This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/af62809c-bfb6-4fe7-8dd6-ca6022cdd540/0/930A4ED2B85AA9FE77ED90FA85044A9C80B38A46.mft
File:                     930A4ED2B85AA9FE77ED90FA85044A9C80B38A46.mft (raw, json)
Hash identifier:          uO8uvWFXJ2+Fpn0uCh8wwU52YK8GwDRLX2E9xZIU1bM=
Subject key identifier:   6D:ED:B5:BF:06:3F:D1:A4:5F:24:68:95:49:EA:36:87:E1:5F:B8:7C
Authority key identifier: 93:0A:4E:D2:B8:5A:A9:FE:77:ED:90:FA:85:04:4A:9C:80:B3:8A:46
Certificate issuer:       /CN=930A4ED2B85AA9FE77ED90FA85044A9C80B38A46
Certificate serial:       4B5E7A80FB45332F9464E302CE9128C55B999E91
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/930A4ED2B85AA9FE77ED90FA85044A9C80B38A46.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/af62809c-bfb6-4fe7-8dd6-ca6022cdd540/0/930A4ED2B85AA9FE77ED90FA85044A9C80B38A46.mft
Manifest number:          021E
Signing time:             Sun 01 Feb 2026 13:41:20 +0000
Manifest this update:     Sun 01 Feb 2026 13:36:20 +0000
Manifest next update:     Wed 04 Feb 2026 19:53:20 +0000
Files and hashes:         1: 32372e3132312e38322e302f32342d3234203d3e203535363532.roa (hash: QtiPgOKAP2zdJvR5FPFABfx4iIby7ldINKqgYGzNT04=)
                          2: 32372e3132312e38302e302f32342d3234203d3e203535363532.roa (hash: 0LRxbu/86kZstCrhrFM+xHSikcX960D6ea8IptSkGsE=)
                          3: 930A4ED2B85AA9FE77ED90FA85044A9C80B38A46.crl (hash: XwnAmVfkZESVX2FHBMuZ3JPVquYAjefnZ50yslYdZ9Q=)
                          4: 32372e3132312e38362e302f32342d3234203d3e203535363532.roa (hash: 1kY5e/tIJX114u746CW39QHTp2rzxidBD7y122Pd6Ew=)
                          5: 32372e3132312e38312e302f32342d3234203d3e203535363532.roa (hash: KPO8Dur+z9GVaz2KZy/0xQJy9l93ayQwCwTcViUocP0=)
                          6: 32372e3132312e38352e302f32342d3234203d3e203535363532.roa (hash: 3Mqc4bpW2MlccFa1Ubf+/4bclFJ21AcG0i5KBo4oD48=)
                          7: 32372e3132312e38342e302f32342d3234203d3e203535363532.roa (hash: bA5Fx/rOlnkAyIC1kdWrOaLkxDABB/Vvu2ebi0eEf0Q=)
                          8: 32372e3132312e38332e302f32342d3234203d3e203535363532.roa (hash: 1Ap1USzQtzqwgDtQDrhH77MKkzf62RSPe2jHuhWF7VY=)
                          9: 32372e3132312e38372e302f32342d3234203d3e203535363532.roa (hash: XOQFKUfDG7J0fbl+DTtQtPxTl6ii3+vzoE5o4zQO4bo=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/af62809c-bfb6-4fe7-8dd6-ca6022cdd540/0/930A4ED2B85AA9FE77ED90FA85044A9C80B38A46.crl
                          rsync://repo-rpki.idnic.net/repo/af62809c-bfb6-4fe7-8dd6-ca6022cdd540/0/930A4ED2B85AA9FE77ED90FA85044A9C80B38A46.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/930A4ED2B85AA9FE77ED90FA85044A9C80B38A46.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Feb 2026 19:53:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:5e:7a:80:fb:45:33:2f:94:64:e3:02:ce:91:28:c5:5b:99:9e:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=930A4ED2B85AA9FE77ED90FA85044A9C80B38A46
        Validity
            Not Before: Feb  1 13:36:20 2026 GMT
            Not After : Feb  4 19:53:20 2026 GMT
        Subject: CN=6DEDB5BF063FD1A45F24689549EA3687E15FB87C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:bd:26:5b:98:09:8f:a7:71:1c:e8:fd:fb:2d:
                    04:90:c4:aa:20:68:e1:65:5b:77:fa:9b:b4:41:c5:
                    b4:de:69:52:8d:6e:e0:98:e0:dd:4b:7f:3f:39:7d:
                    64:03:04:07:c4:21:e9:b9:3b:4f:90:29:18:e3:40:
                    3d:06:4d:a7:c7:fc:cf:db:13:7a:91:f4:e0:4f:1c:
                    bc:30:62:f0:a9:dc:e5:05:47:17:00:af:98:71:88:
                    c9:fa:09:e7:fc:d9:ef:1f:25:de:f4:a1:e7:81:27:
                    7d:c9:18:41:1b:76:d7:ae:f4:97:30:c8:b1:b3:48:
                    6c:1d:c3:aa:b5:50:8c:df:bd:66:a5:1f:33:c5:18:
                    53:5b:f7:c0:53:d1:c7:73:df:9d:27:09:dc:8a:0d:
                    98:96:87:be:fd:c8:a0:98:4c:6e:0f:be:7f:07:aa:
                    62:5d:18:01:80:23:31:cc:29:8f:2a:a2:c4:f5:3d:
                    62:cb:53:74:ca:e9:ad:b8:a9:bb:ac:3d:3a:c6:da:
                    a7:a3:3d:c1:13:69:80:3a:75:6b:8d:7a:67:06:8d:
                    65:51:df:24:28:f2:70:81:30:0d:68:d3:d8:8e:11:
                    03:fc:ef:ea:c6:f4:b4:e7:20:16:0f:ba:b4:87:52:
                    9a:13:2b:00:75:d6:c6:58:80:e4:3c:7f:e8:b3:a2:
                    48:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:ED:B5:BF:06:3F:D1:A4:5F:24:68:95:49:EA:36:87:E1:5F:B8:7C
            X509v3 Authority Key Identifier:
                keyid:93:0A:4E:D2:B8:5A:A9:FE:77:ED:90:FA:85:04:4A:9C:80:B3:8A:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/af62809c-bfb6-4fe7-8dd6-ca6022cdd540/0/930A4ED2B85AA9FE77ED90FA85044A9C80B38A46.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/930A4ED2B85AA9FE77ED90FA85044A9C80B38A46.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/af62809c-bfb6-4fe7-8dd6-ca6022cdd540/0/930A4ED2B85AA9FE77ED90FA85044A9C80B38A46.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:3d:76:34:a8:6c:af:66:f0:f1:e4:bf:00:94:dc:cd:89:5b:
         2b:f4:0a:99:b6:55:c3:e5:b4:55:e8:ac:7f:bd:ee:68:b5:39:
         e9:e4:53:0f:6c:b4:02:30:3e:55:29:51:33:32:af:91:9b:1e:
         80:9f:c0:89:56:87:d3:6d:b6:6d:5f:eb:7a:96:4f:45:fb:03:
         b4:66:65:fd:bc:e2:ae:f0:25:02:68:a4:92:50:2f:76:a6:13:
         6c:fb:be:f6:9b:07:ef:59:fd:74:24:be:5c:4a:d7:e4:51:c3:
         a4:9a:f6:ed:67:27:98:73:4c:0a:cb:56:0b:9f:8c:a6:e5:c2:
         8b:1f:93:21:b3:f7:75:74:ac:19:d1:f7:2d:36:54:42:ff:36:
         7b:78:43:5b:0e:4f:f2:26:27:60:59:57:2e:b3:24:14:25:aa:
         7e:37:ce:1e:55:3f:01:ca:d5:d9:2d:3c:9a:a4:87:84:07:7d:
         39:3c:4a:b3:1b:b8:13:45:32:cf:1a:f1:e3:70:94:b1:6f:93:
         73:4f:20:fd:85:c4:c2:bc:fa:47:3f:b0:f9:c9:38:ee:32:ea:
         8e:4a:dc:9f:2f:8d:2b:68:e5:8f:ba:01:bb:21:fb:b2:cb:ed:
         be:ea:b5:b8:5b:ea:90:2c:bf:b7:4d:36:2e:a3:29:bd:4d:3c:
         27:7e:88:9f
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUS156gPtFMy+UZOMCzpEoxVuZnpEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTMwQTRFRDJCODVBQTlGRTc3RUQ5MEZBODUwNDRBOUM4
MEIzOEE0NjAeFw0yNjAyMDExMzM2MjBaFw0yNjAyMDQxOTUzMjBaMDMxMTAvBgNV
BAMTKDZERURCNUJGMDYzRkQxQTQ1RjI0Njg5NTQ5RUEzNjg3RTE1RkI4N0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdvSZbmAmPp3Ec6P37LQSQxKog
aOFlW3f6m7RBxbTeaVKNbuCY4N1Lfz85fWQDBAfEIem5O0+QKRjjQD0GTafH/M/b
E3qR9OBPHLwwYvCp3OUFRxcAr5hxiMn6Cef82e8fJd70oeeBJ33JGEEbdteu9Jcw
yLGzSGwdw6q1UIzfvWalHzPFGFNb98BT0cdz350nCdyKDZiWh779yKCYTG4Pvn8H
qmJdGAGAIzHMKY8qosT1PWLLU3TK6a24qbusPTrG2qejPcETaYA6dWuNemcGjWVR
3yQo8nCBMA1o09iOEQP87+rG9LTnIBYPurSHUpoTKwB11sZYgOQ8f+izokhlAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUbe21vwY/0aRfJGiVSeo2h+FfuHwwHwYDVR0j
BBgwFoAUkwpO0rhaqf537ZD6hQRKnICzikYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
ZjYyODA5Yy1iZmI2LTRmZTctOGRkNi1jYTYwMjJjZGQ1NDAvMC85MzBBNEVEMkI4
NUFBOUZFNzdFRDkwRkE4NTA0NEE5QzgwQjM4QTQ2LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvOTMwQTRFRDJCODVBQTlGRTc3RUQ5MEZBODUwNDRBOUM4MEIz
OEE0Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWY2MjgwOWMtYmZiNi00ZmU3LThk
ZDYtY2E2MDIyY2RkNTQwLzAvOTMwQTRFRDJCODVBQTlGRTc3RUQ5MEZBODUwNDRB
OUM4MEIzOEE0Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAGU9djSobK9m8PHkvwCU3M2JWyv0Cpm2VcPl
tFXorH+97mi1OenkUw9stAIwPlUpUTMyr5GbHoCfwIlWh9Nttm1f63qWT0X7A7Rm
Zf284q7wJQJopJJQL3amE2z7vvabB+9Z/XQkvlxK1+RRw6Sa9u1nJ5hzTArLVguf
jKblwosfkyGz93V0rBnR9y02VEL/Nnt4Q1sOT/ImJ2BZVy6zJBQlqn43zh5VPwHK
1dktPJqkh4QHfTk8SrMbuBNFMs8a8eNwlLFvk3NPIP2FxMK8+kc/sPnJOO4y6o5K
3J8vjSto5Y+6Absh+7LL7b7qtbhb6pAsv7dNNi6jKb1NPCd+iJ8=
-----END CERTIFICATE-----
Generated at Mon Feb 2 09:52:25 2026 by rpki-client