This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/89402655017312B8CFCB367BA82966AA21E11F90.mft
File:                     89402655017312B8CFCB367BA82966AA21E11F90.mft (raw, json)
Hash identifier:          ep6Ha6EbzkNS5csJ4vJ5Y5XMkJSKn4QibVtvOdCePls=
Subject key identifier:   44:6E:CB:28:1D:24:07:56:C9:78:FD:D8:86:42:83:BF:C3:66:3A:95
Authority key identifier: 89:40:26:55:01:73:12:B8:CF:CB:36:7B:A8:29:66:AA:21:E1:1F:90
Certificate issuer:       /CN=89402655017312B8CFCB367BA82966AA21E11F90
Certificate serial:       593039829E8E56E743B8AF33F067C76599FB7EDB
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/89402655017312B8CFCB367BA82966AA21E11F90.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/89402655017312B8CFCB367BA82966AA21E11F90.mft
Manifest number:          051E
Signing time:             Sun 01 Feb 2026 12:01:59 +0000
Manifest this update:     Sun 01 Feb 2026 11:56:59 +0000
Manifest next update:     Wed 04 Feb 2026 18:15:59 +0000
Files and hashes:         1: 323430343a623238303a3a2f33322d3438203d3e203137363730.roa (hash: S1hTgzRInefDZ+nv4OU9cj+WPrGD6wknjfAjdl1JFoo=)
                          2: 3131302e35302e38302e302f32312d3234203d3e203137363730.roa (hash: ENs+ad22cCNfPNiUGh8Crfa5TLmxtOCxc9FzlyRTptI=)
                          3: 3230322e3134372e3139322e302f32302d3234203d3e203137363730.roa (hash: WsFr0RE3ZnujNzg56bjhtSV6UHqOuDU5rMSYq/HFAbw=)
                          4: 3132332e3235332e3233322e302f32322d3234203d3e203137363730.roa (hash: R1hpl90tpuGr3S7MM3M7sdpYxwM9mEKg6oXY2ZteCXg=)
                          5: 323430303a313838303a3a2f33322d3438203d3e203137363730.roa (hash: FP8IqHLkyX7Qj2+QyPrsBYEPwMn3gsRtfyfeKNBNdEg=)
                          6: 3130332e3231332e3132382e302f32322d3234203d3e203137363730.roa (hash: LCi1weYpsHjqbHjmDdoyI35l96+t96YsB4f16htlxbU=)
                          7: 89402655017312B8CFCB367BA82966AA21E11F90.crl (hash: kRXqrqlbZ3KLLqyeIEWlVTqPryrxubOtK9SVi3mRE/c=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/89402655017312B8CFCB367BA82966AA21E11F90.crl
                          rsync://repo-rpki.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/89402655017312B8CFCB367BA82966AA21E11F90.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/89402655017312B8CFCB367BA82966AA21E11F90.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Feb 2026 18:15:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:30:39:82:9e:8e:56:e7:43:b8:af:33:f0:67:c7:65:99:fb:7e:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89402655017312B8CFCB367BA82966AA21E11F90
        Validity
            Not Before: Feb  1 11:56:59 2026 GMT
            Not After : Feb  4 18:15:59 2026 GMT
        Subject: CN=446ECB281D240756C978FDD8864283BFC3663A95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:5d:f6:80:64:2a:ae:b5:41:30:3f:2a:e2:92:
                    fb:52:72:1b:59:57:ca:ed:10:b5:6e:d9:02:d3:e3:
                    ad:0e:4b:8b:93:a3:04:71:0d:65:f0:58:ed:9f:ad:
                    71:0b:3b:e9:0b:62:47:7d:36:96:23:d8:73:58:cd:
                    d6:2b:14:c5:b6:a6:5b:b7:de:1d:58:6e:66:92:1c:
                    8a:f1:c1:83:54:b8:31:cd:c2:62:2c:b9:25:7c:ab:
                    40:2d:6c:39:60:e3:21:d7:ea:06:2e:6e:5b:c2:2d:
                    78:95:a5:47:60:e9:e8:49:83:66:3b:fe:d5:ba:d8:
                    ca:8a:bc:64:c6:aa:b3:f5:27:bc:29:5f:da:0d:03:
                    16:78:37:9c:99:de:7d:93:b6:62:65:c3:98:33:ae:
                    ff:a0:10:73:e4:69:c8:c7:9f:05:c6:f3:5d:b6:8b:
                    bd:35:24:71:95:e5:3e:37:fc:62:d6:7e:8a:06:48:
                    ab:63:b3:d9:f3:64:87:aa:8c:bd:ef:e9:88:f1:a4:
                    07:43:7a:92:0b:f5:fc:99:f3:8e:b6:40:01:59:a5:
                    1f:df:ab:bf:39:51:c5:e1:5f:83:00:06:83:7f:e1:
                    37:c3:89:c5:41:28:43:00:ca:dc:f8:1a:e0:3a:73:
                    9d:5e:46:d7:0e:dd:5b:2f:28:2b:28:89:e7:2d:51:
                    32:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:6E:CB:28:1D:24:07:56:C9:78:FD:D8:86:42:83:BF:C3:66:3A:95
            X509v3 Authority Key Identifier:
                keyid:89:40:26:55:01:73:12:B8:CF:CB:36:7B:A8:29:66:AA:21:E1:1F:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/89402655017312B8CFCB367BA82966AA21E11F90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/89402655017312B8CFCB367BA82966AA21E11F90.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/89402655017312B8CFCB367BA82966AA21E11F90.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:f7:18:77:98:cd:72:16:5a:0f:15:cb:cc:ad:76:d6:88:b4:
         a3:62:56:38:8f:ac:cd:fc:cf:5d:89:62:1f:0c:1d:c1:e5:e6:
         62:2b:f7:3a:c7:fb:53:1d:ce:dc:48:9b:8d:46:f6:ce:5e:79:
         fb:9b:fd:ba:62:f5:12:e3:3e:52:a3:1b:70:f5:ef:71:0b:96:
         64:ef:96:19:73:d6:ad:fa:66:2c:eb:dd:7d:f5:df:71:d9:00:
         4d:e0:00:7e:16:39:54:a1:54:51:a5:60:5a:0a:ae:2e:66:03:
         cf:e9:9d:5d:30:59:e4:a5:a9:03:b3:24:5d:9e:35:9c:93:b3:
         c8:92:a9:e2:f1:3e:b9:1a:72:a8:42:c9:c9:7b:34:3d:61:37:
         fc:ba:83:8d:a3:57:b0:95:44:00:25:6c:d5:3f:ef:f5:02:ca:
         fd:33:92:37:29:7a:24:7d:30:84:d9:e1:99:25:37:2b:5f:ff:
         81:ac:a7:70:db:c8:c5:8a:be:32:d3:be:32:0d:54:a2:76:7a:
         4f:45:b2:5a:39:31:c1:6e:32:69:ee:bb:bf:31:05:b6:59:a4:
         80:13:29:8d:da:60:6c:e6:c8:95:67:40:8d:4e:87:cc:fb:8a:
         9d:1f:5c:e1:7b:d0:5f:ad:85:2a:86:62:a7:47:b4:00:e6:67:
         7c:95:61:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 10:06:52 2026 by rpki-client