This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/e58d6dca-6d7b-4811-862b-0dc5d57fa2d9/0/B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.mft
File:                     B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.mft (raw, json)
Hash identifier:          LmvEnHy2nR0tAft2+/B4U7NJMZyVxJRZCImlDjkq+Jk=
Subject key identifier:   96:C5:88:77:7A:17:EC:EE:FD:BE:36:EB:7A:76:01:7E:80:B0:FC:E0
Authority key identifier: B3:A9:68:6B:1E:95:DC:B6:87:72:AD:A5:5B:B1:38:AE:4D:0E:14:DB
Certificate issuer:       /CN=B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB
Certificate serial:       16C001D08F5A9237A52E531104D628C22B69DF44
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e58d6dca-6d7b-4811-862b-0dc5d57fa2d9/0/B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.mft
Manifest number:          02A3
Signing time:             Sat 24 Jan 2026 16:51:40 +0000
Manifest this update:     Sat 24 Jan 2026 16:46:40 +0000
Manifest next update:     Tue 27 Jan 2026 19:11:40 +0000
Files and hashes:         1: 3130332e3132352e31382e302f32342d3234203d3e20313338303837.roa (hash: csPdkdJcUUCAtCT9DXQEOSSDc2dcYO076Q+UqLNYO0k=)
                          2: 3130332e3132352e31382e302f32332d3233203d3e20313338303837.roa (hash: WglNMON1uFXdqdZO+92FBvvihsTNbskJIYYFQnplXHc=)
                          3: 3130332e3132352e31362e302f32322d3232203d3e20313338303837.roa (hash: yVV5dswPF/JJinXwT/AnHMY4w0AFsBRTFOmucBW2KiU=)
                          4: 3130332e3132352e31362e302f32342d3234203d3e20313338303837.roa (hash: 1xj2l1iw+yAigEZVfk6qr5RUAjnT+Wu5eRzm3bKESvg=)
                          5: 3130332e3132352e31362e302f32332d3233203d3e20313338303837.roa (hash: Oqn/4hUIUai1+mMhRgpHuJU5fSEKD5vusBmxtK4Q6/8=)
                          6: 323430333a656134303a3a2f33322d3332203d3e20313338303837.roa (hash: xBq4u83ia6TOjUP4DGj4goi5YscW5lbRAoeEejloPEM=)
                          7: 3130332e3132352e31372e302f32342d3234203d3e20313338303837.roa (hash: Zz17TQa2NJzEsR1WGPakO7j3yFYvZxiFyfeaOkhhBlE=)
                          8: 3130332e3132352e31392e302f32342d3234203d3e20313338303837.roa (hash: 8wTO/tBBvlV50rqLL/FsgrieuqraT8M5ri1ZF8sxwQY=)
                          9: B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.crl (hash: UEDONtt91+wgTvPAbFG8ZnoPzccrrt4h/xyKKkS9T8Y=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e58d6dca-6d7b-4811-862b-0dc5d57fa2d9/0/B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.crl
                          rsync://repo-rpki.idnic.net/repo/e58d6dca-6d7b-4811-862b-0dc5d57fa2d9/0/B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Jan 2026 19:11:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:c0:01:d0:8f:5a:92:37:a5:2e:53:11:04:d6:28:c2:2b:69:df:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB
        Validity
            Not Before: Jan 24 16:46:40 2026 GMT
            Not After : Jan 27 19:11:40 2026 GMT
        Subject: CN=96C588777A17ECEEFDBE36EB7A76017E80B0FCE0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:9e:38:2b:d9:3f:f9:8e:1f:9b:a7:5e:bf:16:
                    b9:f4:7c:b6:91:ea:96:c2:ac:2e:3b:bb:ac:23:22:
                    90:b2:ac:97:65:62:ec:f6:3c:c2:66:0a:a5:42:bd:
                    59:3f:17:36:41:52:a9:e8:29:06:9b:d4:e9:93:24:
                    0b:40:a8:c4:36:e1:72:46:1f:6a:e6:fa:e6:b0:47:
                    e2:8e:b8:ea:02:9b:07:1a:69:56:87:12:fb:69:29:
                    5b:5d:83:30:cf:70:10:c4:7e:14:b0:3b:73:97:c9:
                    11:5e:24:42:8e:f2:51:cf:24:14:df:58:b9:1b:37:
                    04:82:1e:f4:76:ab:da:c5:b1:0b:78:c4:6f:71:8b:
                    03:db:59:55:b9:74:6f:67:19:59:25:1a:20:8f:1b:
                    52:f3:9f:d5:b5:f4:88:7b:94:e3:a2:42:e7:71:66:
                    07:d3:a2:e8:f1:8c:08:6c:a9:70:31:08:82:2a:73:
                    a2:04:0a:1c:04:8e:9f:73:ae:8e:03:38:8f:32:08:
                    c8:6e:19:5b:1e:29:f7:6d:ab:1e:b1:74:b2:e5:a4:
                    61:3d:d8:ff:89:82:ee:a2:6c:9f:52:a8:cf:78:ed:
                    ee:a9:22:25:b8:e4:53:18:e2:59:12:88:3a:b2:91:
                    c2:87:45:3f:8e:ce:c8:7f:14:6c:49:f0:ea:5e:a4:
                    88:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:C5:88:77:7A:17:EC:EE:FD:BE:36:EB:7A:76:01:7E:80:B0:FC:E0
            X509v3 Authority Key Identifier:
                keyid:B3:A9:68:6B:1E:95:DC:B6:87:72:AD:A5:5B:B1:38:AE:4D:0E:14:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e58d6dca-6d7b-4811-862b-0dc5d57fa2d9/0/B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e58d6dca-6d7b-4811-862b-0dc5d57fa2d9/0/B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:d2:59:88:23:13:4d:ce:88:75:d6:53:ff:a8:42:28:38:ea:
         1f:3e:29:39:78:d7:19:9c:e5:4c:03:da:12:2d:41:49:41:dc:
         2a:60:92:1e:07:33:82:6e:1b:45:e7:90:3a:14:dc:d7:30:fa:
         e7:ca:46:08:4d:53:d0:b9:dc:e9:f7:58:30:f6:5b:c3:b6:42:
         ef:0e:84:ef:cc:2f:8f:88:c5:b6:fa:27:ff:52:ba:ef:98:dc:
         c8:b2:1d:c3:b0:23:bc:7c:79:38:4c:a8:00:c0:84:ed:fb:5b:
         20:7b:b4:84:04:d9:3b:a6:af:c0:fa:b7:d0:25:d3:29:e3:d2:
         1e:7c:9f:a9:9e:38:28:5f:5f:15:e2:fe:54:a7:2a:e6:6f:83:
         d0:3a:7d:0c:46:d0:ee:a7:f8:ea:81:61:4b:a6:f3:3b:11:2d:
         f3:e7:33:5f:fa:0f:a4:44:45:0c:4d:55:e4:92:8a:ee:fa:40:
         72:88:8a:1e:d1:0d:f7:67:44:97:af:d5:3b:74:25:34:c8:6a:
         b7:a6:72:28:ef:25:eb:98:dc:f3:c6:33:77:70:35:b0:56:5b:
         21:fb:a6:8b:24:1e:2c:2c:77:29:59:9a:95:55:90:e6:75:48:
         a0:b1:2c:88:18:f6:8c:a4:bb:47:dc:e2:24:0d:30:61:70:6e:
         6c:e0:71:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 00:44:28 2026 by rpki-client