This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/a6d57201-7e2f-49bb-941d-9fcabe8623f5/0/809C666CC84F942588E109E6E6C454A9CD0524EB.mft
File:                     809C666CC84F942588E109E6E6C454A9CD0524EB.mft (raw, json)
Hash identifier:          pSSqN23HwzG0gq7s1/HZEBNTH6/11vE0j1Po/4FF1Zg=
Subject key identifier:   22:93:70:10:3B:79:90:B1:9D:B0:3F:D4:EC:BB:0C:3C:3B:03:F8:48
Authority key identifier: 80:9C:66:6C:C8:4F:94:25:88:E1:09:E6:E6:C4:54:A9:CD:05:24:EB
Certificate issuer:       /CN=809C666CC84F942588E109E6E6C454A9CD0524EB
Certificate serial:       34088679FC8547EF0008EFDB6802FD7F81A8E3C3
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/809C666CC84F942588E109E6E6C454A9CD0524EB.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a6d57201-7e2f-49bb-941d-9fcabe8623f5/0/809C666CC84F942588E109E6E6C454A9CD0524EB.mft
Manifest number:          0233
Signing time:             Sat 31 Jan 2026 11:20:48 +0000
Manifest this update:     Sat 31 Jan 2026 11:15:48 +0000
Manifest next update:     Tue 03 Feb 2026 20:03:48 +0000
Files and hashes:         1: 3130332e3133312e36312e302f32342d3234203d3e20313338313236.roa (hash: JcJ+92BdJBAynj8d5WBKVDE8qMrLGTneeQasC0St1x4=)
                          2: 809C666CC84F942588E109E6E6C454A9CD0524EB.crl (hash: QDdeJTqFlys4gXZlEe0Cq9aBiO/Bf9nmRnoeH+MKVIM=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a6d57201-7e2f-49bb-941d-9fcabe8623f5/0/809C666CC84F942588E109E6E6C454A9CD0524EB.crl
                          rsync://repo-rpki.idnic.net/repo/a6d57201-7e2f-49bb-941d-9fcabe8623f5/0/809C666CC84F942588E109E6E6C454A9CD0524EB.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/809C666CC84F942588E109E6E6C454A9CD0524EB.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Feb 2026 20:03:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:08:86:79:fc:85:47:ef:00:08:ef:db:68:02:fd:7f:81:a8:e3:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=809C666CC84F942588E109E6E6C454A9CD0524EB
        Validity
            Not Before: Jan 31 11:15:48 2026 GMT
            Not After : Feb  3 20:03:48 2026 GMT
        Subject: CN=229370103B7990B19DB03FD4ECBB0C3C3B03F848
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:d2:06:8a:76:78:16:18:ea:1f:e9:be:df:8f:
                    b6:c8:e5:eb:0b:e1:e6:d8:35:89:fc:58:b4:f3:05:
                    b6:20:b2:9e:0a:60:0d:4c:2e:66:b2:87:dc:9b:62:
                    4d:9f:13:bd:22:d6:c3:47:63:58:06:d0:8b:6b:b5:
                    08:c1:cd:6f:c6:51:a5:71:ed:53:54:70:59:ac:0d:
                    fb:00:69:ce:e8:f2:9c:5e:9f:d3:a2:1f:a9:1b:d1:
                    bd:54:56:1e:a6:07:b8:b1:f3:99:9b:77:d1:34:da:
                    86:1a:2e:10:ea:a3:4d:aa:8f:ba:72:f5:c7:e2:88:
                    53:e2:22:7f:98:27:f1:01:71:e5:d4:ba:05:81:72:
                    10:bb:9a:63:89:e6:33:db:de:f9:18:8d:78:9a:bb:
                    e0:29:e1:16:7a:3b:58:68:e7:96:7c:65:da:a4:5f:
                    67:35:54:9e:61:0f:53:6b:ea:5c:4e:c2:63:fc:7c:
                    21:11:16:77:33:77:1c:7a:22:f3:7e:33:c2:7f:d3:
                    67:ad:7a:d3:f1:29:dd:d5:2f:0a:9c:2f:85:b7:18:
                    3c:cc:ea:bb:ea:b1:26:07:a3:02:ca:4e:d2:d4:d9:
                    f6:34:7e:ad:b9:1a:e6:c5:a2:2f:46:26:66:0f:18:
                    74:ee:1e:09:65:b6:89:d7:b7:8b:3b:fb:ab:49:d9:
                    2c:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:93:70:10:3B:79:90:B1:9D:B0:3F:D4:EC:BB:0C:3C:3B:03:F8:48
            X509v3 Authority Key Identifier:
                keyid:80:9C:66:6C:C8:4F:94:25:88:E1:09:E6:E6:C4:54:A9:CD:05:24:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a6d57201-7e2f-49bb-941d-9fcabe8623f5/0/809C666CC84F942588E109E6E6C454A9CD0524EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/809C666CC84F942588E109E6E6C454A9CD0524EB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a6d57201-7e2f-49bb-941d-9fcabe8623f5/0/809C666CC84F942588E109E6E6C454A9CD0524EB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:3f:68:f4:58:2c:f9:6a:87:ac:2a:b2:bc:80:10:8b:c2:7c:
         a1:d7:bd:6a:c2:d4:5c:47:ae:99:80:34:70:f5:7c:be:c7:12:
         ea:37:1c:ad:15:5c:ab:fd:89:c1:39:61:a6:7c:86:6f:9f:92:
         25:05:66:3a:5b:5c:03:79:2f:a5:ff:58:2d:1e:c8:5f:c8:d5:
         b4:4e:9b:8f:84:17:43:a0:10:4c:f9:92:ea:55:56:40:ac:20:
         4c:cf:d1:9d:7a:88:09:3a:76:59:6c:ec:50:5b:fa:96:6a:fb:
         7c:e4:f4:fb:0f:1b:bc:f7:09:9b:25:36:f8:d1:3f:50:33:19:
         03:4d:5b:0c:14:d4:e8:79:3f:e2:8b:14:f2:0f:37:5c:73:5a:
         28:a7:5b:3c:17:f8:6d:99:39:60:d4:09:80:12:fa:99:e6:14:
         99:26:c5:5f:20:46:ae:a6:80:ec:4f:24:cd:89:4c:9c:d0:8b:
         1d:c1:88:4b:03:08:f7:18:27:c9:a4:45:66:d1:eb:ba:29:51:
         af:02:95:07:0a:ea:3d:7d:89:ec:24:f2:a1:bd:7f:25:e1:20:
         3e:65:1a:da:38:e6:df:51:f8:93:af:17:08:43:06:49:f9:02:
         1f:7a:e2:99:af:8d:96:d4:48:41:ba:bf:36:58:11:0d:0e:d8:
         2f:c7:9d:ba
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUNAiGefyFR+8ACO/baAL9f4Go48MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODA5QzY2NkNDODRGOTQyNTg4RTEwOUU2RTZDNDU0QTlD
RDA1MjRFQjAeFw0yNjAxMzExMTE1NDhaFw0yNjAyMDMyMDAzNDhaMDMxMTAvBgNV
BAMTKDIyOTM3MDEwM0I3OTkwQjE5REIwM0ZENEVDQkIwQzNDM0IwM0Y4NDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC0gaKdngWGOof6b7fj7bI5esL
4ebYNYn8WLTzBbYgsp4KYA1MLmayh9ybYk2fE70i1sNHY1gG0ItrtQjBzW/GUaVx
7VNUcFmsDfsAac7o8pxen9OiH6kb0b1UVh6mB7ix85mbd9E02oYaLhDqo02qj7py
9cfiiFPiIn+YJ/EBceXUugWBchC7mmOJ5jPb3vkYjXiau+Ap4RZ6O1ho55Z8Zdqk
X2c1VJ5hD1Nr6lxOwmP8fCERFnczdxx6IvN+M8J/02etetPxKd3VLwqcL4W3GDzM
6rvqsSYHowLKTtLU2fY0fq25GubFoi9GJmYPGHTuHglltonXt4s7+6tJ2SylAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUIpNwEDt5kLGdsD/U7LsMPDsD+EgwHwYDVR0j
BBgwFoAUgJxmbMhPlCWI4Qnm5sRUqc0FJOswDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
NmQ1NzIwMS03ZTJmLTQ5YmItOTQxZC05ZmNhYmU4NjIzZjUvMC84MDlDNjY2Q0M4
NEY5NDI1ODhFMTA5RTZFNkM0NTRBOUNEMDUyNEVCLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvODA5QzY2NkNDODRGOTQyNTg4RTEwOUU2RTZDNDU0QTlDRDA1
MjRFQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTZkNTcyMDEtN2UyZi00OWJiLTk0
MWQtOWZjYWJlODYyM2Y1LzAvODA5QzY2NkNDODRGOTQyNTg4RTEwOUU2RTZDNDU0
QTlDRDA1MjRFQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAI0/aPRYLPlqh6wqsryAEIvCfKHXvWrC1FxH
rpmANHD1fL7HEuo3HK0VXKv9icE5YaZ8hm+fkiUFZjpbXAN5L6X/WC0eyF/I1bRO
m4+EF0OgEEz5kupVVkCsIEzP0Z16iAk6dlls7FBb+pZq+3zk9PsPG7z3CZslNvjR
P1AzGQNNWwwU1Oh5P+KLFPIPN1xzWiinWzwX+G2ZOWDUCYAS+pnmFJkmxV8gRq6m
gOxPJM2JTJzQix3BiEsDCPcYJ8mkRWbR67opUa8ClQcK6j19iewk8qG9fyXhID5l
Gto45t9R+JOvFwhDBkn5Ah964pmvjZbUSEG6vzZYEQ0O2C/Hnbo=
-----END CERTIFICATE-----
Generated at Mon Feb 2 12:48:45 2026 by rpki-client