This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/9e47847c-bc2c-40da-b2aa-915951428aad/0/A8104CA9AA31459E18BB7A597857DDA711E3E7FA.mft
File:                     A8104CA9AA31459E18BB7A597857DDA711E3E7FA.mft (raw, json)
Hash identifier:          xa0SyOeEfK1Fr8dpNodPTHZWOOcO4x5KU3bJAw507n0=
Subject key identifier:   63:5D:CC:AC:74:A5:7E:E4:AE:7D:82:25:64:B7:F9:5F:BC:6F:BC:6F
Authority key identifier: A8:10:4C:A9:AA:31:45:9E:18:BB:7A:59:78:57:DD:A7:11:E3:E7:FA
Certificate issuer:       /CN=A8104CA9AA31459E18BB7A597857DDA711E3E7FA
Certificate serial:       6675EA64D9AB0073816EE89CDEAB77D9F65E6C40
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A8104CA9AA31459E18BB7A597857DDA711E3E7FA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/9e47847c-bc2c-40da-b2aa-915951428aad/0/A8104CA9AA31459E18BB7A597857DDA711E3E7FA.mft
Manifest number:          023F
Signing time:             Sun 01 Feb 2026 22:51:58 +0000
Manifest this update:     Sun 01 Feb 2026 22:46:58 +0000
Manifest next update:     Thu 05 Feb 2026 05:46:58 +0000
Files and hashes:         1: 3130332e3139312e3231362e302f32332d3234203d3e20313439393239.roa (hash: EzMh3H3LMpcsDj1VtV66jHz9y8osKoSaALLtXZ0KBbY=)
                          2: A8104CA9AA31459E18BB7A597857DDA711E3E7FA.crl (hash: OW8YMAAF+xNfDCDPKVPSn5X/3v8yeh3vn1cQke8HnQk=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/9e47847c-bc2c-40da-b2aa-915951428aad/0/A8104CA9AA31459E18BB7A597857DDA711E3E7FA.crl
                          rsync://repo-rpki.idnic.net/repo/9e47847c-bc2c-40da-b2aa-915951428aad/0/A8104CA9AA31459E18BB7A597857DDA711E3E7FA.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A8104CA9AA31459E18BB7A597857DDA711E3E7FA.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Feb 2026 05:24:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:75:ea:64:d9:ab:00:73:81:6e:e8:9c:de:ab:77:d9:f6:5e:6c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A8104CA9AA31459E18BB7A597857DDA711E3E7FA
        Validity
            Not Before: Feb  1 22:46:58 2026 GMT
            Not After : Feb  5 05:46:58 2026 GMT
        Subject: CN=635DCCAC74A57EE4AE7D822564B7F95FBC6FBC6F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:19:c0:df:3f:99:5b:d7:f2:23:8b:c2:9f:9c:
                    1b:68:d4:04:28:fb:98:95:d1:91:43:ff:c5:2c:df:
                    6d:9c:3f:09:df:25:d5:6b:e9:c5:24:19:ed:0c:fc:
                    fb:37:1f:57:50:14:bd:b3:52:4b:9b:3f:d4:0d:35:
                    8a:65:14:70:aa:0e:18:47:69:ab:92:61:4d:1a:5e:
                    c2:a3:09:37:6f:88:20:db:0d:10:55:fe:1c:7c:bc:
                    59:94:b6:72:bc:2b:28:7b:f4:60:28:51:02:0d:a0:
                    ae:bb:ec:8f:67:6d:6e:85:98:d8:88:28:4e:46:b7:
                    20:90:57:5f:8b:4a:95:ad:1e:ea:cb:b8:d6:76:05:
                    a7:7b:08:9b:e1:6d:72:2e:0b:57:7d:da:30:3d:86:
                    48:40:da:56:b5:31:99:5f:08:4b:91:91:e0:43:e4:
                    21:33:95:50:de:dc:83:11:b4:3b:85:a7:10:e2:3a:
                    4e:95:36:06:24:c2:98:05:1a:ae:0f:bd:ff:92:51:
                    77:08:72:8f:93:af:85:a0:40:96:c2:4e:2c:6c:6c:
                    ba:ee:64:af:c7:87:e7:06:90:93:2c:12:6d:8d:50:
                    2c:95:40:b2:bb:47:21:0e:e9:01:d9:b8:8d:17:84:
                    41:7f:45:5b:67:39:70:68:3a:b2:e9:3e:61:73:95:
                    b8:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:5D:CC:AC:74:A5:7E:E4:AE:7D:82:25:64:B7:F9:5F:BC:6F:BC:6F
            X509v3 Authority Key Identifier:
                keyid:A8:10:4C:A9:AA:31:45:9E:18:BB:7A:59:78:57:DD:A7:11:E3:E7:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/9e47847c-bc2c-40da-b2aa-915951428aad/0/A8104CA9AA31459E18BB7A597857DDA711E3E7FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A8104CA9AA31459E18BB7A597857DDA711E3E7FA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9e47847c-bc2c-40da-b2aa-915951428aad/0/A8104CA9AA31459E18BB7A597857DDA711E3E7FA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:fb:d8:13:90:67:97:9d:3e:1b:be:17:bb:25:df:e6:b1:f6:
         50:51:0c:b5:7e:55:bd:f8:1f:40:83:78:82:e5:aa:24:c9:a5:
         14:cf:66:71:9a:23:ab:99:7f:fd:85:a0:db:66:0d:82:e6:35:
         09:8e:5c:93:9c:5b:5d:3c:10:62:d4:22:fd:10:35:57:e6:ea:
         fc:6c:d3:2a:b9:f4:b4:89:26:81:5c:a6:1a:95:eb:04:8c:3e:
         59:f6:20:ec:f3:e3:9a:c3:b3:ac:ab:4b:99:27:3b:2a:c4:d8:
         2d:b5:c8:15:4b:16:84:38:b0:e8:e7:f9:04:16:58:52:51:5f:
         0b:62:49:1d:a3:ad:52:d1:28:e1:6b:55:b0:a5:d1:ae:c3:6a:
         a3:9f:10:f3:39:2b:50:e2:29:00:c7:43:3d:58:2b:2e:a4:1e:
         cb:80:39:18:06:dc:02:43:8a:65:54:4a:b8:20:1b:8a:5b:86:
         69:73:9a:4a:60:4d:ba:78:03:67:21:10:37:e7:37:5f:d3:e5:
         17:fd:31:fd:af:ec:43:27:b8:1b:1d:a9:1a:c7:92:eb:c6:54:
         e8:4e:24:75:26:16:1c:95:c7:cd:9b:17:73:69:5b:2f:ef:f5:
         14:37:88:0b:ae:39:42:ec:b5:9e:68:14:4b:3b:78:59:b4:07:
         a8:06:18:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 10:06:10 2026 by rpki-client