This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/bd7fa210-5f25-4f0b-89a5-7d00a354a907/0/846D8A4B978C6F595D44EACDB8259295CD43C499.mft
File:                     846D8A4B978C6F595D44EACDB8259295CD43C499.mft (raw, json)
Hash identifier:          mnwVwY/QLWxP1zM82PDUYlJK8tmaiaoTKZoY+d50EFE=
Subject key identifier:   BD:5B:A9:33:32:2F:36:5C:2E:6E:00:68:7D:87:8C:2C:C0:40:CE:39
Authority key identifier: 84:6D:8A:4B:97:8C:6F:59:5D:44:EA:CD:B8:25:92:95:CD:43:C4:99
Certificate issuer:       /CN=846D8A4B978C6F595D44EACDB8259295CD43C499
Certificate serial:       01403BD162EFB6AEDA63EAAADA6CACCE7E1E4678
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/846D8A4B978C6F595D44EACDB8259295CD43C499.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/bd7fa210-5f25-4f0b-89a5-7d00a354a907/0/846D8A4B978C6F595D44EACDB8259295CD43C499.mft
Manifest number:          0166
Signing time:             Mon 02 Feb 2026 04:10:52 +0000
Manifest this update:     Mon 02 Feb 2026 04:05:52 +0000
Manifest next update:     Thu 05 Feb 2026 15:07:52 +0000
Files and hashes:         1: 3130332e3231332e3233352e302f32342d3234203d3e20313531303033.roa (hash: jkC15twdSo2VVxRSy9px5K0BC1HIC59h8vBYUT6CWkg=)
                          2: 3130332e3231332e3233352e302f32342d3234203d3e20313337333636.roa (hash: Lsn42fS5u6tzmVAFqel+kOrjmVEuvr9qNasBHNEDW8Y=)
                          3: 3130332e3231332e3233342e302f32342d3234203d3e20313336383733.roa (hash: SVn/IknycpzSOwxi7uz3uMCs0oz5ucYpmEXX6TOqW1w=)
                          4: 846D8A4B978C6F595D44EACDB8259295CD43C499.crl (hash: qtWNrMQxpOle+audLI5FVX+2Hxq3FekYijshaTO8EAA=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/bd7fa210-5f25-4f0b-89a5-7d00a354a907/0/846D8A4B978C6F595D44EACDB8259295CD43C499.crl
                          rsync://repo-rpki.idnic.net/repo/bd7fa210-5f25-4f0b-89a5-7d00a354a907/0/846D8A4B978C6F595D44EACDB8259295CD43C499.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/846D8A4B978C6F595D44EACDB8259295CD43C499.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Feb 2026 05:24:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:40:3b:d1:62:ef:b6:ae:da:63:ea:aa:da:6c:ac:ce:7e:1e:46:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=846D8A4B978C6F595D44EACDB8259295CD43C499
        Validity
            Not Before: Feb  2 04:05:52 2026 GMT
            Not After : Feb  5 15:07:52 2026 GMT
        Subject: CN=BD5BA933322F365C2E6E00687D878C2CC040CE39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:5e:25:af:62:77:c0:e2:f0:41:03:79:6d:a4:
                    b4:89:35:1e:9f:7f:a9:e5:76:0a:18:2b:07:37:cf:
                    c9:95:3f:15:16:f1:3b:03:d3:7b:d1:0f:cf:09:14:
                    31:dd:3d:c0:f7:c9:93:81:db:a4:a2:bb:3a:46:74:
                    7d:c5:d7:9d:ce:d8:68:29:29:c8:17:79:be:8a:e8:
                    7e:f4:41:38:21:34:e8:0e:97:8b:02:0c:4c:55:57:
                    9e:af:c2:d0:13:d2:f9:20:6c:d1:30:63:8b:05:b2:
                    e0:1f:bd:ab:fd:bf:8d:7d:2b:f8:0d:d8:ce:b8:a3:
                    5e:c1:15:bc:47:97:f1:c5:f6:1c:01:0a:e9:3c:6a:
                    59:1e:c2:53:7b:db:07:f5:cf:b4:76:59:c6:09:ff:
                    b0:9e:d7:17:f1:f4:e7:e0:a8:0e:38:3d:b7:d9:d9:
                    a0:38:a2:24:e9:c0:ca:00:d8:77:54:af:cd:ff:0c:
                    2e:b3:45:ce:a8:ef:61:ea:02:3b:9a:86:0f:b6:67:
                    73:2f:68:52:4e:9a:05:5a:35:60:a2:d0:d5:28:88:
                    67:ec:73:28:80:c5:67:a0:36:bb:47:88:50:c6:58:
                    07:f3:94:38:2e:35:d3:d5:b4:99:3b:4a:0a:48:a3:
                    cd:59:9f:63:ac:d8:9f:00:d5:2c:d0:0d:3a:c7:5f:
                    35:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:5B:A9:33:32:2F:36:5C:2E:6E:00:68:7D:87:8C:2C:C0:40:CE:39
            X509v3 Authority Key Identifier:
                keyid:84:6D:8A:4B:97:8C:6F:59:5D:44:EA:CD:B8:25:92:95:CD:43:C4:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/bd7fa210-5f25-4f0b-89a5-7d00a354a907/0/846D8A4B978C6F595D44EACDB8259295CD43C499.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/846D8A4B978C6F595D44EACDB8259295CD43C499.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bd7fa210-5f25-4f0b-89a5-7d00a354a907/0/846D8A4B978C6F595D44EACDB8259295CD43C499.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:be:c4:7c:dc:36:78:df:e6:b9:56:bd:6e:28:6e:5e:d8:0a:
         88:c8:12:d9:8c:19:cd:b4:08:ff:f6:37:f8:9a:11:03:a7:26:
         8a:7e:d3:02:2e:0f:d6:b6:6e:dd:dc:e8:15:10:48:58:c4:f7:
         76:b4:6f:21:0b:d1:f1:10:2a:23:7c:69:ed:bf:16:e2:62:8b:
         db:41:2f:52:6c:2d:21:78:69:bc:39:4e:19:8d:de:4e:91:7a:
         3b:47:1e:3a:d2:b0:92:49:15:4a:6a:73:82:ce:1e:e2:8c:c4:
         77:96:70:c0:16:eb:41:0a:df:44:4e:0d:03:f7:e8:63:ba:be:
         6c:31:6d:58:90:39:03:48:73:27:a3:74:b5:6e:b7:d9:e1:cc:
         7f:39:a6:09:ec:e9:5e:46:cd:0e:8a:50:34:70:af:06:19:19:
         bf:83:72:1d:f7:b8:9a:f7:d4:f2:91:26:50:25:df:f4:89:84:
         58:7f:1e:5b:e0:e5:24:3e:a7:44:df:31:26:29:19:f9:1c:a1:
         ce:d0:3a:51:93:9d:9c:a3:a0:01:e8:b1:47:e1:46:6b:13:7a:
         21:43:c7:fc:be:7a:6d:ca:da:eb:6d:71:24:cb:81:f9:1c:c2:
         dd:29:b4:fc:bf:83:92:3d:6f:4b:6c:3d:ca:60:57:63:75:70:
         6f:37:d1:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:42:19 2026 by rpki-client