This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/08773191FBFC21A3C8615A3E36A2ACB187F63C25.mft
File:                     08773191FBFC21A3C8615A3E36A2ACB187F63C25.mft (raw, json)
Hash identifier:          JOoAySjyw+y+e2idYNBGUOMm7gBvsVmf2gsVlh2l/4E=
Subject key identifier:   BC:2D:2C:A6:1D:3A:53:4B:25:4D:1A:3D:A2:89:B7:5E:80:53:7F:55
Authority key identifier: 08:77:31:91:FB:FC:21:A3:C8:61:5A:3E:36:A2:AC:B1:87:F6:3C:25
Certificate issuer:       /CN=08773191FBFC21A3C8615A3E36A2ACB187F63C25
Certificate serial:       2151444E173BC68008DC5D962C27E6222D71F5F0
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08773191FBFC21A3C8615A3E36A2ACB187F63C25.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/08773191FBFC21A3C8615A3E36A2ACB187F63C25.mft
Manifest number:          0557
Signing time:             Sat 24 Jan 2026 13:11:42 +0000
Manifest this update:     Sat 24 Jan 2026 13:06:42 +0000
Manifest next update:     Tue 27 Jan 2026 15:14:42 +0000
Files and hashes:         1: 3130332e3130322e31322e302f32332d3233203d3e20313336383635.roa (hash: 63Tfw81BZTddeb+f1H4wsRimzGD5u+l/4PZBmxazTmA=)
                          2: 3130332e3130322e31322e302f32342d3234203d3e20313336383635.roa (hash: 3P9Pl6Hs5uriFWxnAGmotMmA1+l8H3Rlr0SXz2N0yKQ=)
                          3: 3130332e3130322e31352e302f32342d3234203d3e20313337333331.roa (hash: pfUFTVsuIPjmnx0LWYbFiwDyhGMbxuFA/hftBufAVsk=)
                          4: 323430313a646234303a3a2f33322d3332203d3e20313336383635.roa (hash: KGUF32Kc9eR09Ep+PLSsXC9//4a1BdJ7Q2PE9xYrp/A=)
                          5: 3130332e3130322e31332e302f32342d3234203d3e20313336383635.roa (hash: U9D771UuAkGUw+fqOOekyqrm8y2+seArJf4nwvuYawE=)
                          6: 08773191FBFC21A3C8615A3E36A2ACB187F63C25.crl (hash: 6ZS2DSVgWSQ37/hg54U+NfRHbKyzmjTwBf1fJBw8zLQ=)
                          7: 3130332e3130322e31342e302f32342d3234203d3e20313336383635.roa (hash: xpIpnLctgV8IvR/95nZhbbNFRCrOenQ8KDE2o6OGJuo=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/08773191FBFC21A3C8615A3E36A2ACB187F63C25.crl
                          rsync://repo-rpki.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/08773191FBFC21A3C8615A3E36A2ACB187F63C25.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08773191FBFC21A3C8615A3E36A2ACB187F63C25.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Jan 2026 15:14:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:51:44:4e:17:3b:c6:80:08:dc:5d:96:2c:27:e6:22:2d:71:f5:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08773191FBFC21A3C8615A3E36A2ACB187F63C25
        Validity
            Not Before: Jan 24 13:06:42 2026 GMT
            Not After : Jan 27 15:14:42 2026 GMT
        Subject: CN=BC2D2CA61D3A534B254D1A3DA289B75E80537F55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:94:c2:1f:f8:57:22:04:b4:4f:27:9a:33:5f:
                    7a:36:3b:51:6b:57:d7:41:3d:c3:32:2e:ef:f8:74:
                    ad:dc:77:66:45:41:58:c1:d7:dc:a9:23:39:c9:1e:
                    bf:3e:ce:10:e6:41:85:e0:c9:26:37:fe:db:25:ca:
                    f1:28:38:e2:65:00:96:d1:74:8b:fe:74:d5:2d:1a:
                    d1:12:b0:b0:8b:3c:c1:a5:3e:e6:83:a0:30:7f:1b:
                    b6:06:6e:d7:4e:29:be:65:89:1e:c4:11:e5:de:46:
                    c5:b6:34:c9:27:5c:7c:03:d0:00:40:01:d6:a5:44:
                    de:ca:f0:79:68:da:d6:67:ac:75:9f:78:a7:ae:e4:
                    6a:d1:1a:5e:ac:4d:31:41:4b:fe:04:c0:9f:c4:21:
                    b3:e6:92:d5:05:95:a6:7c:5a:8e:7a:fc:ef:4c:4a:
                    1c:3e:88:5b:66:20:90:4f:1c:74:91:aa:4c:e2:24:
                    7c:3f:bb:e1:83:86:07:6b:f9:84:89:25:ba:65:30:
                    c4:c3:b7:b3:7b:10:d6:6a:48:a2:15:8e:a1:fd:cb:
                    f7:04:51:bc:84:dd:c9:58:ca:56:a5:9e:04:0e:c9:
                    d9:a6:82:42:27:7c:e8:17:2a:cd:f7:ab:f6:60:a8:
                    9b:12:94:22:d2:bb:02:01:1a:b1:6f:fa:40:ad:83:
                    b8:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:2D:2C:A6:1D:3A:53:4B:25:4D:1A:3D:A2:89:B7:5E:80:53:7F:55
            X509v3 Authority Key Identifier:
                keyid:08:77:31:91:FB:FC:21:A3:C8:61:5A:3E:36:A2:AC:B1:87:F6:3C:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/08773191FBFC21A3C8615A3E36A2ACB187F63C25.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08773191FBFC21A3C8615A3E36A2ACB187F63C25.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/08773191FBFC21A3C8615A3E36A2ACB187F63C25.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:1a:83:52:3a:ca:22:80:2a:cb:46:33:d4:3b:4d:51:13:aa:
         b2:b3:99:a5:77:00:c2:1e:2e:d6:26:c6:cc:85:9f:d1:df:d1:
         99:7a:a4:df:c3:7a:58:3b:e3:9e:4d:3c:42:d9:9b:89:ac:65:
         0d:3f:86:2f:b7:fc:46:06:81:e6:56:00:f1:af:ff:12:f5:6e:
         76:1f:f1:47:90:d9:41:98:3e:85:69:d1:f3:b9:f1:84:05:48:
         7f:3d:57:46:ba:b7:ed:60:ab:d9:cd:69:34:f5:ec:c4:fd:71:
         21:70:58:99:af:5a:9d:ff:0b:3e:92:aa:8c:76:07:e9:f9:b1:
         5e:dc:ce:39:7a:3c:38:5a:76:13:a9:c0:eb:7e:82:91:7f:e8:
         f0:13:c8:8c:cd:f0:58:d3:ce:a0:06:dd:a7:d4:4f:be:ea:6a:
         c3:76:ff:86:16:c2:34:f5:9d:cd:47:f7:da:6e:51:af:b3:52:
         a7:eb:86:b5:60:07:ae:c2:02:a5:1a:c1:18:8b:68:f9:c4:ad:
         bd:19:1b:77:4c:1e:5a:3c:c3:b3:21:b9:a7:da:65:6b:8b:a9:
         cf:ca:c2:ae:c4:fe:45:04:40:f1:45:56:77:0d:96:29:8c:1a:
         bb:a9:67:2c:e8:a3:ba:b3:4a:5e:f0:ac:89:ee:c5:68:9f:5a:
         02:e8:03:bc
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUIVFEThc7xoAI3F2WLCfmIi1x9fAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDg3NzMxOTFGQkZDMjFBM0M4NjE1QTNFMzZBMkFDQjE4
N0Y2M0MyNTAeFw0yNjAxMjQxMzA2NDJaFw0yNjAxMjcxNTE0NDJaMDMxMTAvBgNV
BAMTKEJDMkQyQ0E2MUQzQTUzNEIyNTREMUEzREEyODlCNzVFODA1MzdGNTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6lMIf+FciBLRPJ5ozX3o2O1Fr
V9dBPcMyLu/4dK3cd2ZFQVjB19ypIznJHr8+zhDmQYXgySY3/tslyvEoOOJlAJbR
dIv+dNUtGtESsLCLPMGlPuaDoDB/G7YGbtdOKb5liR7EEeXeRsW2NMknXHwD0ABA
AdalRN7K8Hlo2tZnrHWfeKeu5GrRGl6sTTFBS/4EwJ/EIbPmktUFlaZ8Wo56/O9M
Shw+iFtmIJBPHHSRqkziJHw/u+GDhgdr+YSJJbplMMTDt7N7ENZqSKIVjqH9y/cE
UbyE3clYylalngQOydmmgkInfOgXKs33q/ZgqJsSlCLSuwIBGrFv+kCtg7jZAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUvC0sph06U0slTRo9oom3XoBTf1UwHwYDVR0j
BBgwFoAUCHcxkfv8IaPIYVo+NqKssYf2PCUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81
Zjg2YjEyZS1lNTc0LTQyNmItYWE2Yi00OTM5ZTNiMDMwYmEvMC8wODc3MzE5MUZC
RkMyMUEzQzg2MTVBM0UzNkEyQUNCMTg3RjYzQzI1LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMDg3NzMxOTFGQkZDMjFBM0M4NjE1QTNFMzZBMkFDQjE4N0Y2
M0MyNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWY4NmIxMmUtZTU3NC00MjZiLWFh
NmItNDkzOWUzYjAzMGJhLzAvMDg3NzMxOTFGQkZDMjFBM0M4NjE1QTNFMzZBMkFD
QjE4N0Y2M0MyNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAC8ag1I6yiKAKstGM9Q7TVETqrKzmaV3AMIe
LtYmxsyFn9Hf0Zl6pN/Delg7455NPELZm4msZQ0/hi+3/EYGgeZWAPGv/xL1bnYf
8UeQ2UGYPoVp0fO58YQFSH89V0a6t+1gq9nNaTT17MT9cSFwWJmvWp3/Cz6Sqox2
B+n5sV7czjl6PDhadhOpwOt+gpF/6PATyIzN8FjTzqAG3afUT77qasN2/4YWwjT1
nc1H99puUa+zUqfrhrVgB67CAqUawRiLaPnErb0ZG3dMHlo8w7MhuafaZWuLqc/K
wq7E/kUEQPFFVncNlimMGrupZyzoo7qzSl7wrInuxWifWgLoA7w=
-----END CERTIFICATE-----
Generated at Sun Jan 25 22:00:37 2026 by rpki-client