This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/104C4FCF888F3C86B8C128D81C5B95FE5389BB59.mft
File:                     104C4FCF888F3C86B8C128D81C5B95FE5389BB59.mft (raw, json)
Hash identifier:          iyQ9h5MbgZlL80JmtwD0fkU/+XmRCBTrzoVdtG1GiTQ=
Subject key identifier:   B8:33:C7:6A:5A:3A:13:63:6E:D8:94:6F:EA:74:F5:43:F8:69:51:5F
Authority key identifier: 10:4C:4F:CF:88:8F:3C:86:B8:C1:28:D8:1C:5B:95:FE:53:89:BB:59
Certificate issuer:       /CN=104C4FCF888F3C86B8C128D81C5B95FE5389BB59
Certificate serial:       505717EC6E804CB84B8ACEF25AECC8616FE876E2
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/104C4FCF888F3C86B8C128D81C5B95FE5389BB59.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/104C4FCF888F3C86B8C128D81C5B95FE5389BB59.mft
Manifest number:          0206
Signing time:             Sun 01 Feb 2026 05:20:56 +0000
Manifest this update:     Sun 01 Feb 2026 05:15:56 +0000
Manifest next update:     Wed 04 Feb 2026 13:47:56 +0000
Files and hashes:         1: 3130332e35312e3132322e302f32332d3233203d3e20313530343730.roa (hash: NI7opR0A7S7kCuIeE9SGtTIr4seOauTv5NKnbC+c5S8=)
                          2: 104C4FCF888F3C86B8C128D81C5B95FE5389BB59.crl (hash: LmU3CUhYWWgjbFTv6kKL00vaI+NNZWyDaV45hNjY+Cg=)
                          3: 3130332e35312e3132332e302f32342d3234203d3e20313530343730.roa (hash: vxMPTESIzZEY7G3+9W6n+soUJ5to979lR7MTr9paLOY=)
                          4: 3130332e35312e3132322e302f32342d3234203d3e203438343635.roa (hash: TC6MS8F6oQCAfD0GoVUZH+L8RFHHUoyFXx511/+SVcQ=)
                          5: 3130332e35312e3132322e302f32342d3234203d3e20313530343730.roa (hash: 9H3El07W5poKziXy5nJS/+wd9IjLStSX7hOc3PPnjBQ=)
                          6: 3130332e35312e3132332e302f32342d3234203d3e203438343635.roa (hash: 5O6AdoKEG1I98tyOWG63JsCNRsZNMKKnN/EqzafjGiA=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/104C4FCF888F3C86B8C128D81C5B95FE5389BB59.crl
                          rsync://repo-rpki.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/104C4FCF888F3C86B8C128D81C5B95FE5389BB59.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/104C4FCF888F3C86B8C128D81C5B95FE5389BB59.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Feb 2026 13:47:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:57:17:ec:6e:80:4c:b8:4b:8a:ce:f2:5a:ec:c8:61:6f:e8:76:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=104C4FCF888F3C86B8C128D81C5B95FE5389BB59
        Validity
            Not Before: Feb  1 05:15:56 2026 GMT
            Not After : Feb  4 13:47:56 2026 GMT
        Subject: CN=B833C76A5A3A13636ED8946FEA74F543F869515F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:ee:55:f5:55:c2:36:ae:a6:7b:90:77:19:0b:
                    92:40:7a:b1:42:48:82:66:99:80:7a:8b:09:d6:6f:
                    f6:17:5b:25:9c:7a:d5:62:42:fa:88:7f:99:69:6f:
                    a5:1e:dc:88:32:0b:0b:3d:dd:bd:f9:66:57:39:df:
                    20:43:88:03:84:1c:64:e6:69:a2:46:b4:be:a6:87:
                    8c:e3:ba:6e:1e:26:32:92:d8:74:4f:32:f4:0a:d6:
                    19:ab:be:41:0c:6a:1f:8f:87:11:13:52:7c:43:ec:
                    06:51:62:65:e7:68:45:5f:fd:1f:b5:43:aa:13:7b:
                    86:1a:e0:92:d1:90:eb:be:52:a7:76:dc:f8:a9:db:
                    8b:51:d9:75:1c:67:75:35:eb:01:2f:b1:19:55:be:
                    65:8a:6d:c5:d5:25:39:ec:a4:57:db:c9:90:fc:1a:
                    53:11:51:4d:17:d0:0f:99:8c:83:d7:ba:2b:49:36:
                    61:17:02:68:ca:a0:35:b4:50:ec:18:c6:c2:9f:37:
                    16:e1:fe:bb:94:1e:e9:a0:32:fa:3b:d0:d5:95:1d:
                    00:f4:8f:c2:de:0a:c9:86:63:61:a6:13:f2:aa:ad:
                    e2:f7:4b:f0:86:b3:bd:a0:06:10:b3:05:96:e6:f0:
                    4f:97:09:81:ea:bd:e5:a4:55:ce:55:5c:18:4b:c2:
                    af:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:33:C7:6A:5A:3A:13:63:6E:D8:94:6F:EA:74:F5:43:F8:69:51:5F
            X509v3 Authority Key Identifier:
                keyid:10:4C:4F:CF:88:8F:3C:86:B8:C1:28:D8:1C:5B:95:FE:53:89:BB:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/104C4FCF888F3C86B8C128D81C5B95FE5389BB59.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/104C4FCF888F3C86B8C128D81C5B95FE5389BB59.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/104C4FCF888F3C86B8C128D81C5B95FE5389BB59.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:ca:86:6d:38:e9:c1:d2:4d:91:ac:78:27:b7:39:09:f2:41:
         6b:bf:ab:d0:9d:8a:6d:1d:2d:23:c8:d7:63:6f:22:f8:06:52:
         95:22:a8:84:13:d5:c2:fe:7d:c5:d9:33:81:01:61:12:a3:28:
         67:21:97:75:8a:fa:d6:46:5f:8d:c6:23:12:b9:74:04:7b:da:
         5c:a4:dd:d4:c3:6a:07:2c:1f:a2:c7:a8:22:1f:8d:9f:e4:29:
         66:61:23:92:d2:49:13:ae:95:c1:e1:5e:26:a3:ca:17:08:60:
         ec:aa:ed:e0:6e:c9:68:17:75:b2:91:95:a3:3b:d2:c9:cc:14:
         34:56:9d:ae:9d:b4:ec:de:0c:78:5d:48:00:66:7f:51:73:90:
         db:e5:5a:1c:ea:a8:de:ee:f5:78:53:4c:9c:8f:23:28:1d:da:
         3c:0c:76:70:09:ac:66:8c:9f:70:1e:a1:7d:1c:50:f2:43:d7:
         98:fd:e3:5a:52:fc:4f:cf:8c:79:93:d9:54:2b:52:8c:1c:de:
         d3:4f:6f:b0:b6:58:b4:fb:99:2c:2f:0d:d5:7a:84:5f:3c:d9:
         90:90:9f:23:dc:f4:3a:08:28:d0:b7:e4:4c:db:e9:d5:04:a9:
         6d:9a:72:83:6b:69:33:c8:aa:e5:84:42:d6:c8:98:2a:bb:27:
         2c:84:1d:8e
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUUFcX7G6ATLhLis7yWuzIYW/oduIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTA0QzRGQ0Y4ODhGM0M4NkI4QzEyOEQ4MUM1Qjk1RkU1
Mzg5QkI1OTAeFw0yNjAyMDEwNTE1NTZaFw0yNjAyMDQxMzQ3NTZaMDMxMTAvBgNV
BAMTKEI4MzNDNzZBNUEzQTEzNjM2RUQ4OTQ2RkVBNzRGNTQzRjg2OTUxNUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDV7lX1VcI2rqZ7kHcZC5JAerFC
SIJmmYB6iwnWb/YXWyWcetViQvqIf5lpb6Ue3IgyCws93b35Zlc53yBDiAOEHGTm
aaJGtL6mh4zjum4eJjKS2HRPMvQK1hmrvkEMah+PhxETUnxD7AZRYmXnaEVf/R+1
Q6oTe4Ya4JLRkOu+Uqd23Pip24tR2XUcZ3U16wEvsRlVvmWKbcXVJTnspFfbyZD8
GlMRUU0X0A+ZjIPXuitJNmEXAmjKoDW0UOwYxsKfNxbh/ruUHumgMvo70NWVHQD0
j8LeCsmGY2GmE/KqreL3S/CGs72gBhCzBZbm8E+XCYHqveWkVc5VXBhLwq9LAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUuDPHalo6E2Nu2JRv6nT1Q/hpUV8wHwYDVR0j
BBgwFoAUEExPz4iPPIa4wSjYHFuV/lOJu1kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z
MjhlZWM1Yi01MzI0LTQ0MjItYTMyZi05YjFkY2VkMzc1OWYvMC8xMDRDNEZDRjg4
OEYzQzg2QjhDMTI4RDgxQzVCOTVGRTUzODlCQjU5LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMTA0QzRGQ0Y4ODhGM0M4NkI4QzEyOEQ4MUM1Qjk1RkU1Mzg5
QkI1OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzI4ZWVjNWItNTMyNC00NDIyLWEz
MmYtOWIxZGNlZDM3NTlmLzAvMTA0QzRGQ0Y4ODhGM0M4NkI4QzEyOEQ4MUM1Qjk1
RkU1Mzg5QkI1OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAAjKhm046cHSTZGseCe3OQnyQWu/q9Cdim0d
LSPI12NvIvgGUpUiqIQT1cL+fcXZM4EBYRKjKGchl3WK+tZGX43GIxK5dAR72lyk
3dTDagcsH6LHqCIfjZ/kKWZhI5LSSROulcHhXiajyhcIYOyq7eBuyWgXdbKRlaM7
0snMFDRWna6dtOzeDHhdSABmf1FzkNvlWhzqqN7u9XhTTJyPIygd2jwMdnAJrGaM
n3AeoX0cUPJD15j941pS/E/PjHmT2VQrUowc3tNPb7C2WLT7mSwvDdV6hF882ZCQ
nyPc9DoIKNC35Ezb6dUEqW2acoNraTPIquWEQtbImCq7JyyEHY4=
-----END CERTIFICATE-----
Generated at Mon Feb 2 10:05:10 2026 by rpki-client