This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/8469874AE268E2CD4E9A137EDD5599C748530E9E.mft
File:                     8469874AE268E2CD4E9A137EDD5599C748530E9E.mft (raw, json)
Hash identifier:          aiJfgMur/RHz+Mbl6nXibR9KFGjAcZgCeSPVdYyMH1s=
Subject key identifier:   BC:C7:06:5A:75:65:5C:36:BB:5F:76:B4:30:5A:E9:5A:DE:07:5B:5D
Authority key identifier: 84:69:87:4A:E2:68:E2:CD:4E:9A:13:7E:DD:55:99:C7:48:53:0E:9E
Certificate issuer:       /CN=8469874AE268E2CD4E9A137EDD5599C748530E9E
Certificate serial:       548A69228B4BE7A3CC31D6BDBD2C42FCFA31DEC7
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8469874AE268E2CD4E9A137EDD5599C748530E9E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/8469874AE268E2CD4E9A137EDD5599C748530E9E.mft
Manifest number:          0565
Signing time:             Sun 25 Jan 2026 14:32:15 +0000
Manifest this update:     Sun 25 Jan 2026 14:27:15 +0000
Manifest next update:     Wed 28 Jan 2026 20:37:15 +0000
Files and hashes:         1: 3133372e35392e3136302e302f32322d3234203d3e203539323831.roa (hash: iYXHlXOp13oo14EwXL1yMlKhjy+K0NQq6QBKvwru8rQ=)
                          2: 3130332e3232382e3131382e302f32332d3233203d3e203536323432.roa (hash: GokeNGATaaa1i6e8bMHZ+iQ8aT+X+X53HMk8EJYjG4g=)
                          3: 3133372e35392e3136312e302f32342d3234203d3e203536323432.roa (hash: Z2sFxHHlHMJ4bRNENtVrztUIDsIoPZKVqMTMzG/+S5w=)
                          4: 3133372e35392e3136322e302f32332d3233203d3e203536323432.roa (hash: f5hHen+W1VXCRis0jyLYMREhK7yiYlp/e1Oke9ZJemI=)
                          5: 3130332e3232382e3131362e302f32322d3234203d3e203539323831.roa (hash: x2j2pkxj/5qJxIyLhEm0SjulNd461dE11VB/8v7mZzA=)
                          6: 8469874AE268E2CD4E9A137EDD5599C748530E9E.crl (hash: w6maTaOmKOtNP49j6y6YnKnJzF3RBT7wCCOtYgbruu8=)
                          7: 323430303a636438303a3a2f33322d3438203d3e203536323432.roa (hash: zcYJvgiaLV2GHe09dAoReTJVtccl4TPkiIrfadlJVtM=)
                          8: 3130332e3232382e3131362e302f32322d3232203d3e203536323432.roa (hash: YeIi/WBRjgP+fXFh6AcMEh9f121AU99tB5OClCgCK+k=)
                          9: 3133372e35392e3136332e302f32342d3234203d3e203536323432.roa (hash: QK5c39FnIQ2uH2X95IXAVXSIER8l6LyPkkcgIQHnCc0=)
                          10: 3130332e3232382e3131362e302f32332d3233203d3e203536323432.roa (hash: Qs5YsAFrZGsUg7q3cUMLK3YDrimXUuGrA4ZkrObB+E4=)
                          11: 323430303a636438303a3a2f33322d3438203d3e203539323831.roa (hash: SDDhhLbIPIon66Bn4BSdn8Fj3IQ8y3DGAekRQSKZURg=)
                          12: 3133372e35392e3136322e302f32342d3234203d3e203536323432.roa (hash: 1D1ZlBAXYS6NJNH/ZoxCjjMrhPg+zHK85QsUpRWH8Rk=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/8469874AE268E2CD4E9A137EDD5599C748530E9E.crl
                          rsync://repo-rpki.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/8469874AE268E2CD4E9A137EDD5599C748530E9E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8469874AE268E2CD4E9A137EDD5599C748530E9E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Jan 2026 14:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:8a:69:22:8b:4b:e7:a3:cc:31:d6:bd:bd:2c:42:fc:fa:31:de:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8469874AE268E2CD4E9A137EDD5599C748530E9E
        Validity
            Not Before: Jan 25 14:27:15 2026 GMT
            Not After : Jan 28 20:37:15 2026 GMT
        Subject: CN=BCC7065A75655C36BB5F76B4305AE95ADE075B5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:46:f3:55:6e:a1:f7:ea:d2:d4:bc:f0:2c:53:
                    0b:82:db:1b:ec:e3:58:58:c0:0c:7e:fc:5b:6a:4a:
                    c2:bc:52:fb:fb:72:42:e8:ab:88:5f:8a:d1:e7:a4:
                    e3:ad:19:a8:43:2d:45:d3:72:1d:f2:0d:b9:56:c1:
                    3a:4c:a9:15:df:89:e7:69:61:65:e7:0b:0f:d1:66:
                    b8:9b:16:48:73:e6:9a:0e:a6:b1:53:e5:68:8e:8d:
                    0e:1d:24:eb:40:fb:60:dd:3e:95:53:f3:1f:d2:2e:
                    e6:86:e3:2f:bf:05:5b:6c:80:bb:61:4b:87:59:69:
                    14:e1:21:0f:ee:00:e0:cc:74:c0:3e:ba:a4:8a:03:
                    f3:e6:1e:93:58:67:29:85:54:54:6f:93:0a:41:0d:
                    09:03:f3:ea:b8:4f:18:b1:24:a7:d7:fe:bc:86:c3:
                    d4:cd:7f:f5:dc:e9:2f:8a:41:61:0e:ab:dc:1e:45:
                    25:b2:68:b1:79:f5:f2:48:be:a7:0e:9d:2c:9e:e7:
                    a8:54:b8:4d:f3:83:bd:66:1d:62:a1:42:f0:74:8e:
                    ae:5a:8e:13:2e:8e:a9:e9:7d:b7:33:4f:6e:f9:6f:
                    4f:0a:5e:85:36:74:0f:ec:60:12:81:07:f9:87:e1:
                    b9:0b:22:5b:06:61:3e:16:13:fa:85:a3:0b:41:4e:
                    11:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:C7:06:5A:75:65:5C:36:BB:5F:76:B4:30:5A:E9:5A:DE:07:5B:5D
            X509v3 Authority Key Identifier:
                keyid:84:69:87:4A:E2:68:E2:CD:4E:9A:13:7E:DD:55:99:C7:48:53:0E:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/8469874AE268E2CD4E9A137EDD5599C748530E9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8469874AE268E2CD4E9A137EDD5599C748530E9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/8469874AE268E2CD4E9A137EDD5599C748530E9E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:43:41:4d:79:52:0b:31:8a:2f:8f:34:55:25:bc:4d:69:f5:
         e8:27:ae:fe:1e:0c:dc:c2:08:2a:0d:6a:00:62:d4:04:91:07:
         ae:f5:20:f2:41:1f:49:9c:e5:74:c2:e1:50:12:e7:55:14:29:
         46:fc:77:50:29:f7:c7:ee:4a:2b:cf:7a:26:15:f7:37:30:d2:
         cc:35:3f:28:ad:59:14:ee:96:01:ed:9c:0c:f1:0c:f2:d4:a0:
         90:fd:55:64:c8:69:a7:af:8a:14:cd:09:0a:22:1e:4a:6c:e8:
         1e:ab:81:9c:e6:5d:a5:7c:5b:f5:e9:71:dc:16:61:fa:8f:69:
         78:2b:91:aa:69:52:59:90:f3:00:b9:6b:b3:69:6b:6c:14:53:
         e3:b4:3e:87:39:8b:aa:c8:3d:0b:9f:7e:f5:ae:ec:bd:4f:50:
         0e:8d:fa:ef:b0:42:8e:93:1c:54:bd:c1:61:d9:83:fd:18:4c:
         8a:a9:53:dc:e9:2c:af:c6:8c:a9:3e:9e:d0:5d:87:88:da:d6:
         eb:9c:99:e7:ea:97:83:ad:0f:af:29:9b:be:3f:d9:22:0d:7a:
         17:c5:f6:97:bc:17:39:f5:36:b9:c9:ba:b0:af:4f:af:39:cd:
         28:57:4c:3b:d9:1e:de:66:4d:66:01:85:26:a6:49:fe:b8:da:
         49:cc:52:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:59:22 2026 by rpki-client