This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/02913fa1-33ae-4e33-bbe2-81bd9f03c84b/0/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.mft
File:                     8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.mft (raw, json)
Hash identifier:          UkjUEJvF/Qyk/9ptlJE21noUpcVaMTD/d4RSmkWbUn8=
Subject key identifier:   51:91:32:71:8F:34:4A:87:C8:55:46:4E:4C:B9:79:5A:DA:AC:C9:82
Authority key identifier: 8C:57:C5:86:0B:F9:38:BB:57:E0:B7:ED:0F:89:0D:70:BF:EE:55:A0
Certificate issuer:       /CN=8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0
Certificate serial:       1E08DC71F41C5FA1470A5A72A8D79880E47D0B7F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/02913fa1-33ae-4e33-bbe2-81bd9f03c84b/0/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.mft
Manifest number:          0374
Signing time:             Sun 01 Feb 2026 16:00:03 +0000
Manifest this update:     Sun 01 Feb 2026 15:55:03 +0000
Manifest next update:     Wed 04 Feb 2026 18:03:03 +0000
Files and hashes:         1: 8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.crl (hash: B/cxuDzQeK6LIFdB+yjCoJQylA6gRHX+M1Sjw+pcl/M=)
                          2: 3130332e3135392e3230322e302f32332d3234203d3e20313331313131.roa (hash: Ho5Y5TOHX49gl1fZYVO+j2M3OjYa1AKAk+KnhAmd/6M=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/02913fa1-33ae-4e33-bbe2-81bd9f03c84b/0/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.crl
                          rsync://repo-rpki.idnic.net/repo/02913fa1-33ae-4e33-bbe2-81bd9f03c84b/0/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Feb 2026 18:03:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:08:dc:71:f4:1c:5f:a1:47:0a:5a:72:a8:d7:98:80:e4:7d:0b:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0
        Validity
            Not Before: Feb  1 15:55:03 2026 GMT
            Not After : Feb  4 18:03:03 2026 GMT
        Subject: CN=519132718F344A87C855464E4CB9795ADAACC982
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:95:28:77:ac:52:ee:75:e2:53:3a:db:56:ef:
                    92:63:95:9c:43:d0:dd:33:c1:dd:79:71:8d:cf:27:
                    8a:9f:d2:64:7b:09:da:ac:60:6e:bf:3a:1c:77:94:
                    91:c4:aa:ed:10:39:4b:b7:49:28:21:1b:25:91:78:
                    74:c5:0a:aa:aa:f2:11:b3:fb:3e:ff:4d:7b:d3:52:
                    ab:83:35:20:a4:11:92:8a:5e:6d:76:a9:ff:dd:52:
                    92:7b:94:38:eb:99:a6:36:08:0d:6d:20:ca:8d:0b:
                    98:76:5f:73:69:70:db:51:ac:fb:81:63:f2:8b:ac:
                    3e:e9:0a:ae:d9:33:bc:9a:38:51:85:c4:5d:ec:25:
                    ee:8f:d2:2d:3b:d7:3c:23:20:36:25:3c:e2:5a:9d:
                    83:7f:d4:ec:46:ca:05:42:61:31:c7:7f:68:47:9e:
                    05:23:e0:99:d1:b9:75:19:e6:06:a4:79:85:2f:ea:
                    83:c0:84:6b:78:7d:9a:4b:97:3d:ac:66:a1:f4:2f:
                    f8:2f:99:6c:ad:b5:a8:e7:ec:2b:5f:4f:1d:07:46:
                    41:00:bb:cf:d7:87:44:c7:e5:ae:a9:9d:29:3d:2a:
                    24:ca:20:5d:eb:2c:f5:f1:f3:87:c1:6d:24:15:a7:
                    e1:00:b7:7d:48:ae:d5:e8:38:a2:17:d0:b5:ef:b4:
                    40:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:91:32:71:8F:34:4A:87:C8:55:46:4E:4C:B9:79:5A:DA:AC:C9:82
            X509v3 Authority Key Identifier:
                keyid:8C:57:C5:86:0B:F9:38:BB:57:E0:B7:ED:0F:89:0D:70:BF:EE:55:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/02913fa1-33ae-4e33-bbe2-81bd9f03c84b/0/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/02913fa1-33ae-4e33-bbe2-81bd9f03c84b/0/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:ab:c1:13:73:96:39:35:3e:49:1d:8b:cf:8a:72:d0:fe:af:
         0d:c8:73:cf:da:0b:d1:08:84:a4:19:c4:f9:a5:c7:0e:b3:6a:
         9e:02:dc:fa:5f:b6:60:b1:49:30:cc:0d:fa:20:21:11:9c:ee:
         ab:c6:46:66:a8:d2:1a:c0:4a:08:23:fc:32:b6:d6:f6:87:b4:
         67:32:5b:70:ca:6c:bd:a1:25:82:96:2c:a5:77:ec:7d:c4:65:
         bd:be:a4:9d:54:ff:6f:73:43:f7:36:2d:b2:f3:f8:d4:ff:19:
         bf:f8:b0:12:0b:7e:7d:5c:1c:e4:ac:50:75:8d:f9:83:d3:83:
         3a:05:7c:e7:e8:60:7e:ad:6c:cd:aa:44:7b:56:f2:01:98:38:
         09:d3:36:95:33:6e:79:1e:f7:2a:04:65:0a:3a:3f:a3:6a:d0:
         0d:4b:41:f1:0b:6e:c5:77:de:48:23:01:92:72:fb:8c:0c:f0:
         e9:cc:e7:d0:51:66:89:0f:e8:45:34:d8:53:13:a5:a7:80:b0:
         86:7c:f0:76:31:3c:f4:1b:28:7f:b7:be:24:a5:03:92:0f:7b:
         ad:09:8e:1d:06:7c:c8:e9:b8:ed:42:23:3e:44:9e:58:d2:78:
         e2:34:0a:83:79:46:ce:e0:43:af:4c:73:a0:d7:b4:16:c7:93:
         e7:2c:de:eb
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUHgjccfQcX6FHClpyqNeYgOR9C38wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEM1N0M1ODYwQkY5MzhCQjU3RTBCN0VEMEY4OTBENzBC
RkVFNTVBMDAeFw0yNjAyMDExNTU1MDNaFw0yNjAyMDQxODAzMDNaMDMxMTAvBgNV
BAMTKDUxOTEzMjcxOEYzNDRBODdDODU1NDY0RTRDQjk3OTVBREFBQ0M5ODIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9lSh3rFLudeJTOttW75JjlZxD
0N0zwd15cY3PJ4qf0mR7CdqsYG6/Ohx3lJHEqu0QOUu3SSghGyWReHTFCqqq8hGz
+z7/TXvTUquDNSCkEZKKXm12qf/dUpJ7lDjrmaY2CA1tIMqNC5h2X3NpcNtRrPuB
Y/KLrD7pCq7ZM7yaOFGFxF3sJe6P0i071zwjIDYlPOJanYN/1OxGygVCYTHHf2hH
ngUj4JnRuXUZ5gakeYUv6oPAhGt4fZpLlz2sZqH0L/gvmWyttajn7CtfTx0HRkEA
u8/Xh0TH5a6pnSk9KiTKIF3rLPXx84fBbSQVp+EAt31IrtXoOKIX0LXvtEDtAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUUZEycY80SofIVUZOTLl5WtqsyYIwHwYDVR0j
BBgwFoAUjFfFhgv5OLtX4LftD4kNcL/uVaAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w
MjkxM2ZhMS0zM2FlLTRlMzMtYmJlMi04MWJkOWYwM2M4NGIvMC84QzU3QzU4NjBC
RjkzOEJCNTdFMEI3RUQwRjg5MEQ3MEJGRUU1NUEwLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvOEM1N0M1ODYwQkY5MzhCQjU3RTBCN0VEMEY4OTBENzBCRkVF
NTVBMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDI5MTNmYTEtMzNhZS00ZTMzLWJi
ZTItODFiZDlmMDNjODRiLzAvOEM1N0M1ODYwQkY5MzhCQjU3RTBCN0VEMEY4OTBE
NzBCRkVFNTVBMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBALCrwRNzljk1Pkkdi8+KctD+rw3Ic8/aC9EI
hKQZxPmlxw6zap4C3PpftmCxSTDMDfogIRGc7qvGRmao0hrASggj/DK21vaHtGcy
W3DKbL2hJYKWLKV37H3EZb2+pJ1U/29zQ/c2LbLz+NT/Gb/4sBILfn1cHOSsUHWN
+YPTgzoFfOfoYH6tbM2qRHtW8gGYOAnTNpUzbnke9yoEZQo6P6Nq0A1LQfELbsV3
3kgjAZJy+4wM8OnM59BRZokP6EU02FMTpaeAsIZ88HYxPPQbKH+3viSlA5IPe60J
jh0GfMjpuO1CIz5EnljSeOI0CoN5Rs7gQ69Mc6DXtBbHk+cs3us=
-----END CERTIFICATE-----
Generated at Mon Feb 2 10:04:19 2026 by rpki-client