This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/e8a9237a-726c-4c19-9b4e-7b94b1424c4b/0/FF947BE188D359EA7EDF887D86DA2C7CC7460B70.mft
File:                     FF947BE188D359EA7EDF887D86DA2C7CC7460B70.mft (raw, json)
Hash identifier:          HUZUMbV9xPkJ76R+6D/ARxcOGosFdg4u8c4JppBWqC8=
Subject key identifier:   13:0F:AB:E3:31:48:2C:B6:C4:3C:B7:2B:3C:C5:7C:9D:03:B7:1B:02
Authority key identifier: FF:94:7B:E1:88:D3:59:EA:7E:DF:88:7D:86:DA:2C:7C:C7:46:0B:70
Certificate issuer:       /CN=FF947BE188D359EA7EDF887D86DA2C7CC7460B70
Certificate serial:       5D8681588CC4F2A9E5D00E70AA16CBC1CB9D4CA5
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF947BE188D359EA7EDF887D86DA2C7CC7460B70.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e8a9237a-726c-4c19-9b4e-7b94b1424c4b/0/FF947BE188D359EA7EDF887D86DA2C7CC7460B70.mft
Manifest number:          0279
Signing time:             Sat 31 Jan 2026 11:52:11 +0000
Manifest this update:     Sat 31 Jan 2026 11:47:11 +0000
Manifest next update:     Tue 03 Feb 2026 22:49:11 +0000
Files and hashes:         1: 3130332e3136322e3134312e302f32342d3234203d3e20313431303833.roa (hash: aO6ag29zhhjNXBpY8yr771GUZ2dWF2vzBvbIftVbJOY=)
                          2: FF947BE188D359EA7EDF887D86DA2C7CC7460B70.crl (hash: cgUBW3lR4cnJYAhuoGmYNHXXL7S1Ip6Yxu8Q/Ky8uYQ=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e8a9237a-726c-4c19-9b4e-7b94b1424c4b/0/FF947BE188D359EA7EDF887D86DA2C7CC7460B70.crl
                          rsync://repo-rpki.idnic.net/repo/e8a9237a-726c-4c19-9b4e-7b94b1424c4b/0/FF947BE188D359EA7EDF887D86DA2C7CC7460B70.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF947BE188D359EA7EDF887D86DA2C7CC7460B70.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Feb 2026 22:49:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:86:81:58:8c:c4:f2:a9:e5:d0:0e:70:aa:16:cb:c1:cb:9d:4c:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF947BE188D359EA7EDF887D86DA2C7CC7460B70
        Validity
            Not Before: Jan 31 11:47:11 2026 GMT
            Not After : Feb  3 22:49:11 2026 GMT
        Subject: CN=130FABE331482CB6C43CB72B3CC57C9D03B71B02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:51:9c:dc:e7:1d:94:64:25:4b:4a:77:3b:b3:
                    24:89:56:6c:f5:4e:a2:33:2e:58:7c:ee:a1:90:78:
                    1b:57:40:d9:e4:15:fc:50:54:41:fa:54:00:30:80:
                    29:be:6f:7f:a2:4e:f3:90:86:69:f1:06:66:ea:ab:
                    2f:3b:48:71:dc:4a:fa:22:c6:54:05:bf:e0:d5:88:
                    59:0b:b1:c9:8e:4e:2b:bc:ed:72:b1:a3:d9:94:6e:
                    37:7c:ab:d4:4d:83:ac:91:22:98:82:9f:f7:c1:d0:
                    6a:65:5b:c9:03:84:ab:b8:74:41:e0:0c:f1:06:2e:
                    fd:1c:37:16:c7:ce:c8:bf:b0:b4:fe:57:22:8e:f9:
                    62:02:48:c7:56:15:8d:47:3d:31:38:b9:96:a2:f7:
                    6a:28:a6:e4:b0:23:87:74:e6:06:33:b9:bb:b7:03:
                    ae:a2:bf:93:d6:a8:d7:7d:57:4d:b2:37:cf:15:10:
                    c7:66:00:33:24:7d:d4:96:57:7f:d2:a7:3a:55:a0:
                    4f:d5:78:27:32:e0:89:d7:91:74:54:5d:b8:eb:48:
                    e2:73:e4:89:b7:91:98:ca:bb:3f:23:92:c2:f7:1d:
                    bb:29:56:6c:c1:7e:a8:08:ee:28:60:6a:05:4c:80:
                    9e:65:cd:f4:ea:00:37:a7:ee:5a:c8:7e:4b:25:e1:
                    4c:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:0F:AB:E3:31:48:2C:B6:C4:3C:B7:2B:3C:C5:7C:9D:03:B7:1B:02
            X509v3 Authority Key Identifier:
                keyid:FF:94:7B:E1:88:D3:59:EA:7E:DF:88:7D:86:DA:2C:7C:C7:46:0B:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e8a9237a-726c-4c19-9b4e-7b94b1424c4b/0/FF947BE188D359EA7EDF887D86DA2C7CC7460B70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF947BE188D359EA7EDF887D86DA2C7CC7460B70.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e8a9237a-726c-4c19-9b4e-7b94b1424c4b/0/FF947BE188D359EA7EDF887D86DA2C7CC7460B70.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:37:7f:cf:c2:a5:79:d7:fa:da:df:e6:60:cf:fc:73:85:91:
         b8:1c:0a:65:83:67:7f:08:81:45:ee:5c:02:8f:ef:c6:63:98:
         23:87:7c:2d:ac:55:50:af:48:be:67:1b:ea:12:14:4c:c4:9d:
         b7:c6:60:16:b5:2e:34:80:96:45:44:46:0b:0a:5a:bb:5f:e6:
         6b:85:c7:7d:2f:71:cc:55:bd:73:8e:7f:eb:ba:22:28:ae:e0:
         2d:1b:2f:f0:b8:49:a7:d3:ce:19:96:85:24:4a:9c:1f:27:aa:
         8e:de:4d:89:f2:9a:a5:2b:c3:0a:8d:c4:03:26:2a:43:f1:e4:
         dc:5f:24:0f:9f:5e:91:5b:14:d8:64:16:63:8f:8a:a6:4f:61:
         8f:ce:2a:2e:88:bb:51:ad:c2:6f:dc:f9:a6:fe:05:a4:6e:e5:
         25:31:f6:f5:db:10:a5:1a:d2:e5:45:22:ce:1e:40:d5:2d:fe:
         ff:99:ab:2c:f2:b3:5b:a0:5f:28:11:48:2b:f3:25:4f:b8:b2:
         04:17:f2:37:5d:1b:31:8a:e1:26:58:8e:14:d5:af:22:d9:58:
         3a:e9:0a:56:49:ad:0d:e3:27:2f:68:49:0e:a4:96:2f:7b:d8:
         6d:c7:3a:31:8d:9e:c4:4d:43:b0:20:a7:2f:8e:05:0c:c0:44:
         90:36:e0:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:42:15 2026 by rpki-client