This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.mft
File:                     4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.mft (raw, json)
Hash identifier:          gaQs+t4vO7fZZns2JT+DCtK2jL5yT+SSI0Dxq42RsDw=
Subject key identifier:   6E:57:9D:3A:E5:47:06:00:9B:C6:DB:39:77:D2:67:A2:13:4F:75:3A
Authority key identifier: 4B:F1:DC:C0:BC:C5:B1:A4:B6:BE:52:6A:75:FF:33:39:7F:C3:87:87
Certificate issuer:       /CN=4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787
Certificate serial:       346D96704FE851903718F6ACEB07FF32033C81A7
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.mft
Manifest number:          0554
Signing time:             Sat 24 Jan 2026 05:50:59 +0000
Manifest this update:     Sat 24 Jan 2026 05:45:59 +0000
Manifest next update:     Tue 27 Jan 2026 09:37:59 +0000
Files and hashes:         1: 3232332e32352e3130362e302f32342d3234203d3e20313336383733.roa (hash: S8lyObQBOuPDRueBj8YjzK0Yqke0dcnMl7Vcc48vuVs=)
                          2: 323430323a613530303a3a2f33322d3332203d3e2034383231.roa (hash: moNwAWlPkj0rtokbSnZwVDheKPDbut9HTHNYooRQM7Q=)
                          3: 3232332e32352e3130392e302f32342d3234203d3e20313439373138.roa (hash: d3eM98YfiQHd35IoK+KK/VXjFcXTY4k6PTjZu1TQR90=)
                          4: 3232332e32352e3130382e302f32342d3234203d3e2034383231.roa (hash: kXwkhbJ+oGBQpIPdrmdbXU4UMfG2qJFbyPtaW45RBFo=)
                          5: 3232332e32352e3131302e302f32342d3234203d3e20313336383733.roa (hash: d7TlxPMnZWo9NiIWBhiGrIW1xBkbQUYDXZcwgsom8Dk=)
                          6: 3232332e32352e3130352e302f32342d3234203d3e2034383231.roa (hash: 8gu4g1bdcjin/i0TEIycNgxzwZksIdfr4ERNzQVV1jI=)
                          7: 3232332e32352e3130372e302f32342d3234203d3e20313439373138.roa (hash: DrBIeEQt6yULPW0r6792EagtEDf0ZZCsQyk/153rumY=)
                          8: 3232332e32352e3130342e302f32342d3234203d3e20313530323238.roa (hash: Lkl4hSR7NGSEzKzZzmu1qkwANNNPQYa46Fii80W7KSg=)
                          9: 3232332e32352e39362e302f32312d3234203d3e2039333431.roa (hash: Qjv/mGfQRB5AB46dWcHhxxNcs3aS1PJFtKLeGoBkxi0=)
                          10: 4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.crl (hash: zbKNO+lJUqyYv0MGeTWXTn0j38TMZHVnzRBZRsvRrSw=)
                          11: 3232332e32352e3131312e302f32342d3234203d3e20313431363037.roa (hash: hi3RbUon3vVwgiqeI1gyjrmQwwjp0fD8/eAvTLaFma0=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.crl
                          rsync://repo-rpki.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Jan 2026 09:37:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:6d:96:70:4f:e8:51:90:37:18:f6:ac:eb:07:ff:32:03:3c:81:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787
        Validity
            Not Before: Jan 24 05:45:59 2026 GMT
            Not After : Jan 27 09:37:59 2026 GMT
        Subject: CN=6E579D3AE54706009BC6DB3977D267A2134F753A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:98:e2:2f:be:49:64:76:57:b6:42:c7:b2:72:
                    69:6c:4a:23:f7:21:f6:39:6e:81:11:56:c5:9d:c5:
                    8a:f9:ce:fb:eb:a9:9e:cc:03:44:9a:d7:7d:bb:04:
                    9c:be:b0:fc:a3:f0:fe:38:ca:be:42:8a:b8:84:32:
                    0c:6c:fc:0e:fc:f5:93:5e:65:7e:f0:21:c5:a3:e1:
                    12:58:bc:52:3b:87:0b:3f:9c:65:26:39:3a:7a:73:
                    34:c5:b3:88:27:c6:dc:1a:f5:03:ae:73:23:47:28:
                    c0:18:10:60:1f:07:77:50:0f:2e:6c:b1:90:92:c7:
                    22:13:06:ec:4d:5b:e6:3b:bd:49:7c:eb:e2:d1:db:
                    17:f2:aa:a1:06:a8:7d:47:78:be:67:9d:be:02:95:
                    39:d5:0d:c4:f9:f9:cc:9e:eb:3f:84:a3:49:98:08:
                    96:e5:38:35:4d:b3:9f:a4:3f:fc:94:15:83:61:e0:
                    80:aa:23:a6:06:81:ba:0e:af:e7:43:6a:b5:b2:f4:
                    f0:02:a5:51:bd:a2:4e:1a:27:04:7b:f6:3b:31:42:
                    0b:61:4c:89:ea:8f:ae:82:6e:9d:47:35:ec:5e:43:
                    bc:52:8d:af:96:4a:84:0f:52:d6:c3:22:41:67:0d:
                    49:ec:df:43:9c:0a:bb:c9:e1:4c:c9:4c:8d:a0:41:
                    63:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:57:9D:3A:E5:47:06:00:9B:C6:DB:39:77:D2:67:A2:13:4F:75:3A
            X509v3 Authority Key Identifier:
                keyid:4B:F1:DC:C0:BC:C5:B1:A4:B6:BE:52:6A:75:FF:33:39:7F:C3:87:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:c3:46:62:8a:e7:1e:b5:d3:66:1e:41:69:e6:aa:32:a6:e7:
         93:61:15:8a:8f:82:af:10:4d:91:97:ff:02:d3:8f:75:8a:6a:
         77:0c:15:5f:8d:43:27:0e:bf:b5:17:7e:c2:99:06:c1:f9:9e:
         16:24:eb:af:cd:33:2d:30:fa:1a:52:2c:d1:75:be:b7:bf:c0:
         ba:1e:9c:d0:a0:7f:ef:8d:c1:77:1c:34:37:52:09:b3:46:ad:
         16:f8:ab:f1:9d:69:4f:8e:fd:65:a7:bd:6c:29:2b:f2:06:05:
         15:4d:19:ee:a3:a5:35:86:24:5b:68:cb:77:f7:78:26:02:ec:
         02:b6:fa:88:ad:ff:ba:86:ae:7c:09:7c:0a:cc:e8:53:2c:78:
         c3:70:c8:fd:b3:e0:c5:4a:17:f5:38:ca:8d:00:5b:59:2f:c5:
         ef:0c:04:c6:59:1d:b0:d6:d6:8f:4e:79:6b:73:3c:3c:f3:99:
         d9:0e:5c:02:49:ca:0e:57:00:ca:8d:dd:64:dd:84:51:63:fd:
         bc:d0:6c:2d:2e:7d:fd:bb:19:6b:ab:e5:41:0c:ea:57:6c:95:
         41:f4:75:b8:ea:d5:e1:57:8c:03:23:b4:11:10:40:90:93:9c:
         94:68:c4:91:26:df:51:4d:65:b5:d0:6b:4f:14:96:ca:d6:b2:
         7b:ec:09:f0
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUNG2WcE/oUZA3GPas6wf/MgM8gacwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEJGMURDQzBCQ0M1QjFBNEI2QkU1MjZBNzVGRjMzMzk3
RkMzODc4NzAeFw0yNjAxMjQwNTQ1NTlaFw0yNjAxMjcwOTM3NTlaMDMxMTAvBgNV
BAMTKDZFNTc5RDNBRTU0NzA2MDA5QkM2REIzOTc3RDI2N0EyMTM0Rjc1M0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsmOIvvklkdle2QseycmlsSiP3
IfY5boERVsWdxYr5zvvrqZ7MA0Sa1327BJy+sPyj8P44yr5CiriEMgxs/A789ZNe
ZX7wIcWj4RJYvFI7hws/nGUmOTp6czTFs4gnxtwa9QOucyNHKMAYEGAfB3dQDy5s
sZCSxyITBuxNW+Y7vUl86+LR2xfyqqEGqH1HeL5nnb4ClTnVDcT5+cye6z+Eo0mY
CJblODVNs5+kP/yUFYNh4ICqI6YGgboOr+dDarWy9PACpVG9ok4aJwR79jsxQgth
TInqj66Cbp1HNexeQ7xSja+WSoQPUtbDIkFnDUns30OcCrvJ4UzJTI2gQWPjAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUbledOuVHBgCbxts5d9JnohNPdTowHwYDVR0j
BBgwFoAUS/HcwLzFsaS2vlJqdf8zOX/Dh4cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84
ZDI1NDQxOS01M2JlLTRhZDQtYmY3Zi0yOWY4OTEyNTIzZDAvMC80QkYxRENDMEJD
QzVCMUE0QjZCRTUyNkE3NUZGMzMzOTdGQzM4Nzg3LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNEJGMURDQzBCQ0M1QjFBNEI2QkU1MjZBNzVGRjMzMzk3RkMz
ODc4Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGQyNTQ0MTktNTNiZS00YWQ0LWJm
N2YtMjlmODkxMjUyM2QwLzAvNEJGMURDQzBCQ0M1QjFBNEI2QkU1MjZBNzVGRjMz
Mzk3RkMzODc4Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAEzDRmKK5x6102YeQWnmqjKm55NhFYqPgq8Q
TZGX/wLTj3WKancMFV+NQycOv7UXfsKZBsH5nhYk66/NMy0w+hpSLNF1vre/wLoe
nNCgf++NwXccNDdSCbNGrRb4q/GdaU+O/WWnvWwpK/IGBRVNGe6jpTWGJFtoy3f3
eCYC7AK2+oit/7qGrnwJfArM6FMseMNwyP2z4MVKF/U4yo0AW1kvxe8MBMZZHbDW
1o9OeWtzPDzzmdkOXAJJyg5XAMqN3WTdhFFj/bzQbC0uff27GWur5UEM6ldslUH0
dbjq1eFXjAMjtBEQQJCTnJRoxJEm31FNZbXQa08UlsrWsnvsCfA=
-----END CERTIFICATE-----
Generated at Sun Jan 25 18:49:29 2026 by rpki-client