This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/db016085-2f94-40ff-80ce-ce23d39e65a1/0/B5A68ADE81322F194320BE4302C6897D29D13BDD.mft
File:                     B5A68ADE81322F194320BE4302C6897D29D13BDD.mft (raw, json)
Hash identifier:          mqu5jBoIbEmb2fiPNnkvRfe4rAXEupiaYdo1Edz4q40=
Subject key identifier:   94:2C:47:E2:C1:3F:CC:92:5A:96:1A:88:4A:4B:7D:DF:8F:8B:85:3F
Authority key identifier: B5:A6:8A:DE:81:32:2F:19:43:20:BE:43:02:C6:89:7D:29:D1:3B:DD
Certificate issuer:       /CN=B5A68ADE81322F194320BE4302C6897D29D13BDD
Certificate serial:       7FFECE0638436AF3258F91DBEC71D3A6431F9446
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5A68ADE81322F194320BE4302C6897D29D13BDD.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/db016085-2f94-40ff-80ce-ce23d39e65a1/0/B5A68ADE81322F194320BE4302C6897D29D13BDD.mft
Manifest number:          EE
Signing time:             Sat 24 Jan 2026 07:51:27 +0000
Manifest this update:     Sat 24 Jan 2026 07:46:27 +0000
Manifest next update:     Tue 27 Jan 2026 14:57:27 +0000
Files and hashes:         1: B5A68ADE81322F194320BE4302C6897D29D13BDD.crl (hash: ydyGey3ysbkREvETms3GpMxSFzOJebLyIclvoNT/Y80=)
                          2: 3130332e33382e3130362e302f32332d3234203d3e20313532303039.roa (hash: 5ddjKzEo7R2HXRPV5KVablgruigb2N4v7X9sDbCb8p8=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/db016085-2f94-40ff-80ce-ce23d39e65a1/0/B5A68ADE81322F194320BE4302C6897D29D13BDD.crl
                          rsync://repo-rpki.idnic.net/repo/db016085-2f94-40ff-80ce-ce23d39e65a1/0/B5A68ADE81322F194320BE4302C6897D29D13BDD.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5A68ADE81322F194320BE4302C6897D29D13BDD.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Jan 2026 14:57:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:fe:ce:06:38:43:6a:f3:25:8f:91:db:ec:71:d3:a6:43:1f:94:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5A68ADE81322F194320BE4302C6897D29D13BDD
        Validity
            Not Before: Jan 24 07:46:27 2026 GMT
            Not After : Jan 27 14:57:27 2026 GMT
        Subject: CN=942C47E2C13FCC925A961A884A4B7DDF8F8B853F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:b1:02:64:21:40:eb:34:14:77:1a:df:a4:15:
                    b1:58:43:79:40:fb:d0:54:b4:7e:b5:f6:0c:7b:de:
                    42:4a:84:cd:91:6c:50:9a:36:86:51:0c:cf:5b:e4:
                    f0:78:b6:d3:b8:dc:45:60:b1:6c:9f:f3:51:99:98:
                    99:10:5d:cf:84:35:ee:dd:3a:9a:92:72:4c:65:fe:
                    5e:48:79:bc:f7:05:3b:fd:ad:90:25:b3:24:3e:71:
                    61:31:4a:d0:50:b6:ca:af:41:4b:4f:3e:83:37:1c:
                    6b:36:ed:a5:9e:f0:a5:02:b5:f7:71:3a:5f:97:20:
                    7d:fa:ee:1d:ca:df:5e:61:3b:b8:fa:e6:b1:a4:76:
                    7d:a8:ac:b6:77:a5:8d:19:c5:4c:aa:a2:b8:c8:52:
                    46:b3:af:f5:4d:eb:6c:5b:90:fb:bb:38:94:3f:a0:
                    5a:18:4d:5e:10:7a:a7:59:b2:72:eb:8b:45:8e:de:
                    78:c9:4b:e1:e4:a2:ae:ee:31:ce:7c:51:43:93:56:
                    43:7a:6a:5f:ca:df:91:f1:96:4a:e3:2b:1c:58:5b:
                    2e:e7:de:7d:45:b6:24:f6:ef:e2:97:d3:96:fa:53:
                    0a:b3:cf:3a:9a:d9:36:d3:c9:2b:1a:12:83:74:8f:
                    cc:78:d5:b8:7f:37:6c:78:97:47:c7:7c:e4:01:73:
                    e4:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:2C:47:E2:C1:3F:CC:92:5A:96:1A:88:4A:4B:7D:DF:8F:8B:85:3F
            X509v3 Authority Key Identifier:
                keyid:B5:A6:8A:DE:81:32:2F:19:43:20:BE:43:02:C6:89:7D:29:D1:3B:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/db016085-2f94-40ff-80ce-ce23d39e65a1/0/B5A68ADE81322F194320BE4302C6897D29D13BDD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5A68ADE81322F194320BE4302C6897D29D13BDD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/db016085-2f94-40ff-80ce-ce23d39e65a1/0/B5A68ADE81322F194320BE4302C6897D29D13BDD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:85:76:92:31:bd:03:5f:bb:83:46:d9:7c:df:bf:be:59:37:
         7d:5c:8b:1a:07:42:a4:7d:d6:a2:74:45:e7:55:19:46:58:20:
         c4:36:37:3c:38:14:57:3a:9a:34:23:c1:6a:43:ef:f5:c5:34:
         48:09:02:7c:37:d2:88:83:e7:3b:bf:1c:0f:0e:fa:9e:5f:11:
         3f:ab:ba:ea:76:70:78:91:86:0b:31:9a:bd:f7:b2:1c:84:76:
         5c:3b:6b:da:c1:36:15:e4:ab:a2:a5:b0:86:9c:b3:2c:a8:47:
         e1:1b:23:49:28:01:06:6b:1f:e5:3e:8c:23:f1:47:10:f3:9f:
         11:d0:ed:4e:71:68:36:02:2d:fe:b9:98:de:e9:99:d8:bb:f1:
         35:b4:23:f3:c9:08:e7:ee:c3:a0:1e:3e:fd:fd:50:24:a7:90:
         51:50:b3:1e:23:b9:62:41:3c:2a:a6:9b:8b:af:62:f0:6d:ed:
         a1:0f:87:60:e9:f7:78:b4:4c:c4:99:86:d4:99:6a:a0:0f:e5:
         c8:2e:c1:22:76:0e:cf:9b:87:3d:9f:7f:11:21:a0:55:dc:c7:
         1d:98:48:89:eb:38:04:8a:38:f4:41:ca:a9:60:2c:59:26:82:
         7e:84:18:47:c3:2f:4d:f8:12:fc:5d:2b:c1:65:ed:ae:c5:19:
         d9:c9:7c:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:11:32 2026 by rpki-client