This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/b1a77add-a49a-4c8f-a735-ef96c33ab29f/0/D9CD40474BDD0C0707766CEDBAF0B6A186CF582F.mft
File:                     D9CD40474BDD0C0707766CEDBAF0B6A186CF582F.mft (raw, json)
Hash identifier:          VO3LDInTZp5HWdnV/t/pOXSx5hzwSSthdHuq8cyPvIo=
Subject key identifier:   0D:C8:80:CB:F1:0F:21:A6:A7:B1:F8:7F:C7:9A:80:A8:74:DB:22:E5
Authority key identifier: D9:CD:40:47:4B:DD:0C:07:07:76:6C:ED:BA:F0:B6:A1:86:CF:58:2F
Certificate issuer:       /CN=D9CD40474BDD0C0707766CEDBAF0B6A186CF582F
Certificate serial:       43E58E262C24AFAACF82F11D4E0B5060CEC70E93
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D9CD40474BDD0C0707766CEDBAF0B6A186CF582F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b1a77add-a49a-4c8f-a735-ef96c33ab29f/0/D9CD40474BDD0C0707766CEDBAF0B6A186CF582F.mft
Manifest number:          0559
Signing time:             Sun 01 Feb 2026 03:11:34 +0000
Manifest this update:     Sun 01 Feb 2026 03:06:34 +0000
Manifest next update:     Wed 04 Feb 2026 13:54:34 +0000
Files and hashes:         1: 3130332e3233352e37342e302f32342d3234203d3e20313431313230.roa (hash: ZZmhtd+kvnB+qiIIirmPZ+PBFZw13KvG2RKerxPSCqA=)
                          2: 3130332e3233352e37332e302f32342d3234203d3e20313335333630.roa (hash: FAtVlldec4RoFv3q2j7FVnmrtGRtRRfXUz6I4U8sRwI=)
                          3: 3130332e3233352e37322e302f32342d3234203d3e20313335343434.roa (hash: OjdsG/TdDn+RUWERJayMK04SkHQ7zRmm5hb518X40Eo=)
                          4: 3130332e3233352e37352e302f32342d3234203d3e20313335343434.roa (hash: rMaF7Q5MH66fB43sjFU7KFf+jSsxMN2DLHihs4pTcNE=)
                          5: 3130332e3231392e3234382e302f32322d3234203d3e20313335343434.roa (hash: lX6yK5ZXngZW7ELU3wR8WQZxB1PZNhMXdAdxnRkfpzY=)
                          6: D9CD40474BDD0C0707766CEDBAF0B6A186CF582F.crl (hash: ceoDAEFugy4xATqc+n1kdH3zan9Or03B1IzmPOq7KuA=)
                          7: 323030313a6466323a356130303a3a2f34382d3438203d3e20313335343434.roa (hash: TiFQ5+3RDDZw3hEMovau4FHuHmfphOknHBNZEgIPquo=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/b1a77add-a49a-4c8f-a735-ef96c33ab29f/0/D9CD40474BDD0C0707766CEDBAF0B6A186CF582F.crl
                          rsync://repo-rpki.idnic.net/repo/b1a77add-a49a-4c8f-a735-ef96c33ab29f/0/D9CD40474BDD0C0707766CEDBAF0B6A186CF582F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D9CD40474BDD0C0707766CEDBAF0B6A186CF582F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Feb 2026 13:54:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:e5:8e:26:2c:24:af:aa:cf:82:f1:1d:4e:0b:50:60:ce:c7:0e:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D9CD40474BDD0C0707766CEDBAF0B6A186CF582F
        Validity
            Not Before: Feb  1 03:06:34 2026 GMT
            Not After : Feb  4 13:54:34 2026 GMT
        Subject: CN=0DC880CBF10F21A6A7B1F87FC79A80A874DB22E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:df:38:ec:a0:0e:e6:a5:84:06:d2:39:93:88:
                    8f:d5:81:96:e2:ce:fe:45:32:34:6d:6e:6a:70:ad:
                    07:04:f3:d6:4c:3b:3e:b5:4a:3e:ba:b8:50:0c:f0:
                    b9:33:bd:6c:55:90:ca:9b:11:99:0c:3a:c9:96:bb:
                    f1:62:95:38:86:65:de:15:5f:46:1a:bd:58:65:34:
                    86:6e:fc:09:7d:b1:b5:9e:2f:4a:8d:ce:18:50:42:
                    09:f2:51:2e:f2:65:01:88:7d:18:73:2c:be:4a:5d:
                    26:00:8e:84:2e:3e:c7:0e:71:65:67:17:01:23:34:
                    3d:53:50:b2:05:2f:74:53:36:24:9b:14:9e:1f:63:
                    5b:c8:fb:69:3c:82:9b:9b:7f:0c:8a:7f:de:71:25:
                    8b:83:f6:f2:5b:42:63:24:b7:bc:45:84:fb:e1:6a:
                    d5:97:80:31:b0:1e:72:7d:43:23:28:61:6c:bd:14:
                    1d:6b:04:8e:fa:d4:d6:6d:a8:b6:af:4d:0d:85:3d:
                    20:a1:ed:66:cf:c8:d6:87:c9:68:f9:e9:c6:db:f1:
                    1e:64:89:a8:26:a4:ba:f1:99:7a:68:78:55:44:15:
                    23:fc:2a:97:23:f7:df:48:73:f6:ca:3a:38:6f:1c:
                    86:41:4a:8d:53:7e:c4:13:77:2b:8c:83:f8:1d:33:
                    7e:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:C8:80:CB:F1:0F:21:A6:A7:B1:F8:7F:C7:9A:80:A8:74:DB:22:E5
            X509v3 Authority Key Identifier:
                keyid:D9:CD:40:47:4B:DD:0C:07:07:76:6C:ED:BA:F0:B6:A1:86:CF:58:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b1a77add-a49a-4c8f-a735-ef96c33ab29f/0/D9CD40474BDD0C0707766CEDBAF0B6A186CF582F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D9CD40474BDD0C0707766CEDBAF0B6A186CF582F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b1a77add-a49a-4c8f-a735-ef96c33ab29f/0/D9CD40474BDD0C0707766CEDBAF0B6A186CF582F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:d6:bf:cc:62:2c:4e:fd:83:4b:cd:55:94:11:07:61:0c:6b:
         36:42:92:a4:37:d5:1e:59:da:95:2c:57:4d:db:bc:72:4b:79:
         51:9b:df:a1:11:a8:87:a0:19:3d:8c:d4:20:fb:c5:c6:cf:ca:
         4f:b0:a0:4a:b4:ec:e1:d0:d4:59:69:b8:ca:9c:1a:cb:f1:6c:
         19:93:74:b0:9e:97:0a:45:cd:3c:b8:3b:a7:fa:1d:2c:50:1e:
         a4:5d:50:15:14:03:5d:8e:4d:af:a3:c3:16:e3:a1:19:74:a2:
         28:7d:5f:ec:2e:95:b8:25:0b:1d:63:14:5f:0e:fe:69:51:99:
         ef:63:24:0c:d2:47:e1:53:2e:f5:ab:eb:f7:b8:56:ea:67:0f:
         e3:73:74:cb:d4:03:69:7c:75:d0:ef:d7:96:57:24:a2:90:34:
         e3:2c:05:45:4c:e0:1e:c7:a0:59:9e:1b:2d:46:26:b7:2c:04:
         3a:3e:9c:ae:ce:4f:13:ba:63:71:20:38:f4:04:23:4d:e7:a5:
         76:42:16:01:9d:b3:f8:0e:ec:6c:20:5f:47:6c:47:4c:fc:e8:
         53:7c:7d:35:8d:81:5d:bc:d6:a4:88:61:48:29:51:c3:6c:ed:
         7f:df:30:24:85:73:79:a4:e1:e5:21:23:0d:32:44:e2:30:c9:
         cf:d7:e6:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:43:12 2026 by rpki-client