This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/8c1e80d4-6ebe-492c-a0c5-d759827533b3/0/091F7323435A889C466D811B73B98389C1E084DD.mft
File:                     091F7323435A889C466D811B73B98389C1E084DD.mft (raw, json)
Hash identifier:          FOLtFw4aOMgBM07r6T2Qtukf/vy65dqSRl76lwbhEQI=
Subject key identifier:   CD:92:E7:14:28:B0:0D:A3:EF:1B:86:EB:78:0C:72:83:7A:78:62:4F
Authority key identifier: 09:1F:73:23:43:5A:88:9C:46:6D:81:1B:73:B9:83:89:C1:E0:84:DD
Certificate issuer:       /CN=091F7323435A889C466D811B73B98389C1E084DD
Certificate serial:       6FCEDF370B0712F732A4A065D88F81A6F61FC7C3
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/091F7323435A889C466D811B73B98389C1E084DD.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8c1e80d4-6ebe-492c-a0c5-d759827533b3/0/091F7323435A889C466D811B73B98389C1E084DD.mft
Manifest number:          029F
Signing time:             Sat 31 Jan 2026 17:01:56 +0000
Manifest this update:     Sat 31 Jan 2026 16:56:56 +0000
Manifest next update:     Tue 03 Feb 2026 20:47:56 +0000
Files and hashes:         1: 3130332e3137382e31362e302f32342d3234203d3e2039333431.roa (hash: HWtlgeL3MiIhlDvuL8DrSz4LAVxkX8H7joJ9R29LLYc=)
                          2: 3130332e3137382e31362e302f32332d3233203d3e2039333431.roa (hash: MsT3Z49E42KS28/Nv+cFIfYRhlxroO4eKBgAGaRI40k=)
                          3: 3130332e3137382e31372e302f32342d3234203d3e2039333431.roa (hash: FTuvZoxWRZeBaRmh1oYghVc20okVB2lggjbmWmFC6gw=)
                          4: 091F7323435A889C466D811B73B98389C1E084DD.crl (hash: mdE6zkGAV2is2dxyNX2B8rDhhOa9WYJCJztyEb5ojno=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8c1e80d4-6ebe-492c-a0c5-d759827533b3/0/091F7323435A889C466D811B73B98389C1E084DD.crl
                          rsync://repo-rpki.idnic.net/repo/8c1e80d4-6ebe-492c-a0c5-d759827533b3/0/091F7323435A889C466D811B73B98389C1E084DD.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/091F7323435A889C466D811B73B98389C1E084DD.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Feb 2026 20:47:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:ce:df:37:0b:07:12:f7:32:a4:a0:65:d8:8f:81:a6:f6:1f:c7:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=091F7323435A889C466D811B73B98389C1E084DD
        Validity
            Not Before: Jan 31 16:56:56 2026 GMT
            Not After : Feb  3 20:47:56 2026 GMT
        Subject: CN=CD92E71428B00DA3EF1B86EB780C72837A78624F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:1c:29:b1:92:9b:32:1e:dc:f4:b0:6b:c7:6e:
                    df:59:d2:e5:cb:ed:a2:84:b5:f2:c4:d7:c6:bc:ac:
                    cc:e4:e4:25:20:23:5e:7a:41:dd:bc:66:be:ad:3c:
                    13:54:36:ac:42:58:25:26:d1:d1:75:51:5b:c2:2b:
                    93:3b:b0:21:65:85:7e:72:4e:d8:20:cd:f6:a3:56:
                    a8:1d:40:4b:dc:16:a3:e6:89:34:33:30:84:8a:97:
                    86:81:2e:9d:a8:e2:33:22:c3:2b:f0:87:c3:5b:2b:
                    65:8b:98:bb:c2:aa:99:6f:7e:08:d1:58:63:45:60:
                    2f:16:f7:21:d1:83:33:01:99:77:55:6e:fa:a2:5c:
                    ab:a5:46:10:cb:a2:20:fa:94:3d:fc:20:52:97:c8:
                    73:76:13:06:94:7d:97:97:e2:43:70:06:1a:3f:0c:
                    f6:6d:64:a5:f3:ad:32:89:0e:82:35:71:12:3a:17:
                    8c:e1:7f:42:1b:4b:27:5e:b0:62:cc:e3:6e:a5:92:
                    cb:70:a8:90:7b:4d:3c:5b:2e:15:86:9f:fb:92:7c:
                    9d:0d:25:d8:90:f3:71:36:30:c8:06:72:b8:dd:7a:
                    1e:ec:6f:4e:d6:31:60:d2:02:56:80:8d:39:02:9c:
                    0c:e2:c9:11:b3:3a:56:f1:ec:29:0a:64:fb:e8:a0:
                    85:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:92:E7:14:28:B0:0D:A3:EF:1B:86:EB:78:0C:72:83:7A:78:62:4F
            X509v3 Authority Key Identifier:
                keyid:09:1F:73:23:43:5A:88:9C:46:6D:81:1B:73:B9:83:89:C1:E0:84:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8c1e80d4-6ebe-492c-a0c5-d759827533b3/0/091F7323435A889C466D811B73B98389C1E084DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/091F7323435A889C466D811B73B98389C1E084DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8c1e80d4-6ebe-492c-a0c5-d759827533b3/0/091F7323435A889C466D811B73B98389C1E084DD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:51:a8:b0:5b:1b:20:5d:b1:9a:89:1d:4a:4a:34:65:76:eb:
         41:47:d4:4e:07:14:10:3c:49:b6:08:c7:a7:ab:ad:6b:89:60:
         38:c2:f1:e4:03:55:60:50:9b:62:f1:6a:e8:4f:87:ad:30:62:
         4d:f7:e8:52:ec:95:88:03:18:7b:71:f7:1e:14:c8:21:26:6b:
         ae:01:bd:f1:c4:a9:0d:40:19:d3:aa:02:a7:8f:68:23:39:1f:
         6b:1f:c8:08:95:7c:46:c2:c5:e3:23:ad:c0:ab:08:df:39:ec:
         16:96:95:8d:ac:a2:53:4d:f5:f7:4e:52:01:0c:3c:d3:70:e9:
         b2:42:dc:29:52:7d:6b:96:f2:3e:6b:c3:19:8f:3b:95:7b:9f:
         76:b1:a4:21:ea:45:86:75:fe:24:e5:65:62:ec:3d:9b:56:5e:
         c3:d5:ba:28:75:ae:e1:c4:1a:ea:b6:a6:6f:9f:a4:66:85:5c:
         a7:b4:19:3c:57:94:7a:6e:fd:a2:6c:82:b6:be:56:e4:34:98:
         da:b4:c7:ea:d2:68:a9:c8:fd:64:7d:1e:8f:4f:bd:00:90:d7:
         91:b2:58:dd:50:7f:35:12:77:f1:05:cf:79:26:02:d8:31:16:
         9e:fe:1e:19:5b:ab:0b:50:04:44:09:1c:77:93:08:0e:c0:fe:
         c0:91:09:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 10:06:53 2026 by rpki-client