This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/108261B2B5A1F3CC828EF2A532ED94DFC1202853.mft
File:                     108261B2B5A1F3CC828EF2A532ED94DFC1202853.mft (raw, json)
Hash identifier:          MGCk17GcEJDWsKjQE0JhKjLeBhKf1HTNVhLjfzheKGU=
Subject key identifier:   50:26:D4:36:75:06:D2:6C:0A:6E:54:2C:E3:66:7F:47:CF:82:CC:B1
Authority key identifier: 10:82:61:B2:B5:A1:F3:CC:82:8E:F2:A5:32:ED:94:DF:C1:20:28:53
Certificate issuer:       /CN=108261B2B5A1F3CC828EF2A532ED94DFC1202853
Certificate serial:       1D81506143AC5269AC4C551B38AC111DEAC5E7A1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/108261B2B5A1F3CC828EF2A532ED94DFC1202853.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/108261B2B5A1F3CC828EF2A532ED94DFC1202853.mft
Manifest number:          0127
Signing time:             Sat 31 Jan 2026 09:11:42 +0000
Manifest this update:     Sat 31 Jan 2026 09:06:42 +0000
Manifest next update:     Tue 03 Feb 2026 11:39:42 +0000
Files and hashes:         1: 3132332e3130382e36372e302f32342d3234203d3e20313333373939.roa (hash: mb4RdHaLVtluUJXDmdVSpVl3zLc9LDc6xWU2Tugox0c=)
                          2: 3130332e34322e3235332e302f32342d3234203d3e20313333373939.roa (hash: ZpCaLj3IjbNE+GXo6EylCwD1IX57XlXTChG6yMIUs9k=)
                          3: 3132332e3130382e36352e302f32342d3234203d3e20313333373939.roa (hash: 2MPbE9DHmM30NHKgthoS9sI03vGrnEvS4h+kAcqNSBY=)
                          4: 323430313a626538303a3a2f33322d3332203d3e20313333373939.roa (hash: U1+UJYOPqeG7oUJWUM0ECQEyGoOhn9MsVuuE8ER7syk=)
                          5: 3132332e3130382e36342e302f32342d3234203d3e20313333373939.roa (hash: YLUa9f9Ix42SsoAFmSGmhnlKGmYHofqL4ey07MvkUwA=)
                          6: 3130332e34322e3235322e302f32322d3232203d3e20313333373939.roa (hash: 02uGPdQ9hFird7xTsc25uxwhcDH5++RrfPud5wB034E=)
                          7: 3130332e34322e3235342e302f32342d3234203d3e20313333373939.roa (hash: dta96fOO5R3KY41745HRH3tf4b61/DKoGwUN3Q11U24=)
                          8: 3130332e34322e3235352e302f32342d3234203d3e20313333373939.roa (hash: wR+IWZMCxrwb5/faol2/GF6hZhc853OeCuHNs3ivUEk=)
                          9: 3132332e3130382e36342e302f32322d3232203d3e20313333373939.roa (hash: abJz0HXL4r3WKDjsYu+oZiEGGhSowngdRONlkzkes1A=)
                          10: 3132332e3130382e36362e302f32342d3234203d3e20313333373939.roa (hash: DACxlfdaRrzYV99yR/yeAhjiMh8XR4kIKAf+dkh/dOU=)
                          11: 3130332e34322e3235322e302f32342d3234203d3e20313333373939.roa (hash: KSUbvXfR6wqgEtV1jcjWsrQSqy5TRuM5IxH97Spd5gE=)
                          12: 108261B2B5A1F3CC828EF2A532ED94DFC1202853.crl (hash: hkPxaMeQHh55qGDTFDNyIs08FPDhbp5xXVB/Kw/hBX4=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/108261B2B5A1F3CC828EF2A532ED94DFC1202853.crl
                          rsync://repo-rpki.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/108261B2B5A1F3CC828EF2A532ED94DFC1202853.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/108261B2B5A1F3CC828EF2A532ED94DFC1202853.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Feb 2026 11:39:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:81:50:61:43:ac:52:69:ac:4c:55:1b:38:ac:11:1d:ea:c5:e7:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=108261B2B5A1F3CC828EF2A532ED94DFC1202853
        Validity
            Not Before: Jan 31 09:06:42 2026 GMT
            Not After : Feb  3 11:39:42 2026 GMT
        Subject: CN=5026D4367506D26C0A6E542CE3667F47CF82CCB1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:6e:ec:2d:a2:5d:4e:60:8f:87:f4:9b:69:c5:
                    c6:2a:3d:ac:8b:7a:e1:a1:0d:72:44:fa:73:02:f9:
                    f6:31:ae:00:b7:ed:f2:4d:73:cb:a5:90:b7:90:2d:
                    b6:65:63:07:d4:71:7f:40:39:db:bc:b2:f5:0a:50:
                    e9:c4:7f:f2:92:55:56:3b:e0:6a:04:4a:c0:fb:95:
                    6e:09:5e:76:20:c6:af:80:c7:07:09:2d:e8:54:86:
                    8b:aa:80:39:02:c1:e3:24:08:d8:08:ed:ce:48:78:
                    d3:37:ae:a3:78:3a:1f:4d:89:0d:c9:0a:e1:16:2b:
                    ef:dd:cb:de:26:df:7a:c4:d8:eb:22:c3:59:6b:43:
                    eb:b0:9c:2f:b1:3e:48:c5:cc:c3:8f:83:61:45:ed:
                    a2:d8:5c:f1:31:e1:c9:0e:48:33:c1:95:69:16:29:
                    2c:93:05:0e:da:a7:56:32:51:e9:cd:62:01:13:b2:
                    53:3e:94:7f:f6:fc:16:78:c1:08:a0:9f:50:a1:f7:
                    26:89:3d:5e:f2:34:b2:b5:4f:69:36:a1:a0:96:43:
                    7d:6d:81:b1:33:75:7c:bf:d5:14:9f:39:19:cc:18:
                    a5:28:a3:0c:fd:bc:36:23:46:88:14:18:83:3e:cc:
                    ee:2f:ae:cb:7f:ef:2b:a6:a6:e7:8d:ed:74:bf:a9:
                    be:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:26:D4:36:75:06:D2:6C:0A:6E:54:2C:E3:66:7F:47:CF:82:CC:B1
            X509v3 Authority Key Identifier:
                keyid:10:82:61:B2:B5:A1:F3:CC:82:8E:F2:A5:32:ED:94:DF:C1:20:28:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/108261B2B5A1F3CC828EF2A532ED94DFC1202853.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/108261B2B5A1F3CC828EF2A532ED94DFC1202853.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/108261B2B5A1F3CC828EF2A532ED94DFC1202853.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:e4:b1:d0:fe:4f:5d:a9:c7:82:51:18:f4:fa:e2:82:fb:86:
         e3:46:04:bc:1b:c6:4c:13:af:2a:42:0d:bc:48:cf:c3:0c:1d:
         3f:01:1c:47:74:44:be:3e:e8:89:36:0d:26:ac:ec:8a:73:11:
         29:a7:44:b3:8e:6e:8f:a3:01:c6:0b:80:02:e2:08:da:11:53:
         e3:eb:7d:58:c9:1b:b6:8e:be:e8:64:89:07:7a:02:91:e7:18:
         8d:c1:9a:0d:3e:1b:9d:eb:fe:98:95:79:35:7c:82:e4:26:78:
         3a:d8:40:53:7c:94:39:f3:b8:e5:b4:8e:2c:ba:35:ca:fc:c3:
         6d:af:38:b0:e4:6a:b6:65:07:ca:11:e6:09:ec:a7:98:15:62:
         7e:9d:4c:eb:2e:ca:5b:52:a7:5d:a9:a6:c8:0e:c6:4e:39:20:
         fd:dc:dc:9d:62:cc:e5:ed:f4:b0:24:86:6e:3f:ea:cd:02:50:
         9f:26:86:a3:7c:6a:8f:5a:ed:eb:de:eb:6b:cb:78:ef:05:b1:
         00:30:96:df:af:b3:fd:e5:5a:da:34:54:2c:09:04:db:7c:36:
         55:e5:79:ac:2b:e6:c8:42:cc:1f:1d:f8:a5:5b:0a:ca:40:df:
         61:d9:5f:08:07:f8:1d:7a:a6:72:36:8a:c6:a0:cc:90:8a:9d:
         8a:65:66:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 12:50:13 2026 by rpki-client