This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/3c8ab3e0-ca68-42f6-98f6-654a252a8648/0/F389B5570A768F4811B6377427EE5A9710A3078F.mft
File:                     F389B5570A768F4811B6377427EE5A9710A3078F.mft (raw, json)
Hash identifier:          q+AJeFk5qLgQqn8e1cTSDg+y3huWL58NPdNDUjdGUZs=
Subject key identifier:   EF:99:25:16:E4:35:36:95:08:9F:CF:28:9E:D5:5C:BE:CC:38:D2:C9
Authority key identifier: F3:89:B5:57:0A:76:8F:48:11:B6:37:74:27:EE:5A:97:10:A3:07:8F
Certificate issuer:       /CN=F389B5570A768F4811B6377427EE5A9710A3078F
Certificate serial:       26440F39DC8007909226FA8BD3C0BEEE49DC4657
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F389B5570A768F4811B6377427EE5A9710A3078F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3c8ab3e0-ca68-42f6-98f6-654a252a8648/0/F389B5570A768F4811B6377427EE5A9710A3078F.mft
Manifest number:          0391
Signing time:             Sat 24 Jan 2026 10:30:55 +0000
Manifest this update:     Sat 24 Jan 2026 10:25:55 +0000
Manifest next update:     Tue 27 Jan 2026 12:49:55 +0000
Files and hashes:         1: 3230322e39332e32372e302f32342d3234203d3e203233393532.roa (hash: PKWTtW8nxl97mf6uggx7DQTu7mPXIE9nl3tapJJEXZg=)
                          2: 3230322e39332e32342e302f32312d3231203d3e203233393532.roa (hash: lCpd9EDW6kxJeEntdCCqy3nxOkL8KJcbnO36OKZILBc=)
                          3: 3230322e39332e32342e302f32342d3234203d3e203233393532.roa (hash: kfaAp03dyflQljxrva7g4HC0eTaNF+N0ortCVYgdoCc=)
                          4: 3230322e39332e33312e302f32342d3234203d3e203233393532.roa (hash: JUNEmwAQ3OD9z4dCAUDRWMfxMppfea30FX3ZfMpQ2Ss=)
                          5: 3230322e39332e33302e302f32342d3234203d3e203233393532.roa (hash: UrTuhs6hr6z8RmxXE0waBTEObzjTqxDo0ru50RV8iPg=)
                          6: 3230322e39332e32352e302f32342d3234203d3e203233393532.roa (hash: augoYD+h3jPQ0MqbdmFoGx/xv5+vOTa/6Jcvw0aS3oI=)
                          7: 3230322e39332e32392e302f32342d3234203d3e203233393532.roa (hash: Up+DcyPm785j9NlRpEoposKBRtppwgof2aDCtVfivl0=)
                          8: 3230322e39332e32382e302f32342d3234203d3e203233393532.roa (hash: JwKnQTdgTXzvOyRVd4mostiUpvJc30Z/4Hc/DZwjPkw=)
                          9: F389B5570A768F4811B6377427EE5A9710A3078F.crl (hash: VpXXNcWuAWgUH6eNgY/5kHG2rtXhHdCLtsxBDs42iuQ=)
                          10: 3230322e39332e32362e302f32342d3234203d3e203233393532.roa (hash: OdoRUtVMpCFrGJ6E6eEou6i5jvfLhQMLpWAp7LUsjsw=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/3c8ab3e0-ca68-42f6-98f6-654a252a8648/0/F389B5570A768F4811B6377427EE5A9710A3078F.crl
                          rsync://repo-rpki.idnic.net/repo/3c8ab3e0-ca68-42f6-98f6-654a252a8648/0/F389B5570A768F4811B6377427EE5A9710A3078F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F389B5570A768F4811B6377427EE5A9710A3078F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Jan 2026 12:49:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:44:0f:39:dc:80:07:90:92:26:fa:8b:d3:c0:be:ee:49:dc:46:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F389B5570A768F4811B6377427EE5A9710A3078F
        Validity
            Not Before: Jan 24 10:25:55 2026 GMT
            Not After : Jan 27 12:49:55 2026 GMT
        Subject: CN=EF992516E4353695089FCF289ED55CBECC38D2C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:9b:b4:e0:94:40:c5:77:3e:d1:a0:4c:05:17:
                    c4:2f:f6:03:ae:7b:ad:d7:8b:01:e6:8b:1d:fa:50:
                    20:eb:d1:94:f5:a6:56:a2:1b:ff:5a:91:86:e5:e3:
                    d7:9d:78:b0:a9:fb:f1:f4:6b:72:39:a3:39:fc:85:
                    7d:d8:69:b7:d0:77:14:4c:2c:aa:1a:55:aa:db:3a:
                    03:26:93:ce:a0:6f:50:d8:1b:d5:5b:02:9f:6d:d7:
                    83:a0:e9:c6:3c:f7:44:dc:f8:35:61:45:0a:87:a3:
                    76:99:ae:07:61:83:a7:7b:34:6c:ee:92:d7:14:b3:
                    4b:80:26:91:c1:35:3e:43:6e:3d:1d:1b:0d:fc:2d:
                    bb:66:14:e1:55:88:28:7a:ea:6f:b1:aa:95:f1:7c:
                    5b:b8:a5:20:39:7e:8f:d5:18:ab:3f:c5:c1:e1:1d:
                    0a:8b:08:15:1f:be:97:87:fe:6e:89:a1:9c:3b:59:
                    e4:47:40:59:19:78:08:c9:56:e6:71:d4:11:80:f8:
                    c7:c3:7d:8c:81:69:27:a4:38:12:e4:0e:44:5f:e0:
                    73:70:80:ed:15:8b:4f:24:71:49:df:1b:cb:5a:73:
                    c1:c5:56:0a:cf:09:ea:5e:72:a7:34:04:89:cf:c9:
                    cd:08:21:6d:85:86:0f:d0:84:b2:66:7f:66:ff:c6:
                    38:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:99:25:16:E4:35:36:95:08:9F:CF:28:9E:D5:5C:BE:CC:38:D2:C9
            X509v3 Authority Key Identifier:
                keyid:F3:89:B5:57:0A:76:8F:48:11:B6:37:74:27:EE:5A:97:10:A3:07:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3c8ab3e0-ca68-42f6-98f6-654a252a8648/0/F389B5570A768F4811B6377427EE5A9710A3078F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F389B5570A768F4811B6377427EE5A9710A3078F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3c8ab3e0-ca68-42f6-98f6-654a252a8648/0/F389B5570A768F4811B6377427EE5A9710A3078F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:08:a0:26:fb:83:8b:e3:82:68:e2:59:69:4f:77:50:1a:93:
         c6:b7:64:71:de:db:4c:43:a5:12:9e:1d:1b:28:b6:1e:f4:e7:
         2a:a3:b0:64:87:4b:d0:d7:d0:dc:3e:b2:4e:b5:cd:59:1f:d8:
         75:5f:bb:63:f9:a0:80:f7:e2:94:b4:4a:84:52:93:6d:4e:f3:
         44:79:a2:83:48:93:c2:a4:2d:ff:99:62:23:e8:b2:7b:36:e1:
         32:3c:93:09:61:b2:62:74:5c:22:7d:b6:e3:b7:7a:e9:b0:02:
         ab:f4:bc:00:07:38:5e:c4:bb:25:d1:b1:cd:24:99:52:5b:a7:
         3b:39:fa:53:cb:3e:d3:20:ff:1c:2c:72:23:fe:08:dd:cb:2e:
         51:11:ad:1e:a0:d5:c9:e5:30:e9:39:94:c1:8e:62:78:e6:b6:
         0d:df:0b:2a:9f:11:42:d4:1f:81:38:72:28:94:bd:f4:0e:45:
         3f:cb:1d:e9:8b:ac:27:4b:46:13:97:ce:d6:06:0b:a9:e4:2c:
         29:db:08:c8:10:33:4c:77:0b:b4:e2:3d:f1:43:a4:e8:4d:bc:
         08:b4:38:ce:09:ed:15:25:e4:a1:d2:36:32:7f:2f:19:b7:42:
         2a:81:21:46:6b:77:35:3b:c8:6e:4e:24:7f:fb:99:3b:3d:d2:
         09:0e:01:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 02:17:01 2026 by rpki-client