This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/1/7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.mft
File:                     7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.mft (raw, json)
Hash identifier:          FXLIZqx6j1u1qk2CVrxWX49fmjvuA0TlJJA4BY1MqxI=
Subject key identifier:   65:34:BA:84:3F:D6:C6:25:60:05:BC:DA:A0:4C:2B:D2:82:B6:2E:B5
Authority key identifier: 7E:8D:E1:54:9E:89:D4:B4:80:B5:56:69:5C:AB:E9:CE:7F:DF:5F:24
Certificate issuer:       /CN=7E8DE1549E89D4B480B556695CABE9CE7FDF5F24
Certificate serial:       0DB14593BE62748DEAAF6C0310BBBD2666871748
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/1/7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.mft
Manifest number:          BE
Signing time:             Sat 31 Jan 2026 21:01:04 +0000
Manifest this update:     Sat 31 Jan 2026 20:56:04 +0000
Manifest next update:     Tue 03 Feb 2026 22:20:04 +0000
Files and hashes:         1: 323030313a6466343a396134303a3a2f34382d3438203d3e20313533313439.roa (hash: ScM8Q2LMGZOkrNtPg/8PjLIyPY1b7rJ+ByzrKdDmKiU=)
                          2: 7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.crl (hash: LihnfN5hufdlti1lrTV3amkGvYTm7E9AVvCZLrkgNLI=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/1/7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.crl
                          rsync://repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/1/7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Feb 2026 22:20:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:b1:45:93:be:62:74:8d:ea:af:6c:03:10:bb:bd:26:66:87:17:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7E8DE1549E89D4B480B556695CABE9CE7FDF5F24
        Validity
            Not Before: Jan 31 20:56:04 2026 GMT
            Not After : Feb  3 22:20:04 2026 GMT
        Subject: CN=6534BA843FD6C6256005BCDAA04C2BD282B62EB5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:08:63:9c:15:e3:23:01:ef:8f:5f:14:f5:b6:
                    46:ea:a6:28:73:b0:08:c3:d4:d9:e6:62:4b:53:c6:
                    ef:bd:e0:4d:7d:47:19:e0:05:80:4f:88:e3:c7:90:
                    c8:46:fd:40:5a:59:88:d7:ce:a6:02:45:c4:4d:57:
                    8a:57:6b:e4:a5:4f:d3:d2:36:4b:83:0c:2e:29:46:
                    da:2d:11:6c:ad:a2:55:9a:a0:4f:49:85:49:7e:52:
                    0f:81:6b:d8:89:fd:6a:e0:b6:83:0c:9e:20:c7:1a:
                    9f:52:1f:86:e7:5b:a8:50:27:78:9b:41:7e:ef:09:
                    f4:7a:9d:83:fc:d8:d8:58:fe:fc:c5:33:ae:ad:0a:
                    b0:29:6b:dc:08:2d:b6:a0:88:ba:b0:1b:43:14:cd:
                    99:73:68:ec:f3:b3:04:42:08:01:5f:24:c0:2b:3c:
                    1c:2d:fe:1a:33:46:aa:38:71:78:eb:23:e1:10:95:
                    9f:26:8b:74:af:0d:c5:79:ff:d8:e4:75:7e:8a:c1:
                    dc:e4:6f:ed:75:02:38:a9:25:bf:74:48:77:ae:24:
                    45:a1:7e:75:b0:f6:0e:4b:b6:22:ae:db:7d:38:b4:
                    92:bc:7a:e9:ae:97:86:55:de:d8:fd:ae:f9:3d:24:
                    8a:1d:3d:41:4a:60:24:30:c1:a7:84:9c:1d:b7:4b:
                    be:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:34:BA:84:3F:D6:C6:25:60:05:BC:DA:A0:4C:2B:D2:82:B6:2E:B5
            X509v3 Authority Key Identifier:
                keyid:7E:8D:E1:54:9E:89:D4:B4:80:B5:56:69:5C:AB:E9:CE:7F:DF:5F:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/1/7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/1/7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:81:fb:f4:0a:be:6c:38:54:a2:44:58:d4:38:cb:e8:11:81:
         b6:6f:1e:9e:7d:b3:4a:92:89:a9:ef:2c:a9:05:6a:68:3f:35:
         03:1a:d0:de:2b:3f:fd:4f:d7:69:cb:f0:50:ca:35:a5:db:ce:
         2b:61:0c:d2:a9:f3:07:b8:89:31:a4:8a:a1:50:77:f6:d7:6a:
         e4:4f:e7:70:a7:93:a8:25:86:c4:10:72:9d:00:26:12:6d:20:
         8b:e2:b5:51:89:9b:ce:48:2a:29:b4:36:01:77:40:6a:28:ff:
         4e:c7:7f:02:85:73:14:a8:35:72:e2:cc:ef:13:e0:3e:71:f6:
         bf:73:e4:05:4e:64:e6:ec:48:79:40:d5:ba:53:50:11:62:bf:
         01:27:cc:94:fb:2a:e3:24:07:8a:17:b5:90:59:a5:49:f9:d4:
         8e:df:ed:1d:c9:bc:69:66:cf:e1:b8:bd:a9:74:e6:ad:0f:84:
         9b:39:35:84:a8:c5:06:b9:4a:f5:ed:a8:7d:95:02:33:bc:bf:
         dc:a9:45:60:c1:bc:15:0d:06:4f:1b:39:9e:17:6b:74:b3:92:
         a6:61:32:d5:71:ba:0a:46:97:2f:14:16:1b:cb:20:31:15:bf:
         50:c1:06:c5:52:ae:8f:45:83:81:68:99:34:a5:88:59:c6:a0:
         9d:8b:4c:fa
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUDbFFk75idI3qr2wDELu9JmaHF0gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0U4REUxNTQ5RTg5RDRCNDgwQjU1NjY5NUNBQkU5Q0U3
RkRGNUYyNDAeFw0yNjAxMzEyMDU2MDRaFw0yNjAyMDMyMjIwMDRaMDMxMTAvBgNV
BAMTKDY1MzRCQTg0M0ZENkM2MjU2MDA1QkNEQUEwNEMyQkQyODJCNjJFQjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1CGOcFeMjAe+PXxT1tkbqpihz
sAjD1NnmYktTxu+94E19RxngBYBPiOPHkMhG/UBaWYjXzqYCRcRNV4pXa+SlT9PS
NkuDDC4pRtotEWytolWaoE9JhUl+Ug+Ba9iJ/WrgtoMMniDHGp9SH4bnW6hQJ3ib
QX7vCfR6nYP82NhY/vzFM66tCrApa9wILbagiLqwG0MUzZlzaOzzswRCCAFfJMAr
PBwt/hozRqo4cXjrI+EQlZ8mi3SvDcV5/9jkdX6Kwdzkb+11AjipJb90SHeuJEWh
fnWw9g5LtiKu2304tJK8eumul4ZV3tj9rvk9JIodPUFKYCQwwaeEnB23S75pAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUZTS6hD/WxiVgBbzaoEwr0oK2LrUwHwYDVR0j
BBgwFoAUfo3hVJ6J1LSAtVZpXKvpzn/fXyQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z
M2RjMDM0Zi0zODIzLTQ4YWYtOTUzZC1hYWE4NzNiMGZiNmEvMS83RThERTE1NDlF
ODlENEI0ODBCNTU2Njk1Q0FCRTlDRTdGREY1RjI0LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvN0U4REUxNTQ5RTg5RDRCNDgwQjU1NjY5NUNBQkU5Q0U3RkRG
NUYyNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzNkYzAzNGYtMzgyMy00OGFmLTk1
M2QtYWFhODczYjBmYjZhLzEvN0U4REUxNTQ5RTg5RDRCNDgwQjU1NjY5NUNBQkU5
Q0U3RkRGNUYyNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBALuB+/QKvmw4VKJEWNQ4y+gRgbZvHp59s0qS
ianvLKkFamg/NQMa0N4rP/1P12nL8FDKNaXbzithDNKp8we4iTGkiqFQd/bXauRP
53Cnk6glhsQQcp0AJhJtIIvitVGJm85IKim0NgF3QGoo/07HfwKFcxSoNXLizO8T
4D5x9r9z5AVOZObsSHlA1bpTUBFivwEnzJT7KuMkB4oXtZBZpUn51I7f7R3JvGlm
z+G4val05q0PhJs5NYSoxQa5SvXtqH2VAjO8v9ypRWDBvBUNBk8bOZ4Xa3SzkqZh
MtVxugpGly8UFhvLIDEVv1DBBsVSro9Fg4FomTSliFnGoJ2LTPo=
-----END CERTIFICATE-----
Generated at Mon Feb 2 09:43:47 2026 by rpki-client