This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.mft
File:                     1BC497D0AD0ADA80683A4AD17C60B87B6039448F.mft (raw, json)
Hash identifier:          wggdbxmBZO7eI2oKOq4S3xyFndw7rt/ZcIA5HF2B6vg=
Subject key identifier:   81:D7:9C:B1:E6:86:65:ED:C2:8E:FA:AE:74:DD:63:ED:E9:80:77:09
Authority key identifier: 1B:C4:97:D0:AD:0A:DA:80:68:3A:4A:D1:7C:60:B8:7B:60:39:44:8F
Certificate issuer:       /CN=1BC497D0AD0ADA80683A4AD17C60B87B6039448F
Certificate serial:       2E561DDD059A5EE483259C58AC4D84388004FB37
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.mft
Manifest number:          01BD
Signing time:             Sat 31 Jan 2026 08:41:09 +0000
Manifest this update:     Sat 31 Jan 2026 08:36:09 +0000
Manifest next update:     Tue 03 Feb 2026 17:04:09 +0000
Files and hashes:         1: 3131372e37342e3131322e302f32342d3234203d3e203338353233.roa (hash: r7mX7DIOfxP1tvfX/0nO3uk5UJScpK1uxXF4s8uBd2k=)
                          2: 323430313a326334303a313a3a2f34382d3438203d3e203338353233.roa (hash: OfppjjTpXFLmh5Aj/BiOiyknKtfPtzPHg2/eqJ5W1oI=)
                          3: 323430313a326334303a353a3a2f34382d3438203d3e203338353233.roa (hash: B1+mJ2NWxCErJO3eSkTT+IRh+1v8gS/UXtodN0rllAY=)
                          4: 1BC497D0AD0ADA80683A4AD17C60B87B6039448F.crl (hash: bO8OvfPpW8tpUNyKqytSDk7N9ZcqhAQC0AoQG/FxyoA=)
                          5: 3131372e37342e3131372e302f32342d3234203d3e203338353233.roa (hash: V8HVQOfgmh/cc0nhLeaxvvDoxZedeMVRv4rqy3Nfh7U=)
                          6: 3131372e37342e3131342e302f32342d3234203d3e203338353233.roa (hash: wmUZdQN9smMnqKDgMvZP3VM5NikSry3YiZ+HF4rDvwk=)
                          7: 323430313a326334303a323a3a2f34382d3438203d3e203338353233.roa (hash: hqbmI1+UoUPoz5aHKEefU2aqzgzzxdPZgTYT+n6aATQ=)
                          8: 3131372e37342e3131352e302f32342d3234203d3e203338353233.roa (hash: IzPZz6vu3cjWO+ZYwd6eSMpiSKGTjsqFFoCVeTSJVZ8=)
                          9: 3131372e37342e3131332e302f32342d3234203d3e203338353233.roa (hash: SrvCxxwtOAUSUTutTIMfTF6gsLrsVsYaxkHmFerjnWI=)
                          10: 3131372e37342e3131362e302f32342d3234203d3e203338353233.roa (hash: 4k9C18S/gej3vBFzU0qeNrYGkLmZVXuYXMm+WSQ8DFw=)
                          11: 3131372e37342e3131382e302f32342d3234203d3e203338353233.roa (hash: 4fKehzLVKMt4BtIz5yX0ZNeUtM2OU5RTZbzjb0CfeGg=)
                          12: 3131372e37342e3131392e302f32342d3234203d3e203338353233.roa (hash: xNJ7kcT79xuTCgJoNY2LlV0p8gctQ3BS6QaupCIi9OQ=)
                          13: 323430313a326334303a343a3a2f34382d3438203d3e203338353233.roa (hash: x8GA7f+9To0zJWTPLU22XKkbJl3cpNPeZ955m1OcAKM=)
                          14: 323430313a326334303a3a2f34382d3438203d3e203338353233.roa (hash: ibJZHZEEwuIaueWUBS974XsPSfaJnljHAhKebn2nItk=)
                          15: 323430313a326334303a333a3a2f34382d3438203d3e203338353233.roa (hash: n2kJmjfaGbSRfn1pQASrz7hUspqtdNSxVZot/XzEk0w=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.crl
                          rsync://repo-rpki.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Feb 2026 17:04:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:56:1d:dd:05:9a:5e:e4:83:25:9c:58:ac:4d:84:38:80:04:fb:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BC497D0AD0ADA80683A4AD17C60B87B6039448F
        Validity
            Not Before: Jan 31 08:36:09 2026 GMT
            Not After : Feb  3 17:04:09 2026 GMT
        Subject: CN=81D79CB1E68665EDC28EFAAE74DD63EDE9807709
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:0a:8e:84:22:43:60:20:02:b5:92:66:3c:a7:
                    27:54:da:73:a1:21:37:9c:62:df:11:e8:17:2d:43:
                    af:bf:a8:a4:02:ae:ca:97:98:b0:c7:e0:f1:24:59:
                    c4:8c:53:b2:44:62:a7:58:3c:93:a2:3d:3e:7d:71:
                    44:0a:e5:c0:d0:5b:ac:c0:38:e9:38:3a:28:cc:e5:
                    67:1a:98:65:7d:6d:4c:56:71:b4:91:2e:e1:b1:d8:
                    93:03:8b:34:f3:3b:6a:2f:6d:2a:c8:64:b9:2a:2b:
                    6d:60:57:37:cd:b1:8d:cf:75:8b:64:e4:22:3a:bb:
                    88:0d:d4:ca:d0:f0:5f:0f:4b:15:26:86:ec:7b:b0:
                    75:bb:9c:8c:a8:48:0e:89:de:8a:2f:a1:86:a6:7a:
                    04:bd:d3:b7:cb:cc:cf:ae:a7:bc:f3:dd:2a:90:fe:
                    82:24:f7:65:74:43:b1:82:4f:8f:1e:1a:52:3f:9b:
                    23:8a:31:73:d1:0d:e8:1d:30:fc:24:24:51:af:60:
                    84:cc:c7:ad:3c:04:5e:d9:d2:55:4e:b5:cf:0a:d2:
                    74:32:5b:42:86:d4:02:d7:4e:92:49:af:83:16:20:
                    63:77:b3:22:ac:bc:56:c0:cb:0e:83:a1:e4:3b:bf:
                    2b:c2:d1:81:f1:05:d1:88:79:7e:4e:ea:66:93:c0:
                    b6:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:D7:9C:B1:E6:86:65:ED:C2:8E:FA:AE:74:DD:63:ED:E9:80:77:09
            X509v3 Authority Key Identifier:
                keyid:1B:C4:97:D0:AD:0A:DA:80:68:3A:4A:D1:7C:60:B8:7B:60:39:44:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:23:33:23:d6:5a:f6:e3:c9:a6:68:22:52:de:cf:84:e0:87:
         b2:75:51:8a:bf:b3:85:2a:a2:48:95:c2:de:4f:9c:4f:d3:1c:
         94:b9:e6:73:e8:b1:80:8b:a2:d4:29:62:a5:82:2d:36:2d:50:
         be:56:8b:6f:0c:c7:33:f4:cc:3d:a8:ce:32:44:f6:22:f5:12:
         2f:45:59:4e:cf:64:b3:ed:13:e8:ac:8a:aa:b1:f4:eb:40:25:
         71:4e:e0:32:a1:d1:e0:50:ed:63:64:90:73:e9:3f:d8:a2:1c:
         9c:cb:41:92:60:0c:0b:2c:0b:c8:30:d7:19:ff:cd:b1:61:c8:
         19:e1:ce:fe:d8:d1:55:07:7d:28:1f:09:70:70:fe:f3:c3:e3:
         42:8f:81:61:30:bf:fd:19:ab:54:c0:ba:38:7a:03:b4:94:86:
         b3:8d:18:0a:11:e9:cb:cd:cf:5f:15:2e:16:8b:2c:bb:6d:d6:
         0e:65:30:c2:ba:7f:19:94:97:63:12:54:b9:f1:81:cb:7e:40:
         50:24:6e:47:28:0f:c6:25:08:e3:ab:58:26:52:1d:45:a7:d9:
         38:cc:dc:40:fa:78:a0:46:e2:d9:13:f7:66:b8:b3:15:0c:87:
         d0:be:77:ea:2d:38:12:70:bc:42:5b:f7:fb:3c:f6:cb:51:41:
         24:a6:53:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:43:36 2026 by rpki-client