This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/08D07F010DA28112A94E8800C317B8DF7F1ABF43.mft
File:                     08D07F010DA28112A94E8800C317B8DF7F1ABF43.mft (raw, json)
Hash identifier:          7LZQeGlhINqz0NPaqJh5NYFjDEeVylNMT4IW7RPx2/M=
Subject key identifier:   B5:77:32:00:C0:4E:8C:92:BC:80:BF:3E:5F:53:A3:36:0E:4E:74:1A
Authority key identifier: 08:D0:7F:01:0D:A2:81:12:A9:4E:88:00:C3:17:B8:DF:7F:1A:BF:43
Certificate issuer:       /CN=08D07F010DA28112A94E8800C317B8DF7F1ABF43
Certificate serial:       4AFCD00B3741D049C0960D1EAF2371EDBDB451FA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08D07F010DA28112A94E8800C317B8DF7F1ABF43.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/08D07F010DA28112A94E8800C317B8DF7F1ABF43.mft
Manifest number:          054B
Signing time:             Fri 23 Jan 2026 18:31:39 +0000
Manifest this update:     Fri 23 Jan 2026 18:26:39 +0000
Manifest next update:     Tue 27 Jan 2026 06:03:39 +0000
Files and hashes:         1: 3130332e3134382e3139382e302f32332d3234203d3e20313339393938.roa (hash: 398pMxlUxLm+mb3+06bFJF2HzdMJXZdsn6WziA62E2w=)
                          2: 08D07F010DA28112A94E8800C317B8DF7F1ABF43.crl (hash: F+h1ozH9cU4luZ/7N+s7LSGsK3wsm+oHwbrgxAb264I=)
                          3: 3130332e3134382e3139382e302f32342d3234203d3e2034383030.roa (hash: l2eAmwYAMdwqeVaiqpSuqh9iJ+09xrmmKyFN9F/M7QY=)
                          4: 3130332e3134382e3139382e302f32342d3234203d3e2034373837.roa (hash: Z9EEMEF5zgEExgpHK7oCqGG8wCUnuduZshqAFkuwllk=)
                          5: 323030313a6466323a653838303a3a2f34382d3438203d3e2034373837.roa (hash: TdOcBSulqT/k1J+bS2r7sCrDeanQk+UTRzf1JaxNxiY=)
                          6: 3130332e3134382e3139392e302f32342d3234203d3e2034373837.roa (hash: spe84zVMe2bcaKVxUGj36+XcsHH/BNLwdoJ4BjQFuA4=)
                          7: 3130332e3134382e3139382e302f32332d3234203d3e20313338313238.roa (hash: eMIpFTn3dFmv1C4MDrX0lkj1ZQs9jU1AYYbAGg+J5/E=)
                          8: 3130332e3134382e3139382e302f32342d3234203d3e203233393437.roa (hash: awWbA7ZeNcCHztQ1ZAubpOQkFHc4cuFUkQrm1dRk6W0=)
                          9: 323030313a6466323a653838303a3a2f34382d3438203d3e20313339393938.roa (hash: nNX7HtrSmZosplxX3sNrwbTF/yyCS/NG8/khqeK7R2k=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/08D07F010DA28112A94E8800C317B8DF7F1ABF43.crl
                          rsync://repo-rpki.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/08D07F010DA28112A94E8800C317B8DF7F1ABF43.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08D07F010DA28112A94E8800C317B8DF7F1ABF43.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Jan 2026 06:03:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:fc:d0:0b:37:41:d0:49:c0:96:0d:1e:af:23:71:ed:bd:b4:51:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08D07F010DA28112A94E8800C317B8DF7F1ABF43
        Validity
            Not Before: Jan 23 18:26:39 2026 GMT
            Not After : Jan 27 06:03:39 2026 GMT
        Subject: CN=B5773200C04E8C92BC80BF3E5F53A3360E4E741A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:e3:6a:38:eb:cb:7f:4f:8f:ad:02:a2:00:73:
                    04:40:6a:bb:62:05:c1:70:5c:be:18:27:25:98:a9:
                    03:8f:7e:2b:e3:c4:33:00:2a:8d:49:7a:e8:66:a5:
                    f8:02:ea:f0:72:17:39:7f:66:f4:85:2a:4d:46:ea:
                    8b:ed:ff:2d:2e:8d:54:ec:19:63:63:0d:34:74:ae:
                    49:f5:8d:1a:73:d9:df:37:24:84:2a:d6:1d:a4:75:
                    8c:d5:03:fc:69:b7:a8:77:21:bd:82:d5:20:64:61:
                    1c:a0:55:2d:f7:ca:bd:08:36:93:ee:18:1b:ec:aa:
                    df:57:58:34:7c:46:ad:ff:eb:fe:34:74:25:bc:6c:
                    7d:09:29:71:65:cf:47:99:48:43:c7:be:28:27:6f:
                    38:86:45:39:af:a9:90:26:f1:c5:dd:70:45:66:b2:
                    ec:82:e1:74:3f:aa:7f:c2:12:20:a5:0e:81:81:6a:
                    a0:d7:04:99:80:ca:2b:a5:30:c8:e2:a5:7e:27:0a:
                    25:2d:40:f5:bf:bf:86:0b:4b:e9:67:57:e3:64:92:
                    61:78:f4:7a:02:d2:dd:ff:a5:8e:a6:16:d5:5e:5e:
                    ca:f4:89:aa:af:0f:52:cd:f6:0b:cb:2e:0f:ff:ca:
                    8c:ed:5f:e5:80:6f:55:0d:b1:f8:8b:24:14:d1:22:
                    79:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:77:32:00:C0:4E:8C:92:BC:80:BF:3E:5F:53:A3:36:0E:4E:74:1A
            X509v3 Authority Key Identifier:
                keyid:08:D0:7F:01:0D:A2:81:12:A9:4E:88:00:C3:17:B8:DF:7F:1A:BF:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/08D07F010DA28112A94E8800C317B8DF7F1ABF43.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08D07F010DA28112A94E8800C317B8DF7F1ABF43.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/08D07F010DA28112A94E8800C317B8DF7F1ABF43.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:b0:2d:e2:ce:89:1d:ee:3f:79:38:fe:09:9a:ea:12:d0:6a:
         ad:9c:36:73:ab:9b:b8:67:5f:92:f2:1e:71:4d:a9:06:8e:32:
         24:45:37:e0:19:67:d0:27:d1:4b:59:51:c7:b0:f2:81:e9:21:
         85:6a:02:ed:eb:d0:b4:37:45:39:69:79:c6:b6:95:af:cf:52:
         18:e9:22:79:b8:33:63:2f:07:72:9c:c7:cd:16:16:86:bd:25:
         c2:13:fd:ea:1f:21:4f:f6:d8:21:cc:0d:66:7b:12:24:4e:a2:
         af:55:9e:38:75:68:d4:da:1a:cb:bd:b4:51:66:89:5d:67:c4:
         2a:49:23:55:61:3c:45:07:b9:f7:83:3c:46:07:1e:cc:54:75:
         c9:e7:f2:17:c0:6c:df:e6:5a:80:31:5e:79:36:54:01:f7:82:
         8e:3e:81:bc:b8:f7:f9:d3:7e:83:2f:ac:68:9a:71:7f:72:4a:
         cb:2e:46:13:43:64:47:de:ce:ef:a7:64:79:de:67:4e:5b:ed:
         38:e3:c7:a7:e0:b3:5b:74:e4:88:ed:d4:c0:ef:df:56:a2:b1:
         38:06:3d:2e:7e:f5:32:d2:49:03:1b:b2:e4:33:52:46:ae:fa:
         0b:e8:49:ee:0f:81:b6:c7:c6:e2:63:b6:71:c9:06:dc:12:bd:
         57:46:7c:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:59:36 2026 by rpki-client