This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.mft
File:                     0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.mft (raw, json)
Hash identifier:          1v/Rdx34b84RpzpcVuYoapsRENKRoUPGvWwM5h38gRs=
Subject key identifier:   9F:28:5C:6E:25:D0:59:44:F8:A5:81:68:43:CC:BE:A1:EA:72:06:C5
Authority key identifier: 0F:D0:44:D6:13:48:C8:8D:DC:FF:C4:F3:C3:3B:FB:C4:51:BC:17:A2
Certificate issuer:       /CN=0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2
Certificate serial:       2BCE9D0DA582D7575A17ED5357993977C17D9AFB
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.mft
Manifest number:          0577
Signing time:             Sat 24 Jan 2026 16:50:56 +0000
Manifest this update:     Sat 24 Jan 2026 16:45:56 +0000
Manifest next update:     Tue 27 Jan 2026 19:23:56 +0000
Files and hashes:         1: 3131302e37362e3134362e302f32332d3233203d3e20313430343831.roa (hash: nj7nwkg4jEji5skSyGq127SyeIEToj2AxAchD/5z7y0=)
                          2: 3131302e37362e3134372e302f32342d3234203d3e20313430343831.roa (hash: /Pgqw6Rs+ajT828waAS0R/dEt8fu2pWuzGj9i8zT3Rk=)
                          3: 323430363a393330303a3a2f33322d3438203d3e203338353036.roa (hash: wSzeEeUlQ9dVeDBBx0XlYcJDAiPM7sQsbdx5J/YQ+rE=)
                          4: 3131302e37362e3134352e302f32342d3234203d3e20313430343831.roa (hash: QhseuehbmAg1CgvzVHn3OnXvEwbOGfNyxdByQxi2PSM=)
                          5: 3131302e37362e3134362e302f32342d3234203d3e20313430343831.roa (hash: eUGLFIbBQXUlbrF2iA2Xszdo9Zh7AGLGsZzJrRkvT6k=)
                          6: 3131302e37362e3135312e302f32342d3234203d3e20313333383330.roa (hash: 75E5/wNg1gW13NP4pidyseZpfPgC9bQlFJMQWGidUN4=)
                          7: 3131372e3130332e3136382e302f32312d3234203d3e203338353036.roa (hash: zHFuXcJsHRS8oU5g73vyR9ezkdJAc6jv+r1NZhBGTU4=)
                          8: 0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.crl (hash: BSzsU+x2gAaZuFox7R9r8FCyh/JLJDy8uOKHQjSQ9tI=)
                          9: 3131302e37362e3134342e302f32332d3234203d3e20313430343831.roa (hash: 6L28DKU2IWYtA3lRV3VTpPyJ/UkW+g97L32zaXfZ124=)
                          10: 3131302e37362e3134342e302f32342d3234203d3e20313430343831.roa (hash: l79vjEoCDRYp7Imq4o09nFUUOawBLUlHdvJpjB5kQuE=)
                          11: 3131302e37362e3135302e302f32342d3234203d3e20313331373036.roa (hash: JNQ343i5OALYy6+PPMTF9ZMCDVDR/l5G+uGpk10x6iY=)
                          12: 3131302e37362e3134382e302f32332d3234203d3e20313430343831.roa (hash: Mo+ywRg/G9o+M5ufzONjfakS+qPVaicNW0HrvAATwhk=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.crl
                          rsync://repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Jan 2026 19:23:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:ce:9d:0d:a5:82:d7:57:5a:17:ed:53:57:99:39:77:c1:7d:9a:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2
        Validity
            Not Before: Jan 24 16:45:56 2026 GMT
            Not After : Jan 27 19:23:56 2026 GMT
        Subject: CN=9F285C6E25D05944F8A5816843CCBEA1EA7206C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:bf:f7:cb:ce:7c:41:2a:8a:83:e3:d5:5d:fd:
                    5c:b0:a2:bf:b1:c9:c2:7b:b6:4d:a0:f9:94:c4:27:
                    c2:e4:29:b2:a4:b1:05:3d:38:63:29:fd:ba:3b:aa:
                    e3:ab:cb:18:c9:fe:9f:3d:a3:34:a4:34:de:de:db:
                    13:fe:06:92:fc:79:41:88:5d:13:b2:59:c0:5f:57:
                    c8:b1:56:dc:24:b9:0d:7e:45:f3:29:a3:f6:47:ac:
                    91:ec:0f:e0:a4:e1:15:ce:ff:63:c4:5b:c9:f8:d1:
                    9f:8f:f2:46:59:28:37:dc:f3:7a:80:ab:66:13:18:
                    ec:81:92:21:52:5f:fe:84:04:2f:d9:d2:c2:fc:56:
                    1a:2c:c9:53:cd:de:d3:e6:17:9b:e8:5a:57:d7:eb:
                    f7:73:d0:a1:e3:54:f1:05:7b:d1:59:7c:04:33:fb:
                    98:b8:0e:1c:93:1f:b5:92:4e:d5:f3:3d:66:90:3b:
                    a7:26:ac:3e:0a:4a:58:0d:38:3b:a3:e1:c2:3b:f1:
                    ac:dd:3b:d8:c1:fb:8d:67:b5:21:b1:c0:2d:25:7c:
                    d2:76:09:e9:6b:36:ae:7d:90:75:c5:2a:7c:d2:f2:
                    de:9e:64:29:1e:2a:03:af:5e:32:23:60:3f:6f:2a:
                    8f:7d:1d:f5:35:8b:56:79:46:93:86:f7:41:ec:e3:
                    da:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:28:5C:6E:25:D0:59:44:F8:A5:81:68:43:CC:BE:A1:EA:72:06:C5
            X509v3 Authority Key Identifier:
                keyid:0F:D0:44:D6:13:48:C8:8D:DC:FF:C4:F3:C3:3B:FB:C4:51:BC:17:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:f2:f6:65:3c:a4:49:47:d0:bf:5c:59:e8:45:17:8b:3b:b0:
         ca:97:9b:5c:11:a0:dc:f6:89:12:2a:2b:e7:90:c7:cb:56:43:
         9c:71:39:8d:b9:a9:f0:0c:55:a6:86:f0:b7:82:ea:b8:b2:07:
         2d:78:5d:85:1f:ee:33:68:19:22:f9:07:16:7e:66:e0:bd:b2:
         bf:b2:f2:ed:6c:41:af:4a:dc:2c:80:f0:c6:af:5f:e8:ed:da:
         23:de:f3:09:e2:f2:d8:66:57:92:22:d2:86:aa:b7:8d:bb:c3:
         1c:a2:3d:c3:6d:b7:a6:74:55:15:0a:13:1f:36:32:29:99:20:
         1c:e8:b5:7d:c2:1a:e4:94:c2:50:37:52:14:23:a7:f2:c4:bc:
         cb:b0:7f:64:d4:70:bb:87:69:7e:ed:80:76:ce:23:51:9c:8c:
         13:9a:4d:f3:7f:66:b1:cd:71:80:7e:9e:25:f1:39:ab:db:bf:
         aa:e0:e7:9e:a7:46:45:28:36:63:f3:65:9b:c4:b0:74:a0:10:
         1d:5f:34:a7:2f:8a:e1:29:bc:37:6e:fe:3c:65:76:95:41:7e:
         a5:28:7f:4f:63:df:64:e9:00:e8:66:46:3c:6d:5a:60:34:5f:
         16:06:9c:30:d2:ea:08:6f:93:b5:a1:4d:35:97:13:e8:9d:e3:
         78:de:de:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:53:23 2026 by rpki-client