d:a0:32:48:e0:cc:ad:c8:57:dc:ab:f6:75:59:
                    46:40:ba:fb:b6:0c:cb:6e:50:b6:07:7a:57:eb:43:
                    7a:66:b4:1f:91:bf:73:3a:50:b0:c0:44:c7:92:5f:
                    9b:49:73:27:8b:63:f2:30:ba:a1:34:4d:c0:9b:6e:
                    ec:69:25:88:5b:3c:b9:0b:cd:09:ca:41:b2:cc:61:
                    fd:ab:0f:08:07:ee:6f:91:b4:66:d7:f9:de:c2:16:
                    ea:2f:9a:14:e6:6a:6e:ab:3c:68:36:c8:67:83:7f:
                    ab:74:49:89:80:54:d9:46:7b:e5:e2:3e:bb:16:e8:
                    ae:04:2d:94:a8:fe:c3:82:b4:e5:65:09:36:f7:ed:
                    41:9b:af:5d:ac:2f:86:fb:c3:a2:87:a4:71:a6:7d:
                    6a:50:0a:90:23:f1:3b:ef:70:61:32:b2:e1:b0:a2:
                    bf:b2:bc:0e:2b:75:71:38:23:c0:ba:c9:4b:86:17:
                    e6:51:47:28:fa:3a:e7:ea:cd:d4:51:44:60:cf:bc:
                    a5:78:af:3b:33:cf:85:e4:89:f3:ca:72:6a:fc:35:
                    82:37:ec:b3:97:c0:27:60:39:73:d0:df:bc:d6:d6:
                    d0:22:00:84:2e:b9:f0:16:e9:96:d5:58:d7:29:03:
                    79:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:EE:EB:EC:06:90:58:02:53:A6:3B:FB:2C:43:BB:95:8E:95:26:E8
            X509v3 Authority Key Identifier:
                keyid:B9:4F:48:BC:AB:6D:8B:0A:28:B3:95:55:04:97:5C:15:9F:AC:07:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/864c3155-c8ff-4207-a2dc-51e005530b52/0/B94F48BCAB6D8B0A28B3955504975C159FAC076A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B94F48BCAB6D8B0A28B3955504975C159FAC076A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/864c3155-c8ff-4207-a2dc-51e005530b52/0/B94F48BCAB6D8B0A28B3955504975C159FAC076A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:d2:95:f4:50:45:78:c2:17:22:3a:99:4a:d7:69:38:86:9d:
         60:1a:31:00:25:9f:73:f2:1f:91:20:43:78:e0:9f:bb:9e:7d:
         93:34:fa:3c:28:e1:0f:47:9b:a2:9f:a0:25:4a:33:10:e0:34:
         82:b2:8f:3e:a2:0c:8d:17:52:b0:7c:84:39:13:fe:8e:1f:dc:
         e2:e8:00:62:d1:b3:03:42:97:11:ab:17:b0:e5:7c:6e:d2:ef:
         95:8f:4d:25:c2:4a:2a:ad:10:ba:50:4c:54:23:6c:93:64:ef:
         94:2e:40:7c:b9:7d:89:fa:18:bc:3e:ba:f7:25:04:80:ff:2e:
         d5:a3:ee:98:6e:28:57:dc:a9:6e:c9:d3:9a:9d:9c:2d:3d:cb:
         a8:fd:c3:cc:ea:fa:3f:53:79:67:f5:3a:27:52:33:84:3a:0f:
         3d:d9:3a:73:9c:59:8a:da:60:84:84:68:d8:2f:d1:ea:d9:0b:
         e6:92:30:32:5f:15:5b:8b:d6:c1:96:12:24:21:e0:18:36:3c:
         f3:86:b7:96:bb:9b:c8:42:a3:47:fc:29:27:f7:9a:2c:0e:8a:
         76:47:86:fd:21:97:b2:ae:1c:2d:85:29:98:b7:5c:e2:d0:ff:
         15:d4:23:4b:b2:4f:b6:97:16:12:9e:b1:09:5f:a3:90:eb:8c:
         1b:b2:8f:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:48:13 2026 by rpki-client