This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.mft
File:                     86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.mft (raw, json)
Hash identifier:          Ks1YJaJqUvEF8M5Kg2Yy5uwc5N6TbV2kjWBOlKuIXs0=
Subject key identifier:   16:11:93:41:AE:D6:8B:F5:75:18:0E:58:A7:61:6A:BB:13:90:0C:66
Authority key identifier: 86:C2:F4:D0:6A:11:B8:6B:AC:FF:0F:D3:DB:A4:7B:FA:56:13:8F:58
Certificate issuer:       /CN=86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58
Certificate serial:       182B0FCD1E288F9D016069ABEED11D6A945DE030
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.mft
Manifest number:          01E8
Signing time:             Mon 02 Feb 2026 01:20:50 +0000
Manifest this update:     Mon 02 Feb 2026 01:15:50 +0000
Manifest next update:     Thu 05 Feb 2026 06:29:50 +0000
Files and hashes:         1: 3130332e3132302e37362e302f32342d3234203d3e20313530353031.roa (hash: p8Wpmus070CsJXDUA1KtLJSmqgm7fEGDDNW/LuX/AC4=)
                          2: 86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.crl (hash: /uwvpHidZ9EPZOUHg8kEqTiac0LVFO+7LGNk/BbGQdg=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.crl
                          rsync://repo-rpki.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Feb 2026 05:24:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:2b:0f:cd:1e:28:8f:9d:01:60:69:ab:ee:d1:1d:6a:94:5d:e0:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58
        Validity
            Not Before: Feb  2 01:15:50 2026 GMT
            Not After : Feb  5 06:29:50 2026 GMT
        Subject: CN=16119341AED68BF575180E58A7616ABB13900C66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:77:3c:71:71:4b:f5:eb:7a:99:88:91:60:d9:
                    26:06:9a:f4:32:6a:57:e4:03:89:17:a1:ae:1f:39:
                    b6:1c:b0:08:86:0e:46:74:f4:8b:e2:25:92:2b:c4:
                    f0:b6:a4:63:6a:d5:a1:20:b6:11:1f:61:66:9c:22:
                    8d:96:23:4c:3c:73:2f:ff:df:e1:0f:03:f7:c3:41:
                    76:24:5e:3a:bc:8e:0a:04:67:86:9c:4e:33:64:e3:
                    7b:7e:a9:21:07:98:0f:f5:4b:b9:86:81:33:da:15:
                    74:08:c2:99:af:ae:24:fd:62:90:c0:65:cf:29:c8:
                    ad:0c:c0:7d:66:24:02:71:a3:40:2a:ce:ae:f4:70:
                    fc:08:be:05:a7:11:27:8e:18:b3:b2:a9:d5:3c:95:
                    d5:62:b7:73:a2:bf:74:5d:8e:cf:94:91:83:a1:15:
                    51:e7:d3:06:d3:8f:46:cc:eb:c7:1f:26:2b:57:42:
                    d5:be:44:51:d4:20:ca:53:87:22:c3:c9:41:64:fc:
                    60:3e:4a:d4:42:02:da:d5:1b:45:b8:ff:27:9a:53:
                    a0:21:d2:9d:98:0f:6b:ff:85:f5:5e:5c:6f:0e:1e:
                    09:aa:5f:dc:9a:95:af:b9:f5:51:75:9d:36:07:a0:
                    ec:0b:c0:5d:75:17:c3:17:14:bc:78:e8:7f:09:56:
                    0a:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:11:93:41:AE:D6:8B:F5:75:18:0E:58:A7:61:6A:BB:13:90:0C:66
            X509v3 Authority Key Identifier:
                keyid:86:C2:F4:D0:6A:11:B8:6B:AC:FF:0F:D3:DB:A4:7B:FA:56:13:8F:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:52:68:38:d0:30:a5:fb:c2:35:0b:5b:85:1c:e6:43:8f:57:
         bc:6c:c1:c3:79:3c:7a:b3:d1:b0:6a:cf:69:83:01:a6:f2:bd:
         89:e9:2d:f9:31:b1:79:06:07:8d:9a:36:6b:a3:e8:4b:58:84:
         cf:d5:f7:05:b2:61:10:c9:24:17:50:22:19:2e:61:28:69:38:
         eb:b5:c5:d6:1e:27:25:14:93:ef:63:7b:27:f7:cb:31:c9:fd:
         bc:6c:9a:7d:c0:8f:12:3e:0e:d2:7e:99:86:d1:14:74:ac:0c:
         64:71:f6:cc:5f:88:c3:ed:95:c2:c3:9e:7c:40:5a:1a:57:23:
         9c:89:1c:3f:fe:42:c9:01:55:a0:26:7a:2f:a9:ee:c6:dd:a8:
         94:3a:16:a3:88:60:66:1b:c5:2b:dd:8c:d1:b2:62:d4:b2:bd:
         a3:1a:ce:0d:49:e3:cf:6b:cb:28:1c:d7:2b:66:75:5f:f6:56:
         70:ce:93:49:ad:e7:f3:ec:f7:7f:c0:c5:0d:2e:42:be:61:bf:
         8b:74:c3:fd:dc:b3:6a:81:a8:d2:f8:21:39:98:19:d6:48:f8:
         d9:b5:89:57:02:d1:60:4d:6e:a5:de:59:4e:28:94:be:b0:e8:
         75:7e:35:8b:b9:1b:9b:20:c6:35:b9:a6:74:b3:7d:04:2e:d6:
         49:d2:d6:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 15:48:04 2026 by rpki-client