This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/222e1f3c-5a48-4f39-aac7-e012ed709d6a/0/39B4AA9B3C7F780261DC490658E62BE86B85FF3A.mft
File:                     39B4AA9B3C7F780261DC490658E62BE86B85FF3A.mft (raw, json)
Hash identifier:          PzbkHKAhlImhsWObRIXZUk9iDvkbLsp75TkiLenhwQ8=
Subject key identifier:   FC:A6:5D:C6:45:EA:5B:60:47:DD:E8:AA:7C:CC:E6:29:67:E6:A3:BA
Authority key identifier: 39:B4:AA:9B:3C:7F:78:02:61:DC:49:06:58:E6:2B:E8:6B:85:FF:3A
Certificate issuer:       /CN=39B4AA9B3C7F780261DC490658E62BE86B85FF3A
Certificate serial:       244CA8FE1C7A7A60A9D27CD008D8DA23327CE234
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/39B4AA9B3C7F780261DC490658E62BE86B85FF3A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/222e1f3c-5a48-4f39-aac7-e012ed709d6a/0/39B4AA9B3C7F780261DC490658E62BE86B85FF3A.mft
Manifest number:          11
Signing time:             Sun 01 Feb 2026 20:00:41 +0000
Manifest this update:     Sun 01 Feb 2026 19:55:41 +0000
Manifest next update:     Thu 05 Feb 2026 07:29:41 +0000
Files and hashes:         1: 323430353a326434303a35343a3a2f34382d3438203d3e203535363935.roa (hash: FnkUHZBrG989K95SzJmPZ3VlJE7bRu6MxYgvfXPwI1I=)
                          2: 323430353a326434303a36343a3a2f34382d3438203d3e203535363935.roa (hash: w6Pa9H6dXhB2Rk0qIagT2ApTDekMkBQRHE2JtUHHFYM=)
                          3: 3131372e3130332e36342e302f32332d3234203d3e203535363935.roa (hash: KyBKzIQsEpd0PgxrEi5EeRSnZ5mxNIfKVnq+jHAVmuQ=)
                          4: 323430353a326434303a36353a3a2f34382d3438203d3e203535363935.roa (hash: xhA/2CTOIWfVDpHM1NkVlpPmJHY6UZcMtq24fqHi4DE=)
                          5: 323430353a326434303a35353a3a2f34382d3438203d3e203535363935.roa (hash: rPxNyJ1z70O0nMqBth9k9AL54wxNqFDgED4SxkwBthU=)
                          6: 323430353a326434303a39333a3a2f34382d3438203d3e203535363935.roa (hash: pk+TPwqQgroDMciGoscp5z8cID/jM70gaJIC3nV7COg=)
                          7: 3130332e32352e35342e302f32332d3234203d3e203535363935.roa (hash: 71yRknNPky7gIICGHwyWcufvVOlV/QSbdNUKr/ErIcc=)
                          8: 3230322e302e39322e302f32332d3234203d3e203535363935.roa (hash: MqAwWrLiifg0NVQLvNMyPUe2lZOdrumhHENCKuLcOOQ=)
                          9: 323430353a326434303a3a2f33322d3332203d3e203535363935.roa (hash: gxDcNPkVDSFdZ41agLUQg+G8pCeb+5J4nXDU0DZLJ2Q=)
                          10: 39B4AA9B3C7F780261DC490658E62BE86B85FF3A.crl (hash: SDkTGsYzOBGQprrh13AV96dq9RvhkAitGd5g8M5/lsU=)
                          11: 323430353a326434303a39323a3a2f34382d3438203d3e203535363935.roa (hash: e44E7s4PRD9CCUk2jY7ZZ7l5t8KM/OqUwkHUrfkkOcg=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/222e1f3c-5a48-4f39-aac7-e012ed709d6a/0/39B4AA9B3C7F780261DC490658E62BE86B85FF3A.crl
                          rsync://repo-rpki.idnic.net/repo/222e1f3c-5a48-4f39-aac7-e012ed709d6a/0/39B4AA9B3C7F780261DC490658E62BE86B85FF3A.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/39B4AA9B3C7F780261DC490658E62BE86B85FF3A.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Feb 2026 05:24:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:4c:a8:fe:1c:7a:7a:60:a9:d2:7c:d0:08:d8:da:23:32:7c:e2:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39B4AA9B3C7F780261DC490658E62BE86B85FF3A
        Validity
            Not Before: Feb  1 19:55:41 2026 GMT
            Not After : Feb  5 07:29:41 2026 GMT
        Subject: CN=FCA65DC645EA5B6047DDE8AA7CCCE62967E6A3BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:61:74:b2:91:a6:7c:12:1b:96:60:d9:9e:ff:
                    1b:a5:51:c7:de:eb:e1:cf:73:8d:da:d6:82:76:c2:
                    2c:2f:27:fe:21:0e:5c:16:a0:69:44:14:72:c9:32:
                    14:a6:d1:c3:d8:58:fb:43:52:ed:4b:60:4b:a8:5b:
                    ed:ba:3f:08:39:1b:51:28:d9:13:e7:f9:2b:7c:1b:
                    77:6c:ad:3b:aa:63:03:b6:e6:ef:9b:98:70:89:72:
                    f6:95:89:89:49:15:0e:b0:af:17:d7:15:2b:c4:31:
                    2d:fd:6a:f1:e4:70:a4:8d:2c:dc:8b:98:e6:3d:32:
                    f8:87:89:f9:30:29:2c:90:df:7d:10:f0:29:e9:9b:
                    7f:58:e4:f5:33:eb:14:b4:d7:9f:33:0a:08:b3:23:
                    43:9c:c0:92:a2:44:c6:87:ec:84:d8:8e:95:79:a4:
                    ca:16:74:ac:27:a8:32:57:dc:3e:2c:8b:0b:77:cd:
                    8d:f8:d8:5b:bc:5c:68:11:d7:48:ec:92:47:cb:40:
                    c8:13:0e:ca:66:d0:1d:89:7a:b4:63:7e:5a:16:af:
                    69:2c:2e:9b:44:b6:e8:6f:c3:e6:2e:ec:6e:03:90:
                    95:49:ed:e4:bf:0b:63:70:90:d2:e5:bc:8e:da:8f:
                    7b:06:ff:ab:da:e5:0e:9b:77:57:9e:e9:2c:aa:1e:
                    82:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:A6:5D:C6:45:EA:5B:60:47:DD:E8:AA:7C:CC:E6:29:67:E6:A3:BA
            X509v3 Authority Key Identifier:
                keyid:39:B4:AA:9B:3C:7F:78:02:61:DC:49:06:58:E6:2B:E8:6B:85:FF:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/222e1f3c-5a48-4f39-aac7-e012ed709d6a/0/39B4AA9B3C7F780261DC490658E62BE86B85FF3A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/39B4AA9B3C7F780261DC490658E62BE86B85FF3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/222e1f3c-5a48-4f39-aac7-e012ed709d6a/0/39B4AA9B3C7F780261DC490658E62BE86B85FF3A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:44:e8:39:3c:d8:2b:5e:72:b5:6b:c8:7e:67:99:31:87:c3:
         57:cc:f5:35:ba:8e:9d:c6:bd:8f:49:11:e0:13:cd:bf:aa:02:
         15:eb:92:80:df:bc:62:37:1c:22:8f:36:61:f9:d2:ec:b3:c3:
         70:19:b8:83:3e:22:cb:f2:a5:78:30:a3:e7:00:52:ab:3f:b3:
         5a:27:01:3a:30:94:6b:94:e0:a7:d8:28:04:5a:00:24:1d:6a:
         70:a7:62:d0:b1:80:13:23:81:ca:dd:bf:1a:fc:b9:b7:5e:c6:
         2f:61:b7:7f:6a:76:fb:6a:3a:8e:53:93:89:23:3e:16:90:74:
         4f:99:c2:da:66:a5:06:19:b2:0a:0e:37:cc:6b:af:7b:74:53:
         66:1e:2f:e0:5a:b9:b3:3b:89:98:e0:d2:d2:ca:e6:63:c8:5d:
         2f:fd:59:c3:cb:55:cb:76:02:37:69:40:aa:1a:cb:5d:24:12:
         f6:de:02:18:ee:c0:c8:b5:40:0c:7b:46:46:f8:12:71:cd:40:
         4d:dc:03:f7:46:a5:2d:d7:c8:61:b6:e6:3d:b9:d7:8c:d7:af:
         86:a9:cb:b7:fb:5c:fb:de:e1:e4:4d:d0:d3:8e:f8:22:76:6a:
         89:d6:76:f7:95:ba:ec:ea:f7:f0:77:d9:7c:c9:63:4c:2a:e6:
         03:df:c6:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:40:06 2026 by rpki-client