This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/b783762e-2b26-4374-ae64-0b6f0552211e/0/AE770A20B89B0B5C494310A5DC21DE5EE2417CDC.mft
File:                     AE770A20B89B0B5C494310A5DC21DE5EE2417CDC.mft (raw, json)
Hash identifier:          T/HiR9D8c35dOrizuj9gP0Lg1N6z2E0LF7Mvl6Stua4=
Subject key identifier:   26:2B:09:51:12:60:BA:0A:72:5C:AA:9E:24:CA:11:07:3D:BC:B3:41
Authority key identifier: AE:77:0A:20:B8:9B:0B:5C:49:43:10:A5:DC:21:DE:5E:E2:41:7C:DC
Certificate issuer:       /CN=AE770A20B89B0B5C494310A5DC21DE5EE2417CDC
Certificate serial:       182FB9B789280433085E28A0FD789734C9C96C82
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE770A20B89B0B5C494310A5DC21DE5EE2417CDC.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b783762e-2b26-4374-ae64-0b6f0552211e/0/AE770A20B89B0B5C494310A5DC21DE5EE2417CDC.mft
Manifest number:          28
Signing time:             Sun 25 Jan 2026 05:51:42 +0000
Manifest this update:     Sun 25 Jan 2026 05:46:42 +0000
Manifest next update:     Wed 28 Jan 2026 06:32:42 +0000
Files and hashes:         1: AE770A20B89B0B5C494310A5DC21DE5EE2417CDC.crl (hash: Ub4MC9v/lPTuVME44SzLKulmDyaH7ghtlOo2DUnMZF8=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/b783762e-2b26-4374-ae64-0b6f0552211e/0/AE770A20B89B0B5C494310A5DC21DE5EE2417CDC.crl
                          rsync://repo-rpki.idnic.net/repo/b783762e-2b26-4374-ae64-0b6f0552211e/0/AE770A20B89B0B5C494310A5DC21DE5EE2417CDC.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE770A20B89B0B5C494310A5DC21DE5EE2417CDC.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Jan 2026 06:32:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:2f:b9:b7:89:28:04:33:08:5e:28:a0:fd:78:97:34:c9:c9:6c:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE770A20B89B0B5C494310A5DC21DE5EE2417CDC
        Validity
            Not Before: Jan 25 05:46:42 2026 GMT
            Not After : Jan 28 06:32:42 2026 GMT
        Subject: CN=262B09511260BA0A725CAA9E24CA11073DBCB341
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:51:2d:c4:3d:8a:0b:88:c9:b3:5e:95:62:fd:
                    06:38:a2:44:f0:03:d6:97:0c:b3:6c:91:2b:3b:79:
                    76:f4:4b:80:ed:85:91:30:e7:b9:68:c7:9d:a1:e7:
                    25:aa:d0:94:b9:69:b6:f7:92:8e:20:84:4d:5d:44:
                    67:ef:a0:c0:14:b7:d9:2a:8b:7a:af:e5:cd:97:0a:
                    8a:c4:56:1d:68:53:db:0d:10:88:32:94:76:95:81:
                    ea:7d:ee:d2:c7:02:a7:56:58:3d:e1:d0:3b:b9:25:
                    16:cb:ff:a8:5a:98:db:8e:89:e2:85:7f:1a:30:3f:
                    44:30:ef:40:f4:4b:92:6d:81:68:b6:cc:c2:97:c9:
                    97:9c:65:7d:87:54:ac:ff:28:83:b8:ca:38:25:89:
                    5f:2f:72:68:7f:50:21:7f:3c:6c:b3:7a:4f:a6:6e:
                    62:e3:f6:46:b8:e6:3b:03:3a:d1:aa:a4:28:26:b5:
                    04:ab:d9:11:21:3d:7d:3e:5e:a5:01:d0:69:a4:f9:
                    a1:55:72:2f:24:1e:7a:00:d4:52:82:1c:6c:1c:16:
                    8a:86:cd:96:26:5f:5e:9d:79:9b:49:3a:c7:30:ae:
                    9f:fb:14:28:07:e0:db:18:7f:91:a7:8c:34:36:51:
                    2d:23:21:cd:12:81:b5:da:41:4c:82:7a:df:8b:12:
                    58:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:2B:09:51:12:60:BA:0A:72:5C:AA:9E:24:CA:11:07:3D:BC:B3:41
            X509v3 Authority Key Identifier:
                keyid:AE:77:0A:20:B8:9B:0B:5C:49:43:10:A5:DC:21:DE:5E:E2:41:7C:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b783762e-2b26-4374-ae64-0b6f0552211e/0/AE770A20B89B0B5C494310A5DC21DE5EE2417CDC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE770A20B89B0B5C494310A5DC21DE5EE2417CDC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b783762e-2b26-4374-ae64-0b6f0552211e/0/AE770A20B89B0B5C494310A5DC21DE5EE2417CDC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:08:b5:9b:a5:1f:9a:8a:91:71:82:ae:0b:73:f4:d9:28:8e:
         f7:06:91:67:d2:d7:f2:2d:09:b9:ac:20:d3:b5:c0:41:37:30:
         08:c9:16:c1:62:78:c7:aa:07:15:3e:26:ac:79:8e:54:31:d7:
         4f:c8:af:90:f2:2b:c7:e5:67:78:da:94:c2:f7:b0:e6:c2:97:
         53:d9:14:71:af:e6:01:da:bb:5b:39:07:c4:b7:40:2c:32:14:
         bf:52:a5:1f:51:62:e0:fe:1e:88:1f:44:aa:fe:73:c9:b0:d1:
         6a:82:62:0c:cf:4d:57:36:c8:5a:07:23:fe:84:9c:82:94:01:
         ef:01:10:27:7c:3a:ed:18:46:5c:6b:10:2b:d4:cf:f7:13:a8:
         15:ce:4c:c4:1b:74:a4:d1:54:9d:62:3e:ca:80:de:dc:a0:d8:
         df:a5:91:95:20:2b:74:16:64:7b:84:b0:d4:42:6b:37:87:61:
         54:bf:d2:be:b6:b9:13:87:74:c1:86:44:ab:43:02:be:13:e0:
         bd:c2:88:d2:e3:3c:43:9b:c6:aa:ac:d1:cd:d0:85:91:15:8b:
         44:6d:4d:2e:ba:df:2d:cf:9e:58:f4:9a:66:82:b5:d9:35:fd:
         c3:a0:b0:2f:b4:ae:7a:92:f7:fe:0e:ec:6f:76:92:17:4c:9e:
         f2:86:94:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:23:17 2026 by rpki-client