This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/8fd6eaca-f5fd-4acb-85a5-eb8d370823af/0/DE5F8F89EA2857719125EA6666F593A8279B3CD9.mft
File:                     DE5F8F89EA2857719125EA6666F593A8279B3CD9.mft (raw, json)
Hash identifier:          l4T5MGhRNq0GdH2VJYvqsxrc/bFmZeUx9sLgBiJjVYg=
Subject key identifier:   DB:BE:C8:A4:87:E9:F2:63:BA:FA:08:7E:64:21:9B:19:98:A6:54:6A
Authority key identifier: DE:5F:8F:89:EA:28:57:71:91:25:EA:66:66:F5:93:A8:27:9B:3C:D9
Certificate issuer:       /CN=DE5F8F89EA2857719125EA6666F593A8279B3CD9
Certificate serial:       1AB2FC23A336818F6ACA250CC39BE30BE5804B3A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE5F8F89EA2857719125EA6666F593A8279B3CD9.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8fd6eaca-f5fd-4acb-85a5-eb8d370823af/0/DE5F8F89EA2857719125EA6666F593A8279B3CD9.mft
Manifest number:          F9
Signing time:             Mon 26 Jan 2026 01:30:53 +0000
Manifest this update:     Mon 26 Jan 2026 01:25:53 +0000
Manifest next update:     Thu 29 Jan 2026 03:30:53 +0000
Files and hashes:         1: DE5F8F89EA2857719125EA6666F593A8279B3CD9.crl (hash: bfio5gy1vVeYQ7foHH47v2r7JGyTSLaxhhc4aFdDwpQ=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8fd6eaca-f5fd-4acb-85a5-eb8d370823af/0/DE5F8F89EA2857719125EA6666F593A8279B3CD9.crl
                          rsync://repo-rpki.idnic.net/repo/8fd6eaca-f5fd-4acb-85a5-eb8d370823af/0/DE5F8F89EA2857719125EA6666F593A8279B3CD9.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE5F8F89EA2857719125EA6666F593A8279B3CD9.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Jan 2026 14:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:b2:fc:23:a3:36:81:8f:6a:ca:25:0c:c3:9b:e3:0b:e5:80:4b:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE5F8F89EA2857719125EA6666F593A8279B3CD9
        Validity
            Not Before: Jan 26 01:25:53 2026 GMT
            Not After : Jan 29 03:30:53 2026 GMT
        Subject: CN=DBBEC8A487E9F263BAFA087E64219B1998A6546A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:9d:eb:05:3b:cb:1a:e4:e1:09:d9:e2:9a:5b:
                    05:7d:9d:10:f4:ff:7d:aa:99:29:a1:90:dd:d5:02:
                    59:6e:cb:ac:d8:73:81:e0:94:cf:00:f7:a8:c1:34:
                    28:7f:52:ae:a3:e9:12:29:4e:c6:f7:48:1c:c1:52:
                    64:a1:78:75:fa:07:62:71:0b:89:cd:67:2a:a5:48:
                    10:e3:ca:f9:17:91:9f:0b:1a:b9:31:9e:11:f4:e7:
                    40:29:8b:21:07:9f:53:46:b4:80:69:83:fd:90:a7:
                    a9:2d:af:14:8b:32:75:71:ec:b7:97:0a:e0:31:74:
                    a1:e7:38:71:f4:98:20:f4:28:9a:11:19:ec:08:a0:
                    41:c2:df:3d:3a:15:8b:47:e9:d1:ea:bf:01:8f:86:
                    f8:7e:5c:13:01:59:01:5c:cf:34:4d:46:fb:8a:b9:
                    8c:51:3b:9f:7e:51:58:84:3c:16:2a:3e:39:9a:ae:
                    c6:68:7d:89:3e:98:07:5a:2f:10:16:3b:d7:9b:9a:
                    71:f5:cc:74:60:25:98:d5:60:84:85:fb:2b:68:35:
                    91:20:c6:30:0c:63:d9:f5:bb:cd:16:e5:3a:a7:0a:
                    8e:68:8c:12:be:01:a0:17:03:45:a1:f8:68:e6:b6:
                    8b:66:d3:75:a2:7c:71:0e:1f:84:b8:85:f3:0e:76:
                    a3:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:BE:C8:A4:87:E9:F2:63:BA:FA:08:7E:64:21:9B:19:98:A6:54:6A
            X509v3 Authority Key Identifier:
                keyid:DE:5F:8F:89:EA:28:57:71:91:25:EA:66:66:F5:93:A8:27:9B:3C:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8fd6eaca-f5fd-4acb-85a5-eb8d370823af/0/DE5F8F89EA2857719125EA6666F593A8279B3CD9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE5F8F89EA2857719125EA6666F593A8279B3CD9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8fd6eaca-f5fd-4acb-85a5-eb8d370823af/0/DE5F8F89EA2857719125EA6666F593A8279B3CD9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:6f:d6:99:6f:4d:32:53:b0:04:77:8f:c9:7e:d3:bd:57:53:
         5c:67:c4:69:60:2f:03:c0:1d:05:a4:57:4b:dc:aa:6b:3e:a0:
         c1:31:50:e8:4f:5a:80:59:6c:64:c2:13:37:aa:08:3f:69:e6:
         47:3c:09:75:03:60:c9:28:d6:51:0c:78:e8:b1:0c:b2:19:ca:
         60:1d:2a:ac:93:3d:48:3a:4e:89:19:f0:d8:72:f5:22:54:5e:
         5f:48:b3:ce:91:e4:55:a4:79:c9:39:9b:fa:6e:8a:3f:43:35:
         c6:61:e7:55:47:9a:d1:d9:4f:c8:40:a2:38:1a:89:e6:b5:37:
         83:d7:cb:6f:3e:71:d5:83:bb:5b:cc:20:b8:74:28:f1:72:e3:
         a0:3a:cc:1d:5b:80:1f:98:ff:99:e4:b3:a9:38:f4:3c:70:e4:
         c6:28:d2:5a:a2:57:66:26:b2:2f:cd:ac:60:b0:3d:d2:c7:89:
         88:9c:05:1d:1c:51:68:0f:e0:e6:08:10:d3:a8:2a:df:38:17:
         d6:a4:a8:68:92:5f:5b:14:2a:16:e8:60:b4:85:5b:2c:fe:4a:
         4c:86:cd:76:3e:dd:16:d0:6e:cd:dd:80:d3:61:ba:66:06:8f:
         d7:0c:75:0f:8b:c9:e1:55:f4:aa:a3:e9:ed:42:85:1f:a4:5e:
         4f:d2:e7:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 06:07:35 2026 by rpki-client