This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/8d5bbd81-0332-4202-9c92-eb1746a8cd9d/0/8B0DC79B66A96FA7FA3180C20B06A5C43C9CFEA1.mft
File:                     8B0DC79B66A96FA7FA3180C20B06A5C43C9CFEA1.mft (raw, json)
Hash identifier:          E7BNNmQI07ASPkVgCJJWKL2Udg2tugnwy4vELY8wVS4=
Subject key identifier:   1F:14:3D:43:A9:D1:A7:B5:51:EF:16:99:9B:D3:D9:88:EB:BA:82:39
Authority key identifier: 8B:0D:C7:9B:66:A9:6F:A7:FA:31:80:C2:0B:06:A5:C4:3C:9C:FE:A1
Certificate issuer:       /CN=8B0DC79B66A96FA7FA3180C20B06A5C43C9CFEA1
Certificate serial:       053551D5B704ED88CD2F7ACBCA23227513718DDB
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B0DC79B66A96FA7FA3180C20B06A5C43C9CFEA1.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8d5bbd81-0332-4202-9c92-eb1746a8cd9d/0/8B0DC79B66A96FA7FA3180C20B06A5C43C9CFEA1.mft
Manifest number:          0351
Signing time:             Sun 25 Jan 2026 15:42:40 +0000
Manifest this update:     Sun 25 Jan 2026 15:37:40 +0000
Manifest next update:     Wed 28 Jan 2026 21:24:40 +0000
Files and hashes:         1: 3130332e3131382e332e302f32342d3234203d3e20313337333732.roa (hash: CnYInR0edgXU+mYMJQGAiAKWjbNlk8PVPSzC/8WPG5g=)
                          2: 8B0DC79B66A96FA7FA3180C20B06A5C43C9CFEA1.crl (hash: 0UH10alaj/vhEyztk4v4ru+IKl1QPEZqionYKXv5Ddk=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8d5bbd81-0332-4202-9c92-eb1746a8cd9d/0/8B0DC79B66A96FA7FA3180C20B06A5C43C9CFEA1.crl
                          rsync://repo-rpki.idnic.net/repo/8d5bbd81-0332-4202-9c92-eb1746a8cd9d/0/8B0DC79B66A96FA7FA3180C20B06A5C43C9CFEA1.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B0DC79B66A96FA7FA3180C20B06A5C43C9CFEA1.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Jan 2026 14:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:35:51:d5:b7:04:ed:88:cd:2f:7a:cb:ca:23:22:75:13:71:8d:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B0DC79B66A96FA7FA3180C20B06A5C43C9CFEA1
        Validity
            Not Before: Jan 25 15:37:40 2026 GMT
            Not After : Jan 28 21:24:40 2026 GMT
        Subject: CN=1F143D43A9D1A7B551EF16999BD3D988EBBA8239
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:5d:40:fb:6d:33:24:1c:b7:d0:c7:66:06:a3:
                    d6:d6:d2:68:ad:ba:79:fc:0b:b5:99:ec:ab:fe:e0:
                    f7:63:fb:e6:78:8e:74:76:69:90:2c:51:b4:a0:29:
                    74:be:2f:f6:54:2e:58:02:13:35:30:bb:08:75:73:
                    95:cf:1f:15:6b:2f:9e:54:37:7c:6d:07:02:f9:38:
                    f8:45:55:77:c0:e2:3d:41:a4:7e:bd:59:ed:41:05:
                    d7:02:d3:8f:5c:08:e4:ce:2d:16:b4:e5:03:31:65:
                    1d:2e:bb:02:3b:2c:64:cc:66:cb:94:91:d2:7f:b9:
                    1d:31:f1:df:9f:2c:b7:ee:a7:7d:c3:7b:c1:ba:cc:
                    2c:d6:b7:3a:5b:fe:eb:f3:ef:bd:3f:8f:6e:08:2f:
                    aa:df:7c:3f:ba:85:53:0c:79:5d:83:87:04:30:e3:
                    cc:e8:2a:fb:df:05:4e:1d:61:d7:d8:a3:e6:72:1c:
                    e0:9f:59:fb:a6:92:09:5d:9d:49:16:3e:10:31:b3:
                    2d:75:40:9d:5d:e0:6f:c8:c6:da:4f:b1:2a:b5:e0:
                    a3:c2:66:29:a2:cc:08:74:4d:2b:df:2d:d0:05:45:
                    18:47:97:b2:54:86:70:7a:ad:b6:76:18:77:77:d6:
                    64:ae:30:0f:8e:c3:91:2a:ec:ec:ef:57:bf:48:63:
                    9c:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:14:3D:43:A9:D1:A7:B5:51:EF:16:99:9B:D3:D9:88:EB:BA:82:39
            X509v3 Authority Key Identifier:
                keyid:8B:0D:C7:9B:66:A9:6F:A7:FA:31:80:C2:0B:06:A5:C4:3C:9C:FE:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8d5bbd81-0332-4202-9c92-eb1746a8cd9d/0/8B0DC79B66A96FA7FA3180C20B06A5C43C9CFEA1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B0DC79B66A96FA7FA3180C20B06A5C43C9CFEA1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d5bbd81-0332-4202-9c92-eb1746a8cd9d/0/8B0DC79B66A96FA7FA3180C20B06A5C43C9CFEA1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:88:e9:aa:ed:18:de:a3:a2:74:d2:3b:8b:3f:ca:f7:32:36:
         3b:8c:80:a1:8b:bc:8d:4e:e3:d7:76:95:b9:3b:cc:80:4d:23:
         74:a1:d1:a2:93:0d:30:3a:8a:dc:92:42:4a:23:bd:0a:b2:0c:
         a6:84:d1:f4:02:16:c6:7d:a1:bd:d1:04:e1:dc:1a:7e:8b:86:
         18:2d:24:58:f9:6c:f1:19:0d:c4:06:42:1b:f2:57:7e:6f:35:
         60:81:80:90:6f:73:fa:1d:99:45:d6:d3:a5:d1:c1:d7:af:c9:
         99:2a:63:74:68:84:7e:be:a3:46:02:b9:52:90:5f:83:45:15:
         b5:23:b4:c1:5f:93:77:03:a3:bf:1b:af:15:9a:01:6e:f2:04:
         74:95:1d:db:2c:44:0d:eb:c7:ca:eb:21:b4:92:06:ef:9d:3c:
         9d:f0:f5:0f:2f:66:20:19:cb:b7:e4:0b:fc:53:f5:ac:7d:42:
         91:dd:a1:b8:2b:4e:9f:9f:a6:12:2b:5f:16:38:54:66:f5:49:
         7b:73:41:bb:76:fe:88:10:55:9e:02:17:94:5a:9e:45:f9:ea:
         5c:0c:67:72:6c:22:97:5c:58:0a:e9:ce:9e:6d:84:1c:f0:70:
         7b:87:b7:04:07:c2:87:04:c9:17:a7:b2:73:47:b3:99:c6:cf:
         9c:9c:b0:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:48:32 2026 by rpki-client