This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/80827cb8-1b2c-44b1-8190-985d8205a464/0/DA8C840CB41D2668581983C2C4E964E67EF2D6A1.mft
File:                     DA8C840CB41D2668581983C2C4E964E67EF2D6A1.mft (raw, json)
Hash identifier:          kuS0ifCvbAl3pAJcL8UOCQRXXRsto4/ST1/+nE1SXK4=
Subject key identifier:   A5:84:CB:83:BB:62:EC:6E:E2:94:96:52:82:8A:A3:87:7C:20:FE:65
Authority key identifier: DA:8C:84:0C:B4:1D:26:68:58:19:83:C2:C4:E9:64:E6:7E:F2:D6:A1
Certificate issuer:       /CN=DA8C840CB41D2668581983C2C4E964E67EF2D6A1
Certificate serial:       033CDCA247AA4D7EC7A3ACCDE967869D538000D2
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA8C840CB41D2668581983C2C4E964E67EF2D6A1.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/80827cb8-1b2c-44b1-8190-985d8205a464/0/DA8C840CB41D2668581983C2C4E964E67EF2D6A1.mft
Manifest number:          029B
Signing time:             Sat 31 Jan 2026 15:41:49 +0000
Manifest this update:     Sat 31 Jan 2026 15:36:49 +0000
Manifest next update:     Tue 03 Feb 2026 21:22:49 +0000
Files and hashes:         1: DA8C840CB41D2668581983C2C4E964E67EF2D6A1.crl (hash: hJ6+ebBWa8zIpNPL4p/qlQ0x1US8WeWLONL3uCBfI6I=)
                          2: 3130332e3137392e3231342e302f32332d3234203d3e20313439333735.roa (hash: 7mSy93JyGfuZLtTA89nmtcGQjqdRbUslrbNWczBJpGo=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/80827cb8-1b2c-44b1-8190-985d8205a464/0/DA8C840CB41D2668581983C2C4E964E67EF2D6A1.crl
                          rsync://repo-rpki.idnic.net/repo/80827cb8-1b2c-44b1-8190-985d8205a464/0/DA8C840CB41D2668581983C2C4E964E67EF2D6A1.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA8C840CB41D2668581983C2C4E964E67EF2D6A1.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Feb 2026 21:22:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:3c:dc:a2:47:aa:4d:7e:c7:a3:ac:cd:e9:67:86:9d:53:80:00:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA8C840CB41D2668581983C2C4E964E67EF2D6A1
        Validity
            Not Before: Jan 31 15:36:49 2026 GMT
            Not After : Feb  3 21:22:49 2026 GMT
        Subject: CN=A584CB83BB62EC6EE2949652828AA3877C20FE65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:47:4a:56:f5:3b:87:99:33:56:ee:58:30:7a:
                    21:b0:db:b5:76:a6:4e:cc:20:c0:fd:74:4e:4c:76:
                    50:4e:e8:22:a7:0e:47:b0:9a:c2:71:4a:03:df:e8:
                    8d:a1:5e:5d:0a:e1:1e:b4:bc:22:a7:37:45:5e:36:
                    ab:0a:cb:c7:7b:d9:2a:92:aa:56:4c:ba:a5:ca:c7:
                    2a:8c:ab:5a:af:dc:b5:06:74:1a:ab:c5:83:cc:7a:
                    77:15:10:88:ad:dd:d7:c9:d6:42:86:0c:08:40:d6:
                    c9:a7:b9:bb:4f:f9:1c:14:22:ad:8d:1a:8e:e0:ef:
                    ca:82:34:c6:c4:ed:d0:31:b8:9d:f0:c7:58:f0:3b:
                    1d:81:b8:08:fb:76:ad:de:07:14:e2:d3:fa:e9:93:
                    fa:0f:68:51:90:35:bc:ce:0a:bd:27:81:49:39:ed:
                    58:35:5d:33:e2:2b:00:3b:32:e1:47:bf:7e:9e:ad:
                    c9:0a:c1:a7:5f:1c:f4:c0:83:44:a3:bc:ac:8c:57:
                    b5:c1:ff:cc:b0:3f:b7:c8:a6:50:04:67:b4:52:16:
                    b0:93:01:d3:47:66:ac:58:fc:8f:70:74:2f:b0:12:
                    91:08:fd:b5:d9:68:33:71:41:bd:e3:05:f5:75:17:
                    ce:f8:50:f7:5a:00:c5:86:63:bf:40:64:37:e1:fa:
                    06:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:84:CB:83:BB:62:EC:6E:E2:94:96:52:82:8A:A3:87:7C:20:FE:65
            X509v3 Authority Key Identifier:
                keyid:DA:8C:84:0C:B4:1D:26:68:58:19:83:C2:C4:E9:64:E6:7E:F2:D6:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/80827cb8-1b2c-44b1-8190-985d8205a464/0/DA8C840CB41D2668581983C2C4E964E67EF2D6A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA8C840CB41D2668581983C2C4E964E67EF2D6A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/80827cb8-1b2c-44b1-8190-985d8205a464/0/DA8C840CB41D2668581983C2C4E964E67EF2D6A1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:61:e3:45:cf:07:6f:53:aa:39:9f:b8:f9:af:44:f2:e9:a7:
         41:be:f0:7d:a6:16:33:1d:77:21:ef:fe:b9:51:f9:80:13:9c:
         7a:ec:20:9f:28:e4:83:8f:5c:ef:e7:67:9f:4f:f4:2e:ad:fa:
         a1:50:f4:fc:6b:d8:6b:65:d3:ab:f8:6f:f7:f7:5b:86:a1:e2:
         e3:ce:4a:b0:f7:0e:eb:51:53:6e:bc:7c:5c:f0:ed:e1:82:9a:
         27:d3:57:5b:d2:99:3d:d5:7a:32:db:dc:b3:0c:e2:e8:7c:cc:
         83:f4:bc:1d:42:2b:b8:45:a1:28:77:3a:df:0e:4c:8e:1a:e0:
         91:e2:b4:90:46:98:0a:9e:b1:e6:fc:d5:31:99:2b:ec:45:4c:
         c9:c6:18:28:d4:7f:4f:43:e7:66:14:bf:85:41:7d:9c:12:ec:
         a9:eb:c2:4f:ef:97:dc:86:a1:3b:f8:6d:92:92:d4:48:ce:7d:
         e9:87:a5:b9:98:9b:fe:ec:3e:59:46:4d:aa:06:85:ea:68:e1:
         0c:57:9b:28:6d:7a:fc:62:9e:54:79:7b:86:f6:58:cb:f9:cc:
         fd:09:a3:ea:0b:a3:7d:08:42:46:8a:70:bc:26:f7:34:9e:1e:
         f7:9f:0c:7f:e3:26:02:fd:ab:90:75:98:67:75:59:71:8e:c7:
         5c:d5:15:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:44:48 2026 by rpki-client