This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/b5c9c394-fcd0-4b4b-bb1a-824770f40342/0/B4153DCEE87E15F92AABAC0DF6729C9A5DE5CFCC.mft
File:                     B4153DCEE87E15F92AABAC0DF6729C9A5DE5CFCC.mft (raw, json)
Hash identifier:          dleqKit1VpKL/+/OLMubU+TEOoexBpcWGoNrtarVgxM=
Subject key identifier:   85:5B:A7:19:12:BF:B7:25:C6:DB:14:28:A8:83:6C:70:80:E6:C0:62
Authority key identifier: B4:15:3D:CE:E8:7E:15:F9:2A:AB:AC:0D:F6:72:9C:9A:5D:E5:CF:CC
Certificate issuer:       /CN=B4153DCEE87E15F92AABAC0DF6729C9A5DE5CFCC
Certificate serial:       6C4EBFD58222D6F7C045668ADD59116F78B5A5D3
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B4153DCEE87E15F92AABAC0DF6729C9A5DE5CFCC.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b5c9c394-fcd0-4b4b-bb1a-824770f40342/0/B4153DCEE87E15F92AABAC0DF6729C9A5DE5CFCC.mft
Manifest number:          0547
Signing time:             Sun 01 Feb 2026 17:21:17 +0000
Manifest this update:     Sun 01 Feb 2026 17:16:17 +0000
Manifest next update:     Thu 05 Feb 2026 03:43:17 +0000
Files and hashes:         1: 323030313a6466363a643730303a3a2f34382d3438203d3e20313338303738.roa (hash: O7ms2O+UhtZVKkE81cuQDtuTyN3BEIVlVc+cc3/gZMg=)
                          2: B4153DCEE87E15F92AABAC0DF6729C9A5DE5CFCC.crl (hash: U0fHwN/1j280pz+WUpMXYT7Y7rts75twzJTcqAPFYBg=)
                          3: 3130332e3132332e3233362e302f32342d3234203d3e20313338303738.roa (hash: RmlnKYQXWGOfP+UEgb2aQ4Zckhx5L2Ib8Jbz3UBAKro=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/b5c9c394-fcd0-4b4b-bb1a-824770f40342/0/B4153DCEE87E15F92AABAC0DF6729C9A5DE5CFCC.crl
                          rsync://repo-rpki.idnic.net/repo/b5c9c394-fcd0-4b4b-bb1a-824770f40342/0/B4153DCEE87E15F92AABAC0DF6729C9A5DE5CFCC.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B4153DCEE87E15F92AABAC0DF6729C9A5DE5CFCC.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Feb 2026 03:43:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:4e:bf:d5:82:22:d6:f7:c0:45:66:8a:dd:59:11:6f:78:b5:a5:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B4153DCEE87E15F92AABAC0DF6729C9A5DE5CFCC
        Validity
            Not Before: Feb  1 17:16:17 2026 GMT
            Not After : Feb  5 03:43:17 2026 GMT
        Subject: CN=855BA71912BFB725C6DB1428A8836C7080E6C062
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:2f:e5:af:0b:d8:48:3e:fb:89:f8:7c:8c:ed:
                    93:e0:e6:22:4c:b9:19:35:e1:9f:a0:60:4b:a0:cb:
                    4e:7c:d8:5c:6e:61:00:b0:67:16:2f:87:9f:49:fe:
                    0e:c3:97:a9:55:0e:2f:98:ec:56:b9:8d:35:3f:a3:
                    ec:4f:1b:99:ad:c8:85:b3:c8:38:93:4b:a5:17:e3:
                    bc:a5:fd:cc:71:bf:04:91:af:6a:a4:b4:77:d7:29:
                    f6:54:cb:2d:ac:f2:15:e0:c8:1b:70:2c:df:d7:0c:
                    1d:00:ab:df:70:54:3f:8f:66:02:54:67:ee:79:ba:
                    cc:63:0c:fc:5f:7a:57:b1:a6:2b:51:9b:25:13:ad:
                    0a:c1:9a:5d:2b:9b:8e:5b:b5:ae:11:da:c9:b9:f7:
                    ce:2d:27:13:e0:55:c3:64:31:1c:ca:7d:ac:0c:e2:
                    4c:b5:48:80:e6:91:5f:64:b9:b9:24:e2:b1:95:ea:
                    6f:2e:76:62:ff:1a:7e:a1:3f:0c:f8:62:7b:43:2c:
                    47:28:96:7a:08:2e:13:6a:87:18:43:15:08:21:6c:
                    79:8e:4a:be:c8:b3:f7:12:d1:f5:f8:8a:0b:97:0f:
                    2d:b4:a3:c5:6f:69:a3:f1:a8:57:ec:00:2e:7e:fb:
                    f6:99:26:d7:d8:4f:6c:e8:f2:3d:31:e4:0e:37:80:
                    9f:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:5B:A7:19:12:BF:B7:25:C6:DB:14:28:A8:83:6C:70:80:E6:C0:62
            X509v3 Authority Key Identifier:
                keyid:B4:15:3D:CE:E8:7E:15:F9:2A:AB:AC:0D:F6:72:9C:9A:5D:E5:CF:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b5c9c394-fcd0-4b4b-bb1a-824770f40342/0/B4153DCEE87E15F92AABAC0DF6729C9A5DE5CFCC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B4153DCEE87E15F92AABAC0DF6729C9A5DE5CFCC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b5c9c394-fcd0-4b4b-bb1a-824770f40342/0/B4153DCEE87E15F92AABAC0DF6729C9A5DE5CFCC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:82:e0:b1:75:8f:43:15:9b:04:87:a5:f1:4c:72:a9:43:af:
         86:6f:71:a7:6e:f1:69:b9:4e:a4:0e:ce:62:7f:4a:bd:40:84:
         c6:34:b2:2a:54:5f:2e:24:6b:ee:ab:4c:44:c0:49:c0:4a:a5:
         f2:bd:cf:3c:a6:c4:15:ec:85:e0:fd:9d:20:c0:33:97:4c:0b:
         e0:cf:88:b3:aa:fa:ce:2e:49:d0:af:05:ab:a1:c9:11:9b:4a:
         02:47:20:e0:6b:b7:f8:33:d1:b3:37:18:60:dd:3d:a9:5e:f5:
         c3:a4:22:b5:4d:ca:b7:8b:e2:68:45:c0:26:49:7d:8f:a0:e8:
         00:3c:f9:93:b1:bb:6f:85:be:17:b5:fc:40:dd:f0:46:e1:97:
         aa:2a:b2:cb:f1:04:c7:39:0f:87:44:41:f3:a4:d7:83:62:55:
         93:03:cd:78:3f:a0:6f:17:d1:be:b8:ce:3b:9d:cd:ba:3a:f9:
         6d:50:9f:48:c7:72:bd:0a:62:a1:94:93:15:f6:bd:da:cb:f3:
         31:1b:dd:c7:e8:7d:66:3c:e4:7d:1f:1c:83:b4:58:c9:7a:93:
         3a:84:c0:b4:b9:18:90:75:be:b4:16:99:7d:84:22:65:51:8e:
         68:6c:24:8f:df:b5:11:08:29:76:30:04:82:91:e4:05:0f:d6:
         26:2f:18:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 10:06:57 2026 by rpki-client