This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.mft
File:                     8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.mft (raw, json)
Hash identifier:          4FZPI+3omryhzAP6+eRCSgsKSUbZX3DK/9nNsx2Hq8w=
Subject key identifier:   D0:D2:03:BD:C8:0D:0D:1F:E0:BF:1C:9A:58:69:BD:AD:22:4F:AC:28
Authority key identifier: 8A:FE:BB:51:D0:0C:8E:06:AA:EA:84:2E:0C:0C:FF:C2:CA:B9:61:0F
Certificate issuer:       /CN=8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F
Certificate serial:       53B7AE3C3CC76A8FD79BAF00C70B0360999A40BE
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.mft
Manifest number:          055D
Signing time:             Sun 01 Feb 2026 04:01:50 +0000
Manifest this update:     Sun 01 Feb 2026 03:56:50 +0000
Manifest next update:     Wed 04 Feb 2026 05:41:50 +0000
Files and hashes:         1: 3231302e3234372e3235302e302f32342d3234203d3e20313331373435.roa (hash: UaBtRg3Pe7eF6qAh+L1uU3ib10+G/2GiDGDbWzNrJJQ=)
                          2: 3231302e3234372e3234372e302f32342d3234203d3e20313331373435.roa (hash: exFF47IhXFNrUrw6HPUoTvZWZdOLZc/bApdp77HMNNg=)
                          3: 3231302e3234372e3234352e302f32342d3234203d3e20313331373435.roa (hash: kHHBOgtxtA2O4NSmNMgW2PeMrc26bvv8HtnzwONr0bg=)
                          4: 3231302e3234372e3235322e302f32342d3234203d3e20313331373435.roa (hash: 0G3umGSNIafLUyMMJjc+XpTQjFcLRIMU7BoomAPsjew=)
                          5: 3231302e3234372e3234382e302f32342d3234203d3e20313331373435.roa (hash: fEAII0Y1Y5OrJRrreDOapy9Xzh9eNqz/FB7+aD7tXRA=)
                          6: 3231302e3234372e3234342e302f32342d3234203d3e20313331373435.roa (hash: dBLrElsxS7m32RqtK+bS83Eb5ZTI1r6yldhEY0SWU34=)
                          7: 323430363a376530303a35393a3a2f34382d3438203d3e20313430343035.roa (hash: gnvURXZkhn/FEj22B4ytqTMsZk8ZLC9E8Tq6VbTdHlg=)
                          8: 3231302e3234372e3234332e302f32342d3234203d3e20313331373435.roa (hash: lzhEeQ6DAkKFZoSDXb/ij7h8jtExSjFLGzcvwIopMPE=)
                          9: 3231302e3234372e3235342e302f32342d3234203d3e20313331373435.roa (hash: 8bH62zhwf0kgF3amh047ZVAlbr2i3orRPBn9qkRCMJk=)
                          10: 8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.crl (hash: c4MhDdyk3zkXdEyCkuVgPXL8+sg8pK3u0Ik4IIzfCG8=)
                          11: 3231302e3234372e3234302e302f32342d3234203d3e20313331373435.roa (hash: 6Xt6BmWqNlJ2rgGnrh/8HdtB+svaXm043WhGiQr8wxY=)
                          12: 3231302e3234372e3234312e302f32342d3234203d3e20313430343035.roa (hash: M3nv0mC0g0dVK72c2OJ01BOoKTGk3r0NAIb60MF1lcw=)
                          13: 3231302e3234372e3234362e302f32342d3234203d3e20313331373435.roa (hash: FN3CKjxRonayrnINYbudYXLP7jZ9/YnqEvFYbd9U1hM=)
                          14: 3231302e3234372e3235312e302f32342d3234203d3e20313331373435.roa (hash: P6u7QjpJVBQpJpJ2dL4GKUXqC1XLtlIwog/7NL3QJe0=)
                          15: 3231302e3234372e3234322e302f32342d3234203d3e20313331373435.roa (hash: D991UEHbv0mT0xjDcSLCu5iaTm6ib67YwDcjKkL5vPw=)
                          16: 3231302e3234372e3235332e302f32342d3234203d3e20313331373435.roa (hash: SDQ6xpzFoeg0lTwEJkVJ2YC5ntC/O8NvcqwJeEYUXmo=)
                          17: 3231302e3234372e3235352e302f32342d3234203d3e20313331373435.roa (hash: RS4Z5hPliFofbuZy6siMGSvvq53kTGe3aDopkAMtX7s=)
                          18: 3231302e3234372e3234392e302f32342d3234203d3e20313331373435.roa (hash: 4G4aZfFUqaHECTTNNiBKb2BiuB7CRoLOY6G0O5P5Xsk=)
                          19: 34392e3132382e3138342e302f32322d3234203d3e20313331373435.roa (hash: b1YIXb394hbQaEvgUpDDWq1EiTyAhc+KvTRls7LdNdE=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.crl
                          rsync://repo-rpki.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Feb 2026 05:41:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:b7:ae:3c:3c:c7:6a:8f:d7:9b:af:00:c7:0b:03:60:99:9a:40:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F
        Validity
            Not Before: Feb  1 03:56:50 2026 GMT
            Not After : Feb  4 05:41:50 2026 GMT
        Subject: CN=D0D203BDC80D0D1FE0BF1C9A5869BDAD224FAC28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:50:95:d7:43:59:b4:84:60:f5:24:28:71:63:
                    9d:29:ab:23:b8:f5:6a:5e:02:bb:d3:ed:f8:4c:78:
                    b7:26:85:2d:55:43:03:b4:d9:35:0c:9a:7f:92:36:
                    71:52:d3:be:30:ee:94:ce:aa:7e:f3:2d:9d:08:7b:
                    0e:af:dd:70:71:48:8c:58:c0:62:ca:bd:0c:9a:43:
                    32:a2:ef:90:ab:d5:94:8e:24:85:02:f8:f5:27:bb:
                    62:56:a6:a5:fd:7b:13:06:36:73:6d:3a:86:1e:32:
                    a0:1e:d9:b8:95:2f:9f:a8:67:dc:10:5c:3e:98:7c:
                    9f:af:b1:23:7d:eb:b2:7d:6f:88:39:7d:72:04:80:
                    17:71:28:ac:c1:ad:7e:8f:48:52:54:fe:c0:b0:ca:
                    4b:98:53:51:b2:62:9e:d3:16:a0:0d:7a:19:a3:12:
                    bc:cc:28:4b:76:ad:f3:62:f1:1c:6b:26:37:5e:04:
                    68:53:95:9b:44:7c:c3:6b:dc:bb:3b:1d:d1:2c:72:
                    4a:ba:fd:dc:d1:ed:5a:ca:b1:61:8e:df:87:83:44:
                    3f:e5:a9:8e:21:d4:e8:1d:30:11:4b:b0:17:14:6b:
                    85:7d:80:c3:41:8d:83:ab:6e:98:22:ea:bd:0a:46:
                    f5:e2:63:5b:68:72:16:9a:39:39:77:96:78:f3:21:
                    0c:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:D2:03:BD:C8:0D:0D:1F:E0:BF:1C:9A:58:69:BD:AD:22:4F:AC:28
            X509v3 Authority Key Identifier:
                keyid:8A:FE:BB:51:D0:0C:8E:06:AA:EA:84:2E:0C:0C:FF:C2:CA:B9:61:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:2f:d0:7e:17:ad:14:de:c0:f4:ca:f5:8b:33:84:d4:f5:c7:
         0f:23:ac:a3:df:c9:3c:ed:a2:1d:c0:5e:6c:2b:ce:86:1f:dc:
         4d:8b:1f:07:ef:60:7e:00:8d:0d:1a:90:88:a8:99:ac:8f:e8:
         52:75:5b:2e:2f:14:a6:97:c1:8c:68:69:95:95:27:e0:d0:53:
         c4:b0:29:11:b2:bc:63:ef:f5:66:ae:a0:57:ff:21:ac:b7:87:
         4f:26:fc:34:9d:71:03:65:ce:02:57:69:da:17:82:2e:d5:ec:
         c7:c0:50:1b:26:a7:1a:af:7c:ee:f7:24:6a:73:c9:b3:c7:36:
         41:c1:71:e1:76:2e:01:04:a2:ce:79:23:00:19:c8:cc:3e:27:
         ad:67:06:09:af:d4:5d:93:ea:69:2e:43:67:d8:c1:8a:2e:eb:
         3c:9c:28:7a:0c:c0:65:88:4f:35:1e:d7:0c:c7:8b:e0:d5:b4:
         39:0c:60:70:ea:57:2e:b6:f8:30:a2:48:81:6d:71:71:62:34:
         63:09:3d:14:be:48:da:8d:66:44:8b:88:33:4f:2a:b1:63:ba:
         3b:2d:09:60:86:75:ce:a3:3e:01:0a:55:90:88:9a:97:26:8e:
         87:50:40:d8:51:f8:e5:95:ec:d4:ce:72:cf:c2:22:ee:23:a7:
         cb:49:b0:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:45:06 2026 by rpki-client