This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.mft
File:                     F7D89AF4A6B49559B90BD1A11D2262692C406D9B.mft (raw, json)
Hash identifier:          IOfFMpBBeADxU6V/43/AU/WWW8vNsIr/5PgdckSQ77A=
Subject key identifier:   40:AC:FA:A6:A3:35:97:80:4B:ED:65:EA:36:0A:BB:EA:42:27:B3:28
Authority key identifier: F7:D8:9A:F4:A6:B4:95:59:B9:0B:D1:A1:1D:22:62:69:2C:40:6D:9B
Certificate issuer:       /CN=F7D89AF4A6B49559B90BD1A11D2262692C406D9B
Certificate serial:       615B5EDD569C476E576F1A32C1EF95AFAE8104AC
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.mft
Manifest number:          0224
Signing time:             Sat 31 Jan 2026 04:41:34 +0000
Manifest this update:     Sat 31 Jan 2026 04:36:34 +0000
Manifest next update:     Tue 03 Feb 2026 11:52:34 +0000
Files and hashes:         1: 3130332e31332e3230342e302f32342d3234203d3e203438343635.roa (hash: WBg+Oj5FDShLbz1I5ijbkQnlP4hqNRkJwhL0ngYl8bg=)
                          2: 3130332e31332e3230352e302f32342d3234203d3e203438343635.roa (hash: /BkZhdhHuWpr0COSSqEa5xQ/tUEnJqvOpL9FKXE/Mm4=)
                          3: 3130332e31332e3230342e302f32332d3233203d3e203634333030.roa (hash: 2AxkviF5pv7j1kTQ3v8XjI6k7pg1zXnW3iJ2qwjQWV0=)
                          4: 3130332e31332e3230352e302f32342d3234203d3e20313532333636.roa (hash: bNck8LpKpp26kW2UN16eMZ1fOvjILY8XEu10GDGQj+I=)
                          5: 3130332e31332e3230342e302f32342d3234203d3e203634333030.roa (hash: aoGZEwGfwxorrH0vm0ZUZnYbhYMMuOl+o+RcX6GAvoE=)
                          6: F7D89AF4A6B49559B90BD1A11D2262692C406D9B.crl (hash: w8b51+8MGf9SZHaTVpwi0n4xcgY1F0yyV1a6lKzC6DE=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.crl
                          rsync://repo-rpki.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Feb 2026 11:52:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:5b:5e:dd:56:9c:47:6e:57:6f:1a:32:c1:ef:95:af:ae:81:04:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F7D89AF4A6B49559B90BD1A11D2262692C406D9B
        Validity
            Not Before: Jan 31 04:36:34 2026 GMT
            Not After : Feb  3 11:52:34 2026 GMT
        Subject: CN=40ACFAA6A33597804BED65EA360ABBEA4227B328
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:6b:1d:63:21:3c:f9:d7:eb:c2:6c:31:91:b8:
                    d9:f1:45:ab:ad:22:22:9b:48:20:6a:06:1b:ce:9b:
                    19:b5:5d:a2:90:f8:a9:5a:01:bf:95:13:57:c3:b1:
                    e5:cc:b3:42:69:23:98:2b:bf:d5:66:c6:32:fe:8d:
                    ad:e7:6e:e7:53:94:60:2e:25:ca:8f:af:28:a1:19:
                    b9:a6:33:e5:bd:6a:35:c4:73:c3:20:3e:f5:18:1e:
                    ea:b7:ab:ee:92:4b:93:f2:e3:02:4a:47:c1:bb:1c:
                    b3:10:e1:62:f4:80:2a:ce:f1:2e:45:2c:06:eb:11:
                    ef:f9:82:6a:4b:33:9f:23:71:a8:cd:ae:68:c4:1f:
                    c7:85:d2:f1:36:e6:21:f9:2d:c0:f1:7b:9e:7a:4e:
                    42:5d:f8:d5:f8:70:76:e5:0c:c6:0d:7b:37:5d:2d:
                    a7:7f:4d:e1:07:08:c9:74:fd:c5:d9:b3:28:4b:fe:
                    b8:9e:f8:e0:58:46:fc:6c:91:ea:61:94:dd:68:19:
                    47:3f:f5:ed:b2:49:e9:f6:1b:a7:33:6d:4f:31:a6:
                    3e:c7:76:ba:81:b1:b6:3d:1b:d0:24:ac:5c:3b:6f:
                    6f:45:af:1f:3a:69:fc:72:53:cb:1d:2a:36:c1:13:
                    03:2d:9b:e7:b4:1d:ff:c0:ff:ac:c4:5a:90:22:c5:
                    5d:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:AC:FA:A6:A3:35:97:80:4B:ED:65:EA:36:0A:BB:EA:42:27:B3:28
            X509v3 Authority Key Identifier:
                keyid:F7:D8:9A:F4:A6:B4:95:59:B9:0B:D1:A1:1D:22:62:69:2C:40:6D:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:d0:4d:59:f2:66:94:49:58:d9:a1:4a:79:6f:02:2f:be:0e:
         4a:9b:63:7b:b6:f7:cd:79:a2:4a:60:b5:56:a0:37:b4:75:82:
         52:d2:ce:3e:48:d1:f8:a5:c6:2c:64:61:f8:f8:5b:1c:6f:c0:
         a9:28:05:26:b7:29:7c:7b:08:b4:32:38:97:fb:b4:c3:7c:dd:
         a1:0e:ef:78:1f:78:e4:00:05:b7:bc:74:f5:61:7a:95:73:fa:
         cc:02:c0:56:66:5a:bd:84:54:ae:0b:c0:22:c0:94:49:54:fd:
         00:31:b6:74:04:66:17:a5:28:6c:86:2c:43:b0:51:14:f2:9c:
         5c:ea:bf:cf:5f:c6:3b:e0:7d:65:ca:bf:77:c8:ce:ba:cc:c5:
         01:03:31:6b:d2:cc:fe:bf:4e:cb:f6:cb:bc:c5:22:c4:a8:90:
         a5:36:fa:be:8f:38:c4:3e:2b:0a:54:81:c5:ce:78:93:ca:32:
         0b:a3:75:5c:d7:f9:9d:f9:ed:05:74:c3:e6:18:4c:d4:88:82:
         d5:67:86:65:8d:0c:c9:e0:2d:49:41:54:e3:37:cb:c7:5b:7c:
         ee:d7:d6:ac:47:9c:12:4d:dd:51:af:80:21:c2:d8:6f:5c:d9:
         72:74:fe:37:4d:14:34:2e:bd:16:cd:5b:b2:17:1d:83:9e:47:
         f4:ef:20:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 10:05:27 2026 by rpki-client