This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA.mft
File:                     284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA.mft (raw, json)
Hash identifier:          1TNWHV2miLXDpmmwuKSwA6Sy1ZvKNudZGsx7UNhM+lI=
Subject key identifier:   D4:41:4F:40:63:43:EB:3B:7A:FC:8C:D9:FB:4C:EC:54:0B:54:93:98
Authority key identifier: 28:4B:8A:DA:D3:E0:98:E9:BF:BE:AC:6A:91:29:EF:A6:44:4D:F2:EA
Certificate issuer:       /CN=284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA
Certificate serial:       34F6A22B033625F9227D05251F63D108C6336BD9
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA.mft
Manifest number:          028E
Signing time:             Mon 02 Feb 2026 07:51:47 +0000
Manifest this update:     Mon 02 Feb 2026 07:46:47 +0000
Manifest next update:     Thu 05 Feb 2026 17:27:47 +0000
Files and hashes:         1: 3130332e3133342e35302e302f32342d3234203d3e20313332383239.roa (hash: 7HCsscFWHwPhWZMbOcuZYtCZgWu1kaGruUGGQu1z3Bg=)
                          2: 323430343a356434303a363a3a2f34382d3438203d3e20313338353938.roa (hash: BMaPZKd4S9fQAuwU5kc5O93/vGGp5sulKN1fvWKFFuE=)
                          3: 323430343a356434303a383a3a2f34382d3438203d3e20313338353938.roa (hash: LCHOag0uJb1cjVFsg2v6UKKoMu1dXnSpGeS35y1AH+w=)
                          4: 323430343a356434303a393a3a2f34382d3438203d3e20313338353938.roa (hash: s7BQD7yLxj5kSwHPL3ObyjKROEx8KemxAu+k28dACKE=)
                          5: 323430343a356434303a323a3a2f34382d3438203d3e20313338353938.roa (hash: vUuh6v5PPRzVvuwUZOwe6R6chuRFULbcu3aLCW2qA2Y=)
                          6: 323430343a356434303a313a3a2f34382d3438203d3e20313338353938.roa (hash: 7Ra3Fe83WVldtrwmBn6CcKZZT+lK+aCd/JbT64/wrRw=)
                          7: 323430343a356434303a343a3a2f34382d3438203d3e20313338353938.roa (hash: /selJRjYRY2RXdacberK6RXbNBqDD4h8KJuD+6tSmiM=)
                          8: 3130332e3133342e34392e302f32342d3234203d3e20313332383239.roa (hash: DY64pprFnHFOaGNLsgUuWKWN2nPg3FOgN/Io+biTvOM=)
                          9: 284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA.crl (hash: ZI2WkY2ivfrpGyOyjZNwcJZuFGAr06JmrxrwVk+iDD8=)
                          10: 3130332e3133342e35312e302f32342d3234203d3e20313338353938.roa (hash: rzmqH60uJRn3sGzkNJLLdHpbEepRCB0kAM+v2dcsYmc=)
                          11: 323430343a356434303a3a2f34382d3438203d3e20313338353938.roa (hash: XQn6RBqlg6RuaEoPTX1Jp1jRKOhAgtTrK3uAW566Uwk=)
                          12: 3130332e3133342e34382e302f32342d3234203d3e20313338353938.roa (hash: vdRaqu+ifEWqE1r8nytgBjN36IR5VUDio5Qen7pybes=)
                          13: 323430343a356434303a333a3a2f34382d3438203d3e20313338353938.roa (hash: xTc48z78x2hTWAz50fsj2u48rca6GyIeaspfgC6Ied0=)
                          14: 323430343a356434303a353a3a2f34382d3438203d3e20313338353938.roa (hash: Lbx56bi7U9t4V4gIX7m4fulkNS6DqtlvmzQW0U2Yss4=)
                          15: 323430343a356434303a373a3a2f34382d3438203d3e20313338353938.roa (hash: 2JoT7M7m37m0xJyrGZ0XzlMJ4mVcLTVKVu699zp/2U0=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA.crl
                          rsync://repo-rpki.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Feb 2026 05:24:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:f6:a2:2b:03:36:25:f9:22:7d:05:25:1f:63:d1:08:c6:33:6b:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA
        Validity
            Not Before: Feb  2 07:46:47 2026 GMT
            Not After : Feb  5 17:27:47 2026 GMT
        Subject: CN=D4414F406343EB3B7AFC8CD9FB4CEC540B549398
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:d1:29:05:bc:aa:4e:e2:9a:27:1d:2b:2e:e0:
                    29:b5:fb:15:de:95:b7:52:34:cd:da:38:09:0c:50:
                    84:d8:17:ff:1b:51:25:c0:65:d4:1b:b8:b6:f1:f2:
                    02:21:a7:a3:47:18:14:93:bc:01:08:45:36:e2:2f:
                    7f:54:05:66:95:ba:1f:e5:21:61:c3:32:e3:e5:f4:
                    e8:4a:00:72:84:f6:c6:b7:a6:96:3a:a6:7e:ef:0f:
                    a5:aa:13:cf:fc:15:4b:40:0b:6d:36:91:a0:c7:15:
                    3b:d4:ba:a7:26:0b:59:fd:67:65:dc:4e:c8:26:d9:
                    13:1d:9d:b6:96:9e:07:eb:54:ce:a8:61:8e:d4:3b:
                    a9:91:01:0f:ee:59:74:05:fb:cf:3f:c3:18:ec:2c:
                    4b:c0:b2:86:d0:0e:97:9e:d4:8d:61:e4:3f:c0:1a:
                    ab:35:b6:23:7d:ab:b6:91:45:19:50:d0:97:ba:13:
                    c4:49:95:f1:e1:09:b7:f1:d2:a0:03:bf:2c:67:2d:
                    ff:3c:05:87:8a:48:0a:de:2a:e5:58:c1:31:8b:e2:
                    1a:09:a1:5e:e1:6b:7e:b2:0a:f4:82:d4:7e:ae:6e:
                    3b:8c:dd:f6:b5:31:4e:b5:22:c5:9a:03:7a:05:d8:
                    0a:61:0e:24:0a:4f:30:ec:57:62:e8:64:b7:ed:12:
                    dc:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:41:4F:40:63:43:EB:3B:7A:FC:8C:D9:FB:4C:EC:54:0B:54:93:98
            X509v3 Authority Key Identifier:
                keyid:28:4B:8A:DA:D3:E0:98:E9:BF:BE:AC:6A:91:29:EF:A6:44:4D:F2:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:b6:0b:74:8a:50:10:09:9b:22:ad:d3:af:5b:4e:a4:94:03:
         3a:52:c6:dc:95:41:a2:59:06:50:9c:aa:83:cb:db:01:61:48:
         b9:b6:21:d7:dc:45:7e:b0:c4:eb:fa:be:43:0b:92:bc:e3:df:
         fd:d3:69:ae:18:e2:c7:c1:6d:43:d5:02:21:a3:ae:5f:02:68:
         cc:46:df:ee:d7:6c:e7:5f:40:18:20:6e:79:48:9b:da:b5:cb:
         45:49:2f:d1:e7:04:c8:1f:83:fe:d1:12:0b:d4:e4:b7:b5:0e:
         aa:8b:00:79:39:4a:06:9a:eb:54:00:a1:11:8b:c6:c6:4c:1f:
         fd:88:f0:68:dd:c2:e8:83:6e:8d:96:75:8c:1d:82:bc:54:69:
         1d:35:f0:dd:16:04:77:67:2e:49:ea:e0:74:55:fd:0c:24:14:
         3b:e8:a2:2d:04:6e:30:5a:0d:64:9b:44:93:1c:49:c5:03:a8:
         a5:d1:08:02:56:da:11:0c:22:af:e9:1a:0e:d4:ce:0b:97:a2:
         d9:b8:60:4d:7f:69:7d:3a:0d:e7:67:68:3a:3b:00:31:7f:28:
         62:b6:b4:43:55:5a:9e:c9:e0:14:ec:c6:0b:45:43:8b:bd:fd:
         31:f2:72:ff:d2:14:ad:01:bd:3b:ce:b4:29:57:ec:e8:89:63:
         18:41:61:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:43:52 2026 by rpki-client