This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/26425B70294F98035D38788E597A4A6CEB9C9CE5.mft
File:                     26425B70294F98035D38788E597A4A6CEB9C9CE5.mft (raw, json)
Hash identifier:          3HxK+p/Sp7n5UWXdrQ4hgT5Donq+9KYCa1SXhA1GgNg=
Subject key identifier:   86:0F:C8:43:A1:A4:9C:17:8F:00:CF:D2:A0:A7:F9:B1:18:CC:73:52
Authority key identifier: 26:42:5B:70:29:4F:98:03:5D:38:78:8E:59:7A:4A:6C:EB:9C:9C:E5
Certificate issuer:       /CN=26425B70294F98035D38788E597A4A6CEB9C9CE5
Certificate serial:       7FEA2AC5F7C90C5D245177B73283CED013DF50D0
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26425B70294F98035D38788E597A4A6CEB9C9CE5.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/26425B70294F98035D38788E597A4A6CEB9C9CE5.mft
Manifest number:          0545
Signing time:             Sun 01 Feb 2026 09:00:01 +0000
Manifest this update:     Sun 01 Feb 2026 08:55:01 +0000
Manifest next update:     Wed 04 Feb 2026 16:04:01 +0000
Files and hashes:         1: 35382e3134352e3137352e302f32342d3234203d3e203436303534.roa (hash: sSjIG0LDeS5saZQ8C2CVyK81s+5ejD72CH0is00YDY4=)
                          2: 35382e3134352e3136382e302f32342d3234203d3e203436303534.roa (hash: N6AEmETFQ4NGMx3FYjWNV2pifT99NOMKn0cAzmtwEPs=)
                          3: 35382e3134352e3137312e302f32342d3234203d3e203436303534.roa (hash: pPJorPhtoURcHfFuZaHPY1347QHf/vc9r8CP1wzserg=)
                          4: 26425B70294F98035D38788E597A4A6CEB9C9CE5.crl (hash: mqOrBAzAWSs5SHmBnvOSwaQxxSpbu2wilGS4zxU6H7I=)
                          5: 35382e3134352e3136392e302f32342d3234203d3e203436303534.roa (hash: FphOhbOvD7rhQc2k+v+l+2rQkAehuLUzPlPUYQrzCzw=)
                          6: 35382e3134352e3137332e302f32342d3234203d3e203436303534.roa (hash: OH7ZCJTwnLCxXMNsgmtlP1c6T2EBORCMxpBSErbjzUQ=)
                          7: 35382e3134352e3137322e302f32342d3234203d3e203436303534.roa (hash: GllxH/PgbP6S2bfFvEpAEeVFKqOz04XhxUteJc/lpd0=)
                          8: 35382e3134352e3137342e302f32342d3234203d3e203436303534.roa (hash: JNMmXBJmRLeZ0v7hbRMvuNCKgvK7sZzrdM1QwWkvKok=)
                          9: 35382e3134352e3137302e302f32342d3234203d3e203436303534.roa (hash: Hb5P0TDeMBn1cOFH2oq3loUzifYWvfep94RtX5Q9BTY=)
                          10: 35382e3134352e3136382e302f32312d3231203d3e203436303534.roa (hash: Lu9azehLR4chvFlJHbgACl9g/2sKz1G6TYe/wHO70OY=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/26425B70294F98035D38788E597A4A6CEB9C9CE5.crl
                          rsync://repo-rpki.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/26425B70294F98035D38788E597A4A6CEB9C9CE5.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26425B70294F98035D38788E597A4A6CEB9C9CE5.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Feb 2026 16:04:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:ea:2a:c5:f7:c9:0c:5d:24:51:77:b7:32:83:ce:d0:13:df:50:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26425B70294F98035D38788E597A4A6CEB9C9CE5
        Validity
            Not Before: Feb  1 08:55:01 2026 GMT
            Not After : Feb  4 16:04:01 2026 GMT
        Subject: CN=860FC843A1A49C178F00CFD2A0A7F9B118CC7352
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:fd:6e:bc:77:72:3e:a4:34:d2:d3:0b:7e:0a:
                    22:3d:45:c4:f2:b7:d9:50:31:26:87:c8:cd:ff:b0:
                    0d:85:b2:21:78:67:42:e9:b8:42:78:d3:71:dd:a7:
                    9a:3b:ee:e4:0d:82:b3:9e:4c:73:02:5c:a9:e0:07:
                    15:e0:cb:56:22:b9:3d:4c:23:d1:3f:10:dd:8a:de:
                    94:ad:2c:8a:51:62:92:f8:4d:1a:8a:c7:eb:4c:60:
                    cd:be:8f:43:6c:52:85:9e:a8:a3:3a:5f:ce:5d:1e:
                    5a:3b:29:4f:84:b2:cf:ef:93:da:c4:9f:c4:f8:1c:
                    a3:a6:ed:c6:04:68:6e:42:4c:d0:d2:c3:16:ba:ab:
                    cc:7f:0c:be:33:d9:d5:a6:93:3b:2a:ff:8d:3f:1d:
                    52:ec:8f:64:02:d0:51:73:53:31:47:e7:df:d9:6d:
                    1c:23:e4:aa:07:aa:35:5f:78:3c:f4:07:25:56:33:
                    ce:16:78:ec:fb:06:c5:1b:30:55:4c:8d:24:3a:51:
                    58:1e:6c:d9:ec:52:04:51:33:ad:bf:9f:ab:b7:19:
                    ad:ef:56:ba:a7:a9:11:4b:f1:f0:0c:f8:52:ae:d3:
                    ac:1c:3a:79:df:12:c3:24:77:b7:11:86:e6:c8:8d:
                    c3:5d:1f:9f:1f:48:21:8e:e2:a2:19:31:1d:44:9f:
                    85:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:0F:C8:43:A1:A4:9C:17:8F:00:CF:D2:A0:A7:F9:B1:18:CC:73:52
            X509v3 Authority Key Identifier:
                keyid:26:42:5B:70:29:4F:98:03:5D:38:78:8E:59:7A:4A:6C:EB:9C:9C:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/26425B70294F98035D38788E597A4A6CEB9C9CE5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26425B70294F98035D38788E597A4A6CEB9C9CE5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/26425B70294F98035D38788E597A4A6CEB9C9CE5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:ee:a4:d7:20:5e:78:17:79:3b:2d:7c:16:32:7a:37:91:73:
         9f:02:ca:81:3b:e6:d1:91:94:7a:e8:d1:8d:24:d2:92:36:5e:
         a3:56:3d:76:08:28:31:fa:c3:85:64:eb:cf:f7:58:0b:4d:cd:
         eb:c2:d7:8c:de:6f:8a:6c:6e:07:01:16:36:de:4a:69:5f:a2:
         52:86:36:8e:0c:84:ec:00:d3:1d:61:0e:f5:d5:1f:d0:87:5f:
         45:8f:d6:1b:8d:9b:ab:ce:d8:13:78:f8:c1:66:db:b3:5c:59:
         24:b1:c6:49:de:af:46:f3:70:90:f3:fd:03:85:c2:76:0a:bf:
         7a:8d:80:75:df:d4:3b:3e:53:64:cd:46:5c:52:f3:b7:81:b3:
         5c:3d:8e:72:89:8f:a5:86:93:38:dd:95:31:db:5f:91:e8:34:
         3d:64:ed:42:e2:78:af:32:86:84:a7:b8:2a:24:f8:c5:f2:f2:
         b6:73:73:73:7f:31:3e:58:58:49:93:61:a2:40:a4:c4:ce:6c:
         1a:c6:d4:ca:93:1c:3d:2c:81:c1:5c:d4:5f:11:93:35:8f:1c:
         05:a7:04:35:2e:d3:3a:57:b4:87:40:87:2e:34:bd:ce:75:7e:
         c4:06:57:f0:f8:32:b3:d4:2b:54:51:b4:73:b6:17:c0:d2:79:
         f3:22:60:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 10:05:29 2026 by rpki-client