This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/927a6f34-1b6e-4e92-b2d2-0b9301a666a5/0/8DEDABAD21AD1A6BEF27E91FCEE30465563DFE72.mft
File:                     8DEDABAD21AD1A6BEF27E91FCEE30465563DFE72.mft (raw, json)
Hash identifier:          bmmjTlEf7abYtq0HcejV7mIZqebQq1kTO2dpehd3PbQ=
Subject key identifier:   BA:16:18:E9:6B:C2:A6:34:39:0A:35:38:B7:CB:C9:5A:36:F4:E7:36
Authority key identifier: 8D:ED:AB:AD:21:AD:1A:6B:EF:27:E9:1F:CE:E3:04:65:56:3D:FE:72
Certificate issuer:       /CN=8DEDABAD21AD1A6BEF27E91FCEE30465563DFE72
Certificate serial:       6C23011B3D3B2C0AB08E56E3CCA199814A7E8DF4
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DEDABAD21AD1A6BEF27E91FCEE30465563DFE72.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/927a6f34-1b6e-4e92-b2d2-0b9301a666a5/0/8DEDABAD21AD1A6BEF27E91FCEE30465563DFE72.mft
Manifest number:          0545
Signing time:             Sun 01 Feb 2026 19:22:19 +0000
Manifest this update:     Sun 01 Feb 2026 19:17:19 +0000
Manifest next update:     Wed 04 Feb 2026 21:38:19 +0000
Files and hashes:         1: 8DEDABAD21AD1A6BEF27E91FCEE30465563DFE72.crl (hash: lqrATZckIogBVe7uSmzdnEfkl5Z29S3Dn/bIjFygLao=)
                          2: 3132312e3130312e3132382e302f32312d3234203d3e20313331373036.roa (hash: LxNIC9GUMk4NDV//CAiwhidJ9aXKaAFBBW+ysgKoUy0=)
                          3: 323430323a653330303a3a2f33322d3438203d3e20313331373036.roa (hash: EV88jOIELhWBAVSmJqvptwA4m5UyL3dS/vav1cA94d8=)
                          4: 3130332e3234372e31322e302f32322d3234203d3e20313331373036.roa (hash: mWjb/DW+b3X3xyLO8KMUDwzQ73HydHkJibyBar99dKU=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/927a6f34-1b6e-4e92-b2d2-0b9301a666a5/0/8DEDABAD21AD1A6BEF27E91FCEE30465563DFE72.crl
                          rsync://repo-rpki.idnic.net/repo/927a6f34-1b6e-4e92-b2d2-0b9301a666a5/0/8DEDABAD21AD1A6BEF27E91FCEE30465563DFE72.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DEDABAD21AD1A6BEF27E91FCEE30465563DFE72.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Feb 2026 21:38:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:23:01:1b:3d:3b:2c:0a:b0:8e:56:e3:cc:a1:99:81:4a:7e:8d:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8DEDABAD21AD1A6BEF27E91FCEE30465563DFE72
        Validity
            Not Before: Feb  1 19:17:19 2026 GMT
            Not After : Feb  4 21:38:19 2026 GMT
        Subject: CN=BA1618E96BC2A634390A3538B7CBC95A36F4E736
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:e0:92:d3:ed:26:8c:92:81:e2:88:78:5b:de:
                    3d:a5:bb:1e:48:37:4c:d9:b7:9b:2b:4d:a4:0d:73:
                    25:5e:13:20:75:b4:10:7f:42:39:d9:cf:af:8a:88:
                    4e:b5:98:06:e9:2c:30:d7:08:02:b7:1b:dc:9a:41:
                    72:b7:28:df:b9:3f:24:e5:7c:ec:c3:d6:7a:34:ea:
                    1a:eb:ca:7f:a6:03:93:8c:54:d7:ee:1e:f2:1f:59:
                    98:ca:8e:77:b0:8c:f2:20:7f:6f:fa:8e:ed:62:9d:
                    f0:60:aa:db:ae:5d:ed:38:d5:54:10:81:b7:00:4d:
                    6e:62:5e:0e:6e:94:6a:f0:3e:4d:b2:7c:3a:ef:c0:
                    a7:fe:e1:ee:8e:09:b0:7a:1a:5c:4c:ed:cf:5c:cb:
                    e8:04:65:c6:85:46:d4:a7:18:37:92:09:4c:a7:1c:
                    6d:d9:dd:f7:38:cf:b1:c8:5f:80:6d:3a:ec:42:4f:
                    81:ac:f3:92:29:a1:a6:17:91:b5:65:a6:13:71:b9:
                    a8:76:fb:14:ff:77:28:c6:51:24:f5:fe:aa:bd:a1:
                    03:b0:8d:f6:53:d3:cf:16:83:38:1c:13:01:5c:35:
                    7e:1e:97:cd:1d:df:e9:0e:2a:3f:09:93:83:7c:2f:
                    8b:ab:c3:d9:2f:9d:93:1a:99:45:8f:63:56:11:14:
                    11:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:16:18:E9:6B:C2:A6:34:39:0A:35:38:B7:CB:C9:5A:36:F4:E7:36
            X509v3 Authority Key Identifier:
                keyid:8D:ED:AB:AD:21:AD:1A:6B:EF:27:E9:1F:CE:E3:04:65:56:3D:FE:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/927a6f34-1b6e-4e92-b2d2-0b9301a666a5/0/8DEDABAD21AD1A6BEF27E91FCEE30465563DFE72.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DEDABAD21AD1A6BEF27E91FCEE30465563DFE72.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/927a6f34-1b6e-4e92-b2d2-0b9301a666a5/0/8DEDABAD21AD1A6BEF27E91FCEE30465563DFE72.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:af:15:dc:4f:91:ee:09:d6:9c:fd:ce:59:23:08:21:e7:95:
         57:95:66:a8:2e:51:99:9b:0a:dd:a2:f5:d4:15:c4:e0:a3:a0:
         76:f5:60:ec:35:f4:f4:7a:ea:ef:1f:3c:c4:b4:ed:f7:6c:5d:
         58:01:e9:3b:54:78:b8:16:10:39:2d:ba:b5:c6:91:63:92:41:
         a5:57:7a:50:69:f1:fe:90:26:ef:ce:f8:d2:f5:8d:65:5d:ed:
         0e:e6:2a:fc:12:2b:60:fc:47:13:db:4a:04:7e:49:33:7a:05:
         fe:ba:c0:62:c1:56:6f:c8:12:d9:3c:f8:32:bb:1e:b3:84:0d:
         9f:91:60:7e:15:40:7a:2a:4e:42:1e:c6:4b:9b:fc:b2:bb:c2:
         4d:bb:04:90:c0:e3:96:6c:1b:6d:f3:22:9b:f9:66:f3:e0:91:
         4b:7e:8b:04:ac:ca:b3:d3:11:c5:5c:db:78:af:29:73:98:fd:
         81:cf:a0:b8:85:81:d3:25:29:7b:bb:5f:fa:80:01:ab:e2:11:
         f9:5a:76:1d:9b:4f:e2:62:bc:ae:d3:ce:92:72:aa:0f:47:13:
         e8:3d:58:76:b3:df:50:79:3a:84:5f:49:46:6e:ef:07:bf:02:
         7f:0d:3e:4e:81:af:01:73:ba:9f:33:b9:8c:49:39:df:21:ca:
         ab:55:73:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 10:02:17 2026 by rpki-client