This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/d07cf202-f5ec-4101-8085-ceb86ea65b3e/0/4B6AF7335EC07FE746BC2A368302436EF6B1B9EB.mft
File:                     4B6AF7335EC07FE746BC2A368302436EF6B1B9EB.mft (raw, json)
Hash identifier:          Um/GYxlPyPHP0C0evkrW1gn97TKDTf9+eWuhJsR+CBE=
Subject key identifier:   AD:2B:96:A2:BA:AB:25:14:BF:99:17:7E:77:1F:7F:2C:CE:5C:8B:12
Authority key identifier: 4B:6A:F7:33:5E:C0:7F:E7:46:BC:2A:36:83:02:43:6E:F6:B1:B9:EB
Certificate issuer:       /CN=4B6AF7335EC07FE746BC2A368302436EF6B1B9EB
Certificate serial:       72D04CE40A64934F7D92E9500490222FFED970F2
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4B6AF7335EC07FE746BC2A368302436EF6B1B9EB.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d07cf202-f5ec-4101-8085-ceb86ea65b3e/0/4B6AF7335EC07FE746BC2A368302436EF6B1B9EB.mft
Manifest number:          04D2
Signing time:             Fri 23 Jan 2026 20:21:32 +0000
Manifest this update:     Fri 23 Jan 2026 20:16:32 +0000
Manifest next update:     Tue 27 Jan 2026 01:31:32 +0000
Files and hashes:         1: 4B6AF7335EC07FE746BC2A368302436EF6B1B9EB.crl (hash: 5PxKeP6FaoH4pn0E0Oa85lBVDGDn60negmRhLFqUFJU=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d07cf202-f5ec-4101-8085-ceb86ea65b3e/0/4B6AF7335EC07FE746BC2A368302436EF6B1B9EB.crl
                          rsync://repo-rpki.idnic.net/repo/d07cf202-f5ec-4101-8085-ceb86ea65b3e/0/4B6AF7335EC07FE746BC2A368302436EF6B1B9EB.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4B6AF7335EC07FE746BC2A368302436EF6B1B9EB.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Jan 2026 01:31:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:d0:4c:e4:0a:64:93:4f:7d:92:e9:50:04:90:22:2f:fe:d9:70:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B6AF7335EC07FE746BC2A368302436EF6B1B9EB
        Validity
            Not Before: Jan 23 20:16:32 2026 GMT
            Not After : Jan 27 01:31:32 2026 GMT
        Subject: CN=AD2B96A2BAAB2514BF99177E771F7F2CCE5C8B12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:97:8d:73:8a:10:eb:04:b3:67:fd:17:23:06:
                    9e:72:11:59:ad:00:44:4d:39:9f:f2:7b:15:98:89:
                    92:ab:2c:a1:b4:e3:88:1c:cf:0c:40:4e:10:d7:52:
                    35:d2:a7:b7:8b:f4:4d:3d:34:a6:5f:35:a0:28:f5:
                    5d:d9:c9:69:c8:6d:94:8e:8e:03:e4:fc:5d:c8:b8:
                    b6:a2:0f:76:1c:c7:b8:95:72:0c:ed:17:7e:85:bd:
                    57:bc:9f:54:cf:d2:76:f0:65:e6:42:a6:da:12:a1:
                    d6:d4:e5:1f:0f:86:6b:a4:bb:f1:3a:10:93:90:be:
                    4f:e1:e3:5f:de:bb:9d:78:55:4b:36:c1:b4:9e:60:
                    fe:cc:42:c9:52:9c:8a:7d:f6:be:e4:63:93:da:14:
                    fe:e2:b3:e1:f5:82:33:4b:ca:1c:9b:fe:94:02:55:
                    c1:63:c7:d0:a2:fd:41:6b:fd:fa:cb:40:17:e2:af:
                    1f:91:15:e6:29:bf:b1:b6:51:03:a9:8a:4d:09:80:
                    d5:a5:87:15:45:de:6b:b4:0a:b2:77:0e:cd:22:13:
                    6e:26:4c:85:a5:af:91:ce:b0:65:94:76:68:57:61:
                    de:19:3f:69:6f:b9:a0:50:83:58:6d:81:22:65:f8:
                    01:a1:6d:bb:c1:6d:b4:10:c6:e5:8e:99:0d:64:3b:
                    72:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:2B:96:A2:BA:AB:25:14:BF:99:17:7E:77:1F:7F:2C:CE:5C:8B:12
            X509v3 Authority Key Identifier:
                keyid:4B:6A:F7:33:5E:C0:7F:E7:46:BC:2A:36:83:02:43:6E:F6:B1:B9:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d07cf202-f5ec-4101-8085-ceb86ea65b3e/0/4B6AF7335EC07FE746BC2A368302436EF6B1B9EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4B6AF7335EC07FE746BC2A368302436EF6B1B9EB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d07cf202-f5ec-4101-8085-ceb86ea65b3e/0/4B6AF7335EC07FE746BC2A368302436EF6B1B9EB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:f0:15:bf:4c:7b:78:2d:23:58:36:fe:ba:25:ae:d2:e7:c1:
         15:ab:a7:93:44:f8:d4:10:16:65:f1:1f:76:44:60:b2:36:98:
         1f:b7:56:36:e0:66:60:17:07:8f:55:71:8d:2f:61:ea:a8:db:
         f4:ee:e9:14:8e:46:26:fd:30:56:b5:e6:7c:b1:92:a9:fe:11:
         75:a9:ae:89:a8:06:e6:92:e5:9e:76:f1:8f:82:a5:d0:6c:5c:
         eb:7d:53:15:69:9b:ac:24:8f:3d:5d:94:e3:97:48:c3:80:1a:
         82:bf:1d:1a:4e:02:20:c2:5d:b4:58:64:0f:e7:c9:38:d7:d2:
         60:82:e8:ec:8c:89:4d:ab:18:8d:05:5c:64:30:39:90:06:b0:
         61:bc:e7:0d:af:d8:81:da:00:c6:71:ce:57:a8:9c:9e:7b:07:
         75:a5:df:83:12:14:b1:c5:54:8a:26:97:38:98:65:03:ab:bd:
         84:4b:0b:e0:49:d0:01:dc:0c:2e:bb:12:ee:da:62:40:94:e9:
         fb:e7:1c:07:23:7d:96:2e:bc:92:48:7b:dd:6b:40:54:c2:3a:
         77:28:12:7d:ea:e9:03:8a:af:16:51:d0:48:ef:38:5d:a8:e4:
         0a:15:04:b6:09:4a:90:3e:57:e7:78:36:9f:08:fe:63:f2:c5:
         5e:1a:06:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:55:10 2026 by rpki-client