This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/14758e8e-49c8-48b8-bdcb-35339e2ae601/0/8F9164714A1B3B906CF8A8B371F342EBA3540CD9.mft
File:                     8F9164714A1B3B906CF8A8B371F342EBA3540CD9.mft (raw, json)
Hash identifier:          c2YWjW7O3i1BieGboUOYxR5+yqqC7cWygMg0vIrwElQ=
Subject key identifier:   AF:37:5C:F3:FF:2C:20:31:D9:55:4A:28:C5:9C:FD:B0:AA:A5:DF:57
Authority key identifier: 8F:91:64:71:4A:1B:3B:90:6C:F8:A8:B3:71:F3:42:EB:A3:54:0C:D9
Certificate issuer:       /CN=8F9164714A1B3B906CF8A8B371F342EBA3540CD9
Certificate serial:       43FC608F8A1AC41F199DE8ABBB12ABED82C70C8F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F9164714A1B3B906CF8A8B371F342EBA3540CD9.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/14758e8e-49c8-48b8-bdcb-35339e2ae601/0/8F9164714A1B3B906CF8A8B371F342EBA3540CD9.mft
Manifest number:          0241
Signing time:             Sat 31 Jan 2026 10:00:40 +0000
Manifest this update:     Sat 31 Jan 2026 09:55:40 +0000
Manifest next update:     Tue 03 Feb 2026 16:43:40 +0000
Files and hashes:         1: 8F9164714A1B3B906CF8A8B371F342EBA3540CD9.crl (hash: BBqrmGy7Dooxish0xcWVrWZeXnYgYSKGXpyryYrev8E=)
                          2: 3130332e3138382e3131392e302f32342d3234203d3e20313439373435.roa (hash: VHhhP8m98Q6XFX6o9Io0DEj5+ACOMVpb0NESi8BC7x8=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/14758e8e-49c8-48b8-bdcb-35339e2ae601/0/8F9164714A1B3B906CF8A8B371F342EBA3540CD9.crl
                          rsync://repo-rpki.idnic.net/repo/14758e8e-49c8-48b8-bdcb-35339e2ae601/0/8F9164714A1B3B906CF8A8B371F342EBA3540CD9.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F9164714A1B3B906CF8A8B371F342EBA3540CD9.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Feb 2026 16:43:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:fc:60:8f:8a:1a:c4:1f:19:9d:e8:ab:bb:12:ab:ed:82:c7:0c:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F9164714A1B3B906CF8A8B371F342EBA3540CD9
        Validity
            Not Before: Jan 31 09:55:40 2026 GMT
            Not After : Feb  3 16:43:40 2026 GMT
        Subject: CN=AF375CF3FF2C2031D9554A28C59CFDB0AAA5DF57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:15:00:7e:5f:ca:f5:8b:1a:a0:89:6d:68:97:
                    17:d3:97:5a:32:e6:be:ef:75:e3:b0:12:09:63:7c:
                    1f:b6:c9:72:1f:42:3e:b8:a8:4d:7b:ad:6e:29:f1:
                    d8:b1:1f:8f:fc:0d:ad:14:15:89:45:b3:a4:e0:e2:
                    36:8b:12:5e:da:15:55:8a:81:e8:5a:19:88:1c:09:
                    d2:32:5a:2e:da:2b:06:e8:c2:78:30:82:27:b9:39:
                    d1:2a:c8:0e:e4:7e:3d:d8:5e:06:66:d6:5e:7d:db:
                    e5:8b:78:d9:35:a4:2d:96:e4:40:72:3c:61:7f:4c:
                    1b:ce:1a:45:3f:54:a9:1c:04:11:e5:9f:5b:4d:7f:
                    f7:ca:d2:bb:8b:88:ec:23:0b:2c:b2:06:ac:61:c4:
                    ae:13:47:ab:b8:7d:1a:d9:b5:4e:13:53:17:c6:64:
                    e3:57:87:c8:d1:a7:a7:f0:b8:eb:f9:1e:82:7e:14:
                    75:60:3b:b6:0b:58:b3:2d:53:9a:bc:4b:ca:b1:af:
                    45:14:3c:9b:d9:cf:03:c1:c9:14:0e:43:bd:25:4c:
                    00:9d:98:35:3b:bb:1a:ba:2f:d2:62:22:4e:ec:7f:
                    2e:b9:1d:ce:ee:48:fd:a4:6b:d1:24:63:2f:68:fb:
                    57:3b:a8:28:03:fe:8e:a8:71:f3:d0:d0:47:3f:67:
                    8f:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:37:5C:F3:FF:2C:20:31:D9:55:4A:28:C5:9C:FD:B0:AA:A5:DF:57
            X509v3 Authority Key Identifier:
                keyid:8F:91:64:71:4A:1B:3B:90:6C:F8:A8:B3:71:F3:42:EB:A3:54:0C:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/14758e8e-49c8-48b8-bdcb-35339e2ae601/0/8F9164714A1B3B906CF8A8B371F342EBA3540CD9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F9164714A1B3B906CF8A8B371F342EBA3540CD9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/14758e8e-49c8-48b8-bdcb-35339e2ae601/0/8F9164714A1B3B906CF8A8B371F342EBA3540CD9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:06:e4:c9:c1:c2:c4:95:e0:4c:9f:f8:3a:79:65:19:55:29:
         f2:b0:6e:39:8a:bb:7a:b6:54:5a:b6:c6:45:50:09:cd:57:13:
         5c:63:d4:6a:93:10:b2:1b:ed:d3:9f:a2:18:e9:90:22:d6:07:
         31:2e:59:a0:4e:e5:4a:0e:a5:10:a6:b6:8a:31:e1:e4:49:13:
         a2:ea:34:4f:24:79:de:73:71:88:44:d9:85:45:da:00:d4:5c:
         2d:13:bc:e4:2b:1b:e6:9e:2e:14:7f:41:8c:e5:a7:47:b8:31:
         4d:46:58:1f:95:6f:87:3e:76:55:1f:33:b5:c6:ac:03:18:4d:
         af:83:64:22:e3:6b:56:5e:49:a0:f2:76:be:aa:a1:4c:5d:1d:
         7e:32:d1:ec:44:db:8c:93:77:58:8a:2a:bd:b7:d0:17:df:40:
         6b:cf:35:06:1d:3f:5e:0c:2d:fc:39:36:c8:c3:4a:0d:ea:14:
         36:5b:29:51:ba:e5:b8:5b:f4:f2:f9:96:82:e7:01:fc:28:d6:
         3a:8d:68:2d:f3:30:47:e8:60:51:98:a5:bc:87:0d:32:ba:26:
         fa:e1:c7:3e:ce:c7:d7:84:48:1f:4e:25:98:ef:cd:10:00:87:
         e7:19:fd:72:23:57:f2:65:12:b6:d6:8a:71:78:5c:85:f2:aa:
         8a:df:15:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 12:47:00 2026 by rpki-client