This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/8c667769-80dc-4093-b5f7-dfe7c5720486/0/116B1B493114E6F87244DA54CAB8D8EAB2503A38.mft
File:                     116B1B493114E6F87244DA54CAB8D8EAB2503A38.mft (raw, json)
Hash identifier:          VAF/UXFauuUjQnmr+kxy5eASK+rBMQyM9gTM/ogg20s=
Subject key identifier:   60:AF:BE:0B:E3:07:84:6C:61:49:64:04:AE:98:AA:79:80:57:68:82
Authority key identifier: 11:6B:1B:49:31:14:E6:F8:72:44:DA:54:CA:B8:D8:EA:B2:50:3A:38
Certificate issuer:       /CN=116B1B493114E6F87244DA54CAB8D8EAB2503A38
Certificate serial:       280799FBCE109A68250B88AB9E69F8419FC74519
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/116B1B493114E6F87244DA54CAB8D8EAB2503A38.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8c667769-80dc-4093-b5f7-dfe7c5720486/0/116B1B493114E6F87244DA54CAB8D8EAB2503A38.mft
Manifest number:          0558
Signing time:             Sun 01 Feb 2026 05:10:05 +0000
Manifest this update:     Sun 01 Feb 2026 05:05:05 +0000
Manifest next update:     Wed 04 Feb 2026 13:40:05 +0000
Files and hashes:         1: 116B1B493114E6F87244DA54CAB8D8EAB2503A38.crl (hash: OL1IiihuFrWdRkim080R2HFPS8KOPeQAbRWE6KjIi4o=)
                          2: 3230322e36322e31322e302f32322d3234203d3e203234353233.roa (hash: rkvfltc1XeXNlZR/3yH5i2rDhAOYYmSdXeT/IyFdjyk=)
                          3: 34332e3234372e32312e302f32342d3234203d3e20313331373830.roa (hash: 75jsZ2/RYGs14ieUtfuhtsNjuwyC8On82jjkJYD2UMY=)
                          4: 3131302e352e39362e302f32302d3234203d3e203234353233.roa (hash: YQwpls/VIYk0HtO6le+F2vrKuryHDRtN3YkX83o6jq0=)
                          5: 34332e3234372e32302e302f32322d3234203d3e203234353233.roa (hash: H+RNVENUJYTTFsMWsgJwmtIem8PyNZc4K51/hdOdwYc=)
                          6: 3130332e32322e3234302e302f32322d3234203d3e203234353233.roa (hash: O8/63tusLe+8VPLAAqnF2wRbO5seVh0CdjonLiqJ+TA=)
                          7: 3230332e38342e3135322e302f32312d3234203d3e203234353233.roa (hash: sHtP5I2fCL/ByfK8+QejX4fzdx/zVWKbMfpBHH71lYU=)
                          8: 323430323a313230303a3a2f33322d3438203d3e203234353233.roa (hash: RF31+hlg7a1h6KD8MpJ2iWEMUqzQM6jZSnJZLrwUpW8=)
                          9: 3230332e3137342e382e302f32312d3234203d3e203234353233.roa (hash: CCYyG9Lvz2JHKUXuBts3OmPCfqvhkN40wl/1YoY63Gk=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8c667769-80dc-4093-b5f7-dfe7c5720486/0/116B1B493114E6F87244DA54CAB8D8EAB2503A38.crl
                          rsync://repo-rpki.idnic.net/repo/8c667769-80dc-4093-b5f7-dfe7c5720486/0/116B1B493114E6F87244DA54CAB8D8EAB2503A38.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/116B1B493114E6F87244DA54CAB8D8EAB2503A38.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Feb 2026 13:40:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:07:99:fb:ce:10:9a:68:25:0b:88:ab:9e:69:f8:41:9f:c7:45:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=116B1B493114E6F87244DA54CAB8D8EAB2503A38
        Validity
            Not Before: Feb  1 05:05:05 2026 GMT
            Not After : Feb  4 13:40:05 2026 GMT
        Subject: CN=60AFBE0BE307846C61496404AE98AA7980576882
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:28:ba:2e:ac:2c:fd:cb:d0:cc:1a:63:7a:99:
                    af:7f:7c:40:46:e1:dd:67:b0:ef:72:8a:77:2f:59:
                    d9:35:3e:91:b5:da:c0:8b:bf:b1:36:ad:63:2c:0c:
                    bd:d2:ab:c6:b3:eb:bb:74:33:16:3a:a8:1b:7a:8f:
                    f9:b2:48:5d:86:33:77:7e:81:9f:24:51:38:38:e4:
                    61:ba:a5:cd:9e:d8:8f:b8:77:39:59:dd:24:77:a8:
                    4f:1d:99:89:5a:54:72:12:4c:3a:5d:ce:9d:b9:52:
                    54:96:9a:6c:47:d2:6d:fa:f9:83:c3:82:3c:c5:e5:
                    6a:c1:f8:67:07:cc:4f:ce:52:63:03:6c:5b:4d:72:
                    5d:d4:f6:bb:da:46:96:bf:47:79:33:44:12:26:f2:
                    db:1b:fa:51:98:0e:0c:d9:c5:98:0a:98:6d:92:de:
                    44:68:87:ba:5c:b2:79:94:3d:64:da:07:b2:13:ab:
                    bc:ca:d3:90:07:1f:b2:37:b3:0d:a9:ea:6e:34:b7:
                    61:e3:db:ab:a1:62:13:2c:ea:5e:30:56:a7:c1:c9:
                    d4:57:4f:26:6f:85:1d:46:1d:2f:47:97:e8:4c:64:
                    5e:25:45:20:bc:f4:0a:ab:ad:5a:25:94:3e:ea:53:
                    d3:82:a9:23:70:03:d5:ca:4c:0f:98:64:33:bf:36:
                    96:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:AF:BE:0B:E3:07:84:6C:61:49:64:04:AE:98:AA:79:80:57:68:82
            X509v3 Authority Key Identifier:
                keyid:11:6B:1B:49:31:14:E6:F8:72:44:DA:54:CA:B8:D8:EA:B2:50:3A:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8c667769-80dc-4093-b5f7-dfe7c5720486/0/116B1B493114E6F87244DA54CAB8D8EAB2503A38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/116B1B493114E6F87244DA54CAB8D8EAB2503A38.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8c667769-80dc-4093-b5f7-dfe7c5720486/0/116B1B493114E6F87244DA54CAB8D8EAB2503A38.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:56:fa:50:2e:91:7b:11:36:1d:d5:10:99:c7:e3:82:9f:56:
         5b:b7:1b:67:35:ec:9c:44:71:8e:31:0f:38:f2:b9:1a:6c:27:
         1c:cf:3f:51:aa:2d:b5:57:d6:89:3b:7b:ad:4d:e5:27:d4:87:
         42:d5:2c:8e:bd:9c:bb:96:83:36:ba:fb:ef:e3:19:c6:27:ab:
         f8:d1:c8:87:69:6e:d9:44:95:cc:2b:2c:29:8c:0b:eb:3d:c1:
         f8:62:76:0c:e0:fe:86:76:d0:1d:74:cd:91:71:67:18:9d:ce:
         28:ab:83:44:c9:95:45:aa:5c:be:12:77:64:e2:87:c7:70:8c:
         9a:5d:16:2a:3d:a0:90:da:ed:e4:0c:d9:20:9c:74:30:cb:3a:
         e3:d0:3e:d7:d2:6c:88:e6:14:33:4e:06:95:ad:73:72:99:8a:
         50:ef:07:3d:95:45:93:1c:fd:cd:23:2f:08:5c:9b:4c:4a:80:
         95:f2:49:a1:cc:fd:d2:e5:67:34:5c:84:2d:0e:c3:0d:22:70:
         d0:39:3a:a9:e8:0b:6f:4a:c4:e4:14:32:70:78:98:1f:23:7e:
         22:15:1a:94:6e:6a:ba:f5:73:4b:5b:3d:cc:b8:6e:81:6e:7e:
         f5:23:df:85:f0:8b:70:b4:99:88:cf:fe:c4:fc:f7:a1:7d:73:
         c0:a7:33:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 10:05:26 2026 by rpki-client