This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/aa914ada-a9aa-4d7f-9e47-594bcb7a70ab/0/8E3F7441403B9CDF2FD603CCBAF13D1671202D2D.mft
File:                     8E3F7441403B9CDF2FD603CCBAF13D1671202D2D.mft (raw, json)
Hash identifier:          FnxFP+vUcj5aEARh+AH2/T9s7xtbR+10WmWt5Z4Kyx0=
Subject key identifier:   25:31:D7:A9:0D:63:C2:08:3F:94:0C:E3:9C:52:D5:B1:AB:78:A6:A5
Authority key identifier: 8E:3F:74:41:40:3B:9C:DF:2F:D6:03:CC:BA:F1:3D:16:71:20:2D:2D
Certificate issuer:       /CN=8E3F7441403B9CDF2FD603CCBAF13D1671202D2D
Certificate serial:       1EFFCDC240A8ACCA54EB5ECD3B20D3E6612A3A29
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8E3F7441403B9CDF2FD603CCBAF13D1671202D2D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/aa914ada-a9aa-4d7f-9e47-594bcb7a70ab/0/8E3F7441403B9CDF2FD603CCBAF13D1671202D2D.mft
Manifest number:          0352
Signing time:             Sun 01 Feb 2026 23:11:54 +0000
Manifest this update:     Sun 01 Feb 2026 23:06:54 +0000
Manifest next update:     Thu 05 Feb 2026 02:20:54 +0000
Files and hashes:         1: 323430353a366463303a3a2f33322d3332203d3e20313339343237.roa (hash: wF6dopi/8yFT5FMMEEtbalVZ2HlgmQH2NzcCqjkPo/A=)
                          2: 8E3F7441403B9CDF2FD603CCBAF13D1671202D2D.crl (hash: wzBHe9Q384ZaRAX5pYAbqbzPJa5wlxzIEhbtGM7QBTE=)
                          3: 3130332e3134342e3133342e302f32332d3233203d3e20313339343237.roa (hash: CwI8o18dMmmdKMsJY38paR/SR1tzAkJd4x6YF0hfFxY=)
                          4: 3130332e3134342e3133352e302f32342d3234203d3e20313339343237.roa (hash: zWJYN2XG8P0RnY9CSUVBnEgmuVsEalWKm5k5yR0nlxQ=)
                          5: 3130332e3134342e3133342e302f32342d3234203d3e20313339343237.roa (hash: i2RCXQ2h/tijX2X+SFP27I82J2d7eFOatLRW4qkSUTs=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/aa914ada-a9aa-4d7f-9e47-594bcb7a70ab/0/8E3F7441403B9CDF2FD603CCBAF13D1671202D2D.crl
                          rsync://repo-rpki.idnic.net/repo/aa914ada-a9aa-4d7f-9e47-594bcb7a70ab/0/8E3F7441403B9CDF2FD603CCBAF13D1671202D2D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8E3F7441403B9CDF2FD603CCBAF13D1671202D2D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Feb 2026 02:20:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:ff:cd:c2:40:a8:ac:ca:54:eb:5e:cd:3b:20:d3:e6:61:2a:3a:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E3F7441403B9CDF2FD603CCBAF13D1671202D2D
        Validity
            Not Before: Feb  1 23:06:54 2026 GMT
            Not After : Feb  5 02:20:54 2026 GMT
        Subject: CN=2531D7A90D63C2083F940CE39C52D5B1AB78A6A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:23:5d:36:ef:ff:c6:ce:4d:3e:cf:a6:18:63:
                    ae:a1:19:98:86:06:ae:3e:27:e6:27:d4:fa:05:5d:
                    ac:d3:9d:ed:93:ea:a5:96:4c:55:04:7a:33:94:54:
                    cc:51:c5:12:a2:a5:03:05:63:4c:cb:e6:bb:75:95:
                    85:f3:62:ca:64:47:d0:54:a7:08:81:21:fd:4c:b9:
                    11:fb:bb:8f:a8:d1:f1:52:45:f4:57:a8:26:60:a2:
                    4e:cf:6f:3c:c7:21:fb:be:22:7e:39:22:48:0d:07:
                    ae:f2:e7:11:19:94:19:d9:37:b5:ed:c6:5b:10:9e:
                    ee:4b:70:8e:8d:47:bc:7c:ec:90:11:3c:81:c7:92:
                    bf:0f:1f:b3:a5:c4:9c:58:91:08:a0:b5:80:79:3f:
                    2e:62:fa:a1:71:c3:71:9c:10:f2:52:55:af:e1:82:
                    6b:29:83:37:89:23:63:a9:c9:c1:83:ff:7b:4b:6f:
                    52:e5:9a:74:e4:34:63:56:5c:b3:6d:9a:fc:68:34:
                    dc:be:d5:82:56:44:06:be:f3:80:22:bd:7b:05:de:
                    da:d1:7f:b8:1a:2d:36:2c:6a:9a:d4:2c:b1:5c:e6:
                    40:fa:1b:7e:1f:2f:dc:7b:a5:ed:43:39:ea:19:4b:
                    a7:66:98:e6:e9:07:33:4a:78:e3:a4:9b:02:f1:04:
                    f5:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:31:D7:A9:0D:63:C2:08:3F:94:0C:E3:9C:52:D5:B1:AB:78:A6:A5
            X509v3 Authority Key Identifier:
                keyid:8E:3F:74:41:40:3B:9C:DF:2F:D6:03:CC:BA:F1:3D:16:71:20:2D:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/aa914ada-a9aa-4d7f-9e47-594bcb7a70ab/0/8E3F7441403B9CDF2FD603CCBAF13D1671202D2D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8E3F7441403B9CDF2FD603CCBAF13D1671202D2D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aa914ada-a9aa-4d7f-9e47-594bcb7a70ab/0/8E3F7441403B9CDF2FD603CCBAF13D1671202D2D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:71:2c:68:b3:90:25:de:63:e7:6c:16:43:8c:8c:45:ed:a8:
         b7:44:03:f4:d2:dd:e8:6c:36:9d:c4:11:d2:38:82:7a:2b:f5:
         c7:ce:3e:40:bf:c7:a4:4c:2f:03:0b:3b:45:74:df:4c:63:fe:
         f0:83:53:bf:52:6c:74:dd:83:31:f7:bd:a2:bd:af:fc:28:f0:
         d6:5a:22:34:68:a2:04:c2:bc:60:ee:04:76:2f:ef:41:2a:d5:
         14:ba:4e:8e:ee:1a:bd:65:aa:5c:f1:58:65:82:6d:7d:2c:59:
         d0:4d:68:13:b7:40:4c:ee:d4:d6:b5:d6:19:0a:c8:d7:1a:08:
         9b:2d:de:1f:48:92:4b:fc:35:5e:1d:6e:61:d0:d2:f3:0a:67:
         bc:92:7d:b9:4a:2c:f0:b0:4a:25:a6:a7:d7:dc:08:0d:63:ec:
         12:cf:e0:10:16:91:36:37:a8:45:57:f4:ef:d5:02:e8:79:41:
         42:5a:e6:c8:61:d4:17:9c:68:08:8c:43:d5:c7:bd:b9:87:32:
         74:9b:66:38:a9:ba:e4:e9:c3:e2:dd:31:4d:65:61:52:8a:51:
         88:29:b5:57:f5:54:3e:aa:62:e6:b2:37:e8:5f:06:d9:9e:38:
         3c:94:e9:5e:2a:a4:f5:94:4e:f5:de:6f:0a:2c:bd:e7:41:8c:
         3c:a2:34:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:42:23 2026 by rpki-client