This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/B605E2C01C5BDC6CEE49545C80501360234DC910.mft
File:                     B605E2C01C5BDC6CEE49545C80501360234DC910.mft (raw, json)
Hash identifier:          WMSN8EKDqG7ngDspRqecNSftIXsirpGL9geIWBAVfyw=
Subject key identifier:   E0:00:93:5C:4D:AC:B0:A2:4A:A3:40:5C:76:1D:5A:A4:8A:15:F6:9C
Authority key identifier: B6:05:E2:C0:1C:5B:DC:6C:EE:49:54:5C:80:50:13:60:23:4D:C9:10
Certificate issuer:       /CN=B605E2C01C5BDC6CEE49545C80501360234DC910
Certificate serial:       7350F68396F24BD973B20E1CBA67F03795C21554
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B605E2C01C5BDC6CEE49545C80501360234DC910.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/B605E2C01C5BDC6CEE49545C80501360234DC910.mft
Manifest number:          054F
Signing time:             Sat 31 Jan 2026 23:40:05 +0000
Manifest this update:     Sat 31 Jan 2026 23:35:05 +0000
Manifest next update:     Wed 04 Feb 2026 10:41:05 +0000
Files and hashes:         1: 3131352e3137382e35332e302f32342d3234203d3e20313331373137.roa (hash: 5Br8jzUfiBL0O6Kopm71gWMUaniCVXm/uXqyIID9rs0=)
                          2: 3131352e3137382e35302e302f32342d3234203d3e203338373833.roa (hash: AVHUuCu/pWOfGEGbs7pgdGUZzNAVfi/HDMj4JakhRSI=)
                          3: 3131352e3137382e35322e302f32342d3234203d3e20313331373137.roa (hash: NtqkwrlUwIEQ1zhmOPelG6/o7YZq6aMqPrp+f2CJ/tw=)
                          4: 3131352e3137382e35342e302f32342d3234203d3e20313331373137.roa (hash: 4R3cIWzWFlBnUOjDtKgjITkNYaOCw4Tx4+7Vb5ietQo=)
                          5: 3131352e3137382e34392e302f32342d3234203d3e203338373833.roa (hash: isINXQLKIC1dEiiAoWDEseWdjl997XY6+RtHzF8UKMk=)
                          6: B605E2C01C5BDC6CEE49545C80501360234DC910.crl (hash: WaANTxy5VRZN6qfh+++UjokjB3TSEGavk7mFhD5WkDE=)
                          7: 3131352e3137382e35312e302f32342d3234203d3e20313331373137.roa (hash: tZJdaYJ4K7yW2v2tBg39Lb9tz4r7Kf6sn+VE2gvdsHw=)
                          8: 3131352e3137382e35352e302f32342d3234203d3e203338373833.roa (hash: L3ZzIiAydRdMLY3ej77+q1So7IkWU5tA3zvtMa14wvQ=)
                          9: 3131352e3137382e34382e302f32342d3234203d3e203338373833.roa (hash: /bgLX80Id13xkunC59CvIZtu8KOfj3mxVa1lG5ZXF/0=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/B605E2C01C5BDC6CEE49545C80501360234DC910.crl
                          rsync://repo-rpki.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/B605E2C01C5BDC6CEE49545C80501360234DC910.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B605E2C01C5BDC6CEE49545C80501360234DC910.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Feb 2026 10:41:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:50:f6:83:96:f2:4b:d9:73:b2:0e:1c:ba:67:f0:37:95:c2:15:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B605E2C01C5BDC6CEE49545C80501360234DC910
        Validity
            Not Before: Jan 31 23:35:05 2026 GMT
            Not After : Feb  4 10:41:05 2026 GMT
        Subject: CN=E000935C4DACB0A24AA3405C761D5AA48A15F69C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:8e:ff:73:78:f3:7d:6e:51:3c:41:ba:65:93:
                    a6:db:ea:1a:28:bc:b9:e6:50:57:43:2e:fd:53:cb:
                    35:f6:1b:44:2b:3c:e8:a9:a7:a6:91:b9:a9:a8:af:
                    c9:e3:62:ee:b2:7f:1f:c1:d0:b7:b1:6c:81:d1:51:
                    c9:89:3f:48:52:b9:64:e8:6c:46:88:15:e1:ea:4c:
                    3a:bb:27:f8:78:b4:48:3c:7f:9f:5e:a4:ed:64:b1:
                    fa:ca:1e:92:fc:74:27:0a:22:f3:6f:f7:05:ad:30:
                    a7:a3:66:d1:39:91:10:97:43:95:6b:ba:d7:40:97:
                    a5:9f:b4:ac:2b:05:3e:96:b4:b4:85:2e:d8:29:65:
                    6d:3b:65:44:03:04:92:ee:f3:fc:21:95:55:41:92:
                    da:78:4f:a4:f1:f1:e4:25:bc:e2:46:1c:6a:0b:27:
                    23:06:de:71:3e:ef:aa:59:40:dd:93:76:a6:ae:17:
                    cd:0c:c3:da:c6:35:1b:91:16:d9:94:56:09:a3:f3:
                    25:d6:11:0e:6f:3c:30:31:9a:e3:e0:eb:72:d7:d0:
                    dc:be:88:49:9e:98:2b:51:7a:9b:14:d2:15:98:08:
                    e3:c7:8f:1f:7c:24:99:07:5e:a9:b0:e4:7c:f7:c8:
                    e1:a9:a8:95:01:92:08:92:5a:44:61:b7:0e:79:8a:
                    04:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:00:93:5C:4D:AC:B0:A2:4A:A3:40:5C:76:1D:5A:A4:8A:15:F6:9C
            X509v3 Authority Key Identifier:
                keyid:B6:05:E2:C0:1C:5B:DC:6C:EE:49:54:5C:80:50:13:60:23:4D:C9:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/B605E2C01C5BDC6CEE49545C80501360234DC910.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B605E2C01C5BDC6CEE49545C80501360234DC910.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/B605E2C01C5BDC6CEE49545C80501360234DC910.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:31:cc:37:24:1f:98:82:f7:b1:7c:35:d5:44:d6:3c:a1:a9:
         00:08:6d:4d:e8:07:28:59:e6:4a:b6:85:8b:7f:78:9e:82:4a:
         bc:40:7e:c6:13:8d:51:07:50:27:10:87:4e:52:63:30:9f:5c:
         46:b1:8a:a1:23:26:79:99:b6:9c:05:54:a5:32:c3:23:6c:82:
         9f:cc:26:39:40:39:35:db:f8:63:83:f3:02:11:84:9e:c5:7f:
         d7:ad:25:b0:33:38:80:75:4b:08:bd:84:bd:ae:ca:21:b9:80:
         cc:18:6c:19:a7:4d:57:0e:cb:d2:28:59:ff:eb:20:41:15:27:
         4d:e5:17:73:39:6e:ad:1a:1f:72:8d:76:c2:58:33:8f:12:d8:
         42:32:84:8b:fc:4f:6b:13:80:3e:8d:43:11:40:83:13:96:32:
         eb:fe:04:d7:4f:18:94:37:8d:59:36:b9:0f:d2:d8:c0:ef:4d:
         30:37:eb:b1:2b:39:da:28:24:57:b3:33:62:72:83:ef:2d:34:
         32:fd:5d:76:90:e4:02:b8:09:21:2b:5b:b1:70:e2:cf:f7:49:
         3e:e5:07:e9:ac:67:41:54:14:d7:1a:bf:d9:47:a6:77:07:a7:
         82:41:df:c0:7e:ae:11:0c:e6:8c:08:82:d7:48:19:f0:38:ca:
         ce:36:b2:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 12:48:46 2026 by rpki-client