This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.mft
File:                     F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.mft (raw, json)
Hash identifier:          mnHA+flfjfpbSr02CnOkUZBqc4a7SBnJT3KAPxof2mE=
Subject key identifier:   44:90:7F:A0:59:6E:22:10:98:FD:34:50:61:7B:D6:B0:F8:3C:7D:08
Authority key identifier: F3:AB:A8:F3:C2:DD:89:25:DD:47:BF:7E:A2:13:73:02:A7:2B:58:37
Certificate issuer:       /CN=F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837
Certificate serial:       2A725D81AD7F0A3640F5400951FCF439ECCDCE2F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.mft
Manifest number:          0559
Signing time:             Fri 23 Jan 2026 19:31:32 +0000
Manifest this update:     Fri 23 Jan 2026 19:26:32 +0000
Manifest next update:     Mon 26 Jan 2026 20:23:32 +0000
Files and hashes:         1: 323430353a326363303a373a3a2f34382d3438203d3e20313336303739.roa (hash: QqkYw4dvuAxz/Z71BLxdsCFvca35TsWBzdDiFc7djzY=)
                          2: 3130332e38362e3130312e302f32342d3234203d3e20313336303739.roa (hash: zlUSo08cC5dU1tahN2pFRIpVflwenezMlRGB/W6FAVg=)
                          3: 323430353a326363303a343a3a2f34382d3438203d3e20313336303739.roa (hash: UQwmx7kfaHxkn2EDWo9d59K9BpIkWV4oYs+G0r7Y0tg=)
                          4: 323430353a326363303a613a3a2f34382d3438203d3e20313336303739.roa (hash: Ju/vO7vCQQsoKWqaI5uCjlvfJIZ0F/Vpc0p/QWILZD4=)
                          5: 323430353a326363303a333a3a2f34382d3438203d3e20313336303739.roa (hash: U25XxYHsdDHg45kmjqy0PPmW/5GPYURDN/+SgVMDWdQ=)
                          6: 3130332e38362e3130302e302f32342d3234203d3e20313336303739.roa (hash: zNkUcfseAFGChQlk9FTTSxxP9VLqeS6Xzt5hWG8FeNY=)
                          7: 3130332e38362e3130302e302f32332d3233203d3e20313336303739.roa (hash: IGEWY2eHTKaYMtxRXqYJpKskrVH7Tr78Gf7J+C6rKG8=)
                          8: 323430353a326363303a323a3a2f34382d3438203d3e20313336303739.roa (hash: 1A57a+WSkaUEe/nNKsaDACTzujL/BWvYX5TZ+R8VoL8=)
                          9: F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.crl (hash: +7cYoYugjRIJe2DI1sSKpYb1Kk7BLIe4OErPwxIAx4g=)
                          10: 323430353a326363303a623a3a2f34382d3438203d3e20313336303739.roa (hash: l2XgTKrEaZzJg/s+9XNrUPqB/jS99nk9vRMWjSJi3Ck=)
                          11: 323430353a326363303a383a3a2f34382d3438203d3e20313336303739.roa (hash: KpZING4byOb+kw62UnCHT9VpB7H105YwJJjgZg9mICg=)
                          12: 323430353a326363303a353a3a2f34382d3438203d3e20313336303739.roa (hash: M4ssaOvjHsdJP6LoJpiLBv94HULBEuZfCL5oS3yxuR0=)
                          13: 323430353a326363303a3a2f34382d3438203d3e20313336303739.roa (hash: u07NQFdDkw9uQJyKvseE8BXy1l4340TGYboFy4isKRg=)
                          14: 323430353a326363303a313a3a2f34382d3438203d3e20313336303739.roa (hash: zzz4sdR5gzKzpAbEJCRzN6BkviHvm/Eab9wuvzBGW3s=)
                          15: 323430353a326363303a393a3a2f34382d3438203d3e20313336303739.roa (hash: InIenu/YRdZ+r+sG5SCyx4cnFek5Q1mbpz29x6bWyk8=)
                          16: 323430353a326363303a363a3a2f34382d3438203d3e20313336303739.roa (hash: /ri40FDmSZx726w/lEZ1lnE+M3llFsHw0OIkUDVqH2Y=)
                          17: 323430353a326363303a3a2f33322d3332203d3e20313336303739.roa (hash: RTJdm4ux75KqUxTLd+HL3T2/W81Q6eNxAPEmBwe4d2I=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.crl
                          rsync://repo-rpki.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Jan 2026 20:23:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:72:5d:81:ad:7f:0a:36:40:f5:40:09:51:fc:f4:39:ec:cd:ce:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837
        Validity
            Not Before: Jan 23 19:26:32 2026 GMT
            Not After : Jan 26 20:23:32 2026 GMT
        Subject: CN=44907FA0596E221098FD3450617BD6B0F83C7D08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:1b:34:4f:9c:8e:49:81:df:f1:e7:70:6a:87:
                    90:6d:1f:07:0e:c6:1f:43:ee:95:a2:ac:a2:de:c6:
                    e4:6a:f9:14:5d:fa:26:a7:22:f0:37:dd:2b:20:06:
                    94:ed:bb:29:58:af:02:58:ec:cd:13:9a:ce:5d:2b:
                    29:08:bc:23:58:e4:d7:9f:df:32:33:fb:93:cd:9a:
                    15:69:f4:82:61:89:20:98:b9:b6:dc:62:de:27:78:
                    08:95:27:bc:59:ee:82:10:bb:75:8b:95:70:36:6b:
                    a5:9b:81:9b:18:83:ca:a3:c0:75:c6:8e:2b:24:0e:
                    1d:be:d4:06:3b:d5:93:26:4f:fe:13:6a:1c:a6:7f:
                    76:62:9f:0c:83:5b:98:de:26:eb:0b:8b:37:56:11:
                    9a:af:c8:c9:c4:8f:0e:a3:27:46:34:33:65:1e:8e:
                    be:53:49:da:f2:40:f7:2e:3e:a2:78:f2:02:24:29:
                    fa:65:7a:19:a0:6a:24:3a:a2:80:c3:41:79:9b:09:
                    2e:83:e1:93:ae:3f:ca:93:75:0e:79:a4:f9:b2:51:
                    f1:b8:e4:8b:b8:e7:57:31:a1:0b:12:e7:ca:d8:f7:
                    91:dd:b6:f4:5d:32:04:f8:22:99:06:9d:0e:6b:02:
                    c6:c4:85:03:6e:9f:23:9d:dc:da:22:5f:fa:17:66:
                    3d:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:90:7F:A0:59:6E:22:10:98:FD:34:50:61:7B:D6:B0:F8:3C:7D:08
            X509v3 Authority Key Identifier:
                keyid:F3:AB:A8:F3:C2:DD:89:25:DD:47:BF:7E:A2:13:73:02:A7:2B:58:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:ed:f3:90:db:1a:a5:d1:ab:37:c7:de:dd:b8:92:1d:c0:b8:
         ce:e1:0a:da:77:75:ce:dc:18:b2:c2:b6:1e:d9:31:80:83:42:
         13:b8:58:e2:b3:36:42:5d:8c:24:68:37:90:ea:03:10:fc:1c:
         45:12:aa:e2:d5:e9:4c:e9:4b:ce:8a:49:a7:54:ef:49:a2:2e:
         6e:ff:ed:c7:d3:f9:be:5e:a9:b9:de:51:ad:1e:54:5f:9d:f7:
         99:55:46:de:74:13:42:87:55:2c:6f:4d:66:28:eb:22:22:d1:
         b3:40:2f:82:17:b8:22:73:f5:a5:f2:fb:aa:7b:0c:54:76:ee:
         86:20:5a:a5:6d:6c:be:49:fe:94:0a:60:67:66:ec:27:26:85:
         ac:20:19:f2:e0:34:0d:97:e9:7a:32:8b:9d:d7:8c:42:8c:59:
         b9:b5:b5:27:84:d7:a9:ae:28:1e:87:c1:6b:b2:08:bc:8a:5d:
         3b:8d:f3:b6:db:1b:d0:5e:da:73:fb:b5:90:69:f7:b7:47:19:
         7f:61:f3:83:51:3f:a0:57:77:b0:12:d2:9a:10:76:a8:32:df:
         89:1b:5d:94:91:69:96:77:12:ab:70:c7:71:4c:dc:0f:f7:81:
         ac:08:24:cb:85:56:44:e0:12:70:0f:af:f9:85:d7:ba:89:20:
         6b:21:92:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:22:19 2026 by rpki-client