This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/925cda36-693a-4c1a-ba9e-e0e178112140/0/DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.mft
File:                     DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.mft (raw, json)
Hash identifier:          UrmBlHcXxXmFYdz2eRlv4xl4Zfj1778dkM6vAb1MDnQ=
Subject key identifier:   56:07:8A:D8:40:FE:47:5B:5C:F5:62:34:DF:47:A7:EB:1D:4A:14:B6
Authority key identifier: DF:8E:F2:99:4C:B5:42:09:F2:C2:A3:9A:7B:CE:7D:A0:D9:C3:4E:4A
Certificate issuer:       /CN=DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A
Certificate serial:       2A768BFF20F881ECC3CF724915C47E624391E103
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/925cda36-693a-4c1a-ba9e-e0e178112140/0/DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.mft
Manifest number:          0387
Signing time:             Sat 24 Jan 2026 09:31:20 +0000
Manifest this update:     Sat 24 Jan 2026 09:26:20 +0000
Manifest next update:     Tue 27 Jan 2026 13:36:20 +0000
Files and hashes:         1: 3130332e3133322e31322e302f32342d3234203d3e20313331373336.roa (hash: yYY5Xasn+MhbZ/7PqdrXZuQAXqu+qcVQtvVv3ePHTro=)
                          2: 3130332e3133322e31342e302f32342d3234203d3e20313331373336.roa (hash: XPqP92iiEQWlwXCwRpR2WN8Lt9Zye6dCVSvcRgh/30k=)
                          3: DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.crl (hash: ZxUe/5NOOSlLdkyLTCB1kwuOrPkysl2Gw4xrmyeH58w=)
                          4: 3130332e3133322e31352e302f32342d3234203d3e20313331373336.roa (hash: YsQ/6eOY7UY889dueTFqI5fZ9jzbm6RP7AZHDvdYNjo=)
                          5: 323430343a326363303a32633a3a2f34362d3436203d3e20313331373336.roa (hash: t4c93T36jMt5VZmXd/bp2z8IhiNgox8OFSWiaBbxAhQ=)
                          6: 3130332e3133322e31332e302f32342d3234203d3e20313331373336.roa (hash: 2cxxZUWkJsO3oT8bqHDC+csSkm6PFb2gUAHDSh62gR8=)
                          7: 323430343a326363303a3a2f34332d3433203d3e20313331373336.roa (hash: FOu7z+lFtPq+cQCxDqirVfbm+xQEfu1NcMOm+058Mco=)
                          8: 323430343a326363303a32303a3a2f34362d3436203d3e20313331373336.roa (hash: AL79go4QRK47TgrAmtQGB5fYfJRAvCqPrZVQAqwDWT4=)
                          9: 323430343a326363303a32343a3a2f34362d3436203d3e20313331373336.roa (hash: pNNOikD6VzRUPv7yZG6Cg3KiGof++IQqkIf9l+Tqx7M=)
                          10: 323430343a326363303a32383a3a2f34362d3436203d3e20313331373336.roa (hash: dl0z7TuYwDUuSU57FfKOeKvhobp1vKvNdUgb56XLczs=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/925cda36-693a-4c1a-ba9e-e0e178112140/0/DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.crl
                          rsync://repo-rpki.idnic.net/repo/925cda36-693a-4c1a-ba9e-e0e178112140/0/DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Jan 2026 13:36:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:76:8b:ff:20:f8:81:ec:c3:cf:72:49:15:c4:7e:62:43:91:e1:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A
        Validity
            Not Before: Jan 24 09:26:20 2026 GMT
            Not After : Jan 27 13:36:20 2026 GMT
        Subject: CN=56078AD840FE475B5CF56234DF47A7EB1D4A14B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:74:97:c9:aa:7f:0b:dd:18:7d:55:47:17:cd:
                    29:6e:63:48:35:e6:0a:13:1d:6f:4b:8a:ea:87:0c:
                    e3:50:8d:1b:ba:da:9d:23:09:60:ac:fb:16:b5:82:
                    7a:62:1e:88:1e:64:0c:b4:e1:8a:c4:05:16:23:25:
                    35:d6:f6:cd:3a:1e:e8:5c:11:b4:74:41:9e:ff:37:
                    2a:2d:82:7d:aa:59:a5:53:05:0c:d7:60:7b:1c:18:
                    09:65:1c:53:b6:f3:bb:73:ef:11:a6:17:19:13:32:
                    f6:76:21:7f:2c:bc:20:0a:04:f7:a6:bc:50:77:3a:
                    3a:e3:ba:57:e9:18:bc:3c:c8:42:5b:9a:6e:6b:8d:
                    ca:a2:25:ab:fd:d8:a2:bb:c2:b6:6f:09:09:66:95:
                    f9:69:f2:1c:ee:7e:67:a3:d8:40:f3:4c:fb:72:12:
                    63:c3:c9:e5:d8:00:d2:56:28:59:01:26:c1:cc:26:
                    87:17:b4:09:6d:1e:fa:23:96:6f:77:28:07:17:fb:
                    38:ab:af:68:32:64:cc:c9:4d:75:90:83:7b:ff:f9:
                    2e:f2:75:8e:2d:5b:c8:75:36:b1:2c:49:7b:94:b6:
                    c3:c7:db:97:a0:30:bc:3e:a0:5f:38:c1:9b:0d:24:
                    87:59:98:0b:7c:b9:b6:d2:5a:cd:32:2d:bc:d2:d5:
                    d7:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:07:8A:D8:40:FE:47:5B:5C:F5:62:34:DF:47:A7:EB:1D:4A:14:B6
            X509v3 Authority Key Identifier:
                keyid:DF:8E:F2:99:4C:B5:42:09:F2:C2:A3:9A:7B:CE:7D:A0:D9:C3:4E:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/925cda36-693a-4c1a-ba9e-e0e178112140/0/DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/925cda36-693a-4c1a-ba9e-e0e178112140/0/DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:44:1d:48:2b:09:6f:42:aa:dd:c4:b7:11:76:fe:10:cb:40:
         41:4c:b0:94:53:24:c6:05:97:56:e8:ad:73:17:c2:f7:3b:12:
         73:bf:17:ec:d8:c8:2b:7f:4f:3b:99:92:44:32:b8:fe:3a:b9:
         99:d3:53:54:52:bc:e7:9d:c9:b8:f3:5e:ab:ea:b1:3d:19:e3:
         19:d2:f6:b2:5d:1e:55:ba:29:d3:70:65:24:2d:54:73:51:a8:
         d1:aa:ec:34:f6:12:d4:bb:be:d0:bf:aa:94:f2:f7:14:84:f6:
         ba:39:ee:16:18:6f:58:7b:92:73:cb:66:ac:e1:ff:1a:ad:61:
         43:07:db:fd:cf:36:c6:bf:55:c5:cc:6b:37:60:8f:9b:d2:00:
         42:36:01:33:27:5c:2c:b3:6f:8c:1f:b3:f4:9a:e1:17:91:04:
         8c:26:f4:6e:37:66:df:65:c1:3f:fc:16:39:9d:85:6c:7e:6b:
         c7:01:3c:f6:f5:14:4a:0d:98:1d:2b:35:24:fc:be:d8:41:80:
         86:b9:38:80:f2:ed:5a:08:05:ca:23:7c:65:9e:cf:c5:79:e7:
         d3:cc:80:fc:bf:cc:eb:68:c3:20:2d:7b:6e:0b:18:a9:ce:08:
         a0:23:85:ea:9c:f8:51:91:69:39:d1:77:5b:86:22:4a:c1:0a:
         89:47:0f:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:11:45 2026 by rpki-client