This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/8792a4cd-dbac-43ac-8060-2e8d42eae655/0/1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.mft
File:                     1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.mft (raw, json)
Hash identifier:          8XeKslvubFdkUPUH3ca4H7hklaAqQDY4xMFbV1o7f/o=
Subject key identifier:   86:A0:C4:10:AC:62:B2:B8:8B:DE:69:08:B5:40:C4:C5:E5:FB:B7:A1
Authority key identifier: 1F:CD:47:FB:4B:D7:29:E2:2E:4F:EE:FC:E5:B6:1B:4E:1C:7F:E9:46
Certificate issuer:       /CN=1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946
Certificate serial:       736160B21BA0E950DA04E2D0023077AAA2148051
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8792a4cd-dbac-43ac-8060-2e8d42eae655/0/1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.mft
Manifest number:          050E
Signing time:             Sat 24 Jan 2026 03:50:44 +0000
Manifest this update:     Sat 24 Jan 2026 03:45:44 +0000
Manifest next update:     Tue 27 Jan 2026 07:27:44 +0000
Files and hashes:         1: 3230322e36372e382e302f32312d3234203d3e203234313935.roa (hash: B+C/2EohdvfSLSdEWCv4uFVDG8om8Pw0dnsHmi+NJ9Y=)
                          2: 323430313a343230303a3a2f33322d3438203d3e203234313935.roa (hash: xPjBnSpHmpcu0qAxiY2wE80xegcTsRNtPEAJ6PwASdw=)
                          3: 1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.crl (hash: andGdrvUT+vaYKDGO0O5SkMKUCqiYSHnqzFFyk1MGNg=)
                          4: 3131382e39312e3134302e302f32322d3234203d3e203633353032.roa (hash: XlrHKxvILobzAM8qX1Td9F4llGO1s7dDnxuDShAIB6Q=)
                          5: 3131382e39312e3132382e302f32312d3234203d3e203234313935.roa (hash: yiPIGsDISayK97qWqm2UWsTxEHdxKETOsL8gSiwFMjA=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8792a4cd-dbac-43ac-8060-2e8d42eae655/0/1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.crl
                          rsync://repo-rpki.idnic.net/repo/8792a4cd-dbac-43ac-8060-2e8d42eae655/0/1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Jan 2026 07:27:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:61:60:b2:1b:a0:e9:50:da:04:e2:d0:02:30:77:aa:a2:14:80:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946
        Validity
            Not Before: Jan 24 03:45:44 2026 GMT
            Not After : Jan 27 07:27:44 2026 GMT
        Subject: CN=86A0C410AC62B2B88BDE6908B540C4C5E5FBB7A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:e6:65:9b:93:b1:0e:28:b0:09:5f:23:14:ee:
                    d0:27:02:8e:48:ad:9f:06:29:32:e0:3a:27:f6:64:
                    ec:de:19:a9:1c:df:0e:1c:70:ac:b1:7c:fc:e0:5b:
                    e7:7e:7d:d0:9f:34:1e:37:40:ff:e6:fe:44:0e:69:
                    8c:b1:2e:d5:9f:1c:62:30:db:b1:cd:2c:6f:27:c5:
                    b2:dd:37:37:2b:6b:3a:24:12:0a:a4:d6:2c:d3:7f:
                    0f:c7:5a:a0:c5:e8:a7:f4:d4:0d:6d:71:9e:7a:2b:
                    60:7e:00:4d:70:a5:2e:93:e2:58:4c:dd:2c:ca:11:
                    76:b4:44:50:27:bf:be:0d:03:37:9e:54:61:52:dd:
                    f8:0b:b3:96:49:13:cc:b0:65:42:59:04:57:d1:93:
                    9f:5a:96:1f:ee:f1:ee:65:42:d9:1c:c5:59:79:1a:
                    14:21:22:65:d0:eb:20:3a:61:c8:e3:e5:b6:db:73:
                    ac:b7:42:c8:43:a2:a8:1f:3f:75:b3:4b:91:fa:c6:
                    73:97:c8:f4:e3:18:79:5a:a1:1c:8a:92:c2:d9:24:
                    e3:64:10:85:03:fb:f5:1e:51:6d:3b:76:6d:34:4c:
                    70:fc:72:39:88:28:78:e7:54:a8:d8:b9:e9:74:43:
                    72:fc:aa:15:0e:28:07:2f:3c:d2:6a:16:85:ca:96:
                    1b:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:A0:C4:10:AC:62:B2:B8:8B:DE:69:08:B5:40:C4:C5:E5:FB:B7:A1
            X509v3 Authority Key Identifier:
                keyid:1F:CD:47:FB:4B:D7:29:E2:2E:4F:EE:FC:E5:B6:1B:4E:1C:7F:E9:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8792a4cd-dbac-43ac-8060-2e8d42eae655/0/1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8792a4cd-dbac-43ac-8060-2e8d42eae655/0/1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:e8:cd:ec:c5:d6:91:5a:56:52:7b:0a:c7:43:5d:89:09:8b:
         61:18:71:29:a1:44:a4:ae:53:c1:f8:24:3a:65:27:58:b6:fe:
         be:ea:e4:3a:88:7b:b2:2f:85:e2:2b:98:f8:b2:20:e7:c1:bc:
         36:52:89:8c:13:67:45:23:04:df:1e:0b:39:8d:1b:69:a6:ec:
         1a:cc:42:90:49:f9:fa:c4:f5:44:6e:96:2b:84:b0:4a:3a:ef:
         b7:28:74:94:c6:f6:8b:1e:66:fa:fb:20:12:e1:06:65:ea:04:
         b4:38:0e:89:b5:fe:a7:09:d6:83:7f:13:3a:6b:3c:91:7c:4c:
         91:d7:3d:0f:54:b6:81:63:b4:2a:20:dd:a1:0e:d1:55:6e:96:
         4e:43:40:7f:a2:66:c0:7b:e4:5e:91:10:74:6f:69:58:1c:af:
         c4:96:08:36:21:a2:f4:4e:2a:35:6b:13:a0:b1:98:c1:16:d7:
         e9:3f:c8:c5:20:80:f2:29:af:7d:3a:0d:ae:61:aa:54:c7:2a:
         b1:47:42:a5:4e:77:f9:fb:81:90:2d:e0:24:47:79:16:95:37:
         64:09:26:bc:02:95:68:db:9c:a0:4f:d9:cc:59:04:c9:f8:1d:
         53:10:2f:31:d4:b0:60:5e:da:41:34:4f:e6:91:7e:89:b1:73:
         c8:3f:29:b7
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUc2Fgshug6VDaBOLQAjB3qqIUgFEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUZDRDQ3RkI0QkQ3MjlFMjJFNEZFRUZDRTVCNjFCNEUx
QzdGRTk0NjAeFw0yNjAxMjQwMzQ1NDRaFw0yNjAxMjcwNzI3NDRaMDMxMTAvBgNV
BAMTKDg2QTBDNDEwQUM2MkIyQjg4QkRFNjkwOEI1NDBDNEM1RTVGQkI3QTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDe5mWbk7EOKLAJXyMU7tAnAo5I
rZ8GKTLgOif2ZOzeGakc3w4ccKyxfPzgW+d+fdCfNB43QP/m/kQOaYyxLtWfHGIw
27HNLG8nxbLdNzcrazokEgqk1izTfw/HWqDF6Kf01A1tcZ56K2B+AE1wpS6T4lhM
3SzKEXa0RFAnv74NAzeeVGFS3fgLs5ZJE8ywZUJZBFfRk59alh/u8e5lQtkcxVl5
GhQhImXQ6yA6Ycjj5bbbc6y3QshDoqgfP3WzS5H6xnOXyPTjGHlaoRyKksLZJONk
EIUD+/UeUW07dm00THD8cjmIKHjnVKjYuel0Q3L8qhUOKAcvPNJqFoXKlhs9AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUhqDEEKxisriL3mkItUDExeX7t6EwHwYDVR0j
BBgwFoAUH81H+0vXKeIuT+785bYbThx/6UYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84
NzkyYTRjZC1kYmFjLTQzYWMtODA2MC0yZThkNDJlYWU2NTUvMC8xRkNENDdGQjRC
RDcyOUUyMkU0RkVFRkNFNUI2MUI0RTFDN0ZFOTQ2LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMUZDRDQ3RkI0QkQ3MjlFMjJFNEZFRUZDRTVCNjFCNEUxQzdG
RTk0Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODc5MmE0Y2QtZGJhYy00M2FjLTgw
NjAtMmU4ZDQyZWFlNjU1LzAvMUZDRDQ3RkI0QkQ3MjlFMjJFNEZFRUZDRTVCNjFC
NEUxQzdGRTk0Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBADHozezF1pFaVlJ7CsdDXYkJi2EYcSmhRKSu
U8H4JDplJ1i2/r7q5DqIe7IvheIrmPiyIOfBvDZSiYwTZ0UjBN8eCzmNG2mm7BrM
QpBJ+frE9URuliuEsEo677codJTG9oseZvr7IBLhBmXqBLQ4Dom1/qcJ1oN/Ezpr
PJF8TJHXPQ9UtoFjtCog3aEO0VVulk5DQH+iZsB75F6REHRvaVgcr8SWCDYhovRO
KjVrE6CxmMEW1+k/yMUggPIpr306Da5hqlTHKrFHQqVOd/n7gZAt4CRHeRaVN2QJ
JrwClWjbnKBP2cxZBMn4HVMQLzHUsGBe2kE0T+aRfomxc8g/Kbc=
-----END CERTIFICATE-----
Generated at Sun Jan 25 23:09:19 2026 by rpki-client