This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/c8f6beb8-e4e8-4e39-8275-1c6d77c3eef8/0/A79FD307C37E8C559F65A58EC9CE95BE266F8A6D.mft
File:                     A79FD307C37E8C559F65A58EC9CE95BE266F8A6D.mft (raw, json)
Hash identifier:          Qb2EOey03HJsVi7YrJrD+3g5Wj8D9wTRfdBeLkq0iyY=
Subject key identifier:   28:49:37:F9:E3:D4:DA:C2:9C:43:2D:3D:13:B2:47:9B:6E:19:7A:66
Authority key identifier: A7:9F:D3:07:C3:7E:8C:55:9F:65:A5:8E:C9:CE:95:BE:26:6F:8A:6D
Certificate issuer:       /CN=A79FD307C37E8C559F65A58EC9CE95BE266F8A6D
Certificate serial:       1D0DDD79B60DD5667986813CE217363A41463AC3
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A79FD307C37E8C559F65A58EC9CE95BE266F8A6D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c8f6beb8-e4e8-4e39-8275-1c6d77c3eef8/0/A79FD307C37E8C559F65A58EC9CE95BE266F8A6D.mft
Manifest number:          0546
Signing time:             Sun 01 Feb 2026 18:01:46 +0000
Manifest this update:     Sun 01 Feb 2026 17:56:46 +0000
Manifest next update:     Wed 04 Feb 2026 19:59:46 +0000
Files and hashes:         1: 3230322e3133382e3232342e302f31392d3234203d3e2039363537.roa (hash: Go0CPlPcssjZzIiCTnTf40YOYb6lhMvP1qODXAMUZSM=)
                          2: A79FD307C37E8C559F65A58EC9CE95BE266F8A6D.crl (hash: 7WbRRTD1hTA+sUoy/QmggPW7E8h7d4N7rPDaspCr6mo=)
                          3: 323430333a393530303a3a2f33322d3336203d3e2039363537.roa (hash: m9TQ4kbiWJ7wAU6DJc4l1m4yIYMItzDNgLT+tillKjs=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c8f6beb8-e4e8-4e39-8275-1c6d77c3eef8/0/A79FD307C37E8C559F65A58EC9CE95BE266F8A6D.crl
                          rsync://repo-rpki.idnic.net/repo/c8f6beb8-e4e8-4e39-8275-1c6d77c3eef8/0/A79FD307C37E8C559F65A58EC9CE95BE266F8A6D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A79FD307C37E8C559F65A58EC9CE95BE266F8A6D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Feb 2026 19:59:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:0d:dd:79:b6:0d:d5:66:79:86:81:3c:e2:17:36:3a:41:46:3a:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A79FD307C37E8C559F65A58EC9CE95BE266F8A6D
        Validity
            Not Before: Feb  1 17:56:46 2026 GMT
            Not After : Feb  4 19:59:46 2026 GMT
        Subject: CN=284937F9E3D4DAC29C432D3D13B2479B6E197A66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:3d:02:98:bf:97:0e:37:10:e1:83:00:07:2c:
                    45:23:43:4d:84:04:ef:07:1f:d8:1e:aa:a8:48:9c:
                    ea:54:28:5f:57:54:8d:24:e7:d2:d4:96:aa:29:29:
                    04:d8:7a:fc:34:37:e7:f3:8f:bc:e5:1c:91:b5:a2:
                    05:88:a3:d6:82:0b:71:2c:d5:82:7d:1f:2e:f7:f3:
                    b6:a7:b1:dc:04:0a:d8:8d:41:bb:50:19:45:ed:87:
                    51:70:8e:a9:9d:d5:e3:be:6f:c6:93:83:ac:e3:4a:
                    4e:51:99:b9:d1:b8:6c:ae:ca:59:ca:ac:b1:90:e3:
                    37:fa:8e:2c:d1:bc:ec:1d:17:08:b4:35:9d:db:89:
                    25:60:c1:6d:fd:b4:f6:67:a4:56:31:15:07:4e:11:
                    5e:78:fc:52:f5:47:77:d9:fa:d9:74:51:1e:4e:29:
                    23:7f:50:2d:4b:12:99:31:46:7a:8b:c7:0f:a7:03:
                    bd:12:cc:a3:ac:9b:98:e7:20:5b:6f:d6:37:42:3d:
                    3c:7b:02:16:33:f6:51:9d:f6:35:60:e1:5f:b0:79:
                    23:d0:e2:1f:9b:84:ff:3c:e6:64:4a:e8:3c:12:01:
                    75:dd:65:4a:d4:33:9d:d2:67:58:9a:57:f4:fc:07:
                    26:c9:dd:b6:01:75:41:01:02:aa:1f:7b:58:cb:61:
                    35:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:49:37:F9:E3:D4:DA:C2:9C:43:2D:3D:13:B2:47:9B:6E:19:7A:66
            X509v3 Authority Key Identifier:
                keyid:A7:9F:D3:07:C3:7E:8C:55:9F:65:A5:8E:C9:CE:95:BE:26:6F:8A:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c8f6beb8-e4e8-4e39-8275-1c6d77c3eef8/0/A79FD307C37E8C559F65A58EC9CE95BE266F8A6D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A79FD307C37E8C559F65A58EC9CE95BE266F8A6D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c8f6beb8-e4e8-4e39-8275-1c6d77c3eef8/0/A79FD307C37E8C559F65A58EC9CE95BE266F8A6D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:c9:07:59:4f:b1:5e:d6:8a:28:64:7b:05:eb:c7:1b:cd:3f:
         09:0d:87:fb:fd:f6:33:bd:d7:b3:27:24:43:f3:79:d1:00:79:
         97:69:10:50:2b:73:0a:cc:4a:6d:db:95:c4:56:b5:47:d9:bb:
         17:63:dd:b3:2d:16:6c:e3:9d:35:d6:69:f1:7a:9c:55:95:07:
         16:f5:ef:6e:ae:9c:10:c2:c5:03:6f:48:e4:ee:a0:e8:cc:77:
         d9:63:af:2b:20:7f:79:aa:5d:28:6f:72:38:51:40:af:38:b5:
         ce:e2:b1:07:01:bb:85:55:40:e3:41:9c:c2:c2:a0:47:d5:b2:
         d7:59:2a:ea:d6:1c:e7:85:6e:68:ca:ee:1d:06:ba:1c:76:eb:
         ca:0c:b4:2c:74:5b:13:47:a9:7b:45:49:55:2b:bf:4a:38:94:
         60:e9:b5:31:23:c3:e3:41:90:2e:1d:34:5a:da:fc:a0:c8:b5:
         92:42:71:f9:21:67:5e:ba:fe:d7:2d:e5:6b:a6:c9:f9:41:97:
         45:4b:ae:46:4d:11:e2:bd:13:bd:67:73:29:e4:5e:ce:0d:87:
         6c:41:62:13:0e:f1:09:91:8d:c9:fb:68:3c:5f:2d:64:9a:10:
         6f:d0:47:ae:c3:4d:51:ff:69:77:4f:b8:a8:f4:56:1e:31:05:
         d1:78:f3:98
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUHQ3debYN1WZ5hoE84hc2OkFGOsMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTc5RkQzMDdDMzdFOEM1NTlGNjVBNThFQzlDRTk1QkUy
NjZGOEE2RDAeFw0yNjAyMDExNzU2NDZaFw0yNjAyMDQxOTU5NDZaMDMxMTAvBgNV
BAMTKDI4NDkzN0Y5RTNENERBQzI5QzQzMkQzRDEzQjI0NzlCNkUxOTdBNjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNPQKYv5cONxDhgwAHLEUjQ02E
BO8HH9geqqhInOpUKF9XVI0k59LUlqopKQTYevw0N+fzj7zlHJG1ogWIo9aCC3Es
1YJ9Hy7387ansdwECtiNQbtQGUXth1Fwjqmd1eO+b8aTg6zjSk5RmbnRuGyuylnK
rLGQ4zf6jizRvOwdFwi0NZ3biSVgwW39tPZnpFYxFQdOEV54/FL1R3fZ+tl0UR5O
KSN/UC1LEpkxRnqLxw+nA70SzKOsm5jnIFtv1jdCPTx7AhYz9lGd9jVg4V+weSPQ
4h+bhP885mRK6DwSAXXdZUrUM53SZ1iaV/T8BybJ3bYBdUEBAqofe1jLYTUlAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUKEk3+ePU2sKcQy09E7JHm24ZemYwHwYDVR0j
BBgwFoAUp5/TB8N+jFWfZaWOyc6VviZvim0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j
OGY2YmViOC1lNGU4LTRlMzktODI3NS0xYzZkNzdjM2VlZjgvMC9BNzlGRDMwN0Mz
N0U4QzU1OUY2NUE1OEVDOUNFOTVCRTI2NkY4QTZELmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQTc5RkQzMDdDMzdFOEM1NTlGNjVBNThFQzlDRTk1QkUyNjZG
OEE2RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzhmNmJlYjgtZTRlOC00ZTM5LTgy
NzUtMWM2ZDc3YzNlZWY4LzAvQTc5RkQzMDdDMzdFOEM1NTlGNjVBNThFQzlDRTk1
QkUyNjZGOEE2RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBABfJB1lPsV7WiihkewXrxxvNPwkNh/v99jO9
17MnJEPzedEAeZdpEFArcwrMSm3blcRWtUfZuxdj3bMtFmzjnTXWafF6nFWVBxb1
726unBDCxQNvSOTuoOjMd9ljrysgf3mqXShvcjhRQK84tc7isQcBu4VVQONBnMLC
oEfVstdZKurWHOeFbmjK7h0Guhx268oMtCx0WxNHqXtFSVUrv0o4lGDptTEjw+NB
kC4dNFra/KDItZJCcfkhZ166/tct5WumyflBl0VLrkZNEeK9E71ncynkXs4Nh2xB
YhMO8QmRjcn7aDxfLWSaEG/QR67DTVH/aXdPuKj0Vh4xBdF485g=
-----END CERTIFICATE-----
Generated at Mon Feb 2 09:45:27 2026 by rpki-client