This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/BD809D8A065DB595DC069383736A1A9C4A96B267.mft
File:                     BD809D8A065DB595DC069383736A1A9C4A96B267.mft (raw, json)
Hash identifier:          ZSkO9uWj5UnW2Zk/q3J/GRneNeB7tQL54XEiV/d/rQM=
Subject key identifier:   A7:59:00:14:FA:2C:0D:DF:FF:69:5C:11:4F:DE:91:3B:64:8A:B2:26
Authority key identifier: BD:80:9D:8A:06:5D:B5:95:DC:06:93:83:73:6A:1A:9C:4A:96:B2:67
Certificate issuer:       /CN=BD809D8A065DB595DC069383736A1A9C4A96B267
Certificate serial:       4C408AC4751457B51DE8B68E65D14DBD79A0DF8E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD809D8A065DB595DC069383736A1A9C4A96B267.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/BD809D8A065DB595DC069383736A1A9C4A96B267.mft
Manifest number:          054A
Signing time:             Sun 01 Feb 2026 13:02:13 +0000
Manifest this update:     Sun 01 Feb 2026 12:57:13 +0000
Manifest next update:     Wed 04 Feb 2026 22:40:13 +0000
Files and hashes:         1: 3130332e35362e3230342e302f32342d3234203d3e203538343737.roa (hash: E6oSwKyWxejOo/v5HHitngqUwJ84vi0WR9s9o+kQ4qc=)
                          2: 3130332e35362e3230352e302f32342d3234203d3e203538343737.roa (hash: Y6tvd+1XtHiukr4Lnc++EG2e4/MBcfeHFg9Xd0kGFMg=)
                          3: 34352e3132372e3133322e302f32342d3234203d3e203538343737.roa (hash: 6P/MnisWmadZujdf0MdzBBem1MXVl8xw/vKYXqNcxoU=)
                          4: 3130332e35362e3230362e302f32342d3234203d3e203538343737.roa (hash: ctlL63La/nA2o80IyG4Gn5yERO9Svxh3VS6Tj8PS2Bk=)
                          5: 34352e3132372e3133342e302f32342d3234203d3e203538343737.roa (hash: mAHS4RhjFlyuuj4wSTCANOzW1BtppaUwbd4+LpgqV3A=)
                          6: 34352e3132372e3133332e302f32342d3234203d3e203538343737.roa (hash: m1RDFs81kJe7cLkzIuvESdF6lsbsj7FMYtNBuW0nGcE=)
                          7: 3130332e35362e3230372e302f32342d3234203d3e203538343737.roa (hash: +FaWxeyMSXTm1A2YbWkKpjjxd9ODF5R6bPfmYjsvC3c=)
                          8: BD809D8A065DB595DC069383736A1A9C4A96B267.crl (hash: gQ/jpa50TVd3rYMEaW5tf4t9+4Xq1iu84vKwLZDZllA=)
                          9: 34352e3132372e3133352e302f32342d3234203d3e20313335333630.roa (hash: lOPyN4jlxJmDfUm1Z5usitGLtQdiU+flslurwWQqLwM=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/BD809D8A065DB595DC069383736A1A9C4A96B267.crl
                          rsync://repo-rpki.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/BD809D8A065DB595DC069383736A1A9C4A96B267.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD809D8A065DB595DC069383736A1A9C4A96B267.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Feb 2026 22:40:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:40:8a:c4:75:14:57:b5:1d:e8:b6:8e:65:d1:4d:bd:79:a0:df:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD809D8A065DB595DC069383736A1A9C4A96B267
        Validity
            Not Before: Feb  1 12:57:13 2026 GMT
            Not After : Feb  4 22:40:13 2026 GMT
        Subject: CN=A7590014FA2C0DDFFF695C114FDE913B648AB226
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a4:a4:b4:80:fe:20:21:ec:06:5e:80:63:8e:
                    91:d5:19:5c:7f:47:9a:4f:bc:b9:c7:7e:92:92:96:
                    c4:a7:63:89:ce:81:03:f3:01:30:cb:92:2e:2b:48:
                    7d:62:0c:90:99:a9:57:07:82:19:21:36:80:b6:cc:
                    d9:b6:b7:3e:96:72:d5:e7:2c:44:36:69:43:8f:47:
                    c2:c6:78:c2:b3:89:96:8b:2f:4d:fa:78:f5:15:ae:
                    61:f3:4e:74:e7:f5:14:75:e3:1e:80:52:d9:99:e2:
                    fe:c5:ea:e6:04:f4:ec:53:ec:5a:f2:74:28:17:df:
                    79:14:62:2f:ae:5c:de:cd:66:52:85:29:84:c5:a8:
                    3e:83:76:6a:ca:72:76:73:4e:a3:ae:a9:d9:ef:ce:
                    d0:90:13:a0:38:0a:ee:69:08:9b:f0:95:79:a8:7d:
                    45:b2:b4:cf:d6:8a:a1:0d:c9:71:64:cc:b7:e2:fa:
                    a8:27:44:6f:15:83:96:f1:c6:f3:4a:0a:96:e7:6f:
                    9a:42:fc:24:9b:5a:73:2b:ff:46:f5:b5:75:69:80:
                    e8:9e:df:df:92:22:d8:a3:cd:2f:34:9f:a2:7f:3c:
                    a5:4b:25:67:46:c5:21:f8:6d:d0:cd:d6:18:0c:af:
                    66:5f:79:a3:de:56:45:98:22:08:5e:be:14:11:54:
                    00:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:59:00:14:FA:2C:0D:DF:FF:69:5C:11:4F:DE:91:3B:64:8A:B2:26
            X509v3 Authority Key Identifier:
                keyid:BD:80:9D:8A:06:5D:B5:95:DC:06:93:83:73:6A:1A:9C:4A:96:B2:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/BD809D8A065DB595DC069383736A1A9C4A96B267.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD809D8A065DB595DC069383736A1A9C4A96B267.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/BD809D8A065DB595DC069383736A1A9C4A96B267.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:44:d8:c1:b4:1a:0c:bd:d9:ba:fa:67:77:48:0a:12:cc:f9:
         e5:4a:14:77:1d:05:e9:83:58:98:b8:e9:75:9d:e3:11:08:04:
         8f:68:2d:d2:01:f3:08:55:6b:47:5c:85:7b:11:1c:e4:ac:d3:
         07:78:6b:07:f9:68:96:07:1a:60:0d:00:7f:1c:58:d1:88:4a:
         6a:5b:81:53:65:5b:3b:3a:29:18:38:a8:e1:44:50:37:24:a8:
         22:a2:18:f2:64:11:2f:7f:61:df:16:5a:06:28:cf:b8:32:83:
         31:97:5a:3f:fd:9c:47:a5:f1:c0:eb:d6:54:7a:f3:59:3e:1b:
         46:ec:83:f4:bc:0b:11:b5:0c:c9:dc:d4:e0:4b:7c:20:97:88:
         35:2a:3b:ca:18:2e:9a:26:73:7b:1a:82:1c:a7:5b:7d:d2:c8:
         67:21:d9:b1:c5:e2:8e:ea:0a:2d:2e:27:87:63:12:5c:ba:ac:
         db:41:99:ab:22:6b:5b:47:d6:03:80:f2:54:8e:29:9b:6a:02:
         99:16:de:fa:1e:3f:3b:72:18:c0:73:0b:a7:21:83:d7:a8:0a:
         6b:69:ea:b8:3a:db:23:a6:fc:b1:07:ff:fa:63:95:2b:a0:30:
         94:27:75:bc:31:9a:d1:35:6d:39:01:89:9c:f0:ec:5a:7e:c3:
         58:94:20:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 12:49:52 2026 by rpki-client