This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/BF3B675AEBEE64D00B323056545D1F630F1C489E.mft
File:                     BF3B675AEBEE64D00B323056545D1F630F1C489E.mft (raw, json)
Hash identifier:          gEm312vwAHs3+ztE0yqMaEPkAtMoR/ImWKGxeD05G2o=
Subject key identifier:   33:3B:FB:89:02:7A:1C:EF:E0:E1:A0:C2:A6:32:98:4F:65:B9:86:98
Authority key identifier: BF:3B:67:5A:EB:EE:64:D0:0B:32:30:56:54:5D:1F:63:0F:1C:48:9E
Certificate issuer:       /CN=BF3B675AEBEE64D00B323056545D1F630F1C489E
Certificate serial:       5DC7F8FC421A515C4D0F41E669C40C277A25D0A1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF3B675AEBEE64D00B323056545D1F630F1C489E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/BF3B675AEBEE64D00B323056545D1F630F1C489E.mft
Manifest number:          0548
Signing time:             Sat 31 Jan 2026 13:50:52 +0000
Manifest this update:     Sat 31 Jan 2026 13:45:52 +0000
Manifest next update:     Tue 03 Feb 2026 18:39:52 +0000
Files and hashes:         1: 3230322e36392e39362e302f32302d3234203d3e2039373835.roa (hash: 9zTx3s0a2rHUUwPutdrNSjBytv6Kk1GTM8S/civ+mWo=)
                          2: 3131362e3231332e34382e302f32302d3234203d3e2039373835.roa (hash: ILkXkfNJzfGzwTYNzRYQw2a7890NKmPmydyWQw+HB7E=)
                          3: 3131362e3231332e34382e302f32302d3234203d3e20313331363931.roa (hash: GYZuxR+Zqxd6pxL2lTHKcyVNBpecVMAB2ZosCkKojM0=)
                          4: 3232302e3135372e39362e302f32302d3234203d3e2039373835.roa (hash: HNZfntXqIdjS6Oc1nk9EDrt/Ny6J1wp1N0wmznQcons=)
                          5: 3230322e3135312e382e302f32322d3234203d3e2039373835.roa (hash: J6bQJ2rdsim2ttJlJ/Bk72O/5PQxeXoEvre44CKnHWo=)
                          6: 3232332e3136342e302e302f31362d3234203d3e2039373835.roa (hash: GqlYotz76qpsvx0YbP1++o+soFVawkjmgw8JjYGM37s=)
                          7: 323430333a373230303a3a2f33322d3438203d3e2039373835.roa (hash: CtyzufwtsM1OsMWgnYCmXW6JoR/5zQKHjokkqsxGYYM=)
                          8: 3230322e36392e39362e302f32302d3234203d3e20313331363931.roa (hash: levW4fK5Av9j8+txVVV15SprxZ5Vl8IniN5F3a6MoCA=)
                          9: BF3B675AEBEE64D00B323056545D1F630F1C489E.crl (hash: ZPOUd2TWFUVFCBRl2nsFH0AUpYIOKD2cobKOai26aO4=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/BF3B675AEBEE64D00B323056545D1F630F1C489E.crl
                          rsync://repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/BF3B675AEBEE64D00B323056545D1F630F1C489E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF3B675AEBEE64D00B323056545D1F630F1C489E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Feb 2026 18:39:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:c7:f8:fc:42:1a:51:5c:4d:0f:41:e6:69:c4:0c:27:7a:25:d0:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF3B675AEBEE64D00B323056545D1F630F1C489E
        Validity
            Not Before: Jan 31 13:45:52 2026 GMT
            Not After : Feb  3 18:39:52 2026 GMT
        Subject: CN=333BFB89027A1CEFE0E1A0C2A632984F65B98698
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:39:21:83:d8:67:40:8f:9c:56:73:e3:ba:b7:
                    cb:b3:50:f7:52:fd:eb:eb:5f:c9:bc:64:fb:35:2a:
                    99:84:c6:14:8b:16:f8:bb:c4:86:a8:be:c5:a9:0d:
                    6b:db:67:1e:b0:09:7c:1c:a7:17:b9:07:4c:74:66:
                    e5:ed:43:cb:33:7e:ad:41:95:e8:1c:3c:7d:7b:a1:
                    f4:86:21:56:04:fe:03:c4:7f:ec:24:c3:a8:2e:b6:
                    fe:3e:a4:a6:77:0a:35:6d:cf:6d:6b:48:e7:b8:9f:
                    dc:09:dd:54:f7:88:ad:1e:80:0f:8d:34:af:e9:e7:
                    5a:c9:7a:d9:5b:4a:9a:33:92:3f:a3:97:81:83:56:
                    7a:70:91:dd:79:69:8b:12:69:04:5d:c1:ff:c9:27:
                    86:4d:c4:85:c8:e3:2e:96:83:cd:32:d3:2e:68:a0:
                    99:ca:eb:7f:ba:6c:7c:4e:f3:3a:58:98:35:72:b7:
                    cb:75:e7:98:57:8d:07:20:01:ac:0c:b9:dc:8c:71:
                    e5:f4:c2:06:a5:36:be:b7:c5:62:7d:97:ea:2d:20:
                    27:76:49:7a:1d:12:2e:35:09:bc:13:b6:2c:f9:f1:
                    96:33:c1:54:ab:f6:a5:95:be:89:01:39:b9:70:cd:
                    0b:19:9f:6a:6f:b4:2e:73:76:38:1c:d9:a3:80:fa:
                    52:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:3B:FB:89:02:7A:1C:EF:E0:E1:A0:C2:A6:32:98:4F:65:B9:86:98
            X509v3 Authority Key Identifier:
                keyid:BF:3B:67:5A:EB:EE:64:D0:0B:32:30:56:54:5D:1F:63:0F:1C:48:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/BF3B675AEBEE64D00B323056545D1F630F1C489E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF3B675AEBEE64D00B323056545D1F630F1C489E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/BF3B675AEBEE64D00B323056545D1F630F1C489E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:6e:7f:ac:55:35:bd:7b:a9:4e:69:e9:15:e2:25:9e:39:38:
         34:8f:f8:0d:9e:e3:79:5d:87:30:ae:64:cb:59:8a:4a:f6:10:
         69:ad:f7:42:cc:3f:42:72:83:f4:62:e8:73:21:b7:e2:c9:65:
         97:cb:38:94:21:cf:4a:b4:74:15:c9:32:3c:55:34:f2:32:c9:
         49:21:23:4a:6e:52:11:97:66:4a:88:1b:17:f5:69:b7:c2:26:
         ec:a3:85:ca:69:b2:be:21:3a:c7:0e:bc:44:ea:5c:19:04:27:
         1b:34:bb:1c:51:e5:53:10:43:38:5a:1e:7a:ce:8a:49:79:90:
         56:cf:a5:a3:47:53:56:8b:2b:61:46:4e:ec:a2:e8:0e:f0:9f:
         bf:2f:d3:e9:7b:03:69:69:ce:b8:73:4f:1d:f3:ab:87:1d:ab:
         bb:e8:79:d7:1c:88:ba:3f:d6:7f:b8:40:f9:45:1d:f3:ea:43:
         ff:6f:11:1a:05:ef:d6:42:67:57:c9:2f:95:60:6e:9c:c2:74:
         87:5f:a3:55:8b:3d:3f:30:53:49:01:63:45:ea:d3:e6:c7:94:
         47:56:92:be:52:1c:01:91:97:69:37:d3:65:37:f8:1f:39:3b:
         f8:7f:e3:38:e3:a0:e3:22:eb:c2:2d:62:66:c5:0e:22:25:30:
         d6:08:ce:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 10:06:54 2026 by rpki-client