This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/59cc2e5b-3b91-42af-8203-5e3b91704843/0/8E5335B45EE371DC463E5C65783A244FD1846656.mft
File:                     8E5335B45EE371DC463E5C65783A244FD1846656.mft (raw, json)
Hash identifier:          +qbOqnw3N+f/tSjSu9EBvcOW2HC6HIgVvyNnfG3N7cU=
Subject key identifier:   63:97:6C:A3:D2:10:D9:95:9A:21:29:71:37:50:EB:F5:9C:40:C6:61
Authority key identifier: 8E:53:35:B4:5E:E3:71:DC:46:3E:5C:65:78:3A:24:4F:D1:84:66:56
Certificate issuer:       /CN=8E5335B45EE371DC463E5C65783A244FD1846656
Certificate serial:       4F4043E8BDC2FA47BDD344D77AEFE042F66CF5B9
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8E5335B45EE371DC463E5C65783A244FD1846656.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/59cc2e5b-3b91-42af-8203-5e3b91704843/0/8E5335B45EE371DC463E5C65783A244FD1846656.mft
Manifest number:          0127
Signing time:             Sun 25 Jan 2026 11:41:36 +0000
Manifest this update:     Sun 25 Jan 2026 11:36:36 +0000
Manifest next update:     Wed 28 Jan 2026 15:04:36 +0000
Files and hashes:         1: 3130332e3138302e39352e302f32342d3234203d3e20313439333538.roa (hash: gZ7MIdwunPoLq27viYGE8zwAvrRl3NrvQYfYS07O7wA=)
                          2: 8E5335B45EE371DC463E5C65783A244FD1846656.crl (hash: 5+ARv8160wOd3MLQEVR8hR9cPKLFnSQelDgS1a8uXw8=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/59cc2e5b-3b91-42af-8203-5e3b91704843/0/8E5335B45EE371DC463E5C65783A244FD1846656.crl
                          rsync://repo-rpki.idnic.net/repo/59cc2e5b-3b91-42af-8203-5e3b91704843/0/8E5335B45EE371DC463E5C65783A244FD1846656.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8E5335B45EE371DC463E5C65783A244FD1846656.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Jan 2026 14:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:40:43:e8:bd:c2:fa:47:bd:d3:44:d7:7a:ef:e0:42:f6:6c:f5:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E5335B45EE371DC463E5C65783A244FD1846656
        Validity
            Not Before: Jan 25 11:36:36 2026 GMT
            Not After : Jan 28 15:04:36 2026 GMT
        Subject: CN=63976CA3D210D9959A2129713750EBF59C40C661
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:9f:4d:0e:53:46:55:f1:56:ad:b5:c2:01:6d:
                    bf:8b:8e:9d:6d:0b:9a:a8:e0:8e:d5:e0:77:ab:32:
                    d3:f3:3c:db:c4:a7:8a:70:b3:d5:94:ba:3d:5e:7a:
                    37:6b:10:1c:f5:8d:67:00:b2:42:42:32:4c:f2:6e:
                    5a:0b:db:0b:b8:a9:6a:cc:90:47:64:4c:94:d6:ca:
                    25:fc:58:db:34:17:3c:52:e0:4f:31:2a:46:ca:27:
                    ef:7a:1c:d8:8b:c6:9b:bc:e6:ef:ba:ee:75:74:3f:
                    86:a1:a3:18:25:65:3e:3e:a6:2a:bc:5b:e2:2d:39:
                    26:cb:c7:e4:66:24:0e:2f:05:76:b5:61:cd:36:80:
                    87:fa:04:1d:4b:7c:9a:88:60:13:7a:51:c4:c1:e4:
                    49:25:d4:b1:46:42:ac:d4:30:b3:58:94:6c:54:01:
                    22:34:1e:ec:9a:2d:c7:7c:9b:28:a8:e6:37:a3:04:
                    08:28:2f:2b:1a:50:c6:55:7f:03:75:38:92:c9:ee:
                    fb:b4:01:9c:6a:00:9d:bc:83:6d:7e:9a:18:f9:e2:
                    f3:31:6d:b7:39:43:23:49:22:1d:cf:70:c3:f7:5c:
                    08:fe:bd:c6:b4:27:d1:f4:b2:76:97:2e:5e:ad:de:
                    e4:e5:a9:89:b0:39:67:dd:2b:69:77:29:b7:8e:03:
                    67:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:97:6C:A3:D2:10:D9:95:9A:21:29:71:37:50:EB:F5:9C:40:C6:61
            X509v3 Authority Key Identifier:
                keyid:8E:53:35:B4:5E:E3:71:DC:46:3E:5C:65:78:3A:24:4F:D1:84:66:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/59cc2e5b-3b91-42af-8203-5e3b91704843/0/8E5335B45EE371DC463E5C65783A244FD1846656.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8E5335B45EE371DC463E5C65783A244FD1846656.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/59cc2e5b-3b91-42af-8203-5e3b91704843/0/8E5335B45EE371DC463E5C65783A244FD1846656.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:d7:85:ab:fd:7f:0b:40:41:65:58:e6:a9:7d:37:34:c2:9e:
         44:32:65:45:8d:c2:91:38:1e:ee:47:db:f9:32:33:83:ea:5c:
         b8:fb:d4:1b:06:ef:f1:f7:53:4b:b4:aa:08:1d:38:df:06:2d:
         cc:68:67:f5:90:4b:84:cd:c4:39:36:d6:7a:df:a5:bd:33:1d:
         05:98:1c:49:d4:ac:09:2f:6e:dc:aa:cc:42:7d:6e:74:32:7d:
         99:ce:76:de:2f:d7:4b:97:97:ed:ec:e3:92:3c:ce:77:f9:f5:
         18:ab:0b:c3:20:36:27:ee:e7:1e:ea:58:81:cc:3a:02:7b:f2:
         a8:a5:20:0e:6e:83:99:1b:b0:55:cf:e3:37:1f:05:07:96:b4:
         4f:bc:16:bc:d6:1e:0e:95:bf:9a:82:d6:d5:9f:6b:3d:d4:66:
         00:bd:64:f6:3d:0c:20:46:5c:e9:a2:d3:9c:c0:af:41:94:76:
         cf:5b:b0:88:8b:99:a4:bd:89:61:1a:48:2b:b5:84:e8:3c:ee:
         3b:6c:07:6a:b0:0b:d3:4c:3b:02:cc:38:59:34:1f:70:16:e8:
         dd:b9:ab:21:62:ad:b8:78:c9:ea:48:8e:53:d1:e9:83:65:49:
         c0:6d:5f:6e:1d:08:a4:d0:bb:18:9a:6f:9e:0d:10:8f:94:fe:
         71:10:e1:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:00:57 2026 by rpki-client