This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/758db87b-16cd-437a-a5b5-08cb35da97f0/0/8CBCE2EE006256C9A6207949314A7D1FCC415B5A.mft
File:                     8CBCE2EE006256C9A6207949314A7D1FCC415B5A.mft (raw, json)
Hash identifier:          Ba8T7r70u2DuiJ/VrFmL5oc6FahKRudE7EFFN0Z6cjg=
Subject key identifier:   95:3B:65:1D:BF:4C:75:7D:2A:EF:1F:65:2E:F2:27:DE:2F:AD:02:5C
Authority key identifier: 8C:BC:E2:EE:00:62:56:C9:A6:20:79:49:31:4A:7D:1F:CC:41:5B:5A
Certificate issuer:       /CN=8CBCE2EE006256C9A6207949314A7D1FCC415B5A
Certificate serial:       09610452F38D9B0F3F63FA5D5249442556B9E12E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CBCE2EE006256C9A6207949314A7D1FCC415B5A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/758db87b-16cd-437a-a5b5-08cb35da97f0/0/8CBCE2EE006256C9A6207949314A7D1FCC415B5A.mft
Manifest number:          0253
Signing time:             Sat 31 Jan 2026 08:41:35 +0000
Manifest this update:     Sat 31 Jan 2026 08:36:35 +0000
Manifest next update:     Tue 03 Feb 2026 10:26:35 +0000
Files and hashes:         1: 3130332e3138372e3131322e302f32332d3234203d3e20313439373230.roa (hash: tJd9lCwOT2E5aUEAYGLVk9Vox9W7mUTKc82A3hANFMo=)
                          2: 8CBCE2EE006256C9A6207949314A7D1FCC415B5A.crl (hash: M3eF8aDxPqZN+VFeWVJcapiU9IX6bKgJO/hTvD58K4s=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/758db87b-16cd-437a-a5b5-08cb35da97f0/0/8CBCE2EE006256C9A6207949314A7D1FCC415B5A.crl
                          rsync://repo-rpki.idnic.net/repo/758db87b-16cd-437a-a5b5-08cb35da97f0/0/8CBCE2EE006256C9A6207949314A7D1FCC415B5A.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CBCE2EE006256C9A6207949314A7D1FCC415B5A.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Feb 2026 10:26:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:61:04:52:f3:8d:9b:0f:3f:63:fa:5d:52:49:44:25:56:b9:e1:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8CBCE2EE006256C9A6207949314A7D1FCC415B5A
        Validity
            Not Before: Jan 31 08:36:35 2026 GMT
            Not After : Feb  3 10:26:35 2026 GMT
        Subject: CN=953B651DBF4C757D2AEF1F652EF227DE2FAD025C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:d3:04:d3:86:32:c7:e1:c7:f5:13:45:6d:13:
                    78:32:b6:f6:4e:1a:c3:dc:8c:41:51:5c:08:fc:5f:
                    b5:32:2f:3e:28:64:17:e9:1e:1f:60:33:d4:88:95:
                    cb:15:93:ed:98:6f:ff:04:8d:7b:7a:83:35:1b:c3:
                    00:50:35:9b:e3:47:55:d9:14:85:69:1f:a6:f6:82:
                    f8:54:82:38:5e:4f:be:43:fb:ca:96:02:3f:e2:e5:
                    1e:ed:45:22:0d:e2:7d:ee:32:4d:09:cb:71:c4:8b:
                    d2:e2:b6:e6:5a:56:f6:f9:90:25:e0:46:f9:40:8a:
                    66:fe:e9:b1:b5:4a:af:37:2d:7c:5c:a3:df:f8:f1:
                    72:f2:06:d9:32:f6:3e:7a:68:5b:7c:8c:df:e1:db:
                    61:40:e7:69:49:76:bf:3b:9a:b1:8c:1e:86:c7:3e:
                    d3:30:21:dc:0a:6c:a8:5d:39:df:fc:2f:8a:74:ea:
                    9d:46:d0:59:3d:15:62:1c:4e:d6:71:2b:c0:de:b8:
                    a8:fd:f5:e1:3b:9d:ab:99:b7:29:90:6d:05:ea:5b:
                    ed:9b:da:66:27:2a:9a:7b:dc:23:12:0c:e4:e4:30:
                    11:27:43:0f:12:68:f3:08:fc:b5:40:64:3d:85:e5:
                    e8:23:6f:94:99:a7:18:83:e0:39:e8:3f:46:22:27:
                    db:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:3B:65:1D:BF:4C:75:7D:2A:EF:1F:65:2E:F2:27:DE:2F:AD:02:5C
            X509v3 Authority Key Identifier:
                keyid:8C:BC:E2:EE:00:62:56:C9:A6:20:79:49:31:4A:7D:1F:CC:41:5B:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/758db87b-16cd-437a-a5b5-08cb35da97f0/0/8CBCE2EE006256C9A6207949314A7D1FCC415B5A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CBCE2EE006256C9A6207949314A7D1FCC415B5A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/758db87b-16cd-437a-a5b5-08cb35da97f0/0/8CBCE2EE006256C9A6207949314A7D1FCC415B5A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:9e:95:d7:a2:2f:0d:34:ec:88:97:07:51:0f:b1:73:86:5f:
         51:f6:50:32:81:3d:ad:84:fc:88:64:cc:d5:9c:91:6a:26:f1:
         47:3b:b6:16:1a:b1:61:fe:e7:07:1a:9d:fe:6c:b3:c4:4d:f7:
         e5:e2:2d:3f:bc:7f:ba:d8:6a:e6:3a:60:5a:65:9d:77:06:b4:
         8f:f9:fe:d1:d6:6b:86:3b:54:48:ce:9d:d8:57:7c:92:9e:69:
         62:46:de:e7:ed:6c:be:38:b0:6f:03:af:20:aa:27:12:d5:ff:
         7d:bc:67:c4:01:1b:61:5d:58:93:03:19:f6:89:70:e0:07:2a:
         5c:74:eb:9e:d3:1d:41:76:01:a2:67:c2:33:0c:d8:2d:e1:38:
         63:b5:bb:d4:f0:66:0d:2a:01:62:32:3b:d1:f4:78:40:fa:4d:
         1f:36:65:82:e1:66:53:a6:85:52:24:db:9d:61:97:9c:c7:6e:
         42:22:95:ed:be:73:7f:a2:db:b1:0d:9b:06:e4:95:ad:fa:21:
         f4:9b:4c:d7:15:26:67:c8:10:2d:b9:c6:38:c8:c2:0f:ba:fb:
         fb:ea:3d:59:8e:fe:36:19:24:11:2f:28:d8:4f:a8:cd:84:0c:
         d5:b9:0e:78:d5:f4:8f:2d:18:ec:cf:73:d6:3d:9f:46:a7:4c:
         4a:49:a1:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 12:48:39 2026 by rpki-client