This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.mft
File:                     F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.mft (raw, json)
Hash identifier:          BOAHKEeUlKKkmlWHDgFBwJte0gDeFavzCIsrAnDCdzY=
Subject key identifier:   3A:C5:FA:0B:95:D3:49:36:DE:94:16:C7:3E:5D:4E:78:EB:5E:4B:DA
Authority key identifier: F1:85:3A:1C:5C:1E:CA:FE:10:76:F9:4A:61:FA:77:96:DD:3C:67:1A
Certificate issuer:       /CN=F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A
Certificate serial:       FCD14AEF1803229D6989C5DE3912FC031F8012
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.mft
Manifest number:          039D
Signing time:             Mon 02 Feb 2026 07:12:03 +0000
Manifest this update:     Mon 02 Feb 2026 07:07:03 +0000
Manifest next update:     Thu 05 Feb 2026 15:41:03 +0000
Files and hashes:         1: 3131392e31352e3133312e302f32342d3234203d3e203435333036.roa (hash: KiKi/4BGJg0K48DdjCfOcOBa77JCOo4OxuIg38BvrXI=)
                          2: 3230322e39312e33312e302f32342d3234203d3e20313532303639.roa (hash: S7MlEVaiyvjAdB83EWitfmwmyo4wzjPWQGuZFYtjp34=)
                          3: 3230322e39312e33302e302f32342d3234203d3e20313532303639.roa (hash: v4GScNp+JRLvaXyvj8xalK2YN2m8f7pYE4HXkH+LiDo=)
                          4: 3230322e39312e32392e302f32342d3234203d3e203234353238.roa (hash: p6w84x+sTkId9KJBAsf0out+ASQwEBO6MAkMqXPQJmY=)
                          5: 3230322e39312e32372e302f32342d3234203d3e203234353238.roa (hash: sxphp4GIGCV7hhFuUuJXQKH7CdkIoeuJ+Uc7gPS1Oeo=)
                          6: 3131392e31352e3133352e302f32342d3234203d3e203435333036.roa (hash: od2C/ltQ6m1xjAT8szqDpHM3qB6Kr8NBlMw+dYe1JvU=)
                          7: 3131392e31352e3133302e302f32342d3234203d3e203435333036.roa (hash: WLK6N6lYU6j7qmPlWLYHBoNW0CsjIHOLp3K/3Jfw78k=)
                          8: 3230322e39312e32382e302f32342d3234203d3e203234353238.roa (hash: aOzMI9PHIaU1+JYfqj3PgTWOSMZrS1G3wjVf+KJcQuA=)
                          9: 3131392e31352e3133322e302f32342d3234203d3e203435333036.roa (hash: FgWk4lEb+N8VyrkhQkA7AsDgO4pzlnxAR+so0eMn0MM=)
                          10: 3230322e39312e32352e302f32342d3234203d3e203234353238.roa (hash: f+5HOc/sgnjP7t42vcbumcmwD5c7eyke5qlw/e0UPsk=)
                          11: 3131392e31352e3133332e302f32342d3234203d3e203435333036.roa (hash: tGztSZAQJ35/hLuECvtTcpELlM1IpNOZ8zjyOffPPVE=)
                          12: F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.crl (hash: 4UbZVEPs93v3qHnpHOtJyNZpJ8e/yT/aNoHB9fI7s2k=)
                          13: 3230322e39312e32342e302f32342d3234203d3e203234353238.roa (hash: nikRTC901Bllan4GreFOs5fithEDsAsxTQDrjRSiako=)
                          14: 3131392e31352e3132382e302f32342d3234203d3e203435333036.roa (hash: 3mPJMmSU87HxOCz1kx2GnX89IU0Xnf2eTb3lccTca1k=)
                          15: 3230322e39312e32362e302f32342d3234203d3e203234353238.roa (hash: 6Gn2L5Gc0xaArWW6fS4YuSQAyW4Nw2vh1NIUwUVsqyA=)
                          16: 3131392e31352e3133342e302f32342d3234203d3e203435333036.roa (hash: nSNHUbZiqo6P3F9SIZ9EN5nCLPpwycyYrfB+M+PV3zw=)
                          17: 3131392e31352e3132392e302f32342d3234203d3e203435333036.roa (hash: 8CMqMpoCs6b6HNia3ifuD/WpzvcJj1kVCsO8zPSQ7wc=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.crl
                          rsync://repo-rpki.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Feb 2026 05:24:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            fc:d1:4a:ef:18:03:22:9d:69:89:c5:de:39:12:fc:03:1f:80:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A
        Validity
            Not Before: Feb  2 07:07:03 2026 GMT
            Not After : Feb  5 15:41:03 2026 GMT
        Subject: CN=3AC5FA0B95D34936DE9416C73E5D4E78EB5E4BDA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:47:b3:79:f1:e8:d4:d6:79:94:26:fc:50:e6:
                    30:9f:8b:08:44:e9:e6:ed:00:47:b2:60:65:f6:56:
                    8a:2d:17:20:b4:d3:0c:73:4b:64:ac:ad:5f:ae:fb:
                    af:f4:79:ae:59:e9:0b:df:61:e8:3e:30:31:51:94:
                    6c:5c:14:4a:31:e1:35:57:82:34:98:fd:0a:43:7f:
                    2a:4c:b5:08:54:5e:50:ee:74:98:3c:f4:a4:2f:01:
                    9a:c8:be:6c:a1:ed:c4:6d:f5:c1:d4:98:ac:5d:51:
                    d8:57:00:b5:c5:d5:f0:58:26:91:83:c1:61:24:67:
                    63:2e:60:4b:4a:10:4e:5a:23:8c:7f:26:82:77:3e:
                    f4:58:b8:ad:04:f7:c7:42:72:e9:83:ac:d9:ba:63:
                    71:68:4c:d3:5e:71:f7:1f:42:ee:76:a3:8a:88:c3:
                    ff:50:8b:40:13:be:4c:80:4f:22:08:18:1f:12:bc:
                    cf:4c:6a:f6:d3:30:a2:be:d4:a6:e9:07:2f:79:b6:
                    a0:aa:d1:8d:81:ac:43:4a:28:4a:f9:40:61:73:1f:
                    b0:94:5b:74:35:a1:4c:32:fc:a9:fa:c0:06:78:3f:
                    94:ef:80:f3:45:ee:d5:bf:0f:17:ce:b6:7e:3e:a4:
                    8a:b9:9f:80:d9:df:8f:9f:2a:f8:c4:51:b6:3b:83:
                    67:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:C5:FA:0B:95:D3:49:36:DE:94:16:C7:3E:5D:4E:78:EB:5E:4B:DA
            X509v3 Authority Key Identifier:
                keyid:F1:85:3A:1C:5C:1E:CA:FE:10:76:F9:4A:61:FA:77:96:DD:3C:67:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:d8:9b:51:83:ad:26:99:48:f5:59:92:4a:bb:d1:55:51:2e:
         5a:a4:a7:22:0e:e4:c3:7d:8e:30:14:9d:7f:4d:7c:0e:53:c2:
         11:f0:1d:17:d5:07:63:eb:2d:4f:fd:f8:32:21:e0:fb:63:c4:
         30:72:83:23:0a:40:3e:55:c9:c9:48:ac:05:15:84:64:9c:fd:
         87:0a:17:a7:d8:18:5d:96:68:73:02:fd:01:ad:90:27:26:d0:
         95:87:22:5c:8f:8d:ba:03:fd:cd:0c:d7:db:93:80:e6:12:7b:
         a1:c9:10:bc:20:d2:61:b2:b2:f3:8d:14:88:16:86:fc:d6:9b:
         8c:ee:36:f6:b2:70:20:ac:d9:40:6f:28:f2:ef:68:15:aa:2c:
         ab:aa:1c:61:11:d8:39:b3:e7:f5:3c:b5:d2:5c:01:00:33:f0:
         0f:85:18:c5:9e:90:d3:ed:93:56:eb:26:82:0b:31:71:22:68:
         55:4d:4a:ab:d2:4d:9f:a9:fc:8d:4c:22:99:68:e2:69:90:0e:
         54:81:2d:0e:2d:20:eb:77:47:fd:7a:26:3f:f7:4f:2c:67:7c:
         70:bb:37:a3:3c:4a:ea:53:00:ef:18:f5:27:7c:5a:62:22:f8:
         f5:71:0d:c8:c0:c1:f4:0a:34:96:72:05:6d:1c:e4:91:67:b9:
         8d:91:44:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:44:07 2026 by rpki-client