This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/9338bdad-d2dd-4f07-ae84-c540612baf6a/0/8C3462809943E9E8E8E89052BF9B9C3DDC60EE22.mft
File:                     8C3462809943E9E8E8E89052BF9B9C3DDC60EE22.mft (raw, json)
Hash identifier:          78V/Kv973EpnvBb4GrUHtcpyLzIUO1P6gYa0FSCPgSw=
Subject key identifier:   A3:C1:A4:8C:2C:F8:2B:C3:E2:F3:B4:44:4C:85:DD:4D:8C:5F:D5:DD
Authority key identifier: 8C:34:62:80:99:43:E9:E8:E8:E8:90:52:BF:9B:9C:3D:DC:60:EE:22
Certificate issuer:       /CN=8C3462809943E9E8E8E89052BF9B9C3DDC60EE22
Certificate serial:       013140E47B4188B80D9EC9F4D9DEE81A8CDE2E99
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C3462809943E9E8E8E89052BF9B9C3DDC60EE22.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/9338bdad-d2dd-4f07-ae84-c540612baf6a/0/8C3462809943E9E8E8E89052BF9B9C3DDC60EE22.mft
Manifest number:          0288
Signing time:             Sun 25 Jan 2026 00:40:50 +0000
Manifest this update:     Sun 25 Jan 2026 00:35:50 +0000
Manifest next update:     Wed 28 Jan 2026 11:44:50 +0000
Files and hashes:         1: 8C3462809943E9E8E8E89052BF9B9C3DDC60EE22.crl (hash: xOlM6J2TWhnDd3N6FsD2u++UuNdrtqFRs8vr/6MLmKA=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/9338bdad-d2dd-4f07-ae84-c540612baf6a/0/8C3462809943E9E8E8E89052BF9B9C3DDC60EE22.crl
                          rsync://repo-rpki.idnic.net/repo/9338bdad-d2dd-4f07-ae84-c540612baf6a/0/8C3462809943E9E8E8E89052BF9B9C3DDC60EE22.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C3462809943E9E8E8E89052BF9B9C3DDC60EE22.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Jan 2026 11:44:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:31:40:e4:7b:41:88:b8:0d:9e:c9:f4:d9:de:e8:1a:8c:de:2e:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C3462809943E9E8E8E89052BF9B9C3DDC60EE22
        Validity
            Not Before: Jan 25 00:35:50 2026 GMT
            Not After : Jan 28 11:44:50 2026 GMT
        Subject: CN=A3C1A48C2CF82BC3E2F3B4444C85DD4D8C5FD5DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:6f:6e:9a:d3:a4:c0:25:c2:14:7d:73:e2:c2:
                    1f:df:5e:e1:32:e2:a4:b9:38:43:71:78:7e:ab:48:
                    62:a5:b8:47:ea:d4:e9:11:39:ac:e6:6e:fa:33:75:
                    4a:5c:66:57:b7:22:40:34:1b:b3:ba:ca:b8:01:6e:
                    e0:69:d1:5e:77:65:fe:31:e1:40:56:57:a3:75:ca:
                    90:57:70:bf:a2:4d:93:3b:7a:a4:d4:06:8b:f6:93:
                    38:8a:3c:46:27:98:4a:e4:af:17:70:56:d9:f9:d5:
                    37:c2:31:5d:2a:bc:36:65:d0:55:7d:10:a1:0d:9d:
                    7a:ec:29:43:98:80:60:ef:7a:a1:0e:d1:5b:da:10:
                    91:f3:65:07:20:1c:4b:4e:a8:3a:9b:3e:4e:d2:17:
                    0c:a3:7b:4c:a4:8d:47:74:cf:82:7e:1b:a0:81:42:
                    ca:cc:e2:0f:2e:94:c5:f8:74:de:27:d8:8e:2e:d5:
                    94:6f:81:d1:2b:7b:15:5e:f1:9a:ca:bd:88:61:b4:
                    29:da:1a:be:8a:34:12:79:25:fb:bf:b0:5d:aa:05:
                    68:0d:f3:58:5b:aa:2a:ce:fd:00:d9:7a:41:f6:2e:
                    4e:b5:cc:4e:27:d8:7d:a5:a1:4d:86:87:4d:f5:ee:
                    f0:84:1a:6b:f0:fe:13:47:72:54:c7:f2:13:b9:dc:
                    3c:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:C1:A4:8C:2C:F8:2B:C3:E2:F3:B4:44:4C:85:DD:4D:8C:5F:D5:DD
            X509v3 Authority Key Identifier:
                keyid:8C:34:62:80:99:43:E9:E8:E8:E8:90:52:BF:9B:9C:3D:DC:60:EE:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/9338bdad-d2dd-4f07-ae84-c540612baf6a/0/8C3462809943E9E8E8E89052BF9B9C3DDC60EE22.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C3462809943E9E8E8E89052BF9B9C3DDC60EE22.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9338bdad-d2dd-4f07-ae84-c540612baf6a/0/8C3462809943E9E8E8E89052BF9B9C3DDC60EE22.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:1c:f1:fc:d4:44:1c:e1:9c:68:ba:3e:68:9a:03:75:2c:61:
         e7:32:5c:24:63:3d:7f:c6:53:c3:be:11:76:a4:38:95:18:11:
         5d:d5:6b:95:75:c5:f1:7e:72:82:df:f2:69:f7:2b:9d:30:2d:
         70:9f:7e:95:c4:e3:ce:8e:5f:ce:6b:33:15:14:6f:cc:39:31:
         4a:64:9e:23:4b:3a:8b:6a:ec:82:0b:12:58:c6:b4:c7:9c:2a:
         06:f2:dd:c8:c1:0d:9a:86:42:7e:80:36:81:9f:ca:fd:ac:db:
         c3:13:63:a6:6b:37:e6:e2:a7:34:56:ad:ec:cf:e8:62:bc:a9:
         88:c8:e1:c7:55:65:b4:17:a5:13:f4:95:93:cb:31:3f:30:2a:
         47:36:7a:b5:30:ee:a0:a8:bf:58:b4:f1:86:90:8b:b7:40:0b:
         23:80:aa:c5:72:8e:34:18:62:76:b9:d2:db:b5:de:d1:04:60:
         85:0a:c5:24:4a:25:a3:96:45:1d:e8:df:87:f2:05:be:f8:c6:
         e6:74:99:56:6c:ff:ec:1e:7c:b1:22:20:e4:15:7d:63:29:81:
         02:c2:14:7c:e3:29:ba:a1:d3:50:cb:c9:b7:26:9a:4c:0e:89:
         fd:9a:1a:13:81:a5:d2:72:ab:7f:91:bd:e5:2f:31:ba:fa:51:
         f8:d0:98:9d
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUATFA5HtBiLgNnsn02d7oGozeLpkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEMzNDYyODA5OTQzRTlFOEU4RTg5MDUyQkY5QjlDM0RE
QzYwRUUyMjAeFw0yNjAxMjUwMDM1NTBaFw0yNjAxMjgxMTQ0NTBaMDMxMTAvBgNV
BAMTKEEzQzFBNDhDMkNGODJCQzNFMkYzQjQ0NDRDODVERDREOEM1RkQ1REQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSb26a06TAJcIUfXPiwh/fXuEy
4qS5OENxeH6rSGKluEfq1OkROazmbvozdUpcZle3IkA0G7O6yrgBbuBp0V53Zf4x
4UBWV6N1ypBXcL+iTZM7eqTUBov2kziKPEYnmErkrxdwVtn51TfCMV0qvDZl0FV9
EKENnXrsKUOYgGDveqEO0VvaEJHzZQcgHEtOqDqbPk7SFwyje0ykjUd0z4J+G6CB
QsrM4g8ulMX4dN4n2I4u1ZRvgdErexVe8ZrKvYhhtCnaGr6KNBJ5Jfu/sF2qBWgN
81hbqirO/QDZekH2Lk61zE4n2H2loU2Gh0317vCEGmvw/hNHclTH8hO53Dy1AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUo8GkjCz4K8Pi87RETIXdTYxf1d0wHwYDVR0j
BBgwFoAUjDRigJlD6ejo6JBSv5ucPdxg7iIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85
MzM4YmRhZC1kMmRkLTRmMDctYWU4NC1jNTQwNjEyYmFmNmEvMC84QzM0NjI4MDk5
NDNFOUU4RThFODkwNTJCRjlCOUMzRERDNjBFRTIyLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvOEMzNDYyODA5OTQzRTlFOEU4RTg5MDUyQkY5QjlDM0REQzYw
RUUyMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTMzOGJkYWQtZDJkZC00ZjA3LWFl
ODQtYzU0MDYxMmJhZjZhLzAvOEMzNDYyODA5OTQzRTlFOEU4RTg5MDUyQkY5QjlD
M0REQzYwRUUyMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBADYc8fzURBzhnGi6PmiaA3UsYecyXCRjPX/G
U8O+EXakOJUYEV3Va5V1xfF+coLf8mn3K50wLXCffpXE486OX85rMxUUb8w5MUpk
niNLOotq7IILEljGtMecKgby3cjBDZqGQn6ANoGfyv2s28MTY6ZrN+bipzRWrezP
6GK8qYjI4cdVZbQXpRP0lZPLMT8wKkc2erUw7qCov1i08YaQi7dACyOAqsVyjjQY
Yna50tu13tEEYIUKxSRKJaOWRR3o34fyBb74xuZ0mVZs/+wefLEiIOQVfWMpgQLC
FHzjKbqh01DLybcmmkwOif2aGhOBpdJyq3+RveUvMbr6UfjQmJ0=
-----END CERTIFICATE-----
Generated at Sun Jan 25 18:37:18 2026 by rpki-client