This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.mft
File:                     639473CD2054A78B39F9AC7A83232462F00E71AA.mft (raw, json)
Hash identifier:          sA4dNOmTWsOpBTNLR/htnONBb6jY8HJiqIxQkC9TSy0=
Subject key identifier:   9D:A5:F3:01:18:E1:85:47:D4:C2:A1:8C:61:06:B5:36:4A:6C:86:4B
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Certificate issuer:       /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial:       261672E0940A853B1AAD4A4FDE92B56E6CB65EED
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.mft
Manifest number:          0D89
Signing time:             Mon 02 Feb 2026 01:21:56 +0000
Manifest this update:     Mon 02 Feb 2026 01:16:56 +0000
Manifest next update:     Thu 05 Feb 2026 06:24:56 +0000
Files and hashes:         1: 323430303a643638303a323a3a2f34382d3438203d3e203539323832.roa (hash: qLkIroWnbqSVivBGqvgi5oF8E8eNhXgrJocCdlawdNk=)
                          2: 3130332e3232382e3234362e302f32342d3234203d3e203539323832.roa (hash: XZ4OJKWgYbKu4ak8HWaN9bEJfkYQKh79GGoEWm0kS2Q=)
                          3: 3130332e3232382e3234352e302f32342d3234203d3e203539323832.roa (hash: /sujTtwH0ddwmWj6UyMseljhgpcNLVkP8+vtS5y3rGg=)
                          4: 3130332e3232382e3234342e302f32322d3234203d3e203539323832.roa (hash: kkZ5080z9oUs+jW8iHX1Tzr1MG5R0/keiimPL4Y7DMk=)
                          5: 3130332e3232382e3234342e302f32342d3234203d3e203539323832.roa (hash: esxHqUt3Xq6PKKXsfFgfUEYi1fJUgVnC6F8M6sDPUJM=)
                          6: 323430303a643638303a353a3a2f34382d3438203d3e203539323832.roa (hash: /8HKOKl3PxMMPopAmXJsDfZHfFoo7wkQ81V5TqWB1uE=)
                          7: 323430303a643638303a363a3a2f34382d3438203d3e203539323832.roa (hash: 5B7v2ShhK5C4wbhQiHatQFgCi8oUxqkoPlhjyp+Rnaw=)
                          8: 3131362e3230362e3231322e302f32322d3234203d3e203539323832.roa (hash: 7JHZWmtz01hYjYbLRHq9pCZCM42A/jGx+qscoYZR+8M=)
                          9: 323430303a643638303a3a2f33322d3438203d3e203539323832.roa (hash: SgqLAGcMTNBEKnSS7cpl5WafnRLBI8WCT5GxxXyN0zA=)
                          10: 3131362e3230362e3231332e302f32342d3234203d3e203539323832.roa (hash: JPYapDBTyTePbdwtE88+heXxGhufXE50JBbJ2fq7FKo=)
                          11: 3131362e3230362e3231342e302f32342d3234203d3e203539323832.roa (hash: mgdd33inbho0w/YafQxmlb4mn2645LWgbd4GjzvqC5g=)
                          12: 3130332e3232382e3234372e302f32342d3234203d3e203539323832.roa (hash: 4gtV8ZXJhBLgP6alnZmazQL9Du+oKvqI/MvatS0Bbyw=)
                          13: 3131362e3230362e3231322e302f32342d3234203d3e203539323832.roa (hash: QsDPs2mlZqyMZXfjf6Zh+NWMXGWy1j4R+YaYRxdbecQ=)
                          14: 639473CD2054A78B39F9AC7A83232462F00E71AA.crl (hash: E2a3/SKqAD7kl/7oKPF3oLKYg6khBCpDyejpFXP+PKA=)
                          15: 323430303a643638303a666163653a3a2f34382d3438203d3e203539323832.roa (hash: u5dDjhuBvBzcqNjKEeW7vizdTx58v6wY4rfkMiHiI5I=)
                          16: 323430303a643638303a35393a3a2f34382d3438203d3e203539323832.roa (hash: 0AzZnlQLCCzpiwYH8VB91hQfBqmdrJ+ok40Qb8sCeko=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
                          rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Feb 2026 05:24:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:16:72:e0:94:0a:85:3b:1a:ad:4a:4f:de:92:b5:6e:6c:b6:5e:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
        Validity
            Not Before: Feb  2 01:16:56 2026 GMT
            Not After : Feb  5 06:24:56 2026 GMT
        Subject: CN=9DA5F30118E18547D4C2A18C6106B5364A6C864B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:a9:00:f9:79:1b:f6:56:f7:35:28:68:7a:d7:
                    67:de:68:69:1c:b9:e6:56:5d:57:38:65:41:cc:74:
                    1e:43:e3:3b:d9:39:ff:71:ba:41:31:2a:00:fa:74:
                    0d:9d:61:70:93:9c:bd:b1:da:53:e2:aa:9a:80:35:
                    f5:97:49:6b:1f:59:7e:ed:5a:ec:89:fc:a3:10:e1:
                    1b:0e:4b:a0:c9:33:03:6e:62:c2:59:d6:74:45:af:
                    aa:78:56:7d:02:26:30:bf:e1:a8:39:a9:d5:f3:68:
                    65:8b:93:14:30:cf:05:50:0c:ba:6c:4c:f9:04:50:
                    27:21:e4:72:9e:6f:bd:78:e3:38:9e:96:99:55:df:
                    34:62:10:a7:f8:9a:65:32:c0:5e:4c:ae:48:a2:ab:
                    35:ea:d7:d8:11:d9:c7:59:8e:e6:79:05:75:e3:aa:
                    0b:d7:ca:a6:4e:aa:2e:8e:cb:cc:91:ca:b6:a7:8e:
                    c6:b6:88:be:25:a7:28:0e:e0:ee:ef:3f:73:a7:3e:
                    68:4f:1e:9c:de:b2:29:3a:7f:5f:1f:37:23:d2:73:
                    db:37:f3:25:9a:f3:84:de:d5:f2:9d:13:5c:7e:3c:
                    b4:a0:c0:12:e2:e0:72:c0:12:e4:f9:b6:7c:4c:b9:
                    52:82:20:27:f1:88:f2:d0:ca:51:1e:f3:1e:95:2c:
                    fe:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:A5:F3:01:18:E1:85:47:D4:C2:A1:8C:61:06:B5:36:4A:6C:86:4B
            X509v3 Authority Key Identifier:
                keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:0a:f6:39:3d:51:d8:dd:00:00:03:a1:08:5b:cd:3f:57:1b:
         9c:74:cc:db:53:11:90:ee:54:b2:aa:1a:1c:f8:52:32:30:7a:
         86:5b:2f:50:f3:e3:8e:50:74:08:97:c9:c8:2c:95:6c:bf:77:
         20:8d:2b:a9:2d:27:e2:e0:6d:23:46:33:06:ec:35:79:cc:eb:
         f4:75:13:2b:cc:6b:b6:92:7a:cb:5e:d9:23:61:1c:a6:27:45:
         6e:ad:79:7e:bb:8b:41:0b:fd:4c:04:61:7e:4d:06:a3:54:10:
         16:9f:15:2d:b8:a4:9e:3f:b4:53:47:a9:af:c8:46:73:ec:8d:
         17:ce:9a:9d:77:ec:87:d0:83:c6:41:27:df:80:f4:c5:5d:27:
         9a:1a:1c:fb:1d:e5:a1:d4:80:ce:9d:aa:3d:fe:bf:61:8f:c1:
         51:e5:89:b5:e6:94:b3:bf:a2:7e:ed:f8:10:fa:88:c3:0e:2c:
         d4:01:1e:5a:2f:ee:26:7c:f3:8c:02:3c:36:fc:ea:de:93:be:
         44:b9:ab:0e:c9:16:ad:9b:ea:e3:0b:f9:6a:63:3c:44:f5:fd:
         02:bb:74:d4:a9:19:fa:26:f3:e3:c9:84:37:45:7a:1f:be:19:
         62:4a:6c:7f:74:36:4b:ec:d2:5f:db:2b:6d:95:c2:c9:e5:66:
         9d:b9:12:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 10:04:24 2026 by rpki-client