This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/f7418013-1679-496b-80f6-2d05cc5be72f/0/BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8.mft
File:                     BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8.mft (raw, json)
Hash identifier:          fxkIJSMGrXJ1KFhXcaiCm4nPK/tViZSsAc/LB5l8+bQ=
Subject key identifier:   3C:90:B8:F0:B8:64:7E:22:A8:F2:F0:CE:EE:6E:F3:3C:B3:22:8D:89
Authority key identifier: BC:8B:D5:48:5C:9B:01:D1:76:F3:FA:A8:F3:81:E5:EC:ED:8C:D3:B8
Certificate issuer:       /CN=BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8
Certificate serial:       690A4E50710F171CC301549FBAB7EB70C428E9C2
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f7418013-1679-496b-80f6-2d05cc5be72f/0/BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8.mft
Manifest number:          0249
Signing time:             Sun 01 Feb 2026 22:50:41 +0000
Manifest this update:     Sun 01 Feb 2026 22:45:41 +0000
Manifest next update:     Thu 05 Feb 2026 05:52:41 +0000
Files and hashes:         1: BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8.crl (hash: egmV2gZ0hpe5BS1BywMtAWBOx+NjKrjoBpZBJIL8ve8=)
                          2: 3130332e37332e3139322e302f32342d3234203d3e20313439393434.roa (hash: kygHr26DqsY5AyJfGENb/AiH0P8fZ+v+8xcM4ekCjqw=)
                          3: 3130332e37332e3139332e302f32342d3234203d3e20313439393434.roa (hash: 0uJHSCFsdwdZP1NKhkt1f+yFu68JksGMAuDEtBg71VE=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f7418013-1679-496b-80f6-2d05cc5be72f/0/BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8.crl
                          rsync://repo-rpki.idnic.net/repo/f7418013-1679-496b-80f6-2d05cc5be72f/0/BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Feb 2026 05:24:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:0a:4e:50:71:0f:17:1c:c3:01:54:9f:ba:b7:eb:70:c4:28:e9:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8
        Validity
            Not Before: Feb  1 22:45:41 2026 GMT
            Not After : Feb  5 05:52:41 2026 GMT
        Subject: CN=3C90B8F0B8647E22A8F2F0CEEE6EF33CB3228D89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:c2:a0:e7:1a:e8:eb:ac:44:d0:94:18:4e:e1:
                    5b:ba:52:43:0c:5e:9f:c7:4c:fb:1a:40:27:89:98:
                    bd:a9:06:bd:96:6b:e8:e2:1d:60:f3:9a:8c:58:cc:
                    06:fc:da:e2:87:61:16:0a:22:66:fd:e5:4d:0f:5f:
                    93:b4:c2:0c:51:ac:53:ee:04:30:3b:c4:8a:84:6c:
                    ee:da:bd:ef:18:41:c5:1e:3f:b6:39:ff:4a:75:fd:
                    86:f3:fb:c4:d7:ed:63:40:65:32:00:f4:35:33:e3:
                    64:03:d8:78:af:22:20:ec:44:59:ea:24:54:b6:a3:
                    07:06:32:ee:ac:be:4b:4e:8c:ed:7b:59:c4:d4:55:
                    ab:4f:95:dd:3d:35:e9:90:b3:b1:46:4d:8b:e8:01:
                    4e:66:80:b6:75:0f:20:ef:37:12:bd:4b:33:3c:4a:
                    a8:3c:e0:5d:13:a0:00:b7:54:b6:3c:cd:17:a6:e7:
                    a5:c4:d7:ab:86:3a:e0:f6:06:fa:d7:88:97:b5:79:
                    95:af:97:3d:9a:e2:3b:a8:fd:0c:31:4f:18:02:f7:
                    56:89:ad:92:18:a1:a6:aa:af:57:9b:6a:60:e5:bd:
                    7f:54:8e:20:eb:e9:2b:18:61:fc:f9:97:8b:c8:4f:
                    e8:50:bb:e3:0f:84:44:a8:9d:df:2a:e9:7b:92:3c:
                    89:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:90:B8:F0:B8:64:7E:22:A8:F2:F0:CE:EE:6E:F3:3C:B3:22:8D:89
            X509v3 Authority Key Identifier:
                keyid:BC:8B:D5:48:5C:9B:01:D1:76:F3:FA:A8:F3:81:E5:EC:ED:8C:D3:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f7418013-1679-496b-80f6-2d05cc5be72f/0/BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f7418013-1679-496b-80f6-2d05cc5be72f/0/BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:2d:90:74:23:c4:4b:58:85:56:d2:8b:52:5f:b8:91:60:fb:
         84:5f:65:66:ae:bd:6a:68:73:3b:66:1d:8f:49:37:44:99:5b:
         d4:12:bd:a1:fb:39:68:b9:97:55:29:e9:e1:d2:b4:1e:1a:c6:
         c0:d6:76:4a:b3:96:06:df:9d:3d:fd:25:50:ac:9d:aa:cf:ca:
         8b:4b:35:a3:1d:8e:ee:3e:86:41:ff:8a:83:77:06:09:34:84:
         9c:a2:f4:ef:55:04:b2:56:55:e7:e3:18:bb:61:8c:cc:c4:2c:
         50:05:3c:88:59:f5:8c:60:bd:8d:9d:dc:85:7c:8d:45:78:5e:
         4b:21:32:9e:77:c7:f6:95:bc:5f:4c:56:1a:26:2e:76:d4:de:
         14:90:20:d5:35:ab:d3:ab:77:98:66:48:74:d6:d0:73:25:02:
         0d:28:54:9d:fd:24:b0:95:fe:48:fe:e4:c0:f9:bc:ca:28:42:
         4b:2b:b1:23:15:e7:36:ce:e2:e8:a3:27:29:5d:e1:7a:aa:fc:
         20:63:93:cb:3d:3b:66:c5:d2:6a:65:1b:7b:fb:c4:11:8f:87:
         96:50:78:c8:c1:c2:a0:3e:e1:00:ea:e6:10:54:3c:d6:43:99:
         6e:f8:b4:06:e8:83:5f:78:56:34:70:c1:3c:e5:b3:a0:1e:7d:
         ba:c0:ac:a0
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUaQpOUHEPFxzDAVSfurfrcMQo6cIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkM4QkQ1NDg1QzlCMDFEMTc2RjNGQUE4RjM4MUU1RUNF
RDhDRDNCODAeFw0yNjAyMDEyMjQ1NDFaFw0yNjAyMDUwNTUyNDFaMDMxMTAvBgNV
BAMTKDNDOTBCOEYwQjg2NDdFMjJBOEYyRjBDRUVFNkVGMzNDQjMyMjhEODkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBwqDnGujrrETQlBhO4Vu6UkMM
Xp/HTPsaQCeJmL2pBr2Wa+jiHWDzmoxYzAb82uKHYRYKImb95U0PX5O0wgxRrFPu
BDA7xIqEbO7ave8YQcUeP7Y5/0p1/Ybz+8TX7WNAZTIA9DUz42QD2HivIiDsRFnq
JFS2owcGMu6svktOjO17WcTUVatPld09NemQs7FGTYvoAU5mgLZ1DyDvNxK9SzM8
Sqg84F0ToAC3VLY8zRem56XE16uGOuD2BvrXiJe1eZWvlz2a4juo/QwxTxgC91aJ
rZIYoaaqr1ebamDlvX9UjiDr6SsYYfz5l4vIT+hQu+MPhESond8q6XuSPIl7AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUPJC48LhkfiKo8vDO7m7zPLMijYkwHwYDVR0j
BBgwFoAUvIvVSFybAdF28/qo84Hl7O2M07gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m
NzQxODAxMy0xNjc5LTQ5NmItODBmNi0yZDA1Y2M1YmU3MmYvMC9CQzhCRDU0ODVD
OUIwMUQxNzZGM0ZBQThGMzgxRTVFQ0VEOENEM0I4LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQkM4QkQ1NDg1QzlCMDFEMTc2RjNGQUE4RjM4MUU1RUNFRDhD
RDNCOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjc0MTgwMTMtMTY3OS00OTZiLTgw
ZjYtMmQwNWNjNWJlNzJmLzAvQkM4QkQ1NDg1QzlCMDFEMTc2RjNGQUE4RjM4MUU1
RUNFRDhDRDNCOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBALAtkHQjxEtYhVbSi1JfuJFg+4RfZWauvWpo
cztmHY9JN0SZW9QSvaH7OWi5l1Up6eHStB4axsDWdkqzlgbfnT39JVCsnarPyotL
NaMdju4+hkH/ioN3Bgk0hJyi9O9VBLJWVefjGLthjMzELFAFPIhZ9YxgvY2d3IV8
jUV4XkshMp53x/aVvF9MVhomLnbU3hSQINU1q9Ord5hmSHTW0HMlAg0oVJ39JLCV
/kj+5MD5vMooQksrsSMV5zbO4uijJyld4Xqq/CBjk8s9O2bF0mplG3v7xBGPh5ZQ
eMjBwqA+4QDq5hBUPNZDmW74tAbog194VjRwwTzls6AefbrArKA=
-----END CERTIFICATE-----
Generated at Mon Feb 2 09:43:11 2026 by rpki-client