This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/de6a57c5-df73-43f5-865d-6bd248c22fba/0/8B0DE141ACB811E0FE65085CF2339EE4C7EE05A2.mft
File:                     8B0DE141ACB811E0FE65085CF2339EE4C7EE05A2.mft (raw, json)
Hash identifier:          /uQzTVie2bn2Qx1/fR2fyaHraWubC4fJgNR+nea78T8=
Subject key identifier:   16:EE:31:A4:50:C0:8F:AA:CD:E9:04:F1:49:9B:AE:50:C5:3F:52:F9
Authority key identifier: 8B:0D:E1:41:AC:B8:11:E0:FE:65:08:5C:F2:33:9E:E4:C7:EE:05:A2
Certificate issuer:       /CN=8B0DE141ACB811E0FE65085CF2339EE4C7EE05A2
Certificate serial:       242929516E2BFD5580286DAA0BA4912985A91F91
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B0DE141ACB811E0FE65085CF2339EE4C7EE05A2.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/de6a57c5-df73-43f5-865d-6bd248c22fba/0/8B0DE141ACB811E0FE65085CF2339EE4C7EE05A2.mft
Manifest number:          0247
Signing time:             Sun 01 Feb 2026 13:32:11 +0000
Manifest this update:     Sun 01 Feb 2026 13:27:11 +0000
Manifest next update:     Wed 04 Feb 2026 23:47:11 +0000
Files and hashes:         1: 3130332e3138342e35362e302f32342d3234203d3e20313439363637.roa (hash: wL4jyeE9OG3mCA6Twfdl1VaSzPxamD0EwTijKmcLq7s=)
                          2: 8B0DE141ACB811E0FE65085CF2339EE4C7EE05A2.crl (hash: gU+7aTIeJ57RlCFidgI5gB2BhgCsVvGJC02pfqvLE4k=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/de6a57c5-df73-43f5-865d-6bd248c22fba/0/8B0DE141ACB811E0FE65085CF2339EE4C7EE05A2.crl
                          rsync://repo-rpki.idnic.net/repo/de6a57c5-df73-43f5-865d-6bd248c22fba/0/8B0DE141ACB811E0FE65085CF2339EE4C7EE05A2.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B0DE141ACB811E0FE65085CF2339EE4C7EE05A2.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Feb 2026 23:47:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:29:29:51:6e:2b:fd:55:80:28:6d:aa:0b:a4:91:29:85:a9:1f:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B0DE141ACB811E0FE65085CF2339EE4C7EE05A2
        Validity
            Not Before: Feb  1 13:27:11 2026 GMT
            Not After : Feb  4 23:47:11 2026 GMT
        Subject: CN=16EE31A450C08FAACDE904F1499BAE50C53F52F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:f2:f1:c2:ad:54:46:fb:83:a1:b2:e3:e2:67:
                    e5:b6:31:8b:0d:b4:0b:35:b0:cd:c8:60:95:fe:31:
                    42:35:f0:d4:b2:f1:49:db:fa:57:d7:ed:4f:6d:26:
                    76:0c:a8:60:6a:ab:44:31:05:54:bc:84:d6:e3:a1:
                    cd:22:d8:33:83:a3:10:4c:9a:37:8c:d4:03:72:a4:
                    5c:a0:8e:19:10:5e:17:18:b2:ea:f7:65:d4:f4:c8:
                    d9:2c:45:69:79:f5:91:b7:3b:80:cb:69:95:01:98:
                    dd:03:25:d5:b6:eb:5e:49:8a:88:e1:7d:b4:89:64:
                    8d:7e:a3:c7:e8:96:35:f9:94:10:23:d4:a0:fc:27:
                    3e:5f:d4:a5:c4:ef:b1:66:b5:c8:6f:cc:33:78:8f:
                    0f:9e:ca:c6:ec:50:3e:46:05:68:c2:47:b4:d8:33:
                    e5:06:9a:17:54:f7:ae:9a:be:af:b2:96:e3:09:d5:
                    c9:7d:d1:33:7b:8b:d2:78:83:4a:bd:2e:fb:61:fd:
                    62:cd:e5:8b:f7:c7:fe:06:b5:6f:34:5a:75:16:d5:
                    ee:a8:15:d1:36:93:76:32:1a:94:74:3a:cc:e2:cc:
                    17:3b:fe:62:9d:88:e2:f5:21:4f:90:0b:10:f5:08:
                    30:26:f8:77:e5:ea:c2:3f:b6:c5:70:35:73:90:7b:
                    46:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:EE:31:A4:50:C0:8F:AA:CD:E9:04:F1:49:9B:AE:50:C5:3F:52:F9
            X509v3 Authority Key Identifier:
                keyid:8B:0D:E1:41:AC:B8:11:E0:FE:65:08:5C:F2:33:9E:E4:C7:EE:05:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/de6a57c5-df73-43f5-865d-6bd248c22fba/0/8B0DE141ACB811E0FE65085CF2339EE4C7EE05A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B0DE141ACB811E0FE65085CF2339EE4C7EE05A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/de6a57c5-df73-43f5-865d-6bd248c22fba/0/8B0DE141ACB811E0FE65085CF2339EE4C7EE05A2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:42:47:3d:ad:f2:7a:41:97:6f:c2:40:71:4c:20:1e:b6:b9:
         a7:a6:fb:a7:b3:46:e2:de:73:08:28:cd:85:b2:99:58:1e:86:
         5e:cf:d8:e1:46:8f:7f:d8:c8:12:7b:89:7b:96:4b:1b:16:66:
         77:e8:90:3f:82:85:40:86:a9:9c:74:47:20:ca:67:14:7b:b2:
         34:bf:8b:3a:67:0f:1f:b3:a3:c8:7b:a1:0a:1c:c9:e8:4b:71:
         7c:d5:e1:ed:63:34:29:fe:86:6a:35:aa:df:61:e3:69:1e:02:
         4b:75:a3:60:b8:b3:5c:d4:f6:05:9c:ef:44:3d:e0:4e:b3:c4:
         2d:2c:5e:c7:75:b9:74:59:65:c7:b5:fe:14:40:f7:9d:57:73:
         3a:56:4b:1b:4a:cb:6f:f8:af:3d:c5:2f:40:ff:64:60:a9:a6:
         49:e7:94:89:ac:6a:e9:ea:ef:96:b4:dd:cf:7b:b5:91:21:98:
         2f:5a:c2:5c:f3:9c:46:2f:b4:fd:8b:3f:d4:2b:cc:cb:76:3c:
         73:e1:6e:d7:d6:7e:b6:33:1b:f2:cf:57:9b:6d:36:07:0d:33:
         db:f1:42:a6:30:02:7a:57:fb:11:fd:e0:15:dc:b6:93:84:bf:
         89:90:b1:a4:cb:07:3e:9d:06:aa:78:1f:70:02:2e:ee:09:df:
         0f:e3:90:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 10:05:15 2026 by rpki-client