This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/e5413ff4-202b-4999-b45d-73c972f10116/0/8FC4899CA3D612A45C1C1DC02A21F63372DAEDD6.mft
File:                     8FC4899CA3D612A45C1C1DC02A21F63372DAEDD6.mft (raw, json)
Hash identifier:          sCo55Xfgi/YC01HdC+5koJ8LR4/IviuOJVmcixNL09c=
Subject key identifier:   23:33:1D:9C:5A:59:7B:3D:80:3C:F1:D1:81:8A:AE:7B:48:04:47:C4
Authority key identifier: 8F:C4:89:9C:A3:D6:12:A4:5C:1C:1D:C0:2A:21:F6:33:72:DA:ED:D6
Certificate issuer:       /CN=8FC4899CA3D612A45C1C1DC02A21F63372DAEDD6
Certificate serial:       450820393DD9E9115A83B7EDE28065F64D182A56
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8FC4899CA3D612A45C1C1DC02A21F63372DAEDD6.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e5413ff4-202b-4999-b45d-73c972f10116/0/8FC4899CA3D612A45C1C1DC02A21F63372DAEDD6.mft
Manifest number:          042B
Signing time:             Mon 02 Feb 2026 06:22:17 +0000
Manifest this update:     Mon 02 Feb 2026 06:17:17 +0000
Manifest next update:     Thu 05 Feb 2026 15:46:17 +0000
Files and hashes:         1: 323430343a636163303a666630303a3a2f34302d3430203d3e20313339343137.roa (hash: NL2aJR33roSrH0rfHxsWPH389zRfhX/C1lq5KI784/M=)
                          2: 3130332e3133382e3131362e302f32342d3234203d3e20313339343137.roa (hash: 9Sw3qPXHiBs5nB21roqS7CsayEDhLD78ZFeflymZdjY=)
                          3: 323430343a636163303a316135623a3a2f34382d3438203d3e20313339343137.roa (hash: MlXNXecpYDMt2QQpUBakOr+EIFlAaxsX2zQH4wGOi/0=)
                          4: 323430343a636163303a313030303a3a2f34382d3438203d3e20313339343137.roa (hash: PstEcCmg8gG5vVbo9YMYrQiqRv+ddYd7Zf80KwU2EV4=)
                          5: 323430343a636163303a3a2f34382d3438203d3e20313339343137.roa (hash: e4FelqGd8iSRDSYch9869PAfm5c/LDLNH50WEwKvgAs=)
                          6: 323430343a636163303a626162653a3a2f34382d3438203d3e20313339343137.roa (hash: ZZvd3DR6EuZwjhunUnqDOW5iI+a8OxR4MhiwHS29Yuo=)
                          7: 323430343a636163303a6462353a3a2f34382d3438203d3e20313339343137.roa (hash: s06nZ8vR0a4OcKfgZ9Rjay7aeq0mrdev7aQnhemDQBQ=)
                          8: 323430343a636163303a3a2f33322d3332203d3e20313339343137.roa (hash: s53TJWJAv9flAi62r4hsK2rclk66IcAtKdIRIb1s/Ps=)
                          9: 3130332e3133382e3131372e302f32342d3234203d3e20313339343137.roa (hash: 39SdZBT8G8X+WZ5lEwXOpRf3T2DX1nTTj3OeQb4f5Zk=)
                          10: 323430343a636163303a313164353a3a2f34382d3438203d3e20313339343137.roa (hash: lN6IUo8XcirGXXI7zultPSLQfKt0KthPpzYWW5DChjw=)
                          11: 8FC4899CA3D612A45C1C1DC02A21F63372DAEDD6.crl (hash: q4G7sp0PsET8+ZrgAbHyveyYPcljdf2YW3O1ZbvwKZc=)
                          12: 323430343a636163303a3164353a3a2f34382d3438203d3e20313339343137.roa (hash: CX8B1mfhdsQDS9zQa9oKoJyxv1N2NZ8tGCcdQTHRuuE=)
                          13: 323430343a636163303a6433353a3a2f34382d3438203d3e20313339343137.roa (hash: J6NKKnMdVBOwrUcgcaUDqWIhEe+SxM9efvKnIwDrFFw=)
                          14: 323430343a636163303a633032653a3a2f34382d3438203d3e20313339343137.roa (hash: TBR11DrPkyQgDEOjgsvbiFDryM9x2tI6poq7H38GvyM=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e5413ff4-202b-4999-b45d-73c972f10116/0/8FC4899CA3D612A45C1C1DC02A21F63372DAEDD6.crl
                          rsync://repo-rpki.idnic.net/repo/e5413ff4-202b-4999-b45d-73c972f10116/0/8FC4899CA3D612A45C1C1DC02A21F63372DAEDD6.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8FC4899CA3D612A45C1C1DC02A21F63372DAEDD6.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Feb 2026 05:24:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:08:20:39:3d:d9:e9:11:5a:83:b7:ed:e2:80:65:f6:4d:18:2a:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FC4899CA3D612A45C1C1DC02A21F63372DAEDD6
        Validity
            Not Before: Feb  2 06:17:17 2026 GMT
            Not After : Feb  5 15:46:17 2026 GMT
        Subject: CN=23331D9C5A597B3D803CF1D1818AAE7B480447C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:24:4a:d6:4c:c5:d9:fd:b5:98:3a:57:ae:93:
                    38:b9:f9:b2:c9:91:3b:17:3c:07:f5:e9:6a:83:72:
                    d4:96:99:0f:53:70:b5:1a:80:ab:44:84:89:6a:69:
                    3e:15:5a:59:20:0a:92:85:40:41:a5:94:d4:5d:ed:
                    82:f9:58:0b:da:6c:41:8f:e2:d7:61:71:58:0d:20:
                    f2:a3:f1:ff:b4:4c:a1:58:8f:8f:70:d9:a4:4c:d1:
                    17:22:62:97:e0:56:a2:99:21:e2:5c:bb:32:5e:c4:
                    f2:60:22:79:9a:bd:87:37:4f:e9:ca:5a:ac:a8:34:
                    e4:73:2e:2e:72:6a:17:2c:bf:83:e5:76:57:eb:de:
                    c8:8c:f9:90:18:fc:ae:5b:13:a2:98:27:5f:bd:d7:
                    2e:8f:3b:1e:15:99:a8:09:bd:73:e3:ae:36:f6:6f:
                    93:73:2f:5d:e1:52:cd:fe:3a:86:8d:b6:f5:6b:37:
                    23:5d:84:06:ca:79:c6:6a:80:c2:b2:19:6c:2b:74:
                    e0:5c:ee:da:d0:85:5d:29:4b:a5:e8:3c:01:86:a8:
                    70:7d:8f:df:4d:f6:c6:f0:3d:87:76:8c:e7:57:03:
                    33:88:ff:31:04:5d:b4:c5:56:ad:a7:ed:ce:ce:cd:
                    48:b9:ad:c2:e2:fb:c3:81:c6:d2:42:0d:69:55:de:
                    2e:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:33:1D:9C:5A:59:7B:3D:80:3C:F1:D1:81:8A:AE:7B:48:04:47:C4
            X509v3 Authority Key Identifier:
                keyid:8F:C4:89:9C:A3:D6:12:A4:5C:1C:1D:C0:2A:21:F6:33:72:DA:ED:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e5413ff4-202b-4999-b45d-73c972f10116/0/8FC4899CA3D612A45C1C1DC02A21F63372DAEDD6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8FC4899CA3D612A45C1C1DC02A21F63372DAEDD6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e5413ff4-202b-4999-b45d-73c972f10116/0/8FC4899CA3D612A45C1C1DC02A21F63372DAEDD6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:a7:d6:f7:c8:38:5c:3d:6e:2f:3f:5a:ac:09:f3:04:85:67:
         20:44:df:84:d6:3b:0f:d0:37:ac:ee:0c:36:5e:3a:a6:10:68:
         b4:83:5d:b2:ab:35:d2:7d:5d:21:dc:82:13:e5:07:86:42:25:
         b3:22:d9:50:e1:c0:df:d6:a1:88:4d:63:35:b3:95:74:d6:2f:
         c4:10:b0:2c:07:da:5b:90:af:00:28:6b:7e:3a:1d:3f:26:90:
         8f:68:c5:f0:fe:00:38:e1:58:d7:ed:72:72:63:52:3b:19:d5:
         f2:28:4a:95:97:24:0b:84:4b:b2:69:ea:16:85:df:72:ab:89:
         12:ef:d7:7d:f2:b7:9e:fa:63:0d:22:9e:2f:7b:83:79:f5:b9:
         58:8f:28:d5:e5:82:e4:cd:d4:23:84:70:1e:85:32:54:54:e5:
         25:39:5b:65:a2:68:27:53:da:2a:53:68:98:87:45:c6:47:70:
         15:44:31:fe:60:78:c3:94:8b:56:45:6d:19:ba:0c:ca:f9:42:
         aa:1c:43:97:cc:e6:6b:e4:8e:fc:da:ec:3e:c8:c4:62:8b:99:
         f0:3d:09:1d:76:8c:a2:ff:5a:08:8b:45:2e:39:e3:64:3d:5c:
         af:15:22:c9:91:d8:eb:d8:84:fe:eb:d9:db:f1:4d:e8:c9:c2:
         e2:4f:46:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:43:34 2026 by rpki-client