This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/1/6A3996AFE1138238530C2FC92B2AB675FCD218C8.mft
File:                     6A3996AFE1138238530C2FC92B2AB675FCD218C8.mft (raw, json)
Hash identifier:          puKFe0EpEdrKBj5p3ekWMSg/JSxVzlCAmFAGB4VhqmE=
Subject key identifier:   B1:C6:86:FD:6A:1E:33:52:CF:07:DA:97:8C:2E:9D:24:D2:6C:03:DD
Authority key identifier: 6A:39:96:AF:E1:13:82:38:53:0C:2F:C9:2B:2A:B6:75:FC:D2:18:C8
Certificate issuer:       /CN=6A3996AFE1138238530C2FC92B2AB675FCD218C8
Certificate serial:       1E02DFA531778D40619861AEDB2D41613C09CF75
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A3996AFE1138238530C2FC92B2AB675FCD218C8.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/1/6A3996AFE1138238530C2FC92B2AB675FCD218C8.mft
Manifest number:          CC
Signing time:             Sun 25 Jan 2026 13:41:30 +0000
Manifest this update:     Sun 25 Jan 2026 13:36:30 +0000
Manifest next update:     Wed 28 Jan 2026 18:59:30 +0000
Files and hashes:         1: 6A3996AFE1138238530C2FC92B2AB675FCD218C8.crl (hash: 7T68z/P5iqbF5k36uOmpDebMV3nEfscHTZZOtyT9vgg=)
                          2: 323030313a6466343a353663303a3a2f34382d3438203d3e20313533313231.roa (hash: EZ7jR9+lQhRaaJFDwK6y0EbEgy21NUoqJfk8uRlaKvI=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/1/6A3996AFE1138238530C2FC92B2AB675FCD218C8.crl
                          rsync://repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/1/6A3996AFE1138238530C2FC92B2AB675FCD218C8.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A3996AFE1138238530C2FC92B2AB675FCD218C8.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Jan 2026 14:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:02:df:a5:31:77:8d:40:61:98:61:ae:db:2d:41:61:3c:09:cf:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A3996AFE1138238530C2FC92B2AB675FCD218C8
        Validity
            Not Before: Jan 25 13:36:30 2026 GMT
            Not After : Jan 28 18:59:30 2026 GMT
        Subject: CN=B1C686FD6A1E3352CF07DA978C2E9D24D26C03DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:58:6d:ac:82:6b:29:bf:d0:56:c4:9b:d9:f3:
                    72:e5:a8:36:30:f5:60:80:7a:e3:40:6e:66:c7:b9:
                    a0:d4:10:28:c1:4e:57:82:ce:88:d7:56:94:b2:ba:
                    26:ff:18:0e:d6:fa:47:09:51:f2:96:e6:e7:67:53:
                    a8:fe:16:47:2d:39:ca:4a:23:28:09:bf:b6:dd:1d:
                    4e:f8:8d:69:bc:f7:4f:20:42:04:18:a6:68:f1:20:
                    d2:a1:33:23:d5:0c:0c:33:f5:00:ad:cf:72:4f:ad:
                    dc:1b:02:27:68:22:cb:f9:1e:1e:17:ff:64:86:49:
                    f5:d4:a3:01:a5:b7:fd:56:80:36:7a:0c:db:d5:9d:
                    e4:a7:14:af:51:91:1d:c7:2a:7e:e1:d6:b6:60:f6:
                    76:93:63:2e:9a:5f:77:26:7f:c4:a3:4f:07:86:bf:
                    94:d7:0a:3b:61:c4:84:9f:e2:7f:d0:09:4e:10:89:
                    bc:5c:d5:40:d7:f4:5c:4c:01:92:ac:e4:4c:3d:1f:
                    ae:12:99:4a:29:8a:05:e7:76:ce:f9:2e:84:ac:83:
                    da:ce:f4:f7:b4:f3:2b:90:3f:ff:59:02:b1:43:d4:
                    14:c2:e2:60:fc:dc:d9:1b:db:ec:0b:0b:ab:6a:54:
                    cf:e0:7a:2f:9a:d0:f5:81:2c:1b:04:f1:55:f2:25:
                    ee:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:C6:86:FD:6A:1E:33:52:CF:07:DA:97:8C:2E:9D:24:D2:6C:03:DD
            X509v3 Authority Key Identifier:
                keyid:6A:39:96:AF:E1:13:82:38:53:0C:2F:C9:2B:2A:B6:75:FC:D2:18:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/1/6A3996AFE1138238530C2FC92B2AB675FCD218C8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A3996AFE1138238530C2FC92B2AB675FCD218C8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/1/6A3996AFE1138238530C2FC92B2AB675FCD218C8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:89:07:e0:be:ab:a2:e2:98:ab:40:70:21:71:ec:e9:4c:88:
         52:97:e3:82:6c:4e:6e:a5:57:fb:82:07:cf:1b:50:17:40:b9:
         84:d1:5e:ad:42:82:59:97:79:aa:c3:8b:4e:c5:ae:c0:15:55:
         6f:8d:ee:a9:bb:86:89:de:a2:00:99:db:4c:1c:9d:69:f9:2d:
         10:5b:33:9f:76:58:91:7a:e0:42:99:8f:2d:e8:e8:bb:e3:38:
         b9:15:07:8c:5e:d3:2b:39:0c:2a:94:94:9f:54:fe:d4:89:4d:
         a3:33:60:3d:2c:ae:c8:02:94:a5:1f:d7:e8:96:49:1d:d1:0e:
         a7:90:84:d3:78:a4:d9:5e:8b:d4:cc:94:71:2a:5e:e2:96:5f:
         af:cb:98:6e:7c:fd:b8:16:6a:03:98:b0:6c:57:3d:f3:b2:10:
         ca:bd:9f:5b:fa:cb:33:f5:06:c6:38:a1:7e:4a:fa:d8:0c:77:
         6c:3e:95:ae:26:1c:b4:5b:8f:8d:0a:3f:5e:42:ca:6d:15:b4:
         bf:64:0b:40:7a:44:b2:61:1b:44:3f:2b:cd:79:22:cc:58:c1:
         86:91:52:02:1a:b3:72:0d:95:48:8f:ca:c9:71:6d:d4:41:b2:
         63:5f:50:92:4c:e3:4f:2d:69:27:b5:b1:96:7e:fa:1a:2a:fa:
         1a:7d:19:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:52:34 2026 by rpki-client