This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/d4b4fb88-8f42-47f2-be80-09e43560dddf/0/F89969E8BABE05C45C6D6E25F625E9F1845CCC9C.mft
File:                     F89969E8BABE05C45C6D6E25F625E9F1845CCC9C.mft (raw, json)
Hash identifier:          1Ga9YFOj2GvqCFsNAphcRuP5aOsAGujgZB405RaGP+M=
Subject key identifier:   A7:A9:B8:EA:06:0F:2D:E3:CB:A7:19:24:A2:46:B2:60:C6:6C:85:F9
Authority key identifier: F8:99:69:E8:BA:BE:05:C4:5C:6D:6E:25:F6:25:E9:F1:84:5C:CC:9C
Certificate issuer:       /CN=F89969E8BABE05C45C6D6E25F625E9F1845CCC9C
Certificate serial:       3236F032F15E80EA88325FC3F0F97DBA0B78CEB6
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F89969E8BABE05C45C6D6E25F625E9F1845CCC9C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d4b4fb88-8f42-47f2-be80-09e43560dddf/0/F89969E8BABE05C45C6D6E25F625E9F1845CCC9C.mft
Manifest number:          0548
Signing time:             Sun 01 Feb 2026 18:10:55 +0000
Manifest this update:     Sun 01 Feb 2026 18:05:55 +0000
Manifest next update:     Thu 05 Feb 2026 03:12:55 +0000
Files and hashes:         1: 323430343a3763303a3a2f33322d3332203d3e20313338313039.roa (hash: Pf0ONhthfsPXInuvTqJNg8gHQzNEqbW2IadA0wGv3Pw=)
                          2: 3130332e3132362e38342e302f32322d3234203d3e20313338313039.roa (hash: Fk8DplImfz+K8DXRwes7LY4gqzQurTG9SsMeFcuo2l8=)
                          3: F89969E8BABE05C45C6D6E25F625E9F1845CCC9C.crl (hash: q+G9wksyldiha4Od5dwIINlFqXNT3DvSL6ZGshJEDTE=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d4b4fb88-8f42-47f2-be80-09e43560dddf/0/F89969E8BABE05C45C6D6E25F625E9F1845CCC9C.crl
                          rsync://repo-rpki.idnic.net/repo/d4b4fb88-8f42-47f2-be80-09e43560dddf/0/F89969E8BABE05C45C6D6E25F625E9F1845CCC9C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F89969E8BABE05C45C6D6E25F625E9F1845CCC9C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Feb 2026 03:12:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:36:f0:32:f1:5e:80:ea:88:32:5f:c3:f0:f9:7d:ba:0b:78:ce:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F89969E8BABE05C45C6D6E25F625E9F1845CCC9C
        Validity
            Not Before: Feb  1 18:05:55 2026 GMT
            Not After : Feb  5 03:12:55 2026 GMT
        Subject: CN=A7A9B8EA060F2DE3CBA71924A246B260C66C85F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:45:f6:b2:4b:81:e9:70:5f:05:4f:b1:a1:14:
                    2c:8e:2b:0c:23:af:77:d9:6d:f5:22:e8:9f:c0:d7:
                    bc:59:6f:f7:6d:3d:ae:72:dd:62:eb:09:54:54:b1:
                    57:9e:aa:0d:e7:9e:81:c9:7b:5b:49:98:8a:1e:c3:
                    43:65:d7:55:50:6b:80:91:f8:04:eb:05:57:0e:6d:
                    29:2e:1a:2f:06:b0:6c:cf:61:5f:af:e2:d0:76:2b:
                    95:56:83:ef:61:aa:b3:2f:16:eb:fb:c2:b8:99:bd:
                    37:e7:38:68:85:32:4d:3b:38:c9:35:59:29:ae:8f:
                    a1:4a:67:95:e1:60:40:1a:af:7b:62:cc:45:54:af:
                    51:2e:f6:15:ce:2a:6d:31:43:64:bb:29:fc:5e:75:
                    06:3e:b7:65:36:82:a9:d7:af:29:26:f3:a0:a4:1b:
                    30:71:9a:11:2f:00:7e:23:24:91:78:0c:4b:4b:f7:
                    eb:a5:38:1c:99:36:ba:02:52:6d:e4:ba:be:66:74:
                    56:9b:da:ec:db:28:79:8f:67:11:25:9c:48:44:19:
                    76:9e:10:d1:ce:07:b8:7a:63:37:8d:78:81:ed:0c:
                    b1:6e:31:8e:4f:71:21:cc:77:19:69:9b:c5:cc:a1:
                    10:3e:e0:06:30:6d:9c:90:4c:08:ed:23:d5:5b:c2:
                    c9:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:A9:B8:EA:06:0F:2D:E3:CB:A7:19:24:A2:46:B2:60:C6:6C:85:F9
            X509v3 Authority Key Identifier:
                keyid:F8:99:69:E8:BA:BE:05:C4:5C:6D:6E:25:F6:25:E9:F1:84:5C:CC:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d4b4fb88-8f42-47f2-be80-09e43560dddf/0/F89969E8BABE05C45C6D6E25F625E9F1845CCC9C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F89969E8BABE05C45C6D6E25F625E9F1845CCC9C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d4b4fb88-8f42-47f2-be80-09e43560dddf/0/F89969E8BABE05C45C6D6E25F625E9F1845CCC9C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:63:a6:c3:36:8e:47:bf:de:88:84:14:b0:d0:a6:a3:ce:70:
         0c:b5:76:8a:01:1c:8b:fd:73:87:73:87:94:e5:74:f6:85:e6:
         46:e7:90:bd:5c:b0:d4:80:66:18:cd:06:c5:10:0b:e9:e5:54:
         19:69:c5:7b:fa:cb:d2:39:6a:66:23:2d:87:ae:94:03:c9:59:
         47:7d:5d:12:95:d7:09:88:22:34:53:82:41:c5:16:d7:93:78:
         dd:77:ec:23:4a:de:a2:26:5b:f3:ad:36:51:1f:fe:77:64:1d:
         71:fb:9d:c3:41:4f:9b:54:c9:4e:b1:34:b1:ec:7c:b2:cc:65:
         ff:01:96:dd:fe:c1:17:49:0c:69:7a:1a:54:d3:24:ac:de:98:
         af:17:01:d0:c1:c9:76:9e:1a:a4:2e:3c:28:fa:84:d7:8e:ae:
         1c:91:3d:d2:9e:a3:ec:e8:5a:cd:fa:4e:77:db:ed:37:b6:33:
         a1:dc:8f:b0:0d:f1:f5:0c:a4:fe:d0:9d:d0:81:2d:a2:71:ed:
         68:fb:3b:4a:a1:19:68:9c:1b:09:34:cf:7f:cb:7e:cf:67:00:
         e5:02:9c:e5:0a:19:1b:35:ca:2e:18:d1:50:ae:ce:6f:a8:b9:
         04:b0:47:03:3e:06:e7:a6:d1:d2:f4:51:ee:a8:46:da:94:93:
         77:39:88:d6
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUMjbwMvFegOqIMl/D8Pl9ugt4zrYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjg5OTY5RThCQUJFMDVDNDVDNkQ2RTI1RjYyNUU5RjE4
NDVDQ0M5QzAeFw0yNjAyMDExODA1NTVaFw0yNjAyMDUwMzEyNTVaMDMxMTAvBgNV
BAMTKEE3QTlCOEVBMDYwRjJERTNDQkE3MTkyNEEyNDZCMjYwQzY2Qzg1RjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2RfayS4HpcF8FT7GhFCyOKwwj
r3fZbfUi6J/A17xZb/dtPa5y3WLrCVRUsVeeqg3nnoHJe1tJmIoew0Nl11VQa4CR
+ATrBVcObSkuGi8GsGzPYV+v4tB2K5VWg+9hqrMvFuv7wriZvTfnOGiFMk07OMk1
WSmuj6FKZ5XhYEAar3tizEVUr1Eu9hXOKm0xQ2S7KfxedQY+t2U2gqnXrykm86Ck
GzBxmhEvAH4jJJF4DEtL9+ulOByZNroCUm3kur5mdFab2uzbKHmPZxElnEhEGXae
ENHOB7h6YzeNeIHtDLFuMY5PcSHMdxlpm8XMoRA+4AYwbZyQTAjtI9VbwsmDAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUp6m46gYPLePLpxkkokayYMZshfkwHwYDVR0j
BBgwFoAU+Jlp6Lq+BcRcbW4l9iXp8YRczJwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k
NGI0ZmI4OC04ZjQyLTQ3ZjItYmU4MC0wOWU0MzU2MGRkZGYvMC9GODk5NjlFOEJB
QkUwNUM0NUM2RDZFMjVGNjI1RTlGMTg0NUNDQzlDLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRjg5OTY5RThCQUJFMDVDNDVDNkQ2RTI1RjYyNUU5RjE4NDVD
Q0M5Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDRiNGZiODgtOGY0Mi00N2YyLWJl
ODAtMDllNDM1NjBkZGRmLzAvRjg5OTY5RThCQUJFMDVDNDVDNkQ2RTI1RjYyNUU5
RjE4NDVDQ0M5Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBADFjpsM2jke/3oiEFLDQpqPOcAy1dooBHIv9
c4dzh5TldPaF5kbnkL1csNSAZhjNBsUQC+nlVBlpxXv6y9I5amYjLYeulAPJWUd9
XRKV1wmIIjRTgkHFFteTeN137CNK3qImW/OtNlEf/ndkHXH7ncNBT5tUyU6xNLHs
fLLMZf8Blt3+wRdJDGl6GlTTJKzemK8XAdDByXaeGqQuPCj6hNeOrhyRPdKeo+zo
Ws36Tnfb7Te2M6Hcj7AN8fUMpP7QndCBLaJx7Wj7O0qhGWicGwk0z3/Lfs9nAOUC
nOUKGRs1yi4Y0VCuzm+ouQSwRwM+Buem0dL0Ue6oRtqUk3c5iNY=
-----END CERTIFICATE-----
Generated at Mon Feb 2 09:43:41 2026 by rpki-client