This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.mft
File:                     4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.mft (raw, json)
Hash identifier:          dR57AWjdFzxzYS3QvuIfaVQ70irGDVrAnCovfMcqh54=
Subject key identifier:   22:F5:FB:A5:15:88:D1:3A:60:53:65:BE:CD:18:8F:85:C0:BF:C4:AB
Authority key identifier: 4B:F1:DC:C0:BC:C5:B1:A4:B6:BE:52:6A:75:FF:33:39:7F:C3:87:87
Certificate issuer:       /CN=4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787
Certificate serial:       5857B601DC35FFE6D3957D6E34CBD81688E09F01
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.mft
Manifest number:          0558
Signing time:             Mon 02 Feb 2026 04:41:01 +0000
Manifest this update:     Mon 02 Feb 2026 04:36:01 +0000
Manifest next update:     Thu 05 Feb 2026 06:55:01 +0000
Files and hashes:         1: 3232332e32352e39362e302f32312d3234203d3e2039333431.roa (hash: Qjv/mGfQRB5AB46dWcHhxxNcs3aS1PJFtKLeGoBkxi0=)
                          2: 3232332e32352e3130382e302f32342d3234203d3e2034383231.roa (hash: kXwkhbJ+oGBQpIPdrmdbXU4UMfG2qJFbyPtaW45RBFo=)
                          3: 3232332e32352e3130352e302f32342d3234203d3e2034383231.roa (hash: 8gu4g1bdcjin/i0TEIycNgxzwZksIdfr4ERNzQVV1jI=)
                          4: 3232332e32352e3130362e302f32342d3234203d3e20313336383733.roa (hash: S8lyObQBOuPDRueBj8YjzK0Yqke0dcnMl7Vcc48vuVs=)
                          5: 3232332e32352e3131312e302f32342d3234203d3e20313431363037.roa (hash: hi3RbUon3vVwgiqeI1gyjrmQwwjp0fD8/eAvTLaFma0=)
                          6: 3232332e32352e3131302e302f32342d3234203d3e20313336383733.roa (hash: d7TlxPMnZWo9NiIWBhiGrIW1xBkbQUYDXZcwgsom8Dk=)
                          7: 3232332e32352e3130372e302f32342d3234203d3e20313439373138.roa (hash: tYzvnm/bKabZ0lC7zrGJWB9MDY8UVJOHdIV1ii9uRtA=)
                          8: 323430323a613530303a3a2f33322d3332203d3e2034383231.roa (hash: moNwAWlPkj0rtokbSnZwVDheKPDbut9HTHNYooRQM7Q=)
                          9: 4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.crl (hash: stFWxJqs1Dhdl4tOErkpZ+eEJJRSy5YLrega1WnE5/g=)
                          10: 3232332e32352e3130392e302f32342d3234203d3e20313439373138.roa (hash: d3eM98YfiQHd35IoK+KK/VXjFcXTY4k6PTjZu1TQR90=)
                          11: 3232332e32352e3130342e302f32342d3234203d3e20313530323238.roa (hash: Lkl4hSR7NGSEzKzZzmu1qkwANNNPQYa46Fii80W7KSg=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.crl
                          rsync://repo-rpki.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Feb 2026 05:24:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:57:b6:01:dc:35:ff:e6:d3:95:7d:6e:34:cb:d8:16:88:e0:9f:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787
        Validity
            Not Before: Feb  2 04:36:01 2026 GMT
            Not After : Feb  5 06:55:01 2026 GMT
        Subject: CN=22F5FBA51588D13A605365BECD188F85C0BFC4AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:d3:df:e8:76:86:c8:54:29:78:60:73:3e:96:
                    09:55:81:2d:15:61:e0:73:cd:76:d5:50:50:fa:9c:
                    59:32:a1:36:ed:7d:34:fa:bc:af:12:ba:69:08:e5:
                    2c:20:d8:da:4c:68:cd:23:55:6c:f7:40:83:d5:a8:
                    88:9f:f4:b7:dd:5d:fa:6a:2e:42:1a:ce:b4:a0:42:
                    2c:3d:7b:c8:1c:5d:84:9f:a2:5f:44:09:13:43:77:
                    36:94:b3:11:f7:49:61:8c:48:2a:05:fc:89:6d:0f:
                    62:3c:9c:43:07:e5:81:75:d7:16:05:25:a1:6f:53:
                    1e:17:3e:74:ae:a7:e1:e1:7e:5d:4f:7d:f2:1f:88:
                    72:9d:43:e8:ba:b1:d1:5e:2c:7a:aa:19:d2:8c:e0:
                    7b:4f:f0:bc:94:cd:10:01:97:3f:02:41:4d:9c:7a:
                    64:d4:6a:90:7c:30:71:10:59:ee:77:2d:ad:85:b2:
                    70:23:a4:82:1e:6e:cd:1a:bf:07:27:3f:42:26:10:
                    a8:af:d6:ce:ea:5a:15:1f:31:f5:0d:fc:da:c0:76:
                    43:99:41:cc:5a:3f:5b:bb:0b:d0:1a:31:21:0e:84:
                    bb:6f:f2:3b:43:87:63:f4:4b:e6:d1:9a:08:da:53:
                    88:c7:23:c1:53:4c:fe:a0:33:3c:ce:ec:2d:1a:97:
                    55:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:F5:FB:A5:15:88:D1:3A:60:53:65:BE:CD:18:8F:85:C0:BF:C4:AB
            X509v3 Authority Key Identifier:
                keyid:4B:F1:DC:C0:BC:C5:B1:A4:B6:BE:52:6A:75:FF:33:39:7F:C3:87:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:35:6e:a0:4c:66:27:1b:b3:4c:cb:dd:e4:2e:05:17:62:bf:
         6f:30:76:44:4f:dd:4d:14:26:68:d3:c8:1f:52:17:17:8e:16:
         8e:31:9e:5b:64:fc:41:c0:e2:e6:e3:00:c3:77:da:b0:a3:11:
         81:26:9f:a7:fe:9c:68:01:f1:68:e6:c7:71:98:af:b0:c8:a7:
         df:82:7e:d9:8b:28:79:2a:c0:80:69:a1:19:48:ae:3d:d0:a5:
         4e:ac:b8:54:ac:17:12:32:2e:e4:84:b2:86:48:3f:1f:a0:1c:
         97:dc:88:8a:a7:58:21:51:79:e6:dc:3b:4a:f7:39:32:55:58:
         c0:2a:c8:63:7e:38:b3:04:03:e1:8c:ce:6e:71:5d:cb:d4:c1:
         89:bd:5e:ce:49:bf:f5:a6:9a:8b:95:dd:b3:85:04:24:72:71:
         8e:f3:7a:5b:7c:bc:4b:48:50:62:2b:65:d3:f0:42:4c:c9:5c:
         f2:d5:8d:55:1e:b1:b9:8f:cc:51:70:26:91:49:07:42:fe:ac:
         aa:09:c1:76:5f:6c:e5:36:49:34:59:24:cb:a1:2c:4e:cb:2b:
         ea:70:1b:ff:3e:49:a1:3c:20:ab:38:ff:12:e1:68:97:b7:fb:
         c5:f5:a9:6a:3a:ad:77:fe:c1:ab:87:19:4e:09:9d:f2:85:7a:
         3b:33:30:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:45:02 2026 by rpki-client