This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/1c289706-a4f4-4e1f-9a6e-01c9c53cd8f9/0/C8EC18E027639B05BC58A2228D126486BEFB3ABB.mft
File:                     C8EC18E027639B05BC58A2228D126486BEFB3ABB.mft (raw, json)
Hash identifier:          GDJyYcs0s2JWCNSewJUAz1cZRfv6ChGr50Eykm20N8A=
Subject key identifier:   A8:AD:6C:12:0A:4A:D6:B8:64:A6:91:5B:CE:E8:A4:75:CC:AD:61:C3
Authority key identifier: C8:EC:18:E0:27:63:9B:05:BC:58:A2:22:8D:12:64:86:BE:FB:3A:BB
Certificate issuer:       /CN=C8EC18E027639B05BC58A2228D126486BEFB3ABB
Certificate serial:       298EE0E310BC5DD8D6D1AEAFB3654BC61B74BBDF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8EC18E027639B05BC58A2228D126486BEFB3ABB.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/1c289706-a4f4-4e1f-9a6e-01c9c53cd8f9/0/C8EC18E027639B05BC58A2228D126486BEFB3ABB.mft
Manifest number:          0555
Signing time:             Sat 24 Jan 2026 07:11:10 +0000
Manifest this update:     Sat 24 Jan 2026 07:06:10 +0000
Manifest next update:     Tue 27 Jan 2026 14:10:10 +0000
Files and hashes:         1: 3230322e34332e3234382e302f32332d3234203d3e203538333831.roa (hash: fLwaxSiPiMGYGYjTwweBcQlSgL4S11+kugIMQEQ/4F8=)
                          2: C8EC18E027639B05BC58A2228D126486BEFB3ABB.crl (hash: /bcZO7CUvs3kxOGTB0hon1Uy+/I3P0YFSepqTp0OTZY=)
                          3: 3230322e34332e3235342e302f32342d3234203d3e20313338303734.roa (hash: zLiivndeuuRmiqPurXuqSo8rmLZskUTJQAWFfVjjmnQ=)
                          4: 3130332e3132332e39362e302f32322d3234203d3e20313338303734.roa (hash: PZwOUUZx2EQHdYrYeYouuZVw5NeiiX9go4HwzvpQyZo=)
                          5: 3230322e34332e3235352e302f32342d3234203d3e20313338303734.roa (hash: BDx4i2a4BYM3v0dGczfBklRepdAm0ptx8LXvALg8yN4=)
                          6: 3230322e34332e3235322e302f32342d3234203d3e20313338303734.roa (hash: IxoIU9qeskgyNiyRBaWp27OvX1vOQmtVbnmjBXacBdE=)
                          7: 3230322e34332e3235332e302f32342d3234203d3e20313338303734.roa (hash: 6GuT0WNGNAuW+mMwzOZfOwnrZJiyz2WtE/5vgADo9MY=)
                          8: 3230322e34332e3235302e302f32342d3234203d3e20313338303734.roa (hash: 1buHOMlubpPb1vK9bmP2byXKlPQ3RocJRoJnWCufqIM=)
                          9: 323430333a396634303a3a2f33322d3438203d3e20313338303734.roa (hash: N1MXVORdbt5FpdZaRMnKXk8HUDVu1M5FZBwZhaokx8M=)
                          10: 3230322e34332e3235312e302f32342d3234203d3e20313338303734.roa (hash: Q1wQYF2XtInj2d/t3tW21h1V//UQoT/xphWVYkOXt/o=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/1c289706-a4f4-4e1f-9a6e-01c9c53cd8f9/0/C8EC18E027639B05BC58A2228D126486BEFB3ABB.crl
                          rsync://repo-rpki.idnic.net/repo/1c289706-a4f4-4e1f-9a6e-01c9c53cd8f9/0/C8EC18E027639B05BC58A2228D126486BEFB3ABB.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8EC18E027639B05BC58A2228D126486BEFB3ABB.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Jan 2026 14:10:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:8e:e0:e3:10:bc:5d:d8:d6:d1:ae:af:b3:65:4b:c6:1b:74:bb:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C8EC18E027639B05BC58A2228D126486BEFB3ABB
        Validity
            Not Before: Jan 24 07:06:10 2026 GMT
            Not After : Jan 27 14:10:10 2026 GMT
        Subject: CN=A8AD6C120A4AD6B864A6915BCEE8A475CCAD61C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c5:1d:f9:58:6b:da:42:6b:54:71:28:89:5a:
                    b2:92:81:9d:36:17:97:9b:39:1a:47:52:bf:77:7a:
                    a3:15:fd:30:78:40:c4:8c:d9:6f:40:f4:3e:20:13:
                    ac:05:72:d6:bb:16:00:af:18:a6:f2:a5:a5:b8:9f:
                    6f:be:ab:65:a8:75:88:d5:4d:3f:e8:1b:eb:21:91:
                    8c:77:80:3c:00:fb:ac:09:ea:52:4c:98:14:bf:8d:
                    9b:75:b1:b6:6b:df:7c:f8:7a:31:e9:8f:af:8b:78:
                    44:84:0f:8d:ad:46:e5:90:51:f7:75:92:6d:05:3b:
                    b8:8a:b5:11:fb:23:4e:83:8e:c8:31:9e:8a:91:03:
                    8c:70:5c:0e:d2:ff:d0:c7:2a:d0:f4:2a:0c:9c:8c:
                    07:69:51:05:46:1f:e9:ee:1f:01:f2:bc:00:14:6c:
                    7a:48:f5:2d:9c:48:bd:0c:b5:d5:19:72:b1:5b:df:
                    19:08:91:c1:45:33:a0:30:38:fc:42:69:37:64:18:
                    55:7e:52:35:4a:ac:34:a2:10:72:7c:4d:cb:5f:df:
                    5b:bf:f7:c5:c7:b1:b9:23:f7:d6:89:16:62:e2:05:
                    9c:0a:15:aa:e0:94:72:8c:0d:10:de:73:7b:09:cf:
                    dc:e7:bf:c7:15:fc:60:25:e5:57:f4:18:cb:87:24:
                    7d:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:AD:6C:12:0A:4A:D6:B8:64:A6:91:5B:CE:E8:A4:75:CC:AD:61:C3
            X509v3 Authority Key Identifier:
                keyid:C8:EC:18:E0:27:63:9B:05:BC:58:A2:22:8D:12:64:86:BE:FB:3A:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/1c289706-a4f4-4e1f-9a6e-01c9c53cd8f9/0/C8EC18E027639B05BC58A2228D126486BEFB3ABB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8EC18E027639B05BC58A2228D126486BEFB3ABB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1c289706-a4f4-4e1f-9a6e-01c9c53cd8f9/0/C8EC18E027639B05BC58A2228D126486BEFB3ABB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:db:cc:24:80:4c:d7:6e:5b:28:29:43:1a:53:f0:60:4f:dd:
         70:a8:0e:1c:fe:9b:ab:4f:c8:31:db:1d:79:81:8a:22:08:76:
         4d:79:49:f5:e5:b3:85:e0:31:92:2c:d4:a2:76:5d:5d:7e:7a:
         06:52:9b:17:00:61:5a:35:6d:7c:c1:aa:58:a0:71:b0:ee:47:
         cb:ad:03:2a:18:5a:86:b3:48:51:0d:cd:eb:95:72:9f:2a:ae:
         5f:7b:3e:70:f8:cf:63:28:d8:d4:5f:59:b1:6d:e9:f5:44:14:
         d7:33:b2:b7:82:82:90:66:85:65:ce:ab:93:91:be:15:d7:d1:
         94:62:03:93:1b:20:41:8f:04:6f:e4:f8:71:ea:85:78:4d:2f:
         e6:b7:14:79:e2:0c:da:d1:bf:7b:6b:5b:af:da:d6:cb:ab:56:
         78:c2:c5:4a:d9:08:20:7b:6c:90:3c:73:52:fa:b1:bd:80:65:
         40:17:2a:5e:3c:d1:c6:6d:66:ab:26:3c:fc:8b:40:ed:ed:a6:
         40:ee:7a:3a:bb:55:23:c0:2f:ae:e0:06:22:b8:ae:8d:a2:a6:
         50:1b:05:1b:e4:2f:0a:a7:10:82:68:ad:51:a7:85:69:a4:b3:
         7f:54:2c:9f:97:c8:ea:b8:62:4b:c0:8e:6d:92:41:fb:8c:43:
         30:60:20:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:18:10 2026 by rpki-client