This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/6098f924-9f2e-499b-8101-02f7506932bf/0/ADE0D4624859A4D642D8C07FD007B4EEE066EFF3.mft
File:                     ADE0D4624859A4D642D8C07FD007B4EEE066EFF3.mft (raw, json)
Hash identifier:          H7HSjyxa6i93lqQjeRdh0HyTsNeB/z3xzwvDizYEkR4=
Subject key identifier:   FA:8F:A7:D2:04:21:36:E4:FA:7C:A4:F7:62:0E:41:BB:98:5D:E6:A1
Authority key identifier: AD:E0:D4:62:48:59:A4:D6:42:D8:C0:7F:D0:07:B4:EE:E0:66:EF:F3
Certificate issuer:       /CN=ADE0D4624859A4D642D8C07FD007B4EEE066EFF3
Certificate serial:       5482CF0AE5EDD817D2E630954CC2B9A1BE61756B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADE0D4624859A4D642D8C07FD007B4EEE066EFF3.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6098f924-9f2e-499b-8101-02f7506932bf/0/ADE0D4624859A4D642D8C07FD007B4EEE066EFF3.mft
Manifest number:          0229
Signing time:             Sat 31 Jan 2026 23:40:05 +0000
Manifest this update:     Sat 31 Jan 2026 23:35:05 +0000
Manifest next update:     Wed 04 Feb 2026 10:22:05 +0000
Files and hashes:         1: 3130332e3139312e3235352e302f32342d3234203d3e20313439393433.roa (hash: 0MTgOgopjubbvpZEDfvpwMMJjT0ePI0/y4zgrFp+eQo=)
                          2: ADE0D4624859A4D642D8C07FD007B4EEE066EFF3.crl (hash: bxqTnMzkJsL4vmGzsxMWih/Hrshgl/ZTPU3CTRKVjHI=)
                          3: 3130332e3139312e3235342e302f32332d3233203d3e20313439393433.roa (hash: 874x7Ob+P1gnAjnP1blHxACfVuuuGxnGAVUEWJIVT2g=)
                          4: 3130332e3139312e3235342e302f32342d3234203d3e20313439393433.roa (hash: OjZssXYKrVMWzUnHRz7s+7gvCsjaEtAJXH0INXsIRL8=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/6098f924-9f2e-499b-8101-02f7506932bf/0/ADE0D4624859A4D642D8C07FD007B4EEE066EFF3.crl
                          rsync://repo-rpki.idnic.net/repo/6098f924-9f2e-499b-8101-02f7506932bf/0/ADE0D4624859A4D642D8C07FD007B4EEE066EFF3.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADE0D4624859A4D642D8C07FD007B4EEE066EFF3.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Feb 2026 10:22:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:82:cf:0a:e5:ed:d8:17:d2:e6:30:95:4c:c2:b9:a1:be:61:75:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ADE0D4624859A4D642D8C07FD007B4EEE066EFF3
        Validity
            Not Before: Jan 31 23:35:05 2026 GMT
            Not After : Feb  4 10:22:05 2026 GMT
        Subject: CN=FA8FA7D2042136E4FA7CA4F7620E41BB985DE6A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:d6:ac:38:61:7b:11:23:ca:5b:30:9b:20:50:
                    26:a1:e1:b3:fd:cc:d8:ba:3c:36:21:02:67:75:06:
                    3d:02:de:51:92:46:ab:04:80:70:94:06:26:75:50:
                    72:2b:00:32:d5:bc:15:18:64:7d:6e:bb:9a:25:db:
                    7f:4c:71:e2:db:6b:85:46:91:18:8e:02:8e:82:69:
                    dd:4d:a5:59:9e:bc:05:74:95:ba:75:fa:1b:d3:a9:
                    6d:22:b8:8f:3b:e8:00:9f:40:e1:be:03:c3:e3:13:
                    55:c5:62:71:19:03:6c:7c:77:0b:a5:75:97:49:43:
                    2b:79:aa:03:96:ef:ed:66:4f:f7:25:40:3d:34:02:
                    d2:31:b2:ae:5f:01:d9:5f:4f:2d:53:41:a9:55:dc:
                    f7:24:36:9d:b8:82:06:bd:30:1b:14:d0:f3:74:eb:
                    9c:b3:e7:57:f6:a8:2b:b9:f4:4b:8e:9c:be:5b:7f:
                    f4:75:dc:ba:fb:59:7b:64:19:3d:4c:43:f9:0b:81:
                    a8:e5:ad:86:b7:4d:bf:ed:4d:37:02:97:5e:bb:e0:
                    1d:72:95:61:a1:5d:77:8d:f6:d7:f2:ac:1e:24:51:
                    23:0b:e4:80:8b:1b:49:70:bc:c4:b0:2c:11:21:06:
                    8d:b3:60:6e:7a:3c:7a:d0:e1:ed:4d:c6:a0:a2:60:
                    a3:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:8F:A7:D2:04:21:36:E4:FA:7C:A4:F7:62:0E:41:BB:98:5D:E6:A1
            X509v3 Authority Key Identifier:
                keyid:AD:E0:D4:62:48:59:A4:D6:42:D8:C0:7F:D0:07:B4:EE:E0:66:EF:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6098f924-9f2e-499b-8101-02f7506932bf/0/ADE0D4624859A4D642D8C07FD007B4EEE066EFF3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADE0D4624859A4D642D8C07FD007B4EEE066EFF3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6098f924-9f2e-499b-8101-02f7506932bf/0/ADE0D4624859A4D642D8C07FD007B4EEE066EFF3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:cf:a4:d0:36:bf:65:d3:34:61:64:4a:e0:22:45:53:11:19:
         49:14:af:c9:06:0d:73:7d:3b:7c:cb:cf:ae:97:19:9d:a9:67:
         b7:7b:a6:ef:db:f9:51:df:20:7b:81:09:df:c9:74:9e:09:5a:
         b7:0c:95:f7:24:b2:99:03:44:db:df:29:3c:eb:c7:23:88:1d:
         1b:e1:ed:61:8e:d7:49:c8:cd:23:5e:fe:01:fe:31:6a:4e:bf:
         f5:04:94:90:a5:7d:05:20:83:10:d4:9a:dc:3f:11:ad:42:50:
         bc:cf:f1:6c:50:fe:b4:2b:78:4f:3e:64:4b:2d:55:a5:1a:9b:
         74:4e:e2:9b:f6:df:b9:95:c2:4a:b7:de:d3:38:a8:89:fe:f2:
         3d:ed:be:1e:35:7e:68:92:72:6b:61:45:ce:b5:47:42:0d:56:
         5f:ff:b0:bf:98:18:34:24:8c:e5:6f:cb:c2:32:57:a8:9c:09:
         0d:dc:92:fa:75:d6:8d:76:43:d8:be:43:85:fb:5b:40:0c:f5:
         89:c4:a8:a2:c0:26:a6:3a:5c:47:c7:5a:ed:c1:e0:9e:5f:4d:
         c5:e7:33:c5:86:13:01:a9:8d:58:04:20:c4:5e:11:31:ce:8e:
         e9:1f:8c:33:3d:50:98:f2:ca:d5:4a:8c:f0:82:79:54:80:b1:
         0e:11:1c:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 12:49:01 2026 by rpki-client