This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/f77ffe2a-31e4-4800-97d4-7874c1231911/0/90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3.mft
File:                     90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3.mft (raw, json)
Hash identifier:          aOt2gCJp45lLeMpZtVCvSjrgCRft+AjMu6j5fSVD0LQ=
Subject key identifier:   E7:9B:6C:07:06:13:AD:FB:66:C6:F7:E2:28:2B:5F:55:E2:6B:67:FE
Authority key identifier: 90:E2:CC:AC:A3:23:EA:B2:14:5F:54:B7:CF:65:C5:FA:EC:EF:83:A3
Certificate issuer:       /CN=90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3
Certificate serial:       02FB257F6E63C4C22ADC2F8859E4856C8E68B9D0
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f77ffe2a-31e4-4800-97d4-7874c1231911/0/90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3.mft
Manifest number:          01FD
Signing time:             Sat 24 Jan 2026 18:11:26 +0000
Manifest this update:     Sat 24 Jan 2026 18:06:26 +0000
Manifest next update:     Tue 27 Jan 2026 19:17:26 +0000
Files and hashes:         1: 90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3.crl (hash: vDehfWhmjhYuGsxmXmIZCyyN+mlVVIIjVnH1Cw89mSc=)
                          2: 3130332e3134352e35332e302f32342d3234203d3e20313339343535.roa (hash: t0f8hH0p5YUalqHFkiu1kyX28Ot7aEHcWn8PNYVXvq0=)
                          3: 3130332e3134352e35322e302f32332d3233203d3e20313339343535.roa (hash: 7DJwBHtzGlb/NDl1/3zGyCjwc3DhiipUzCGFUXWXjoE=)
                          4: 3130332e3134352e35322e302f32342d3234203d3e20313339343535.roa (hash: AnirtwiQcqhih7uqF14RHtBvHcWSRInmlpBmELQD3Bc=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f77ffe2a-31e4-4800-97d4-7874c1231911/0/90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3.crl
                          rsync://repo-rpki.idnic.net/repo/f77ffe2a-31e4-4800-97d4-7874c1231911/0/90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Jan 2026 19:17:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:fb:25:7f:6e:63:c4:c2:2a:dc:2f:88:59:e4:85:6c:8e:68:b9:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3
        Validity
            Not Before: Jan 24 18:06:26 2026 GMT
            Not After : Jan 27 19:17:26 2026 GMT
        Subject: CN=E79B6C070613ADFB66C6F7E2282B5F55E26B67FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:3f:54:60:ab:0c:65:c8:45:7b:16:6f:88:3e:
                    25:dd:27:45:fe:e8:88:98:10:18:b1:86:5e:e7:82:
                    80:e4:95:11:38:47:b5:28:52:95:b5:1b:99:51:19:
                    2f:b7:d0:d7:23:c1:93:20:54:fd:28:32:4b:59:e6:
                    c6:07:a7:b1:be:f2:63:e2:d2:af:05:c5:f6:fe:68:
                    86:ac:10:26:4d:d8:3c:86:65:e3:00:01:2a:61:fb:
                    ac:2f:ae:b4:ce:b9:5b:7d:5b:76:45:56:0e:01:c8:
                    ed:9a:f7:b3:42:fc:c9:aa:2f:dc:6d:0d:9a:b2:b8:
                    08:8f:49:fc:e1:3e:a9:cd:a4:78:11:a2:32:d3:79:
                    c6:db:99:7c:f4:1f:12:d1:60:cb:88:2e:b0:b8:66:
                    78:09:f7:8c:5e:f6:00:61:4f:c3:b5:e9:03:94:e8:
                    fc:10:6c:3e:e2:3c:ed:95:10:c6:7f:f0:17:a8:c7:
                    5b:64:ba:cb:43:18:f5:16:f6:a6:e6:9c:37:03:f8:
                    86:86:cf:a3:69:40:a6:db:36:40:b4:c4:67:8f:f4:
                    4f:8a:36:cb:41:dd:57:99:c9:f3:51:73:9a:b6:b7:
                    0f:b7:b9:70:71:d3:c2:50:39:52:49:f7:b0:aa:35:
                    39:23:9f:fb:f1:d0:f0:cc:9a:27:60:8e:54:19:31:
                    f6:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:9B:6C:07:06:13:AD:FB:66:C6:F7:E2:28:2B:5F:55:E2:6B:67:FE
            X509v3 Authority Key Identifier:
                keyid:90:E2:CC:AC:A3:23:EA:B2:14:5F:54:B7:CF:65:C5:FA:EC:EF:83:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f77ffe2a-31e4-4800-97d4-7874c1231911/0/90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f77ffe2a-31e4-4800-97d4-7874c1231911/0/90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:d0:11:c2:14:0f:fe:c2:ca:f4:47:dc:87:b7:74:c0:df:5b:
         68:cb:a0:21:6c:e0:47:a8:40:b5:ed:df:40:92:23:b9:25:20:
         48:5d:95:b4:bd:b5:7c:c8:57:eb:28:aa:98:b0:46:e3:d7:7a:
         d3:fd:ab:61:7e:da:b3:af:3b:84:d8:a0:7e:9e:96:aa:d6:d7:
         3d:66:5c:21:5f:08:c9:98:b0:ad:f2:6d:d1:3b:94:70:40:73:
         56:f3:67:9a:d5:5e:6e:2f:39:c9:45:0f:da:ca:2d:f8:bd:1a:
         59:d1:dc:16:7c:e1:bf:d9:0e:28:d1:64:3b:11:34:ad:45:de:
         64:c9:69:7e:b9:99:d3:01:46:f8:c9:1f:54:05:55:3b:b4:01:
         73:7c:22:c1:e6:f2:a7:01:f5:4e:58:3c:cd:72:d2:8c:e8:76:
         20:6e:d3:bc:a3:90:d5:7f:47:42:7d:4a:f1:09:5c:c5:0d:a8:
         a1:b2:2b:80:0b:9a:d4:d8:19:06:8f:fa:3d:ae:0f:56:84:87:
         b2:e9:ec:60:e2:ac:82:f1:a3:cf:82:7b:f5:58:87:5e:c7:21:
         d4:d5:7c:1a:69:15:8a:a1:11:a2:6e:95:92:47:b9:cd:a5:b5:
         f1:1a:0a:e8:52:3b:9c:8f:46:bb:f0:b2:cf:4f:a7:c0:cb:82:
         1a:87:d5:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:11:38 2026 by rpki-client