This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.mft
File:                     A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.mft (raw, json)
Hash identifier:          nTmhQs+ArGfvo53wc+noVVcz3SoxKzH/Dbifx0bj6nE=
Subject key identifier:   6B:61:CD:F5:A0:ED:53:39:8E:44:9E:6F:25:D1:A7:7E:A0:EB:CD:8A
Authority key identifier: A0:0D:BC:78:CB:2F:CD:6D:A9:4D:C1:E0:7D:FA:66:68:02:7D:1B:63
Certificate issuer:       /CN=A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63
Certificate serial:       08E45E4595191986F329F164AFDB8859F8DD5B68
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.mft
Manifest number:          054E
Signing time:             Sat 31 Jan 2026 19:31:19 +0000
Manifest this update:     Sat 31 Jan 2026 19:26:19 +0000
Manifest next update:     Wed 04 Feb 2026 03:01:19 +0000
Files and hashes:         1: 3130332e3130322e3131322e302f32332d3233203d3e20313336383536.roa (hash: cImcrO3baPtOL+e/L4Vtls4t8QA2B+RJ0Y24oBF6eXQ=)
                          2: 3130332e3130322e3131342e302f32342d3234203d3e20313336383536.roa (hash: SyaesZ8nYMgrpLoLtfvyAhCoVIqjKlqg+giBaGYZdJ8=)
                          3: 3130332e3130322e3131322e302f32342d3234203d3e20313336383536.roa (hash: m2IdeGJ3OKb2fcuJa67Ilt4MBVhM4mrbLE394lS8fh4=)
                          4: A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.crl (hash: VKYtw9oAYdKv01SEtUfH4LwhJIv6x2rIneoDXI8jZ9k=)
                          5: 3130332e3130322e3131322e302f32322d3232203d3e20313336383536.roa (hash: 1CN+jedfVpNb+gZQPhjGcg8dCw8FunfSINnOV1cGtHI=)
                          6: 3130332e3130322e3131332e302f32342d3234203d3e20313336383536.roa (hash: a/46ZLHY1uskWKK+dRVVv6QzmBB26BwgZ5pBVCqnJic=)
                          7: 3130332e3130322e3131352e302f32342d3234203d3e20313336383536.roa (hash: Bt0nH3UAT/CLMsfvb2IBDFeUJ9UZn6YmMXytc9svV6w=)
                          8: 3130332e3130322e3131342e302f32332d3233203d3e20313336383536.roa (hash: vvBVAn5yEWZctbDHQUW8z9jMeSul4l1acqZ62AKnx68=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.crl
                          rsync://repo-rpki.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Feb 2026 03:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:e4:5e:45:95:19:19:86:f3:29:f1:64:af:db:88:59:f8:dd:5b:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63
        Validity
            Not Before: Jan 31 19:26:19 2026 GMT
            Not After : Feb  4 03:01:19 2026 GMT
        Subject: CN=6B61CDF5A0ED53398E449E6F25D1A77EA0EBCD8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:6d:a8:34:e1:ef:59:4d:c4:80:64:51:e0:f3:
                    c2:74:df:2a:c3:e2:c5:50:98:f6:50:70:71:a8:cf:
                    ff:51:ee:74:33:9e:13:e7:85:b7:6b:18:5c:68:79:
                    86:2e:f9:1d:4b:13:da:a1:a3:12:d9:77:3a:f4:45:
                    87:77:f2:ed:47:f0:2f:e1:b1:b3:80:6b:42:10:fa:
                    39:0b:e1:24:a7:1f:b8:cb:d8:1c:cf:9d:7c:39:64:
                    fc:b0:79:55:5b:6d:0a:2a:ea:7e:db:24:00:b9:b2:
                    d4:8f:8e:a7:b1:cc:25:d4:4a:f6:13:a5:68:41:10:
                    67:d1:fe:58:c0:c6:10:be:80:09:b4:d0:7e:ff:9c:
                    1a:97:6e:59:b6:bd:bf:8f:93:19:f5:98:af:6b:39:
                    3f:8e:05:87:40:ec:28:95:98:4f:f3:2c:da:2b:45:
                    c2:98:e9:00:40:f2:98:11:e2:b2:51:2a:1b:a7:eb:
                    47:1f:f4:c0:eb:a8:0f:3b:9d:3b:aa:d2:00:ff:a9:
                    87:fc:dd:ee:3d:8b:62:80:35:f4:e7:08:c4:2f:2d:
                    68:67:eb:fa:f8:c5:56:56:04:40:06:52:41:b3:2d:
                    1e:be:24:03:ea:9b:c4:8a:00:4c:aa:70:fa:9c:98:
                    1a:3a:a9:f0:a1:83:d5:62:46:15:03:2b:4c:cb:6b:
                    ed:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:61:CD:F5:A0:ED:53:39:8E:44:9E:6F:25:D1:A7:7E:A0:EB:CD:8A
            X509v3 Authority Key Identifier:
                keyid:A0:0D:BC:78:CB:2F:CD:6D:A9:4D:C1:E0:7D:FA:66:68:02:7D:1B:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:44:a5:31:11:e8:da:67:8e:85:be:af:56:e1:4d:cd:72:78:
         2a:9f:53:73:61:03:a8:04:80:a0:8b:02:c8:6b:7c:50:04:bc:
         91:e0:20:1a:d1:a0:e7:13:ce:43:cd:f1:c1:d1:7d:43:8a:66:
         e8:4d:f2:d9:18:95:03:86:f8:89:19:d2:ab:a3:33:7c:ef:c3:
         94:c0:d4:14:ba:d3:30:71:be:5a:98:2f:8d:d8:be:ea:87:f6:
         36:e4:cf:cd:a5:74:eb:61:58:05:68:8b:3a:bb:0b:32:d4:0d:
         08:73:09:44:66:4e:e5:02:ab:4f:2c:53:c3:1d:f4:18:e0:eb:
         d1:1d:6c:59:3a:3a:32:a3:db:ec:e9:ff:a8:16:6f:19:7e:cb:
         5e:45:bc:82:5c:2b:e6:76:71:5e:84:64:22:ee:47:9f:5d:ad:
         87:90:fb:c6:36:0c:0e:ac:0d:b7:63:0a:e0:40:11:4f:88:36:
         09:fc:ec:e4:19:4e:12:38:c4:c8:fb:ba:e1:d3:57:c7:ef:99:
         80:14:26:ba:1e:4a:e6:ac:34:14:d2:0a:be:96:36:78:e4:58:
         3c:c7:90:64:1a:71:01:51:00:0c:e4:4a:40:b4:97:f9:e8:39:
         84:d7:87:61:ed:ae:64:9f:5c:9d:8b:d2:eb:5c:ba:81:fa:3e:
         16:c3:51:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 10:06:08 2026 by rpki-client