This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.mft
File:                     F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.mft (raw, json)
Hash identifier:          0sZ6HHMWOBZlIVb6zXmUBJ+3tJVUfOBuCNWy6N/j+4c=
Subject key identifier:   87:26:B7:A8:B5:0E:27:08:FE:53:C4:4D:3E:10:45:58:54:78:78:FC
Authority key identifier: F8:E1:2F:0A:43:3C:8B:73:3B:E3:1D:B5:E0:CD:1E:F2:02:FC:21:EA
Certificate issuer:       /CN=F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA
Certificate serial:       386D3934D701C9EB1BF445881A0790A43FF8B6F7
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.mft
Manifest number:          01E0
Signing time:             Sat 24 Jan 2026 03:02:04 +0000
Manifest this update:     Sat 24 Jan 2026 02:57:04 +0000
Manifest next update:     Tue 27 Jan 2026 14:13:04 +0000
Files and hashes:         1: 3130332e3139352e36352e302f32342d3234203d3e203234333132.roa (hash: NYY0i2hycJDZMAWkhMI1MwXrSLzfIpid9oGLQQbdYaY=)
                          2: 3130332e3139352e36352e302f32342d3234203d3e2036393339.roa (hash: T9XYyvCurgMmepMYEsZNDRpjFjN9NnYsijhEUminICw=)
                          3: 3130332e3139352e36352e302f32342d3234203d3e20323131343037.roa (hash: GgMpV6awuEKacj2HVVRDN4z4Htq937tLhpXSx5OCQQw=)
                          4: 3130332e3139352e36352e302f32342d3234203d3e203530313034.roa (hash: uH7Yykg71jP1VkPGgxNuX7EouajeURB+bw3/u+w3tXE=)
                          5: 3130332e3139352e36352e302f32342d3234203d3e20313532333638.roa (hash: nybBbZermRnfCAlPFTR2ETmDBv6TPrDdj8bK6gzLTv0=)
                          6: 3130332e3139352e36352e302f32342d3234203d3e20323130353337.roa (hash: kIEXLbdHyNVR/2+p4R7baZ0vAlG7dZTeEpJcDfIBOIk=)
                          7: F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.crl (hash: AttOeXn/wT4vBThT59r4U4gORwD9cwq4l/zOlLNWs1Q=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.crl
                          rsync://repo-rpki.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Jan 2026 14:13:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:6d:39:34:d7:01:c9:eb:1b:f4:45:88:1a:07:90:a4:3f:f8:b6:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA
        Validity
            Not Before: Jan 24 02:57:04 2026 GMT
            Not After : Jan 27 14:13:04 2026 GMT
        Subject: CN=8726B7A8B50E2708FE53C44D3E104558547878FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ec:08:59:7c:73:fa:33:8d:71:60:4d:27:5f:
                    dd:9c:85:9a:30:6e:d2:1e:9a:0e:0a:a5:d0:5e:a2:
                    f0:ec:9e:40:e6:19:c2:61:9d:6f:4c:3d:ff:da:eb:
                    e0:56:17:88:76:2c:74:74:0e:81:9d:5f:24:e3:5c:
                    0f:51:ab:f8:50:4c:f7:89:a9:92:2d:ee:08:c0:88:
                    14:46:1b:7b:ef:ab:5b:6f:8a:08:26:d1:79:0f:5a:
                    7c:c9:02:f4:0c:4f:20:f3:00:db:ee:4a:e1:53:eb:
                    64:2a:c7:27:f2:fb:f5:39:9f:73:6f:6f:ff:3b:f9:
                    c3:11:62:c9:64:ef:82:7e:98:ba:64:61:f5:b2:1f:
                    b8:ae:a7:8f:a8:08:95:08:d4:de:49:e7:c4:21:12:
                    bd:9a:5b:ae:80:ec:5e:47:ae:8d:a5:9b:97:dc:db:
                    3d:4a:0e:da:dc:e8:a2:dd:f3:63:2e:ce:b9:90:10:
                    c7:3c:e4:17:32:02:cd:d0:b1:1f:cf:70:4f:a0:78:
                    f5:64:f0:18:c9:ef:f7:bf:fb:ea:33:0d:08:93:38:
                    54:48:69:16:82:5e:c2:74:ed:95:24:2c:01:32:36:
                    81:52:83:ef:5e:bb:41:b4:bb:9e:ac:50:86:c5:8d:
                    a7:cd:e4:8a:bd:90:d1:57:9a:1a:5b:31:c2:34:b2:
                    53:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:26:B7:A8:B5:0E:27:08:FE:53:C4:4D:3E:10:45:58:54:78:78:FC
            X509v3 Authority Key Identifier:
                keyid:F8:E1:2F:0A:43:3C:8B:73:3B:E3:1D:B5:E0:CD:1E:F2:02:FC:21:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:31:8c:cf:f3:64:10:1f:9d:c9:b3:2a:13:34:75:6b:c5:cd:
         22:2b:77:83:63:25:8b:3f:b4:e6:fb:cf:30:15:a0:56:c4:2b:
         bd:db:b3:50:2a:38:7f:e9:cc:c4:fe:a0:20:b4:b0:75:0b:70:
         40:c9:c3:72:63:d6:22:8b:ef:a6:75:fb:80:73:35:fb:d7:0f:
         33:5f:1f:f7:32:8a:4e:fa:c7:50:8f:c5:80:3e:0a:55:f2:d1:
         ea:32:35:58:e4:71:36:18:4d:4b:45:75:db:ea:4c:01:fe:de:
         8b:c4:3d:f4:f5:16:63:0c:0a:a2:b6:d9:9e:18:d5:42:c5:c9:
         55:c0:6b:f5:39:65:0d:33:ca:aa:b2:fa:08:34:3c:57:70:2a:
         ae:b7:cf:41:0e:6f:f9:d1:cd:73:91:2d:c0:99:31:4c:44:d2:
         07:ec:56:9a:51:80:ae:cb:fb:72:6f:f9:77:cf:f9:dc:8f:28:
         67:c6:84:71:16:08:fe:73:8c:e4:b2:60:f7:3e:0e:3a:a9:d2:
         d5:7d:9d:db:60:a9:d9:09:16:20:5a:fa:82:72:99:0c:71:72:
         66:72:9b:fd:3a:14:dd:b9:55:0f:66:a2:96:fc:c8:de:bc:4f:
         52:2f:c6:eb:1d:78:49:b9:5a:eb:00:ab:0b:0a:8f:95:45:5a:
         17:50:96:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:45:18 2026 by rpki-client