This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/58b58aee-e8ee-4287-a2b8-616155c3eec2/0/8BE1F50A90938AE6D4E6D7A6A2A22F003B072ED8.mft
File:                     8BE1F50A90938AE6D4E6D7A6A2A22F003B072ED8.mft (raw, json)
Hash identifier:          ggKYMWNi7I0kKuH+D74NlT7TFSu2LTiYwU9UyjGgGIc=
Subject key identifier:   76:90:EC:89:BC:D6:A1:5D:34:C6:5C:40:49:D8:9C:32:A4:C3:0D:4E
Authority key identifier: 8B:E1:F5:0A:90:93:8A:E6:D4:E6:D7:A6:A2:A2:2F:00:3B:07:2E:D8
Certificate issuer:       /CN=8BE1F50A90938AE6D4E6D7A6A2A22F003B072ED8
Certificate serial:       515DC3399F60643662F01174D1F19247CBFA50B0
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BE1F50A90938AE6D4E6D7A6A2A22F003B072ED8.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/58b58aee-e8ee-4287-a2b8-616155c3eec2/0/8BE1F50A90938AE6D4E6D7A6A2A22F003B072ED8.mft
Manifest number:          0310
Signing time:             Sun 25 Jan 2026 02:01:42 +0000
Manifest this update:     Sun 25 Jan 2026 01:56:42 +0000
Manifest next update:     Wed 28 Jan 2026 09:35:42 +0000
Files and hashes:         1: 8BE1F50A90938AE6D4E6D7A6A2A22F003B072ED8.crl (hash: cxXiefyE2Aki7+b/H4uYjUiRV79Hodklch0jPET+Hno=)
                          2: 3130332e392e3134342e302f32322d3234203d3e20313331373133.roa (hash: DgLKkC/jF8zKIVNdNQyUD9vzgLj84NQLEk3DQtPjHPw=)
                          3: 323430373a363338303a3a2f33322d3430203d3e20313331373133.roa (hash: d3EczDOEKFnJZSi/mXbv6kWPY6oK1SqyadhZuQpb4/8=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/58b58aee-e8ee-4287-a2b8-616155c3eec2/0/8BE1F50A90938AE6D4E6D7A6A2A22F003B072ED8.crl
                          rsync://repo-rpki.idnic.net/repo/58b58aee-e8ee-4287-a2b8-616155c3eec2/0/8BE1F50A90938AE6D4E6D7A6A2A22F003B072ED8.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BE1F50A90938AE6D4E6D7A6A2A22F003B072ED8.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Jan 2026 09:35:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:5d:c3:39:9f:60:64:36:62:f0:11:74:d1:f1:92:47:cb:fa:50:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8BE1F50A90938AE6D4E6D7A6A2A22F003B072ED8
        Validity
            Not Before: Jan 25 01:56:42 2026 GMT
            Not After : Jan 28 09:35:42 2026 GMT
        Subject: CN=7690EC89BCD6A15D34C65C4049D89C32A4C30D4E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:36:78:d4:48:e0:a0:cf:90:fd:d5:41:07:ba:
                    4e:4d:9d:5f:84:bf:6e:68:32:86:bb:70:2f:c5:ea:
                    6b:d8:ea:a0:b0:6a:24:fb:13:cd:08:46:2d:20:9f:
                    77:67:1e:d8:9e:de:a8:9e:19:49:9e:9a:0c:d1:dd:
                    c8:9d:1a:29:7a:eb:72:f6:99:2d:08:e2:4f:03:10:
                    30:bc:08:a6:42:69:18:17:6f:9e:b3:2d:b5:10:00:
                    5e:d3:0e:d1:48:6f:d4:3a:44:9d:9f:b2:5d:84:c6:
                    f9:69:c3:62:97:d9:36:6a:27:76:61:d9:03:db:f0:
                    95:16:49:22:56:8a:2d:7e:52:2b:ec:25:53:f0:df:
                    20:36:d7:88:38:cc:2c:e9:70:39:8c:a2:be:b5:1e:
                    13:60:55:95:0c:7b:5b:4e:69:9a:c9:9a:df:fe:4a:
                    c1:68:65:f9:7e:5c:b2:35:09:35:49:57:28:44:dd:
                    05:f1:d4:7a:db:ba:08:47:06:f5:77:5a:8b:f3:45:
                    b1:ad:dc:07:3b:02:1c:ca:27:70:03:3c:45:ca:7c:
                    a5:0b:b0:6a:7c:44:1f:01:6f:21:25:07:50:54:79:
                    60:70:40:af:96:93:3d:9d:f9:32:c0:a9:be:5b:14:
                    bb:99:eb:e3:f7:63:31:46:ee:2a:b8:6a:d4:13:60:
                    48:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:90:EC:89:BC:D6:A1:5D:34:C6:5C:40:49:D8:9C:32:A4:C3:0D:4E
            X509v3 Authority Key Identifier:
                keyid:8B:E1:F5:0A:90:93:8A:E6:D4:E6:D7:A6:A2:A2:2F:00:3B:07:2E:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/58b58aee-e8ee-4287-a2b8-616155c3eec2/0/8BE1F50A90938AE6D4E6D7A6A2A22F003B072ED8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BE1F50A90938AE6D4E6D7A6A2A22F003B072ED8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/58b58aee-e8ee-4287-a2b8-616155c3eec2/0/8BE1F50A90938AE6D4E6D7A6A2A22F003B072ED8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:98:c4:7b:57:78:8c:5e:c9:11:62:f1:a6:49:98:a4:4b:c6:
         dd:f6:4d:17:4f:6f:eb:19:34:fd:ff:bb:74:ab:2b:cf:03:79:
         ef:30:52:a0:0d:0b:7e:e1:80:41:ce:f6:d5:16:be:ab:bb:56:
         d0:ef:b2:2e:89:ec:67:0d:d7:24:2c:be:28:f7:6b:22:a6:f4:
         1d:c4:c7:65:aa:ce:ae:75:d5:98:40:42:1d:c0:39:fa:cf:65:
         47:96:3e:7c:da:74:d5:f6:67:d7:d3:75:3f:07:5e:0b:a3:e9:
         59:34:d7:d9:78:a8:c6:c5:b1:db:b7:50:fa:d1:3d:e1:ee:cd:
         16:cb:e0:b6:cf:f2:e6:a8:b6:47:30:be:b7:15:87:2d:5e:dc:
         42:ca:39:12:85:cf:19:2e:82:26:84:68:6d:86:4c:5f:92:5e:
         8b:27:eb:2d:21:f7:f8:05:d5:d5:85:a7:de:aa:1b:4f:f6:ae:
         39:3d:a2:88:0a:1c:4f:5c:d4:57:b8:57:1a:4c:a9:2a:73:89:
         0e:6b:56:9a:37:74:7e:9c:fc:02:d9:bb:bf:94:dd:be:7f:1e:
         a9:f0:10:59:3e:dc:9b:16:e2:8f:98:95:24:0b:2c:d8:1f:89:
         cd:fb:5c:2d:f2:a0:6d:43:4a:fe:10:97:3e:91:d7:7e:7c:07:
         1b:46:06:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 00:44:46 2026 by rpki-client