This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.mft
File:                     228E752BBFB8C16B3B46F3D388ECED50CF9A6473.mft (raw, json)
Hash identifier:          MeI/Id6zFL/DRjU3zTZ6QZ9nF4zQNtesTVUXMY9hniA=
Subject key identifier:   8E:9F:36:A3:20:A9:99:0E:F5:4D:D6:19:E1:04:42:5A:3A:55:77:09
Authority key identifier: 22:8E:75:2B:BF:B8:C1:6B:3B:46:F3:D3:88:EC:ED:50:CF:9A:64:73
Certificate issuer:       /CN=228E752BBFB8C16B3B46F3D388ECED50CF9A6473
Certificate serial:       0FCE03A216A28E11AF77856C250379D01506AD86
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.mft
Manifest number:          022B
Signing time:             Mon 02 Feb 2026 05:11:27 +0000
Manifest this update:     Mon 02 Feb 2026 05:06:27 +0000
Manifest next update:     Thu 05 Feb 2026 15:47:27 +0000
Files and hashes:         1: 3130332e32352e3130382e302f32342d3234203d3e20313332363334.roa (hash: fBDOlCYFIj49Ll99j2HPW9RAkablwrcxgHTldEFv/Jk=)
                          2: 32372e3132342e38332e302f32342d3234203d3e20313332363334.roa (hash: 2EEYdzWr91JIl7YnldqA+u9ZlAli1CH0l6dUJ+oRlZU=)
                          3: 3131392e34372e38382e302f32342d3234203d3e203338353237.roa (hash: ZHYZolADCQ3Nh0kSpTOhEiQyqWLeuJaaRLk6yahYzfE=)
                          4: 3131392e34372e39352e302f32342d3234203d3e20313439343039.roa (hash: IOQi+x8HL04tSdZdkybbwTiZjcbDVMFrGx/+Tn9mObQ=)
                          5: 3132342e3130392e32332e302f32342d3234203d3e203538333738.roa (hash: E8p39FK+OhNYyY8SwwTjQ8JEs2K6blfiyf4IMTEJdyY=)
                          6: 228E752BBFB8C16B3B46F3D388ECED50CF9A6473.crl (hash: e65PMdrqJOXph4SsOVSSvXnaWbOmrE1c4/UGHD8NDEg=)
                          7: 3131392e34372e39302e302f32342d3234203d3e203338353237.roa (hash: I3DXvvonrBchTQI06S4LkT6TVSxWcWBTNXL8OzRmw6c=)
                          8: 3131392e34372e38392e302f32342d3234203d3e203338353237.roa (hash: M5eMsMOetidsRy/C8PwAw9YejdbuLdHg+PDsTMdviAE=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.crl
                          rsync://repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Feb 2026 05:24:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:ce:03:a2:16:a2:8e:11:af:77:85:6c:25:03:79:d0:15:06:ad:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=228E752BBFB8C16B3B46F3D388ECED50CF9A6473
        Validity
            Not Before: Feb  2 05:06:27 2026 GMT
            Not After : Feb  5 15:47:27 2026 GMT
        Subject: CN=8E9F36A320A9990EF54DD619E104425A3A557709
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:8b:71:79:ae:14:0b:67:9e:0a:a5:70:7a:35:
                    af:9f:ac:d5:1c:03:26:5f:be:9d:02:d2:6e:20:45:
                    d5:be:e0:93:83:fb:e3:41:5e:96:70:d6:64:81:3a:
                    f1:3c:de:e3:c5:d0:6b:35:e6:ee:8a:b6:71:50:b7:
                    d6:ab:48:1e:5f:39:97:af:a0:4a:81:90:ab:01:51:
                    a0:e2:19:80:fc:d2:05:4d:4c:32:2e:df:75:f5:2f:
                    0d:a7:8a:fd:35:27:89:f9:59:fb:64:8e:d4:00:7b:
                    6d:4a:77:50:55:97:db:d6:e8:22:bc:bd:29:ea:fc:
                    7f:8f:79:0a:eb:bf:bb:54:b8:eb:f4:3c:07:62:48:
                    43:72:63:0f:30:ad:12:06:27:75:74:a7:7c:73:86:
                    31:fa:24:66:f8:2f:1c:20:15:ec:60:61:3a:db:b3:
                    78:3f:78:72:71:bb:8c:2c:33:7a:b4:77:c3:d9:34:
                    c4:dd:6c:3a:14:b9:4b:49:13:56:fa:d2:e0:bf:49:
                    c8:c9:43:a1:9b:df:e1:64:3d:0c:33:28:fd:85:8c:
                    4c:ab:f3:6c:f3:3e:31:34:e8:f5:c0:b3:87:fd:33:
                    4e:65:1a:9d:86:1e:1f:79:c3:4e:4b:91:75:25:33:
                    ff:6c:b7:09:0d:c6:ee:7d:80:18:59:98:85:32:79:
                    f0:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:9F:36:A3:20:A9:99:0E:F5:4D:D6:19:E1:04:42:5A:3A:55:77:09
            X509v3 Authority Key Identifier:
                keyid:22:8E:75:2B:BF:B8:C1:6B:3B:46:F3:D3:88:EC:ED:50:CF:9A:64:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:11:46:18:b9:ea:d2:79:15:d6:49:41:cb:06:13:28:bc:e7:
         ae:a7:27:b8:45:87:9a:e9:b6:c0:d0:95:f5:bd:69:d4:26:75:
         26:eb:da:a0:7f:37:16:2c:9d:11:fd:4f:06:16:59:6d:96:49:
         5c:43:78:16:0b:51:f2:77:ad:a9:3f:f6:2f:26:c7:7e:65:d1:
         93:44:8f:18:e1:d9:6b:00:06:79:1b:b2:b8:7b:82:1b:cd:33:
         a6:0c:5d:b1:ba:5b:af:ca:36:49:95:37:0a:b0:48:71:bd:23:
         a8:84:a1:28:6a:39:2e:3f:3d:c4:ee:58:81:ec:4e:10:c5:52:
         d2:01:02:46:c3:a7:5d:cb:31:69:bc:23:2d:83:23:85:92:e2:
         34:1b:60:68:22:9a:9b:eb:36:7b:1f:c5:eb:dd:6a:d8:e5:9e:
         88:7d:89:7c:b6:0b:9a:e1:25:b4:ea:1e:dc:dd:07:4b:0f:bf:
         0f:fe:e0:6d:5c:83:9d:db:e0:aa:4f:9f:ec:ba:8d:69:90:9c:
         d1:d5:e7:e0:c2:29:55:ec:b1:f7:a0:bd:c7:51:e5:15:78:0d:
         2c:39:4d:5d:76:31:05:bd:c8:e7:12:b3:91:8e:98:6a:d4:10:
         43:c0:2a:fd:e1:62:37:aa:e8:16:c9:02:e5:06:0d:c3:b4:a1:
         c8:d6:4c:98
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUD84DohaijhGvd4VsJQN50BUGrYYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjI4RTc1MkJCRkI4QzE2QjNCNDZGM0QzODhFQ0VENTBD
RjlBNjQ3MzAeFw0yNjAyMDIwNTA2MjdaFw0yNjAyMDUxNTQ3MjdaMDMxMTAvBgNV
BAMTKDhFOUYzNkEzMjBBOTk5MEVGNTRERDYxOUUxMDQ0MjVBM0E1NTc3MDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDji3F5rhQLZ54KpXB6Na+frNUc
AyZfvp0C0m4gRdW+4JOD++NBXpZw1mSBOvE83uPF0Gs15u6KtnFQt9arSB5fOZev
oEqBkKsBUaDiGYD80gVNTDIu33X1Lw2niv01J4n5WftkjtQAe21Kd1BVl9vW6CK8
vSnq/H+PeQrrv7tUuOv0PAdiSENyYw8wrRIGJ3V0p3xzhjH6JGb4LxwgFexgYTrb
s3g/eHJxu4wsM3q0d8PZNMTdbDoUuUtJE1b60uC/ScjJQ6Gb3+FkPQwzKP2FjEyr
82zzPjE06PXAs4f9M05lGp2GHh95w05LkXUlM/9stwkNxu59gBhZmIUyefDpAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUjp82oyCpmQ71TdYZ4QRCWjpVdwkwHwYDVR0j
BBgwFoAUIo51K7+4wWs7RvPTiOztUM+aZHMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z
MTdlZmQyYS0wMmFiLTQyMDItOTcwZi1mNjk5ZGZmOTdkZTUvMC8yMjhFNzUyQkJG
QjhDMTZCM0I0NkYzRDM4OEVDRUQ1MENGOUE2NDczLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMjI4RTc1MkJCRkI4QzE2QjNCNDZGM0QzODhFQ0VENTBDRjlB
NjQ3My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzE3ZWZkMmEtMDJhYi00MjAyLTk3
MGYtZjY5OWRmZjk3ZGU1LzAvMjI4RTc1MkJCRkI4QzE2QjNCNDZGM0QzODhFQ0VE
NTBDRjlBNjQ3My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAMIRRhi56tJ5FdZJQcsGEyi8566nJ7hFh5rp
tsDQlfW9adQmdSbr2qB/NxYsnRH9TwYWWW2WSVxDeBYLUfJ3rak/9i8mx35l0ZNE
jxjh2WsABnkbsrh7ghvNM6YMXbG6W6/KNkmVNwqwSHG9I6iEoShqOS4/PcTuWIHs
ThDFUtIBAkbDp13LMWm8Iy2DI4WS4jQbYGgimpvrNnsfxevdatjlnoh9iXy2C5rh
JbTqHtzdB0sPvw/+4G1cg53b4KpPn+y6jWmQnNHV5+DCKVXssfegvcdR5RV4DSw5
TV12MQW9yOcSs5GOmGrUEEPAKv3hYjeq6BbJAuUGDcO0ocjWTJg=
-----END CERTIFICATE-----
Generated at Mon Feb 2 10:06:08 2026 by rpki-client