This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6.mft
File:                     83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6.mft (raw, json)
Hash identifier:          2VGRusD0ZFE6LoaFwfiRPyzxDFC+suEs8exB9FsMDbs=
Subject key identifier:   F3:0F:77:B6:01:C4:E3:87:1D:DA:22:DD:0E:D6:DE:B0:DC:0F:06:C6
Authority key identifier: 83:D3:98:6C:5C:BD:56:BD:0C:E9:03:D1:B5:1E:AD:65:D1:1D:33:A6
Certificate issuer:       /CN=83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6
Certificate serial:       36B3526E02E0E472DEDA8224EC1D0483F0F59349
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6.mft
Manifest number:          0560
Signing time:             Sun 25 Jan 2026 15:12:26 +0000
Manifest this update:     Sun 25 Jan 2026 15:07:26 +0000
Manifest next update:     Thu 29 Jan 2026 02:48:26 +0000
Files and hashes:         1: 323430313a316430303a3a2f34382d3438203d3e203338353035.roa (hash: 4nd2DLm/J+RolIn9aIGsW+HXsvu2ybFSiuHkPOngkOI=)
                          2: 323430313a316430303a313a3a2f34382d3438203d3e203338353035.roa (hash: uPV0voLTxjHrIsHmaExj5+EGVw7Nm+iGd6nJEj83KUE=)
                          3: 3230332e3135332e3132362e302f32332d3234203d3e203338353035.roa (hash: Au0lkFPRKVBvBG5KfA74Xt/Sxl2Jzxo+Ex2p9zz5DkQ=)
                          4: 3230332e3135332e3132302e302f32332d3234203d3e203338353035.roa (hash: 1FsOdleRSG3IEtzn2Y5KIghx/oCLGSKZKVzGT9z4mXU=)
                          5: 323430313a316430303a323a3a2f34382d3438203d3e203338353035.roa (hash: EZdh60eQJ0O5FCzuczO3QBjbRRYgOvtWbCa5RUYH7z8=)
                          6: 3230332e3135332e3132322e302f32332d3234203d3e203338353035.roa (hash: KvSvkJVty1qHjYffQieqFJAuh3dt1BHzGki9sQiAFXI=)
                          7: 323430313a316430303a3a2f33322d3332203d3e203338353035.roa (hash: h7NsaP81E/4rqIyGV1dg1JRgScEeK/hJwwlj/aFKArk=)
                          8: 3130332e3233332e3134322e302f32332d3234203d3e203338353035.roa (hash: hmU/fFbEB5MHfxnUZwzr2O0p+/FFdJYTbJLKljW/yfY=)
                          9: 3230332e3135332e3132342e302f32332d3234203d3e203338353035.roa (hash: IrBPaOzrnHx8A3kF5U8FLypO1fdlWfu1886gczEN4Os=)
                          10: 83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6.crl (hash: o+7YqCi9pHW3PpQNpgEJHXzB5VCQPR4b5yMTHFaGCAk=)
                          11: 3135302e3130372e3130342e302f32332d3234203d3e20313432333933.roa (hash: zoZa3tLUvTTpmYIJTx5LfPwbAyo/gY5JwiU6TWgDs78=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6.crl
                          rsync://repo-rpki.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Jan 2026 14:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:b3:52:6e:02:e0:e4:72:de:da:82:24:ec:1d:04:83:f0:f5:93:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6
        Validity
            Not Before: Jan 25 15:07:26 2026 GMT
            Not After : Jan 29 02:48:26 2026 GMT
        Subject: CN=F30F77B601C4E3871DDA22DD0ED6DEB0DC0F06C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:4d:56:12:73:15:4b:c6:f7:12:00:b5:49:2d:
                    18:92:d4:8e:da:68:dc:7e:38:03:0e:65:13:32:9f:
                    7e:4a:1a:17:05:37:45:fd:e1:4f:79:7a:98:b5:98:
                    41:dd:3b:e2:a4:34:ad:60:c0:9e:2d:bc:90:1d:59:
                    91:25:49:65:47:54:f3:46:bc:79:24:38:7b:47:a5:
                    0d:a5:85:d9:57:89:df:ac:4e:9d:8e:a3:8e:ae:5e:
                    86:9b:76:15:43:4f:d9:ba:8c:9f:fc:81:00:68:b9:
                    6b:18:29:6b:4c:70:a6:4b:84:8d:7a:b3:07:c4:d0:
                    0c:52:f4:51:50:6d:62:af:f9:3d:89:5f:e5:4a:5e:
                    d2:8c:27:80:e5:64:5e:60:4a:d0:72:19:10:45:8d:
                    3e:eb:ff:ad:2f:8e:b4:d5:d2:b3:79:7e:71:f5:e3:
                    b3:cc:a8:49:8f:1b:9b:09:85:aa:1b:21:e8:d2:63:
                    b5:be:0b:83:5b:c5:0e:f6:e2:1d:a3:1e:8c:72:47:
                    f1:db:2e:2d:b8:5e:75:5c:6d:2e:3b:66:15:cf:ee:
                    e9:5f:fc:c2:17:fc:fe:90:ec:72:bf:c9:a1:a5:e2:
                    4c:fa:92:b0:64:f1:e3:4e:79:0e:44:9d:46:cf:a4:
                    51:20:4f:30:2e:a7:20:f7:29:c3:70:c4:de:46:af:
                    6c:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:0F:77:B6:01:C4:E3:87:1D:DA:22:DD:0E:D6:DE:B0:DC:0F:06:C6
            X509v3 Authority Key Identifier:
                keyid:83:D3:98:6C:5C:BD:56:BD:0C:E9:03:D1:B5:1E:AD:65:D1:1D:33:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:8b:32:f0:01:4c:20:63:51:f8:a1:50:e5:38:e7:57:2c:c0:
         4c:f2:95:cf:62:a9:e4:4a:a8:ce:7e:5c:bc:f3:73:89:6c:40:
         7e:bb:dc:e8:2d:72:82:9e:ed:45:55:2b:39:c7:3e:f0:cb:64:
         b2:9e:60:f1:a0:08:17:55:82:be:8e:59:e1:92:74:d9:b3:74:
         a9:cc:14:25:4d:2e:3b:96:ad:df:e0:82:26:c8:10:c9:41:b8:
         fd:b3:09:40:0a:74:85:a1:ed:f8:07:f6:43:31:2f:1f:4e:f2:
         9e:10:f3:ee:ce:cf:36:44:79:11:51:d2:18:5f:49:a1:03:87:
         57:15:c3:ce:b3:16:8b:df:70:b7:40:52:e2:be:a4:54:34:06:
         f0:2a:af:7c:db:bc:ef:a8:64:b0:1b:d8:9c:0a:b4:99:d0:62:
         0b:18:3d:da:84:6a:bd:35:e6:51:0a:43:95:ff:87:77:33:78:
         aa:c9:20:95:b6:b3:27:f4:77:da:db:bc:ee:ad:b2:a6:44:4c:
         96:dd:0c:fe:14:58:f0:be:5f:e1:d9:1e:17:57:43:55:d0:ac:
         c3:22:16:99:4d:f3:11:fd:6b:22:6b:e8:96:64:5c:ca:b1:fd:
         da:77:00:22:1d:b7:49:37:29:21:a0:a4:75:ad:d8:11:55:d4:
         de:f9:17:76
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUNrNSbgLg5HLe2oIk7B0Eg/D1k0kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODNEMzk4NkM1Q0JENTZCRDBDRTkwM0QxQjUxRUFENjVE
MTFEMzNBNjAeFw0yNjAxMjUxNTA3MjZaFw0yNjAxMjkwMjQ4MjZaMDMxMTAvBgNV
BAMTKEYzMEY3N0I2MDFDNEUzODcxRERBMjJERDBFRDZERUIwREMwRjA2QzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqTVYScxVLxvcSALVJLRiS1I7a
aNx+OAMOZRMyn35KGhcFN0X94U95epi1mEHdO+KkNK1gwJ4tvJAdWZElSWVHVPNG
vHkkOHtHpQ2lhdlXid+sTp2Oo46uXoabdhVDT9m6jJ/8gQBouWsYKWtMcKZLhI16
swfE0AxS9FFQbWKv+T2JX+VKXtKMJ4DlZF5gStByGRBFjT7r/60vjrTV0rN5fnH1
47PMqEmPG5sJhaobIejSY7W+C4NbxQ724h2jHoxyR/HbLi24XnVcbS47ZhXP7ulf
/MIX/P6Q7HK/yaGl4kz6krBk8eNOeQ5EnUbPpFEgTzAupyD3KcNwxN5Gr2zpAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU8w93tgHE44cd2iLdDtbesNwPBsYwHwYDVR0j
BBgwFoAUg9OYbFy9Vr0M6QPRtR6tZdEdM6YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84
M2QwNzg2ZC0zZDNlLTQ1YjctOTY2NS04ZDQ3NGZkMTRhZWEvMC84M0QzOTg2QzVD
QkQ1NkJEMENFOTAzRDFCNTFFQUQ2NUQxMUQzM0E2LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvODNEMzk4NkM1Q0JENTZCRDBDRTkwM0QxQjUxRUFENjVEMTFE
MzNBNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODNkMDc4NmQtM2QzZS00NWI3LTk2
NjUtOGQ0NzRmZDE0YWVhLzAvODNEMzk4NkM1Q0JENTZCRDBDRTkwM0QxQjUxRUFE
NjVEMTFEMzNBNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAHGLMvABTCBjUfihUOU451cswEzylc9iqeRK
qM5+XLzzc4lsQH673OgtcoKe7UVVKznHPvDLZLKeYPGgCBdVgr6OWeGSdNmzdKnM
FCVNLjuWrd/ggibIEMlBuP2zCUAKdIWh7fgH9kMxLx9O8p4Q8+7OzzZEeRFR0hhf
SaEDh1cVw86zFovfcLdAUuK+pFQ0BvAqr3zbvO+oZLAb2JwKtJnQYgsYPdqEar01
5lEKQ5X/h3czeKrJIJW2syf0d9rbvO6tsqZETJbdDP4UWPC+X+HZHhdXQ1XQrMMi
FplN8xH9ayJr6JZkXMqx/dp3ACIdt0k3KSGgpHWt2BFV1N75F3Y=
-----END CERTIFICATE-----
Generated at Sun Jan 25 22:21:43 2026 by rpki-client