This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/5058CBC5AF21280546887DEF6CFA4341A8F99150.mft
File:                     5058CBC5AF21280546887DEF6CFA4341A8F99150.mft (raw, json)
Hash identifier:          hxT9nULtcl+jx53Yzeb2KjnzYxS+MvO+hD4+c4KxoSw=
Subject key identifier:   58:27:F6:3F:5D:66:F2:10:8B:B5:4A:19:71:2B:27:39:6E:79:E3:78
Authority key identifier: 50:58:CB:C5:AF:21:28:05:46:88:7D:EF:6C:FA:43:41:A8:F9:91:50
Certificate issuer:       /CN=5058CBC5AF21280546887DEF6CFA4341A8F99150
Certificate serial:       080B2C42399CC8F7B895B258114E1D951EE76006
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5058CBC5AF21280546887DEF6CFA4341A8F99150.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/5058CBC5AF21280546887DEF6CFA4341A8F99150.mft
Manifest number:          0120
Signing time:             Sun 01 Feb 2026 01:32:09 +0000
Manifest this update:     Sun 01 Feb 2026 01:27:09 +0000
Manifest next update:     Wed 04 Feb 2026 12:00:09 +0000
Files and hashes:         1: 3230322e3135322e3139352e302f32342d3234203d3e203633383539.roa (hash: xIwOhaK9F8GaMLO+48a1gHgLSh8/QXMa+ox/aPfD8ZE=)
                          2: 3230322e3135322e3139372e302f32342d3234203d3e203633383539.roa (hash: oYNKTwfcxqyIB1OXRbrwMgJ3fSYv5LQtaFy8X3lU6Gg=)
                          3: 3230322e3135322e3230342e302f32342d3234203d3e203633383539.roa (hash: Axn8ERr+dCmvsiqqyuPKnJfBVVJriYKk4K22F1CTADk=)
                          4: 3230322e3135322e3139392e302f32342d3234203d3e203633383539.roa (hash: hEA8tWNHo/TIh0zdljEtCOyHV35vtVjy/xEF9Jp2eSk=)
                          5: 3130332e332e3231352e302f32342d3234203d3e20313331373435.roa (hash: DCq8NWxNUdZYR2PU43lxvyiXQg84ScqhviiyUTDm8RE=)
                          6: 3230322e3135322e3230312e302f32342d3234203d3e203633383539.roa (hash: VB7muXOs/KUgbeY56FO085YD+k7/KBG+CVGoqwGS/LQ=)
                          7: 3230322e3135322e3230332e302f32342d3234203d3e203633383539.roa (hash: +yojSrIhe0qfYYoNaS+bjIGGRqdco9vP3EvqLvXSniA=)
                          8: 3135302e3132392e3139302e302f32342d3234203d3e203338313439.roa (hash: H5limOsnw+oXhtBdjEt0fmYaX6A1zxSuyCkqRKHAtzA=)
                          9: 3130332e332e3231322e302f32322d3232203d3e203338313439.roa (hash: 5psPknEmypZIRcV8YM/0X/lutsHgczkNWReWTG7yCJE=)
                          10: 3230322e3135322e3230372e302f32342d3234203d3e203633383539.roa (hash: Eh7tmqkuq57xlfobk4M7FLmYqi5AfrKI1DM6fiC6my0=)
                          11: 3230322e3135322e3139322e302f32342d3234203d3e203633383539.roa (hash: sueljug0A0cLELzQ10q3SYM/qivmbpI6TdGOwm3lCaU=)
                          12: 3130332e332e3231322e302f32342d3234203d3e203338313439.roa (hash: BdFOwYWDeGnfKDAaGDA7BBj23j1cFiNFG1WQ7TDA43I=)
                          13: 5058CBC5AF21280546887DEF6CFA4341A8F99150.crl (hash: PLDZB8JhhILiOKhKyLKG5/NQqSJ3CMpSk6obC58RlXI=)
                          14: 3230322e3135322e3139362e302f32342d3234203d3e203633383539.roa (hash: q9iza0H2rtEt+ACiqvHrrsVLjS6bvi7IjiExCl+Gt50=)
                          15: 3230322e3135322e3139382e302f32342d3234203d3e203633383539.roa (hash: 08dE8+5h5VM8IAQN0ml1YiJAjJEdE4Qbpafz+/inBuI=)
                          16: 3135302e3132392e3139312e302f32342d3234203d3e203338313439.roa (hash: sg9h3bKYAlqGHJDMvyUj6H0/M1Aw0iaDSiX106si2NI=)
                          17: 3135302e3132392e3138382e302f32322d3232203d3e203338313439.roa (hash: CEJ3yKIwnTpt+ImukVgRvxnWPT8Hth1fQgkKpGWcSEo=)
                          18: 3130332e332e3231342e302f32342d3234203d3e203338313439.roa (hash: 1FiHn4gIC4kH5MoP4rKX52q2L0AmuUmzqqq7XVdC5N0=)
                          19: 3230322e3135322e3230352e302f32342d3234203d3e203633383539.roa (hash: vVq7LUx06+oQEtVvYge1Q2+hkKlr27bVyXKL74EChRk=)
                          20: 3230322e3135322e3139332e302f32342d3234203d3e203633383539.roa (hash: aHFMnyhh47UaoLaj5P570D9nqN6nQjfKB0KyJ10Bqlo=)
                          21: 3230322e3135322e3230362e302f32342d3234203d3e203633383539.roa (hash: /r/8FbAnrRY9+Q4m/2LANGmYkN67339eqGM2Pr09v38=)
                          22: 3130332e332e3231332e302f32342d3234203d3e203338313439.roa (hash: f7FOJnMyBZ4XNlHdy991ZxwGJQehkmOcfk+LL3+U5Fs=)
                          23: 3230322e3135322e3139322e302f32302d3230203d3e203633383539.roa (hash: f8b8ZEBPlEImYkbnkpmvkas1RzOl3JK/cPP6s/pxu7I=)
                          24: 3230322e3135322e3139342e302f32342d3234203d3e203633383539.roa (hash: NITrN6jD7nr5oOwLkcfYoDWIPHvMh97xHgy4U3OmoE8=)
                          25: 3135302e3132392e3138392e302f32342d3234203d3e203338313439.roa (hash: 31mkkj2+9HZK3DntlbInuHBDcdFSQRlGXD8Zmc4rUM0=)
                          26: 3135302e3132392e3138382e302f32342d3234203d3e203338313439.roa (hash: tgGGslIm+JlwZ3B9SMFEH85qZqhmUeU8C5Oc+jwQtf0=)
                          27: 3230322e3135322e3230302e302f32342d3234203d3e203633383539.roa (hash: U7zsrHiqdt1Qo1B6xfxOyIpSIT6Eg44KAPPrNmLrIG4=)
                          28: 3230322e3135322e3230322e302f32342d3234203d3e203633383539.roa (hash: qykkhhxHnO0ydNs5JBAQOA0f9BAZyPwR6KhTyOO68q8=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/5058CBC5AF21280546887DEF6CFA4341A8F99150.crl
                          rsync://repo-rpki.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/5058CBC5AF21280546887DEF6CFA4341A8F99150.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5058CBC5AF21280546887DEF6CFA4341A8F99150.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Feb 2026 12:00:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:0b:2c:42:39:9c:c8:f7:b8:95:b2:58:11:4e:1d:95:1e:e7:60:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5058CBC5AF21280546887DEF6CFA4341A8F99150
        Validity
            Not Before: Feb  1 01:27:09 2026 GMT
            Not After : Feb  4 12:00:09 2026 GMT
        Subject: CN=5827F63F5D66F2108BB54A19712B27396E79E378
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:91:8e:f6:4e:2b:a4:a8:2e:81:03:8f:65:80:
                    fb:23:63:59:a5:0e:14:e8:b1:55:e6:5b:1a:ef:ff:
                    32:bd:18:0f:02:57:b5:d5:ad:36:7d:3e:f1:da:f3:
                    a3:77:ac:2f:98:50:56:35:41:24:8a:93:51:19:9f:
                    67:9f:07:0b:66:34:c4:16:33:9b:aa:66:a7:d1:22:
                    65:8d:21:30:c4:0c:6e:99:0f:0c:e7:e1:c0:97:d8:
                    60:fe:df:9e:ef:c9:5c:bc:bf:32:90:7e:0f:d9:c1:
                    6d:08:77:40:cd:9a:e3:ca:82:fa:2d:1f:d7:41:c4:
                    81:5f:df:a8:1b:ee:79:06:2c:93:0e:04:e7:97:c7:
                    ce:84:65:c2:f7:82:22:e1:24:52:3c:e2:b0:39:9c:
                    23:3b:08:b0:3d:9f:76:fb:29:70:52:44:99:2f:5d:
                    47:6e:eb:00:70:95:0c:79:11:47:9c:0e:83:b3:b0:
                    37:0b:c0:d1:41:81:c7:51:0c:79:ff:a4:68:c0:52:
                    8a:b9:ef:55:cc:d8:f6:f7:c3:28:49:ec:3b:39:95:
                    5a:46:9d:ba:18:42:97:9d:0b:91:8c:83:ec:0f:2f:
                    8b:ed:19:8d:90:7b:ab:a5:7d:65:12:73:dc:5c:9e:
                    f1:a9:ac:a6:f3:18:1b:3f:4a:cc:73:fe:14:d8:db:
                    7c:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:27:F6:3F:5D:66:F2:10:8B:B5:4A:19:71:2B:27:39:6E:79:E3:78
            X509v3 Authority Key Identifier:
                keyid:50:58:CB:C5:AF:21:28:05:46:88:7D:EF:6C:FA:43:41:A8:F9:91:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/5058CBC5AF21280546887DEF6CFA4341A8F99150.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5058CBC5AF21280546887DEF6CFA4341A8F99150.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/5058CBC5AF21280546887DEF6CFA4341A8F99150.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:a1:20:7b:0a:3b:9c:cc:f9:1f:4c:45:61:f0:de:fb:f4:d8:
         51:06:cf:91:3d:41:e0:e7:67:c6:e8:4c:8c:1f:c3:0c:77:ab:
         12:86:59:5e:0f:1d:d8:2b:ea:5a:39:fb:4e:6b:b8:13:45:67:
         fa:e9:b0:04:56:dc:bc:e7:ae:72:23:fb:4b:fc:f7:be:95:6c:
         07:e6:b1:4f:c8:b9:ec:a7:38:b1:e6:5a:55:66:2f:23:21:bc:
         fe:87:b6:f9:46:10:66:a3:70:ae:df:51:54:ab:45:44:6a:d8:
         29:90:56:5a:87:d9:b9:58:4d:72:bc:74:e7:bb:70:a2:eb:e2:
         40:de:fb:8c:a6:3c:85:3e:9f:ec:6e:4f:38:1d:d2:59:3c:0b:
         61:60:a2:f4:07:df:64:37:49:a4:8d:13:c8:51:8f:aa:73:b9:
         2f:e4:37:ff:3c:43:5c:d3:01:b5:6f:78:bf:4b:02:66:35:9c:
         8c:72:ff:cd:18:ef:e5:12:fd:45:65:11:58:52:f9:28:b2:e4:
         27:60:1f:a6:21:58:46:9a:96:de:11:8e:f6:ce:f9:47:e2:bb:
         63:e7:ea:9f:f9:c6:39:3e:60:d8:9c:7a:1b:35:89:d3:86:b6:
         77:e0:95:31:0a:f0:3e:f3:06:d6:06:37:ed:69:ac:42:7e:ea:
         2d:19:87:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:52:26 2026 by rpki-client