This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/0A8E8E063785238467D4AD1F507CC97B30DBB959.mft
File:                     0A8E8E063785238467D4AD1F507CC97B30DBB959.mft (raw, json)
Hash identifier:          aoz9PLAoqTTUuBEPpwqQ64csBMWe7Tqu2NEqG3zv2FI=
Subject key identifier:   3F:EE:1F:5B:E5:88:F1:C2:AF:C5:2C:6C:14:6B:99:F9:F9:56:EF:56
Authority key identifier: 0A:8E:8E:06:37:85:23:84:67:D4:AD:1F:50:7C:C9:7B:30:DB:B9:59
Certificate issuer:       /CN=0A8E8E063785238467D4AD1F507CC97B30DBB959
Certificate serial:       1D84CAA1F28AAC4D0DAA879CCA96BE0FD40EBD48
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A8E8E063785238467D4AD1F507CC97B30DBB959.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/0A8E8E063785238467D4AD1F507CC97B30DBB959.mft
Manifest number:          01B0
Signing time:             Sun 01 Feb 2026 14:51:24 +0000
Manifest this update:     Sun 01 Feb 2026 14:46:24 +0000
Manifest next update:     Thu 05 Feb 2026 02:37:24 +0000
Files and hashes:         1: 323430363a356334303a3a2f33322d3438203d3e20313331373035.roa (hash: ZrrNvfIdpKFxME3MijZJjel9mkVCFWr1LKlyTLKuOmk=)
                          2: 323430363a356334303a323030303a3a2f33362d3438203d3e20313331373035.roa (hash: SBnQR+zv8l07BbYG06eTb7vfRhUvVUWA8zTkQAxpGrY=)
                          3: 323430363a356334303a393939393a3a2f34382d3438203d3e20313331373035.roa (hash: i8YeqA66jLTHkrWq3WhHNQrrw6cEUvyy58nchkz4ulc=)
                          4: 323430363a356334303a313030303a3a2f33362d3438203d3e20313331373035.roa (hash: Mk93/Py1aNdqibCxnW5rDhu68jIUBJ5f2wQcM99902Q=)
                          5: 0A8E8E063785238467D4AD1F507CC97B30DBB959.crl (hash: P+8lWkyUPVjB2V/jOS040ZN2SgxluJIUR0RormUZI3M=)
                          6: 323430363a356334303a383838383a3a2f34382d3438203d3e20313331373035.roa (hash: cEu0EjirS4vOm7fpY+AgTseXh1mis9QznqiCF2QTlk4=)
                          7: 3130332e3135342e3137382e302f32342d3234203d3e20313331373035.roa (hash: dY5S+6E2tTu7kTt3kud9rHyNZ8ICT/4MYY6A5gKdkm0=)
                          8: 323430363a356334303a3a2f33362d3438203d3e20313331373035.roa (hash: vVX9J+iIt5S0zLOqjzNP9A3DgvrDc3RqZLM36XJo31Q=)
                          9: 3130332e3135342e3137392e302f32342d3234203d3e20313331373035.roa (hash: fuYAXhPxVSs3uQDGyVoloAUdGAB1vPzhCZLoObuSwWo=)
                          10: 3130332e3135342e3137382e302f32332d3234203d3e20313331373035.roa (hash: z6Vlo67b6HowiJ4eNQMIImpcN0YW2LjWV36x2SeZA5M=)
                          11: 323430363a356334303a373737373a3a2f34382d3438203d3e20313331373035.roa (hash: mwXZGvsiqYO8BjZGzGEqdxUw+nTF/7mJPJXCsYgA+E8=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/0A8E8E063785238467D4AD1F507CC97B30DBB959.crl
                          rsync://repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/0A8E8E063785238467D4AD1F507CC97B30DBB959.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A8E8E063785238467D4AD1F507CC97B30DBB959.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Feb 2026 02:37:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:84:ca:a1:f2:8a:ac:4d:0d:aa:87:9c:ca:96:be:0f:d4:0e:bd:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A8E8E063785238467D4AD1F507CC97B30DBB959
        Validity
            Not Before: Feb  1 14:46:24 2026 GMT
            Not After : Feb  5 02:37:24 2026 GMT
        Subject: CN=3FEE1F5BE588F1C2AFC52C6C146B99F9F956EF56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:f4:ec:da:ae:28:c7:26:ff:06:fd:b3:67:9f:
                    fb:26:0a:a8:91:06:9a:cd:d6:ba:0b:9c:24:01:72:
                    0b:c5:a4:4e:fb:ad:2c:c1:ba:31:c5:82:ba:df:99:
                    12:af:5f:de:a8:d1:a3:31:5f:27:bb:21:b0:42:5b:
                    ca:a4:7a:c3:59:54:93:a6:f2:f7:2f:67:16:f1:eb:
                    50:4b:48:ac:a0:f7:80:8e:33:aa:7a:71:41:bf:4d:
                    40:cf:7b:ac:35:5a:96:31:c4:12:7e:fe:a6:a7:c0:
                    ed:d1:04:be:ca:52:86:ea:f7:87:e8:a1:d2:84:27:
                    97:56:3c:57:01:9e:0d:5d:98:ef:96:2f:43:3c:9e:
                    fe:24:32:c0:5b:e5:2c:00:dd:f5:fd:cb:52:88:eb:
                    ef:3d:9d:ac:4f:4a:06:51:17:f2:c7:2a:c2:30:97:
                    02:4c:29:f9:6f:d1:3e:93:fb:34:58:30:f2:d3:74:
                    0b:f7:96:7e:42:82:18:d3:2d:2e:0f:f6:5e:7f:86:
                    4c:88:df:6d:a3:c5:45:b7:9c:10:26:4a:5e:41:d9:
                    d0:7b:78:ac:2c:16:f1:58:f3:1e:4c:a6:7f:39:de:
                    ef:44:ea:cf:c5:18:c4:b4:79:02:74:09:b8:5c:38:
                    82:5b:f4:f9:01:9b:e9:cd:58:df:1f:89:e9:8e:31:
                    13:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:EE:1F:5B:E5:88:F1:C2:AF:C5:2C:6C:14:6B:99:F9:F9:56:EF:56
            X509v3 Authority Key Identifier:
                keyid:0A:8E:8E:06:37:85:23:84:67:D4:AD:1F:50:7C:C9:7B:30:DB:B9:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/0A8E8E063785238467D4AD1F507CC97B30DBB959.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A8E8E063785238467D4AD1F507CC97B30DBB959.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/0A8E8E063785238467D4AD1F507CC97B30DBB959.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:0c:01:8d:2e:b1:67:97:03:63:0a:ce:73:ee:d4:1d:5c:e1:
         f1:ad:35:88:f1:55:9c:76:78:23:90:c9:b7:07:67:86:13:95:
         ef:2f:4a:64:b2:76:26:ab:74:69:74:04:8c:44:cb:b0:55:45:
         ce:2b:74:c0:e1:3b:b0:38:2a:92:08:e6:f1:68:05:84:ba:85:
         20:1c:54:fb:bd:6c:4e:22:ea:a5:2a:f5:0b:a2:a9:3c:b2:4a:
         a8:ef:9f:51:76:90:9d:e6:5f:d9:c5:96:1d:5f:c0:67:f5:7b:
         3f:39:32:b9:f9:81:d1:60:f3:22:a4:81:51:a8:bd:a7:8c:c8:
         54:d6:fc:d4:c2:e2:15:b5:33:e8:50:eb:bb:ef:df:36:4c:f0:
         be:69:fe:76:94:ad:15:f7:4d:ca:ff:6c:6f:b7:cc:f7:72:09:
         f1:63:fc:62:75:cc:f6:e9:2f:5f:8d:e6:32:6f:6c:bb:29:a7:
         b9:73:eb:1c:7c:2c:14:d7:7b:f9:a8:0a:ac:30:6a:e1:1d:ed:
         af:92:86:d2:a3:68:61:2e:5c:67:43:31:ef:af:9e:2a:88:b6:
         e4:78:fa:59:52:90:a2:c1:dd:f9:a0:30:ce:6b:45:3f:f9:d8:
         a0:25:78:88:40:2a:08:5d:1d:48:e2:74:01:68:13:b1:e3:bc:
         5d:a5:f8:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 10:03:46 2026 by rpki-client