This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/9FEB25155CF1AFF90AE11DA0298F164D554986F4.mft
File:                     9FEB25155CF1AFF90AE11DA0298F164D554986F4.mft (raw, json)
Hash identifier:          Jq8WNmsC6ln6EiwUs/8hz91lwni4SuRTXV865O9bF4E=
Subject key identifier:   AA:49:88:D5:AE:64:C7:AC:E7:6E:18:10:46:22:A7:72:61:B3:9B:64
Authority key identifier: 9F:EB:25:15:5C:F1:AF:F9:0A:E1:1D:A0:29:8F:16:4D:55:49:86:F4
Certificate issuer:       /CN=9FEB25155CF1AFF90AE11DA0298F164D554986F4
Certificate serial:       7B8081AD8FE41C8BFFDD7714CD08B6CE6C11A284
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FEB25155CF1AFF90AE11DA0298F164D554986F4.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/9FEB25155CF1AFF90AE11DA0298F164D554986F4.mft
Manifest number:          0545
Signing time:             Sun 01 Feb 2026 14:41:59 +0000
Manifest this update:     Sun 01 Feb 2026 14:36:59 +0000
Manifest next update:     Thu 05 Feb 2026 01:34:59 +0000
Files and hashes:         1: 3130332e31302e36332e302f32342d3234203d3e203338373538.roa (hash: lTXl5JSGNXk2H6QC/ExXfaBTFR2N2ANdTqoiPB9R7qw=)
                          2: 3130332e31302e36322e302f32342d3234203d3e203338373538.roa (hash: WjmWZuOqqVrHpn2Iht/6D/CnYopSoMqLYwKVON2A9VQ=)
                          3: 3138302e3137382e39362e302f32302d3234203d3e203338373538.roa (hash: kpFmjz57IgAP8PtBxnCHq8wcPp57kSPI2nlME92Fnyg=)
                          4: 3230332e3137362e3137362e302f32322d3234203d3e203338373538.roa (hash: fs11mYHw0N1XTmtPs5VLrZKEd/NebYnoDSeOf+OjB1M=)
                          5: 3130332e31302e36302e302f32342d3234203d3e203338373538.roa (hash: vr66fn8B7rAPP+TZSIsfhj0n+lp991jln8PENhk4tOQ=)
                          6: 3230322e39332e3232342e302f32312d3234203d3e203338373538.roa (hash: pHeh4WZc6QAiJI01oIhwHizGh3B/+0TL7uxRsM4Hqog=)
                          7: 323430343a336530303a3a2f33322d3438203d3e203338373538.roa (hash: AMgNEXA3HgeJ9JW4vEN8yPqkkgaxJIY9BD1424Sv1Zo=)
                          8: 3131342e3132392e31362e302f32312d3234203d3e203338373538.roa (hash: EdvOiYuEQSs6Tte4v6yMNFw5asiVZESXMxoQoYWb3vI=)
                          9: 9FEB25155CF1AFF90AE11DA0298F164D554986F4.crl (hash: BJP5MA+Vpva/0gDTAN9uLXFQ4fUQf9eo7CRaDw/1o+A=)
                          10: 3132302e32392e3135322e302f32312d3234203d3e203338373538.roa (hash: RS9Byz+j3EdqEQMObrbAR7PmpA8rmEiuqCAVbbyaqzQ=)
                          11: 34332e3235322e37322e302f32322d3234203d3e203338373538.roa (hash: CXQZIZNdSuRyo3numXoAqSwoFv1BpTDqqmtfJIixEeM=)
                          12: 3132322e3130322e34302e302f32312d3234203d3e203338373538.roa (hash: oTh96cvu9N7dUKNXeMRvCfiS16/pskUDIN5zzPcyPFs=)
                          13: 3130332e31302e36312e302f32342d3234203d3e203338373538.roa (hash: fpx270ixaq11nCmgYzT3PO4j149L6mmMafh/Cax7edM=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/9FEB25155CF1AFF90AE11DA0298F164D554986F4.crl
                          rsync://repo-rpki.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/9FEB25155CF1AFF90AE11DA0298F164D554986F4.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FEB25155CF1AFF90AE11DA0298F164D554986F4.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Feb 2026 01:34:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:80:81:ad:8f:e4:1c:8b:ff:dd:77:14:cd:08:b6:ce:6c:11:a2:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9FEB25155CF1AFF90AE11DA0298F164D554986F4
        Validity
            Not Before: Feb  1 14:36:59 2026 GMT
            Not After : Feb  5 01:34:59 2026 GMT
        Subject: CN=AA4988D5AE64C7ACE76E18104622A77261B39B64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:1a:23:49:81:6b:c0:54:03:b9:ab:a5:dd:ef:
                    96:d1:6e:7b:a1:b9:dd:0d:dc:2a:ca:c7:5a:5d:01:
                    48:57:90:8a:f6:6b:6c:89:b6:5f:8d:51:ba:30:06:
                    9f:5c:0d:22:2f:86:5a:fd:3a:aa:5b:bc:4d:b2:02:
                    6d:81:bc:7a:84:fb:2d:43:f8:85:63:4e:45:00:b0:
                    89:30:f8:42:04:84:ca:81:b9:7a:48:6d:9e:ad:94:
                    f7:ff:b4:a8:63:23:98:d9:be:64:03:73:3d:96:7c:
                    e4:71:71:f9:cc:d6:7e:27:32:d3:46:2c:df:bc:8b:
                    63:97:75:39:8d:b0:63:dd:ce:e2:a8:44:f3:b4:89:
                    7b:40:88:9a:5b:ac:b5:98:c2:33:8e:71:81:d9:08:
                    57:9e:c0:6f:65:fe:47:09:c3:d6:6e:42:97:10:aa:
                    a2:5d:8b:9e:e1:f0:6c:2a:1a:fb:4c:69:39:1e:50:
                    02:e4:d2:88:7d:e6:c7:91:5a:65:7e:33:b1:1f:30:
                    47:72:5e:67:2b:11:1c:2c:aa:ac:63:3b:27:df:08:
                    e4:09:d7:21:a8:9e:ee:47:3a:11:68:8c:4a:ed:b7:
                    78:58:ac:5f:78:b8:44:40:3a:40:45:3a:eb:37:03:
                    95:23:34:50:10:d7:ab:ee:17:1c:fb:b6:d9:c3:24:
                    d2:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:49:88:D5:AE:64:C7:AC:E7:6E:18:10:46:22:A7:72:61:B3:9B:64
            X509v3 Authority Key Identifier:
                keyid:9F:EB:25:15:5C:F1:AF:F9:0A:E1:1D:A0:29:8F:16:4D:55:49:86:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/9FEB25155CF1AFF90AE11DA0298F164D554986F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FEB25155CF1AFF90AE11DA0298F164D554986F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/9FEB25155CF1AFF90AE11DA0298F164D554986F4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:78:c4:6e:e0:18:d1:0c:66:6f:79:b6:16:6a:ea:af:75:8a:
         be:18:9d:a1:db:8a:55:da:e8:c4:95:3c:f9:d2:b3:d0:d9:20:
         6c:04:aa:84:fe:0f:76:0c:31:6b:a1:41:d4:e8:67:84:d6:f2:
         fc:7c:24:23:7d:a8:8d:8c:c5:eb:67:ac:79:ec:fd:cc:84:be:
         05:b3:1f:ca:30:bd:a9:7b:b9:8c:7e:e7:9d:ed:0f:9e:b6:14:
         3a:01:ac:bc:a0:6e:7f:97:8c:04:54:73:4e:ca:20:ab:da:78:
         ae:d1:55:25:97:48:90:99:e9:5f:8f:67:cd:17:3d:3b:f4:6f:
         13:79:f2:a5:d0:c8:a1:49:71:61:9e:3d:0a:4f:89:10:78:81:
         2a:81:7c:89:4f:14:70:c8:3f:ff:d0:ee:e4:c2:4b:97:50:51:
         0a:54:6f:95:73:64:fb:c2:4d:ce:be:32:ef:e9:bd:cf:db:39:
         68:98:28:42:a3:9e:33:4f:13:fc:94:ab:59:ce:62:f0:14:92:
         3c:b3:4d:fb:78:df:2f:d6:73:cc:87:7c:5e:76:94:17:e2:4e:
         ed:22:25:56:4b:8b:45:10:bb:d9:20:fc:dd:cc:52:91:1a:22:
         b5:56:be:27:9a:a1:b2:b7:80:64:61:d0:bb:f4:5a:54:10:63:
         65:07:1a:b2
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUe4CBrY/kHIv/3XcUzQi2zmwRooQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUZFQjI1MTU1Q0YxQUZGOTBBRTExREEwMjk4RjE2NEQ1
NTQ5ODZGNDAeFw0yNjAyMDExNDM2NTlaFw0yNjAyMDUwMTM0NTlaMDMxMTAvBgNV
BAMTKEFBNDk4OEQ1QUU2NEM3QUNFNzZFMTgxMDQ2MjJBNzcyNjFCMzlCNjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiGiNJgWvAVAO5q6Xd75bRbnuh
ud0N3CrKx1pdAUhXkIr2a2yJtl+NUbowBp9cDSIvhlr9OqpbvE2yAm2BvHqE+y1D
+IVjTkUAsIkw+EIEhMqBuXpIbZ6tlPf/tKhjI5jZvmQDcz2WfORxcfnM1n4nMtNG
LN+8i2OXdTmNsGPdzuKoRPO0iXtAiJpbrLWYwjOOcYHZCFeewG9l/kcJw9ZuQpcQ
qqJdi57h8GwqGvtMaTkeUALk0oh95seRWmV+M7EfMEdyXmcrERwsqqxjOyffCOQJ
1yGonu5HOhFojErtt3hYrF94uERAOkBFOus3A5UjNFAQ16vuFxz7ttnDJNJPAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUqkmI1a5kx6znbhgQRiKncmGzm2QwHwYDVR0j
BBgwFoAUn+slFVzxr/kK4R2gKY8WTVVJhvQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x
YjRlMTk1ZS0xMmRlLTRjM2MtOTNlNS01MjJlZTU0MDE4ZDYvMC85RkVCMjUxNTVD
RjFBRkY5MEFFMTFEQTAyOThGMTY0RDU1NDk4NkY0LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvOUZFQjI1MTU1Q0YxQUZGOTBBRTExREEwMjk4RjE2NEQ1NTQ5
ODZGNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWI0ZTE5NWUtMTJkZS00YzNjLTkz
ZTUtNTIyZWU1NDAxOGQ2LzAvOUZFQjI1MTU1Q0YxQUZGOTBBRTExREEwMjk4RjE2
NEQ1NTQ5ODZGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAHV4xG7gGNEMZm95thZq6q91ir4YnaHbilXa
6MSVPPnSs9DZIGwEqoT+D3YMMWuhQdToZ4TW8vx8JCN9qI2MxetnrHns/cyEvgWz
H8owval7uYx+553tD562FDoBrLygbn+XjARUc07KIKvaeK7RVSWXSJCZ6V+PZ80X
PTv0bxN58qXQyKFJcWGePQpPiRB4gSqBfIlPFHDIP//Q7uTCS5dQUQpUb5VzZPvC
Tc6+Mu/pvc/bOWiYKEKjnjNPE/yUq1nOYvAUkjyzTft43y/Wc8yHfF52lBfiTu0i
JVZLi0UQu9kg/N3MUpEaIrVWvieaobK3gGRh0Lv0WlQQY2UHGrI=
-----END CERTIFICATE-----
Generated at Mon Feb 2 15:58:58 2026 by rpki-client