This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/ca631d77-f805-439c-98f4-b0da60fe8dd1/0/B3032084B1211BBB522E01AB56EC94BFBD1C91BB.mft
File:                     B3032084B1211BBB522E01AB56EC94BFBD1C91BB.mft (raw, json)
Hash identifier:          jskspWhgLWUeTRmfgoOekBc4ocAqRA3KvCWbh+lXl80=
Subject key identifier:   A8:B7:E1:E5:51:35:59:35:38:1A:F0:3F:A2:15:CF:22:9F:E6:47:AC
Authority key identifier: B3:03:20:84:B1:21:1B:BB:52:2E:01:AB:56:EC:94:BF:BD:1C:91:BB
Certificate issuer:       /CN=B3032084B1211BBB522E01AB56EC94BFBD1C91BB
Certificate serial:       09F90AE13A88E7A1A4BEBCDE9C05DF9B8C4AB1AA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3032084B1211BBB522E01AB56EC94BFBD1C91BB.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ca631d77-f805-439c-98f4-b0da60fe8dd1/0/B3032084B1211BBB522E01AB56EC94BFBD1C91BB.mft
Manifest number:          0264
Signing time:             Sat 24 Jan 2026 06:32:16 +0000
Manifest this update:     Sat 24 Jan 2026 06:27:16 +0000
Manifest next update:     Tue 27 Jan 2026 16:25:16 +0000
Files and hashes:         1: B3032084B1211BBB522E01AB56EC94BFBD1C91BB.crl (hash: hr8TtdHpRcsTHQ042LxyoZZ8kvJnUXgrn/+hSwX2tpk=)
                          2: 3130332e31302e3137302e302f32342d3234203d3e203536323535.roa (hash: Pg2iO6bQNogm2CNZTMQHaR8j/iayRorOo/9bDyh9hZU=)
                          3: 3130332e31302e3137312e302f32342d3234203d3e203536323535.roa (hash: qVOs5fg6/pJ4qMK43Sua93AGLLp0Y1L5pAbuR4z7+e8=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ca631d77-f805-439c-98f4-b0da60fe8dd1/0/B3032084B1211BBB522E01AB56EC94BFBD1C91BB.crl
                          rsync://repo-rpki.idnic.net/repo/ca631d77-f805-439c-98f4-b0da60fe8dd1/0/B3032084B1211BBB522E01AB56EC94BFBD1C91BB.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3032084B1211BBB522E01AB56EC94BFBD1C91BB.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Jan 2026 16:25:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:f9:0a:e1:3a:88:e7:a1:a4:be:bc:de:9c:05:df:9b:8c:4a:b1:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3032084B1211BBB522E01AB56EC94BFBD1C91BB
        Validity
            Not Before: Jan 24 06:27:16 2026 GMT
            Not After : Jan 27 16:25:16 2026 GMT
        Subject: CN=A8B7E1E551355935381AF03FA215CF229FE647AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:34:95:d7:79:f3:74:25:5f:ff:7c:ff:ab:47:
                    bd:77:2d:e8:07:74:f8:00:40:62:12:2f:d8:db:de:
                    c8:68:99:f6:9e:9e:67:55:86:a3:f5:aa:8e:69:75:
                    b0:ac:42:62:b2:d5:b1:28:7f:fa:d6:1d:66:f1:99:
                    7d:1d:c4:3f:1e:50:2b:fa:38:6d:3e:ee:15:07:d1:
                    f9:db:64:b0:0c:53:be:11:51:16:64:38:8f:f0:04:
                    69:e4:4f:cd:0a:6e:97:5d:0f:17:8b:e4:83:dc:70:
                    3b:da:c8:65:0b:22:ea:6f:9e:6b:9b:40:8a:06:93:
                    72:94:66:80:4b:b4:5a:80:b6:fe:90:48:4d:90:58:
                    de:b7:e7:8a:33:7e:54:cc:bf:8d:e3:8b:34:c4:20:
                    22:0d:ec:83:82:13:2d:a9:4a:ce:c9:06:a3:37:ca:
                    52:f6:dd:d8:9d:f8:63:a8:61:d3:ae:f8:c5:18:be:
                    54:ec:5f:4f:0d:ca:26:fc:4c:d0:c0:2b:34:02:d1:
                    01:71:96:10:11:ec:f2:f7:72:18:d8:00:81:2e:e7:
                    b9:9b:ac:ac:be:cc:b2:af:5b:1e:2e:d0:85:37:3c:
                    6f:29:c5:38:52:7f:3a:60:56:01:0b:20:33:fa:2c:
                    c9:22:04:16:29:88:70:68:0c:79:11:2f:6a:77:ee:
                    88:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:B7:E1:E5:51:35:59:35:38:1A:F0:3F:A2:15:CF:22:9F:E6:47:AC
            X509v3 Authority Key Identifier:
                keyid:B3:03:20:84:B1:21:1B:BB:52:2E:01:AB:56:EC:94:BF:BD:1C:91:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ca631d77-f805-439c-98f4-b0da60fe8dd1/0/B3032084B1211BBB522E01AB56EC94BFBD1C91BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3032084B1211BBB522E01AB56EC94BFBD1C91BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ca631d77-f805-439c-98f4-b0da60fe8dd1/0/B3032084B1211BBB522E01AB56EC94BFBD1C91BB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:9e:8b:35:16:9d:f0:33:8f:08:dc:75:e1:a4:d4:4f:58:ec:
         5c:c7:cc:79:c1:c0:92:5b:6d:08:18:d2:c7:36:63:5b:f0:3e:
         fb:40:b8:23:65:75:f7:6a:93:94:65:13:20:91:64:b6:4b:28:
         47:c4:b0:de:33:6f:52:4e:f4:3b:5e:cf:87:57:ff:a4:8a:b9:
         64:c8:c2:f6:ab:91:56:71:fa:60:08:02:99:40:dc:5f:74:58:
         ad:b7:a4:7a:4b:45:ef:ed:cd:41:76:28:5c:fd:cd:e4:a2:ed:
         7c:a4:2e:0f:a4:98:8e:d6:c1:57:cc:0a:2f:d6:32:10:19:89:
         a5:d2:31:aa:b2:34:4b:85:72:ad:b0:c2:a2:80:f5:4a:83:f1:
         b9:a0:59:9f:a0:de:78:69:28:94:0d:c1:53:78:1a:53:9a:e3:
         d9:dd:d6:11:ea:b8:cf:13:48:66:0b:eb:ee:36:27:52:a8:1d:
         c5:01:0f:69:a6:ac:1c:4d:90:c7:6b:a3:cb:3c:42:3e:26:ef:
         83:25:c9:31:14:7a:68:2d:6d:5b:aa:c8:18:18:4e:d6:f5:3f:
         d5:30:45:4c:ed:b1:5b:ff:e9:0e:9d:3b:46:64:ac:b6:4f:96:
         5c:27:02:a8:be:97:e6:15:18:e3:ae:aa:6c:1e:01:8e:5f:eb:
         4f:7e:a9:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:23:46 2026 by rpki-client