This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/d7ff01d0-26f9-4b20-a318-c311c267f2af/0/8A54C81A444D07051A24AACF743F01863F8129AB.mft
File:                     8A54C81A444D07051A24AACF743F01863F8129AB.mft (raw, json)
Hash identifier:          01DvsVaJf6xheDD95OJDP0GT6xRmSxu4b4Y91lxZI5c=
Subject key identifier:   23:04:85:68:52:29:65:69:90:5B:1C:B0:A0:08:2B:8C:88:82:99:EA
Authority key identifier: 8A:54:C8:1A:44:4D:07:05:1A:24:AA:CF:74:3F:01:86:3F:81:29:AB
Certificate issuer:       /CN=8A54C81A444D07051A24AACF743F01863F8129AB
Certificate serial:       7E2C8156BD495E79123E808622C7E4C063FFE769
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A54C81A444D07051A24AACF743F01863F8129AB.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d7ff01d0-26f9-4b20-a318-c311c267f2af/0/8A54C81A444D07051A24AACF743F01863F8129AB.mft
Manifest number:          0326
Signing time:             Sat 31 Jan 2026 19:30:42 +0000
Manifest this update:     Sat 31 Jan 2026 19:25:42 +0000
Manifest next update:     Wed 04 Feb 2026 05:30:42 +0000
Files and hashes:         1: 3130332e3136362e3135392e302f32342d3234203d3e20313431393535.roa (hash: pYma4CnUYsvh/GHuj1AR+RzC7f0+QOGrW+zKFaT9Mpo=)
                          2: 8A54C81A444D07051A24AACF743F01863F8129AB.crl (hash: TvnWPEAShifT44fviqqYSXkUsxCD9xp94ams1yjRY10=)
                          3: 3130332e3136362e3135382e302f32342d3234203d3e20313431393535.roa (hash: E7SXMeinhYEx1nTb2SA2Sxos/hegF9SdTdiRzIK1k28=)
                          4: 3130332e3136362e3135382e302f32332d3233203d3e20313431393535.roa (hash: 7dKSNEM+R7mVlaRlryOrYIy/UF51jWYewiOClTImGdg=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d7ff01d0-26f9-4b20-a318-c311c267f2af/0/8A54C81A444D07051A24AACF743F01863F8129AB.crl
                          rsync://repo-rpki.idnic.net/repo/d7ff01d0-26f9-4b20-a318-c311c267f2af/0/8A54C81A444D07051A24AACF743F01863F8129AB.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A54C81A444D07051A24AACF743F01863F8129AB.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Feb 2026 05:30:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:2c:81:56:bd:49:5e:79:12:3e:80:86:22:c7:e4:c0:63:ff:e7:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A54C81A444D07051A24AACF743F01863F8129AB
        Validity
            Not Before: Jan 31 19:25:42 2026 GMT
            Not After : Feb  4 05:30:42 2026 GMT
        Subject: CN=2304856852296569905B1CB0A0082B8C888299EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:03:47:b9:41:a9:54:e6:c3:02:e3:31:f7:cb:
                    0d:3f:b9:c6:13:e3:05:6f:d8:22:6f:b7:61:f3:f9:
                    54:c7:0b:a8:93:f9:4a:68:a3:9a:30:84:f8:f9:eb:
                    3f:b5:8f:82:e7:a7:5e:86:a9:b6:52:1d:a0:b6:a8:
                    35:9d:a5:62:85:95:39:43:de:96:61:48:f9:0c:7c:
                    be:e8:11:79:a0:a4:5a:40:34:1b:2e:b4:5e:75:ff:
                    b8:3b:4b:d4:41:31:d6:2f:a8:e0:e6:a3:8f:3c:d6:
                    31:81:34:fd:bd:2b:d1:6b:35:84:39:20:85:6f:e0:
                    81:78:31:3d:fe:c0:0d:41:bc:ba:46:a2:23:a3:58:
                    f8:a2:c4:bd:5f:cd:e2:f3:49:e6:4b:6d:a2:a4:63:
                    32:0f:b8:e6:b5:26:9b:81:78:8e:3f:83:48:ae:2d:
                    8a:be:c8:11:60:4e:10:5b:3c:09:0b:65:29:1b:9b:
                    9d:1e:06:a1:d7:b1:3c:65:f0:85:ee:56:89:a6:04:
                    1a:93:3a:64:4c:28:33:e6:37:ba:8e:16:a0:bb:f6:
                    d5:ea:78:39:b6:2b:fe:cb:48:30:15:19:6e:af:43:
                    a8:6f:0b:86:f5:76:31:85:c4:13:e2:b4:4a:da:e2:
                    03:b0:ab:f5:b1:98:14:97:ad:23:fd:ac:d1:ee:f1:
                    43:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:04:85:68:52:29:65:69:90:5B:1C:B0:A0:08:2B:8C:88:82:99:EA
            X509v3 Authority Key Identifier:
                keyid:8A:54:C8:1A:44:4D:07:05:1A:24:AA:CF:74:3F:01:86:3F:81:29:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d7ff01d0-26f9-4b20-a318-c311c267f2af/0/8A54C81A444D07051A24AACF743F01863F8129AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A54C81A444D07051A24AACF743F01863F8129AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d7ff01d0-26f9-4b20-a318-c311c267f2af/0/8A54C81A444D07051A24AACF743F01863F8129AB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:95:4b:f6:5d:2e:d6:54:81:3a:15:70:f3:18:43:dc:bc:4d:
         27:94:e7:71:66:a6:e6:70:db:49:12:98:cd:74:a4:16:b8:07:
         bf:a3:70:80:14:a5:1b:1b:cf:57:d7:09:b6:17:ea:cc:ef:3a:
         23:ca:26:a3:c5:a7:5e:3c:f0:bd:d8:ab:54:d8:38:d2:5f:d8:
         e5:39:90:50:e8:32:43:9e:b8:3d:79:b1:55:99:2a:ce:d7:db:
         cc:74:01:d6:7e:06:7c:71:26:10:e8:f1:8c:d1:b7:00:11:6f:
         7a:ac:0e:ee:4c:69:13:3d:42:b4:01:e4:74:27:22:50:b5:c5:
         b3:b1:f3:7f:23:8b:10:ab:22:21:34:88:e6:dd:e2:bb:10:4b:
         2b:0a:33:01:78:a0:21:03:31:bf:de:51:ec:15:e8:ac:66:63:
         fd:dd:0b:03:55:fe:bf:3a:f3:aa:89:aa:c7:07:9d:25:64:0b:
         0b:42:c6:00:79:7d:c5:89:d1:a5:ec:0d:cb:78:f5:bf:8b:61:
         87:49:56:b8:06:fb:ff:cf:dd:df:c2:07:c4:98:40:c0:6c:4f:
         72:f3:52:26:81:b1:e7:d6:dc:3e:07:34:69:9e:d7:75:1f:a5:
         bb:88:d0:ac:cd:33:25:c9:ea:90:2f:eb:f1:b2:24:19:60:5f:
         52:3c:1f:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:45:11 2026 by rpki-client