This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.mft
File:                     935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.mft (raw, json)
Hash identifier:          If+xLbLPl/WibGaKL4hf/VGUS7qqKl0DnKTmYi5Bato=
Subject key identifier:   7A:B9:CF:F6:B0:08:51:83:0F:04:D4:86:7A:F1:0D:54:21:BC:9E:B5
Authority key identifier: 93:5D:B2:D4:48:8F:AE:2C:11:E1:BF:3B:DF:20:D8:2A:2D:DF:D8:F3
Certificate issuer:       /CN=935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3
Certificate serial:       08CE622D3539288F53AC417B7E6B61853DF46A4C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.mft
Manifest number:          0557
Signing time:             Sat 31 Jan 2026 11:11:08 +0000
Manifest this update:     Sat 31 Jan 2026 11:06:08 +0000
Manifest next update:     Tue 03 Feb 2026 12:59:08 +0000
Files and hashes:         1: 323430323a3630303a633162313a3a2f34382d3438203d3e203338353135.roa (hash: hBCdf6MQ44EMODLH0goT5EgLIomwJ27fDjdA8l3goK8=)
                          2: 3131372e37342e3132332e302f32342d3234203d3e203338353135.roa (hash: 5lJDAspWdkYKRvft5YJv1y1oL5whXpt3WUE0fOXTEtQ=)
                          3: 323430323a3630303a643030303a3a2f34382d3438203d3e203338353135.roa (hash: lmN8CKwnpjABLBKuKVDCz9e5H4GmlgOLsUei3+Y0saA=)
                          4: 3130332e3130372e3235312e302f32342d3234203d3e203338353135.roa (hash: xgt5xEDp+XFwH8hLX8aUiO3xy0s9+XFKXBjJZ88c3KE=)
                          5: 3130332e3130372e3234382e302f32322d3232203d3e203338353135.roa (hash: HLVBD979pS8wg1hMg/z3bLcZUZBMG19OyH8qnmPOiEQ=)
                          6: 935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.crl (hash: pr2I/NiAn0CStacCVqwiSWSMlkSykMh1u7V7kWO7cdY=)
                          7: 3131372e37342e3132302e302f32322d3232203d3e203338353135.roa (hash: CdtTtCGcqTSKprBM/SSCJUpSOUzh3lZ3WFYK1XycLjs=)
                          8: 3130332e3130372e3235302e302f32342d3234203d3e203338353135.roa (hash: Cz55zbo2bg8BQ/A4k8o5Tsse3KPVQaX+P2Zyl0kj47o=)
                          9: 323430323a3630303a313a3a2f34382d3438203d3e203338353135.roa (hash: uXjjFF8r0bZTRb9FAMyxiQMT6f66pjylh6TLVp8RaRI=)
                          10: 3131372e37342e3132372e302f32342d3234203d3e203338353135.roa (hash: 6BrOpQSKuPFPKi6z67zX+xJmpWv9+MYDX1HsymznhbY=)
                          11: 3131372e37342e3132322e302f32342d3234203d3e203338353135.roa (hash: 3SF0bAW+7rz1kqWvQ04ZAo3EXSDUW7WAvx83Y52xCYs=)
                          12: 323430323a3630303a353431343a3a2f34382d3438203d3e203338353135.roa (hash: vdW3QTcBsIPY6dF/jSl1kcP+cWlLsmSjo55p09Ujwos=)
                          13: 323430323a3630303a3a2f33322d3438203d3e203338353135.roa (hash: Pzi7GR8j0R6wiVbVAxvFIEhEVNaHRMjCobhRay+uqBw=)
                          14: 323430323a3630303a633a3a2f34382d3438203d3e203338353135.roa (hash: MHLvNBBDeKLXnh9zpHXyspbjmbbkMSXMU/LUFMRRAKk=)
                          15: 3131372e37342e3132342e302f32322d3232203d3e203338353135.roa (hash: OqpoVOVJpUhsB4C42PcVh81+Ms4dKWfSDdEhcsKwE60=)
                          16: 3130332e3130372e3234382e302f32342d3234203d3e203338353135.roa (hash: MZkAsgI1LK8w1LPPO7mrWaTwnV05X/ESMWLzLbTQIP0=)
                          17: 3131372e37342e3132302e302f32342d3234203d3e203338353135.roa (hash: 89A2hU4ZNeLlTQWFk//hToBFYmlDJWFVlljqu9huGYU=)
                          18: 323430323a3630303a62313a3a2f34382d3438203d3e203338353135.roa (hash: YPCHB9+pVaURl8+dAGmuKHWAAYIp9zXHQ5RNjAvQlWA=)
                          19: 3130332e3130372e3234392e302f32342d3234203d3e203338353135.roa (hash: We1k3RElK9GB1JUpvlgdlEhaIFsMFI9pBQlBnBG9xm0=)
                          20: 3131372e37342e3132352e302f32342d3234203d3e203338353135.roa (hash: SXRbQUacdI0gdlDCMDP1QFPdIAK9kHRg+ZOPQumVqeM=)
                          21: 3131372e37342e3132362e302f32342d3234203d3e203338353135.roa (hash: x/FofJeZNxkVPOa1E9HkT3zXzpIkigVr7Dyocx4wMZs=)
                          22: 3131372e37342e3132342e302f32342d3234203d3e203338353135.roa (hash: nL5h7t1uvPTY7j/fOmJJBHbseWsW8Xn8jUveWxlnXWs=)
                          23: 3131372e37342e3132302e302f32312d3231203d3e203338353135.roa (hash: AnoAXlk+ZznXZQFLclniCilxBvQYCPfhm7aj/ofKMUY=)
                          24: 323430323a3630303a313030303a3a2f34382d3438203d3e203338353135.roa (hash: 7dk3+UbgX607IlNTst1WKsK+D+Kfaq5vP3vfslx3Dv8=)
                          25: 323430323a3630303a633030303a3a2f34382d3438203d3e203338353135.roa (hash: lR+WSBiL7cOFUb1JcRW+5/d+PDThjLOWPJrqzwsQquY=)
                          26: 3131372e37342e3132312e302f32342d3234203d3e203338353135.roa (hash: UiXaStQAKJGueqgS6CXK/3jB9NOQ2r7CCSqgVa6KSp8=)
                          27: 323430323a3630303a643a3a2f34382d3438203d3e203338353135.roa (hash: jfQj9Xe+FFUAvRMk0Cart8oc9Moe7xONTWgrujdxqvw=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.crl
                          rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Feb 2026 12:59:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:ce:62:2d:35:39:28:8f:53:ac:41:7b:7e:6b:61:85:3d:f4:6a:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3
        Validity
            Not Before: Jan 31 11:06:08 2026 GMT
            Not After : Feb  3 12:59:08 2026 GMT
        Subject: CN=7AB9CFF6B00851830F04D4867AF10D5421BC9EB5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:83:4d:de:ab:30:c3:2f:3c:31:4a:b4:87:2d:
                    7e:00:23:c3:33:7b:8e:0c:c4:54:a3:8d:77:8a:79:
                    e0:ec:4f:c1:3a:3d:a3:56:bb:7f:af:e1:20:b1:62:
                    c7:32:3a:fe:50:35:cc:9a:13:cd:e6:17:90:4d:5f:
                    00:b0:08:ea:04:87:02:73:fe:ce:a5:c7:58:2c:4c:
                    ee:f5:27:6a:3d:9e:48:e8:84:4c:e6:58:b9:ee:df:
                    9e:0c:1c:8f:80:bb:27:f5:41:5e:72:95:22:87:dc:
                    2d:a4:50:70:5c:36:94:62:42:d9:09:fb:2e:63:f6:
                    ad:d6:59:ea:84:5c:a5:9c:91:21:a2:c0:70:ff:ea:
                    ec:24:f5:c5:59:d2:29:b9:22:04:9b:e0:97:2b:43:
                    c6:d3:c0:b7:cc:a1:b5:51:c8:53:66:5b:44:ee:99:
                    4e:13:26:1d:22:49:88:71:55:7a:b2:f4:b9:ff:f5:
                    f6:db:1f:48:0b:b8:a1:bf:6f:e2:40:28:88:ba:67:
                    b6:95:f8:c6:05:a2:15:bc:a3:d6:f2:94:46:9f:9b:
                    3b:be:f6:21:30:b0:a9:4f:56:7d:b0:07:6e:b6:65:
                    0d:34:b6:bc:9b:2f:5a:19:e5:02:b8:56:7d:57:ba:
                    eb:1f:3d:50:bc:26:4f:c0:f6:b8:98:2a:83:6e:f3:
                    fa:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:B9:CF:F6:B0:08:51:83:0F:04:D4:86:7A:F1:0D:54:21:BC:9E:B5
            X509v3 Authority Key Identifier:
                keyid:93:5D:B2:D4:48:8F:AE:2C:11:E1:BF:3B:DF:20:D8:2A:2D:DF:D8:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:85:f1:0d:ee:49:f0:a6:ba:64:71:e0:5d:7a:e1:e4:6b:4c:
         c3:33:22:9d:19:c8:cc:89:db:d4:f2:22:77:9a:60:b9:eb:2d:
         b0:af:1a:c0:9d:14:ea:b6:38:7c:e5:a5:46:2b:d5:20:4b:28:
         de:7b:fa:5d:9e:c2:0d:0d:4f:52:4e:eb:73:6f:ac:3a:86:93:
         97:08:07:74:73:a4:0f:3c:71:e6:93:c5:f7:8e:c6:76:fb:f0:
         44:f3:e0:a9:ef:bf:2e:30:64:78:67:99:c3:b0:0d:a2:41:f8:
         11:82:4e:62:cf:e5:4e:74:f7:1e:02:cf:2c:97:b5:d7:b9:04:
         48:d1:fc:a7:5b:a7:8e:86:ef:06:fc:6d:ef:98:68:c8:55:93:
         cb:fe:1e:c0:7a:e5:e8:4c:5c:64:44:7b:5a:a3:19:88:ff:e3:
         68:6a:5e:2e:18:da:6f:94:67:69:1c:b3:70:82:6b:f8:0b:63:
         34:77:88:8c:3b:ad:f7:7b:42:e4:a9:e0:49:fe:17:c0:76:69:
         fb:c5:68:d0:70:0f:dc:6b:c1:49:5e:d9:5a:64:df:4e:21:74:
         60:59:74:4a:8c:47:46:50:7a:c0:96:bb:24:a7:72:a2:42:7d:
         aa:96:7b:ee:79:63:49:40:71:83:3e:5c:c4:59:72:b6:7d:9c:
         e1:f7:ce:19
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUCM5iLTU5KI9TrEF7fmthhT30akwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTM1REIyRDQ0ODhGQUUyQzExRTFCRjNCREYyMEQ4MkEy
RERGRDhGMzAeFw0yNjAxMzExMTA2MDhaFw0yNjAyMDMxMjU5MDhaMDMxMTAvBgNV
BAMTKDdBQjlDRkY2QjAwODUxODMwRjA0RDQ4NjdBRjEwRDU0MjFCQzlFQjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGg03eqzDDLzwxSrSHLX4AI8Mz
e44MxFSjjXeKeeDsT8E6PaNWu3+v4SCxYscyOv5QNcyaE83mF5BNXwCwCOoEhwJz
/s6lx1gsTO71J2o9nkjohEzmWLnu354MHI+Auyf1QV5ylSKH3C2kUHBcNpRiQtkJ
+y5j9q3WWeqEXKWckSGiwHD/6uwk9cVZ0im5IgSb4JcrQ8bTwLfMobVRyFNmW0Tu
mU4TJh0iSYhxVXqy9Ln/9fbbH0gLuKG/b+JAKIi6Z7aV+MYFohW8o9bylEafmzu+
9iEwsKlPVn2wB262ZQ00trybL1oZ5QK4Vn1XuusfPVC8Jk/A9riYKoNu8/pfAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUernP9rAIUYMPBNSGevENVCG8nrUwHwYDVR0j
BBgwFoAUk12y1EiPriwR4b873yDYKi3f2PMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82
YzRjNjRhOS0zNTM3LTRiYzctODYxMy04ZTk4MTYyOWU0Y2EvMC85MzVEQjJENDQ4
OEZBRTJDMTFFMUJGM0JERjIwRDgyQTJEREZEOEYzLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvOTM1REIyRDQ0ODhGQUUyQzExRTFCRjNCREYyMEQ4MkEyRERG
RDhGMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmM0YzY0YTktMzUzNy00YmM3LTg2
MTMtOGU5ODE2MjllNGNhLzAvOTM1REIyRDQ0ODhGQUUyQzExRTFCRjNCREYyMEQ4
MkEyRERGRDhGMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAFmF8Q3uSfCmumRx4F164eRrTMMzIp0ZyMyJ
29TyIneaYLnrLbCvGsCdFOq2OHzlpUYr1SBLKN57+l2ewg0NT1JO63NvrDqGk5cI
B3RzpA88ceaTxfeOxnb78ETz4Knvvy4wZHhnmcOwDaJB+BGCTmLP5U509x4CzyyX
tde5BEjR/Kdbp46G7wb8be+YaMhVk8v+HsB65ehMXGREe1qjGYj/42hqXi4Y2m+U
Z2kcs3CCa/gLYzR3iIw7rfd7QuSp4En+F8B2afvFaNBwD9xrwUle2Vpk304hdGBZ
dEqMR0ZQesCWuySncqJCfaqWe+55Y0lAcYM+XMRZcrZ9nOH3zhk=
-----END CERTIFICATE-----
Generated at Mon Feb 2 09:43:14 2026 by rpki-client