This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/115880D133393FF2D96A5861679B5166AFDB1248.mft
File:                     115880D133393FF2D96A5861679B5166AFDB1248.mft (raw, json)
Hash identifier:          2C93pTSkU6Lj1Vpuo9MAdl6AhAHLOUn182H89fVvGco=
Subject key identifier:   D5:34:5D:AB:9F:87:62:26:E7:92:14:56:29:EF:AF:5B:88:E9:8A:7E
Authority key identifier: 11:58:80:D1:33:39:3F:F2:D9:6A:58:61:67:9B:51:66:AF:DB:12:48
Certificate issuer:       /CN=115880D133393FF2D96A5861679B5166AFDB1248
Certificate serial:       13004FCD193F80452776CDD3DE55B8D0609B6A76
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/115880D133393FF2D96A5861679B5166AFDB1248.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/115880D133393FF2D96A5861679B5166AFDB1248.mft
Manifest number:          01F8
Signing time:             Sat 24 Jan 2026 07:12:18 +0000
Manifest this update:     Sat 24 Jan 2026 07:07:18 +0000
Manifest next update:     Tue 27 Jan 2026 13:05:18 +0000
Files and hashes:         1: 3130332e3136312e3133352e302f32342d3234203d3e203539323832.roa (hash: PUB3O8b9f0V9upxUQ1vz/Akmef3nw9nhl+zmK2wYTN8=)
                          2: 3130332e3136312e3133342e302f32332d3233203d3e203539323832.roa (hash: dsbjoyKjKxL4iwUB8V3WadTuSmVRqe7mRaojqe/cx6g=)
                          3: 3130332e3136312e3133342e302f32332d3233203d3e20313530343635.roa (hash: VvBdfRoXJdspZfeWpUDljLmbCHnzMGWW+ov3JCtu9WA=)
                          4: 115880D133393FF2D96A5861679B5166AFDB1248.crl (hash: C5IzJZkqRk4+V6tVVUMsnU6AJjwpcMhEwSpKP77N1Gc=)
                          5: 3130332e3136312e3133352e302f32342d3234203d3e20313530343635.roa (hash: 7cjr2Mf8da23M7780NOwEQz2pNcc6LU8HdKHbP3bqXY=)
                          6: 3130332e3136312e3133342e302f32342d3234203d3e20313530343635.roa (hash: 1qHo3owsIra2DLunWHCtcR/bz4Z6XiVGZF9DHU6ujCU=)
                          7: 3130332e3136312e3133352e302f32342d3234203d3e203438343635.roa (hash: mM1uMrTnIIOB9qV95bnMry0CA1H0myomJNfLWIW9li4=)
                          8: 3130332e3136312e3133342e302f32342d3234203d3e203438343635.roa (hash: ovzcVNQEy/mX6iGBONz7ezsyibr0pRiafYk0E6VSJek=)
                          9: 3130332e3136312e3133342e302f32342d3234203d3e203539323832.roa (hash: qOgMs8L+7L6hzGSgXrwuDdjZMuQgbmzasXiAjPj9OOI=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/115880D133393FF2D96A5861679B5166AFDB1248.crl
                          rsync://repo-rpki.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/115880D133393FF2D96A5861679B5166AFDB1248.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/115880D133393FF2D96A5861679B5166AFDB1248.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Jan 2026 13:05:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:00:4f:cd:19:3f:80:45:27:76:cd:d3:de:55:b8:d0:60:9b:6a:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=115880D133393FF2D96A5861679B5166AFDB1248
        Validity
            Not Before: Jan 24 07:07:18 2026 GMT
            Not After : Jan 27 13:05:18 2026 GMT
        Subject: CN=D5345DAB9F876226E792145629EFAF5B88E98A7E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:8b:5a:ae:42:16:87:7b:a3:ff:f5:60:0d:01:
                    a0:96:f0:5f:a8:87:db:91:60:c5:38:c8:d4:0a:b2:
                    6a:96:97:02:eb:33:44:7d:22:2d:ca:04:a6:46:b5:
                    b4:8c:34:75:0a:fe:0a:f1:3a:c5:05:88:d3:84:be:
                    03:28:c1:29:a1:ee:8f:85:f3:02:81:89:06:d6:81:
                    f0:7f:de:13:31:b8:a4:77:b7:f8:dc:ce:94:39:df:
                    de:f9:87:fc:d1:09:45:9e:21:b0:e7:df:11:53:47:
                    ef:b3:29:6a:59:7f:bf:ec:e4:7e:ab:7b:2e:29:f0:
                    2e:f9:e8:9e:f4:52:d9:d4:79:95:81:cb:e4:7d:b6:
                    cf:0d:f3:ff:5b:f7:a2:e8:d4:ca:92:e5:83:27:48:
                    fb:7f:a6:00:1b:00:e0:4b:ae:64:71:ab:c2:e3:60:
                    b4:a1:0d:81:ff:8e:78:60:d4:b7:e3:53:a2:38:ac:
                    4b:29:bc:22:2c:5e:f3:ca:6f:12:f0:5e:38:a4:a1:
                    99:38:7a:c0:8c:ae:02:db:41:58:8f:9e:73:06:71:
                    7e:94:00:c7:b5:dc:00:97:e3:9a:a8:d9:90:f5:05:
                    dd:27:66:5d:2e:68:18:6e:c5:32:a2:80:c2:64:4f:
                    00:da:c5:fa:5d:99:17:f2:53:08:64:e5:60:2b:c4:
                    d1:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:34:5D:AB:9F:87:62:26:E7:92:14:56:29:EF:AF:5B:88:E9:8A:7E
            X509v3 Authority Key Identifier:
                keyid:11:58:80:D1:33:39:3F:F2:D9:6A:58:61:67:9B:51:66:AF:DB:12:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/115880D133393FF2D96A5861679B5166AFDB1248.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/115880D133393FF2D96A5861679B5166AFDB1248.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/115880D133393FF2D96A5861679B5166AFDB1248.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:9b:c7:8d:c7:fe:7f:c1:c5:6e:36:a3:c0:00:8c:6d:d2:5b:
         83:cf:85:ee:8c:11:b4:ee:fd:cf:53:79:bc:db:9f:ae:6f:fe:
         c8:c8:33:36:c0:da:62:51:a2:37:97:a5:95:d1:f9:a9:c9:d1:
         18:56:f0:dd:d7:61:ab:a6:97:40:62:1e:b6:0d:5b:85:b1:34:
         ac:48:a2:b0:3b:8d:4c:a5:3d:59:26:23:f2:2d:de:8a:34:ce:
         38:76:8f:ef:68:21:ac:b2:d5:3c:21:33:7d:d8:98:5d:8d:19:
         9f:02:ce:00:44:72:57:33:a3:dc:4d:c0:7c:ae:5f:49:d4:7a:
         11:c1:b9:68:5e:24:de:06:1c:93:37:9e:f3:3e:2a:5d:b6:1d:
         ab:e5:ed:e9:db:18:a5:ed:15:72:22:16:5f:42:b8:03:d4:12:
         88:32:b8:18:2f:7d:75:b0:e1:23:e3:36:25:4a:09:aa:dc:f5:
         7e:e0:2b:d3:b3:2a:4f:12:04:65:47:ea:b4:be:57:a4:14:8b:
         c1:79:f9:2e:07:80:8c:50:aa:cf:cb:db:7d:58:07:6c:b0:15:
         7c:6d:53:25:d1:ee:6a:1e:f3:58:55:01:eb:d0:9b:57:bf:33:
         54:52:73:5f:ad:8e:c9:f0:67:54:46:1d:84:70:76:7f:2a:03:
         9a:29:dd:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 04:01:05 2026 by rpki-client