This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/9c80467c-aeb2-4095-8f54-85b9090d3908/0/8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B.mft
File:                     8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B.mft (raw, json)
Hash identifier:          jh15l2q+zzir8/Hg7twHGi2eNH4V+lxliW9LzQ3Da/w=
Subject key identifier:   C8:F0:C2:D3:1C:55:10:6B:D5:A3:6F:16:C7:84:39:69:AC:CC:91:72
Authority key identifier: 8E:E9:EE:E4:6E:A0:F8:60:38:5C:88:0C:00:E2:EE:5A:59:D6:EA:9B
Certificate issuer:       /CN=8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B
Certificate serial:       4577CCDECCCC49F849827063ABD135C0131C17F8
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/9c80467c-aeb2-4095-8f54-85b9090d3908/0/8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B.mft
Manifest number:          01E5
Signing time:             Sat 24 Jan 2026 21:50:45 +0000
Manifest this update:     Sat 24 Jan 2026 21:45:45 +0000
Manifest next update:     Wed 28 Jan 2026 09:05:45 +0000
Files and hashes:         1: 3130332e3139372e3138382e302f32322d3234203d3e20313333383030.roa (hash: 4aA8UHvWdn6b+e9rvE0qvRNLuWwKk2SM0xhNOkJ4w/s=)
                          2: 8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B.crl (hash: iyO7rmEYmYov1znx4KOP0mwKbHA5ETshb/cG8nc+d1w=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/9c80467c-aeb2-4095-8f54-85b9090d3908/0/8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B.crl
                          rsync://repo-rpki.idnic.net/repo/9c80467c-aeb2-4095-8f54-85b9090d3908/0/8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Jan 2026 09:05:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:77:cc:de:cc:cc:49:f8:49:82:70:63:ab:d1:35:c0:13:1c:17:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B
        Validity
            Not Before: Jan 24 21:45:45 2026 GMT
            Not After : Jan 28 09:05:45 2026 GMT
        Subject: CN=C8F0C2D31C55106BD5A36F16C7843969ACCC9172
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b8:58:04:22:c1:31:9a:97:77:bf:0b:94:b5:
                    42:d1:a6:44:e8:3f:f1:b5:ab:de:38:75:af:50:d7:
                    15:11:8a:ae:7e:83:e0:b7:b9:92:37:af:51:f5:16:
                    5f:88:a2:c7:3a:1d:01:d7:8f:a9:48:6e:0b:c6:ae:
                    2f:2d:46:f6:78:21:6f:fb:fa:ef:d6:60:ec:54:fb:
                    7c:f4:a9:09:17:08:6f:80:8b:73:9c:c0:e7:55:9d:
                    30:ad:42:df:65:2d:08:a2:ef:db:5c:41:b7:6e:1e:
                    b7:c3:05:5b:40:5c:0d:3a:7d:45:5b:ad:44:58:3e:
                    df:a6:45:07:a2:ec:4c:2f:c6:1c:2e:d9:b8:8d:8c:
                    73:bc:f7:6f:0e:3e:73:54:3a:1b:88:c3:42:92:d6:
                    e0:8e:42:44:26:df:8f:6b:b5:5a:fb:43:60:9b:25:
                    a7:a9:3d:01:35:1c:c2:df:9e:67:b6:e5:da:aa:76:
                    45:85:b5:ca:f2:42:44:09:fe:32:ea:8f:c0:30:c6:
                    ba:07:55:90:ee:2a:da:02:a0:99:f7:79:07:5b:27:
                    17:fb:a2:5e:54:04:58:99:f1:27:25:b2:73:1b:8d:
                    e4:5a:56:c2:e9:2e:58:46:76:df:8b:67:01:49:83:
                    1b:90:94:6d:07:09:90:d5:a8:e9:82:b4:15:58:94:
                    90:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:F0:C2:D3:1C:55:10:6B:D5:A3:6F:16:C7:84:39:69:AC:CC:91:72
            X509v3 Authority Key Identifier:
                keyid:8E:E9:EE:E4:6E:A0:F8:60:38:5C:88:0C:00:E2:EE:5A:59:D6:EA:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/9c80467c-aeb2-4095-8f54-85b9090d3908/0/8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9c80467c-aeb2-4095-8f54-85b9090d3908/0/8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:42:40:41:b0:82:79:9e:77:f0:2e:83:13:be:4f:6c:fc:04:
         e9:72:0d:23:ee:91:ea:f7:8f:70:ed:ee:e1:86:7b:40:61:37:
         e5:33:07:95:f1:91:f5:83:e1:9c:f9:a8:fa:a4:c3:2f:66:df:
         cd:03:05:dd:5e:13:8e:4a:a8:ce:35:cb:26:1d:47:0b:ec:68:
         2b:74:26:24:d5:10:ac:5e:1e:a8:32:59:b0:b5:bd:1f:27:e6:
         b3:18:08:0c:f8:40:29:ba:2b:73:85:59:30:a9:aa:40:5f:6c:
         71:e4:29:cc:90:c1:87:59:a2:6f:c7:a8:fa:14:14:ef:91:3f:
         07:c1:84:b2:5f:b0:49:38:7f:b9:05:71:85:52:63:c7:25:ab:
         eb:5c:b5:3f:33:37:e2:56:ba:4e:50:54:0f:3e:a2:19:7a:7a:
         46:36:fc:98:bf:16:30:d6:1b:3b:64:9f:e5:99:49:69:22:8f:
         14:00:eb:d1:10:9b:08:02:0a:db:47:6c:22:c9:07:1f:a3:17:
         34:d2:10:03:04:ea:14:a6:20:a0:37:90:10:6b:9c:74:58:9c:
         31:b6:15:10:58:61:87:12:67:9d:2a:88:91:e9:d9:7c:ee:39:
         5e:f1:49:7e:be:d0:e6:e5:78:53:29:a2:bd:f0:22:b4:dc:fe:
         bc:fe:47:99
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIURXfM3szMSfhJgnBjq9E1wBMcF/gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEVFOUVFRTQ2RUEwRjg2MDM4NUM4ODBDMDBFMkVFNUE1
OUQ2RUE5QjAeFw0yNjAxMjQyMTQ1NDVaFw0yNjAxMjgwOTA1NDVaMDMxMTAvBgNV
BAMTKEM4RjBDMkQzMUM1NTEwNkJENUEzNkYxNkM3ODQzOTY5QUNDQzkxNzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyuFgEIsExmpd3vwuUtULRpkTo
P/G1q944da9Q1xURiq5+g+C3uZI3r1H1Fl+Iosc6HQHXj6lIbgvGri8tRvZ4IW/7
+u/WYOxU+3z0qQkXCG+Ai3OcwOdVnTCtQt9lLQii79tcQbduHrfDBVtAXA06fUVb
rURYPt+mRQei7Ewvxhwu2biNjHO8928OPnNUOhuIw0KS1uCOQkQm349rtVr7Q2Cb
JaepPQE1HMLfnme25dqqdkWFtcryQkQJ/jLqj8AwxroHVZDuKtoCoJn3eQdbJxf7
ol5UBFiZ8SclsnMbjeRaVsLpLlhGdt+LZwFJgxuQlG0HCZDVqOmCtBVYlJCxAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUyPDC0xxVEGvVo28Wx4Q5aazMkXIwHwYDVR0j
BBgwFoAUjunu5G6g+GA4XIgMAOLuWlnW6pswDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85
YzgwNDY3Yy1hZWIyLTQwOTUtOGY1NC04NWI5MDkwZDM5MDgvMC84RUU5RUVFNDZF
QTBGODYwMzg1Qzg4MEMwMEUyRUU1QTU5RDZFQTlCLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvOEVFOUVFRTQ2RUEwRjg2MDM4NUM4ODBDMDBFMkVFNUE1OUQ2
RUE5Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWM4MDQ2N2MtYWViMi00MDk1LThm
NTQtODViOTA5MGQzOTA4LzAvOEVFOUVFRTQ2RUEwRjg2MDM4NUM4ODBDMDBFMkVF
NUE1OUQ2RUE5Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAApCQEGwgnmed/AugxO+T2z8BOlyDSPuker3
j3Dt7uGGe0BhN+UzB5XxkfWD4Zz5qPqkwy9m380DBd1eE45KqM41yyYdRwvsaCt0
JiTVEKxeHqgyWbC1vR8n5rMYCAz4QCm6K3OFWTCpqkBfbHHkKcyQwYdZom/HqPoU
FO+RPwfBhLJfsEk4f7kFcYVSY8clq+tctT8zN+JWuk5QVA8+ohl6ekY2/Ji/FjDW
Gztkn+WZSWkijxQA69EQmwgCCttHbCLJBx+jFzTSEAME6hSmIKA3kBBrnHRYnDG2
FRBYYYcSZ50qiJHp2XzuOV7xSX6+0ObleFMpor3wIrTc/rz+R5k=
-----END CERTIFICATE-----
Generated at Sun Jan 25 18:36:33 2026 by rpki-client