This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/8469874AE268E2CD4E9A137EDD5599C748530E9E.mft
File:                     8469874AE268E2CD4E9A137EDD5599C748530E9E.mft (raw, json)
Hash identifier:          Jr5YQm4t72u6XF00uUKGX4Xj4o8uBOSanysjcDuekFA=
Subject key identifier:   73:A8:09:0C:D4:27:4F:B6:37:FB:1B:41:DF:5C:E3:D1:04:2A:1C:2C
Authority key identifier: 84:69:87:4A:E2:68:E2:CD:4E:9A:13:7E:DD:55:99:C7:48:53:0E:9E
Certificate issuer:       /CN=8469874AE268E2CD4E9A137EDD5599C748530E9E
Certificate serial:       6A29652DA4EBA520B33153870FDD215E1A9D4FBF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8469874AE268E2CD4E9A137EDD5599C748530E9E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/8469874AE268E2CD4E9A137EDD5599C748530E9E.mft
Manifest number:          0568
Signing time:             Sun 01 Feb 2026 09:52:16 +0000
Manifest this update:     Sun 01 Feb 2026 09:47:16 +0000
Manifest next update:     Wed 04 Feb 2026 10:18:16 +0000
Files and hashes:         1: 3133372e35392e3136312e302f32342d3234203d3e203536323432.roa (hash: Z2sFxHHlHMJ4bRNENtVrztUIDsIoPZKVqMTMzG/+S5w=)
                          2: 3130332e3232382e3131382e302f32332d3233203d3e203536323432.roa (hash: GokeNGATaaa1i6e8bMHZ+iQ8aT+X+X53HMk8EJYjG4g=)
                          3: 3133372e35392e3136332e302f32342d3234203d3e203536323432.roa (hash: QK5c39FnIQ2uH2X95IXAVXSIER8l6LyPkkcgIQHnCc0=)
                          4: 3130332e3232382e3131362e302f32322d3234203d3e203539323831.roa (hash: x2j2pkxj/5qJxIyLhEm0SjulNd461dE11VB/8v7mZzA=)
                          5: 8469874AE268E2CD4E9A137EDD5599C748530E9E.crl (hash: EkFlVE/VAPc4xzHSHtO0SRwpcqbSxVYmNM0H8MX1aJw=)
                          6: 323430303a636438303a3a2f33322d3438203d3e203539323831.roa (hash: SDDhhLbIPIon66Bn4BSdn8Fj3IQ8y3DGAekRQSKZURg=)
                          7: 3133372e35392e3136322e302f32332d3233203d3e203536323432.roa (hash: f5hHen+W1VXCRis0jyLYMREhK7yiYlp/e1Oke9ZJemI=)
                          8: 3133372e35392e3136302e302f32322d3234203d3e203539323831.roa (hash: iYXHlXOp13oo14EwXL1yMlKhjy+K0NQq6QBKvwru8rQ=)
                          9: 3130332e3232382e3131362e302f32322d3232203d3e203536323432.roa (hash: YeIi/WBRjgP+fXFh6AcMEh9f121AU99tB5OClCgCK+k=)
                          10: 3130332e3232382e3131362e302f32332d3233203d3e203536323432.roa (hash: Qs5YsAFrZGsUg7q3cUMLK3YDrimXUuGrA4ZkrObB+E4=)
                          11: 323430303a636438303a3a2f33322d3438203d3e203536323432.roa (hash: zcYJvgiaLV2GHe09dAoReTJVtccl4TPkiIrfadlJVtM=)
                          12: 3133372e35392e3136322e302f32342d3234203d3e203536323432.roa (hash: 1D1ZlBAXYS6NJNH/ZoxCjjMrhPg+zHK85QsUpRWH8Rk=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/8469874AE268E2CD4E9A137EDD5599C748530E9E.crl
                          rsync://repo-rpki.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/8469874AE268E2CD4E9A137EDD5599C748530E9E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8469874AE268E2CD4E9A137EDD5599C748530E9E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Feb 2026 10:18:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:29:65:2d:a4:eb:a5:20:b3:31:53:87:0f:dd:21:5e:1a:9d:4f:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8469874AE268E2CD4E9A137EDD5599C748530E9E
        Validity
            Not Before: Feb  1 09:47:16 2026 GMT
            Not After : Feb  4 10:18:16 2026 GMT
        Subject: CN=73A8090CD4274FB637FB1B41DF5CE3D1042A1C2C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:f7:a2:de:58:d1:b8:b8:c2:92:17:f5:e7:9f:
                    48:9a:56:bc:81:37:f7:8f:79:3f:da:e0:d2:aa:59:
                    94:74:d9:81:21:f0:9b:44:83:2c:a1:56:36:4d:21:
                    3c:98:af:2f:bd:9b:26:16:72:2f:04:72:57:a0:c4:
                    8a:ad:53:92:fa:98:0e:7e:10:48:c6:64:bd:3c:5f:
                    c8:f9:14:e5:f0:da:14:13:85:57:37:6d:60:9b:0f:
                    3e:4c:ee:5d:ac:2d:21:92:5a:5f:13:3b:53:2a:14:
                    a0:ca:70:50:ec:52:aa:89:2f:d6:49:87:58:b6:8b:
                    37:3d:7e:78:11:cd:b2:3a:a6:50:3f:19:bc:29:93:
                    3b:44:03:d9:77:7a:61:42:44:cd:f7:7d:34:bb:c1:
                    42:0a:2f:46:ec:8a:4e:65:80:ae:29:b0:44:e2:c0:
                    48:1e:44:d0:69:ec:ed:1b:da:3a:ed:c0:15:79:82:
                    06:75:65:9d:2e:dc:13:92:5a:8a:07:ae:4b:6d:21:
                    db:76:8d:9c:67:67:00:34:cb:da:8e:53:ce:e4:4f:
                    eb:98:c6:b7:98:af:0e:8c:77:50:ea:e3:ac:7a:b5:
                    fb:74:d3:ee:a3:9b:26:3a:5e:9c:d8:ff:ab:c7:85:
                    4f:42:99:4f:5d:e9:aa:ae:a6:0d:8c:32:15:c3:be:
                    98:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:A8:09:0C:D4:27:4F:B6:37:FB:1B:41:DF:5C:E3:D1:04:2A:1C:2C
            X509v3 Authority Key Identifier:
                keyid:84:69:87:4A:E2:68:E2:CD:4E:9A:13:7E:DD:55:99:C7:48:53:0E:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/8469874AE268E2CD4E9A137EDD5599C748530E9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8469874AE268E2CD4E9A137EDD5599C748530E9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/8469874AE268E2CD4E9A137EDD5599C748530E9E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:eb:e7:7c:4c:56:f5:83:ce:2d:cc:9c:ee:a7:b0:ab:42:6f:
         37:7e:e1:82:d1:3b:96:02:17:cc:92:34:17:ab:45:f8:aa:aa:
         b6:de:3e:60:b6:ab:8f:da:7f:7e:71:f3:1b:ef:cf:89:f0:29:
         1b:29:71:39:30:5f:c8:11:58:29:11:b9:b0:64:68:1f:7b:56:
         70:c3:88:68:6e:d9:56:64:1c:c3:21:60:b5:e9:b5:c8:73:9c:
         7e:f5:9d:db:2a:a6:cd:97:1e:53:b1:23:45:14:f8:82:71:ff:
         e6:f4:b0:28:37:8c:ee:1a:42:82:84:85:a5:17:08:5b:56:5b:
         d7:ba:ee:a4:27:5d:41:ff:9e:6c:a7:50:44:9e:07:21:72:5b:
         f5:b1:61:a2:07:f5:22:1d:17:11:e7:31:0f:04:15:d9:a5:81:
         7c:35:9f:47:bf:50:56:6e:ed:b3:ac:7d:0e:1d:cf:d5:b3:00:
         6b:01:0a:bf:cc:33:eb:10:fd:46:a2:59:83:f8:98:03:2c:31:
         2b:42:83:85:07:35:f9:49:35:8c:c2:b7:b2:69:3a:33:6b:1e:
         73:6e:53:af:e0:95:0f:cb:48:ea:77:93:fb:3d:51:2d:17:38:
         25:c4:d4:f3:81:cc:d8:8d:ca:78:8e:0f:44:93:34:89:5c:c2:
         f8:1a:21:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:45:10 2026 by rpki-client