This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/8988c0f2-2800-48da-a83e-ab54df65c574/0/977EA5118551E98AEAA8BB11C9D99D7196D3DEBA.mft
File:                     977EA5118551E98AEAA8BB11C9D99D7196D3DEBA.mft (raw, json)
Hash identifier:          8AsBJGkLQjMGMdkPotu8vpdqZRS4yTKReNynvmp079g=
Subject key identifier:   87:D2:C3:09:8E:89:AC:0B:2D:8D:69:6B:38:53:48:0F:A3:92:E1:F5
Authority key identifier: 97:7E:A5:11:85:51:E9:8A:EA:A8:BB:11:C9:D9:9D:71:96:D3:DE:BA
Certificate issuer:       /CN=977EA5118551E98AEAA8BB11C9D99D7196D3DEBA
Certificate serial:       45A4D6F95E48F5CEEB822FBC1BBABDCB11A5E3E2
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/977EA5118551E98AEAA8BB11C9D99D7196D3DEBA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8988c0f2-2800-48da-a83e-ab54df65c574/0/977EA5118551E98AEAA8BB11C9D99D7196D3DEBA.mft
Manifest number:          0547
Signing time:             Sat 31 Jan 2026 21:51:14 +0000
Manifest this update:     Sat 31 Jan 2026 21:46:14 +0000
Manifest next update:     Tue 03 Feb 2026 23:22:14 +0000
Files and hashes:         1: 977EA5118551E98AEAA8BB11C9D99D7196D3DEBA.crl (hash: 8mc6Jz9hqE0zmbjt2KiJei5VGS92HIhzJTG1x9VnN9c=)
                          2: 3130332e3132332e3130382e302f32342d3234203d3e20313338303636.roa (hash: q9pcjfkInqPcGghxGeh0wF/8x9n+wp0JshUKi76J40w=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8988c0f2-2800-48da-a83e-ab54df65c574/0/977EA5118551E98AEAA8BB11C9D99D7196D3DEBA.crl
                          rsync://repo-rpki.idnic.net/repo/8988c0f2-2800-48da-a83e-ab54df65c574/0/977EA5118551E98AEAA8BB11C9D99D7196D3DEBA.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/977EA5118551E98AEAA8BB11C9D99D7196D3DEBA.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Feb 2026 23:22:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:a4:d6:f9:5e:48:f5:ce:eb:82:2f:bc:1b:ba:bd:cb:11:a5:e3:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=977EA5118551E98AEAA8BB11C9D99D7196D3DEBA
        Validity
            Not Before: Jan 31 21:46:14 2026 GMT
            Not After : Feb  3 23:22:14 2026 GMT
        Subject: CN=87D2C3098E89AC0B2D8D696B3853480FA392E1F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:48:5e:b7:49:13:10:f0:fd:ea:09:06:c5:4f:
                    29:78:c6:fe:21:48:ec:c0:1d:ff:a2:c5:92:89:7a:
                    99:a8:df:85:fa:74:a6:70:73:67:00:26:bc:1f:12:
                    70:bd:5c:98:6e:e0:a1:c6:41:9f:d7:57:6c:c0:fc:
                    26:a0:7d:b8:5a:f6:ae:4b:1d:46:39:64:62:93:20:
                    3e:f7:93:af:b6:74:f8:f3:a9:17:1d:f3:42:08:6d:
                    57:d0:bd:8b:1a:26:6c:5b:ed:9d:da:b8:14:35:2a:
                    9d:06:77:68:bb:89:63:42:2e:36:c5:b8:a7:59:7c:
                    77:8f:a7:f0:a0:99:14:6e:a5:31:9a:36:93:10:5e:
                    a8:0c:8a:b6:f6:b3:7f:af:01:99:ab:ed:13:95:94:
                    36:a1:19:7f:29:1e:0e:bd:8c:c1:b7:f4:85:35:56:
                    86:8e:f1:de:77:63:bd:31:61:d1:d9:d6:99:26:6b:
                    e8:06:70:d0:22:60:66:51:65:f7:00:e7:77:7e:f6:
                    ba:79:88:33:3f:7d:d3:a7:d7:19:19:5c:b5:09:2e:
                    13:a0:b9:9e:b9:5e:ab:f2:2a:f5:b5:cf:33:1a:89:
                    82:18:d5:c2:dc:cd:2b:a1:e1:59:ac:2b:71:df:9d:
                    17:62:23:c3:17:24:73:bb:4a:06:45:d2:43:61:69:
                    58:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:D2:C3:09:8E:89:AC:0B:2D:8D:69:6B:38:53:48:0F:A3:92:E1:F5
            X509v3 Authority Key Identifier:
                keyid:97:7E:A5:11:85:51:E9:8A:EA:A8:BB:11:C9:D9:9D:71:96:D3:DE:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8988c0f2-2800-48da-a83e-ab54df65c574/0/977EA5118551E98AEAA8BB11C9D99D7196D3DEBA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/977EA5118551E98AEAA8BB11C9D99D7196D3DEBA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8988c0f2-2800-48da-a83e-ab54df65c574/0/977EA5118551E98AEAA8BB11C9D99D7196D3DEBA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:c6:6c:c8:b1:18:ac:80:c5:74:59:d0:a9:06:ed:23:4d:2c:
         e2:b6:e9:a0:77:a9:e4:cd:34:9d:bb:7e:d5:1f:59:b7:43:01:
         16:81:2b:f3:ea:1e:7e:f7:d2:fe:b5:fc:e7:2e:e8:fb:0d:d6:
         98:45:02:6f:ea:e3:b8:d7:39:56:ac:dd:50:54:0d:cd:9d:8f:
         8f:27:35:a1:0f:7e:fc:8b:73:df:8a:a6:07:31:3f:b9:b5:b4:
         9a:2a:78:57:0e:3a:d4:09:60:1a:5b:25:29:99:b1:52:93:8d:
         82:53:a8:24:94:ce:37:d8:cc:0a:9c:69:cc:f1:c9:67:88:5d:
         08:86:4f:37:f4:05:15:29:44:38:71:35:40:33:11:4f:38:a7:
         80:57:7b:81:29:65:45:f3:df:e0:e1:92:3c:06:66:66:c1:c7:
         c4:c3:d3:6e:e1:c2:4f:8a:46:f3:cc:08:18:85:5f:48:11:f7:
         d7:3e:36:e9:50:80:5a:34:66:c0:7d:b4:39:05:b5:fd:5b:f4:
         b5:9f:63:a8:10:b9:de:2b:0f:79:a6:17:d6:84:35:33:a7:cb:
         f7:6a:5c:89:28:34:92:5a:a0:27:b2:f1:28:01:84:a9:1f:66:
         4d:83:9b:6f:4b:57:cd:ff:4c:ef:88:7f:6d:48:19:e6:c0:8b:
         5b:0c:c2:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:58:31 2026 by rpki-client