This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/bcb9ba7f-efd1-4994-a2a3-77993338b242/0/9FB9D7ED833E1CA6E4053773AC164214889108CB.mft
File:                     9FB9D7ED833E1CA6E4053773AC164214889108CB.mft (raw, json)
Hash identifier:          2u6g0hDi93maLX8FQBS0Ib3Ol1UVdBRjcn7OtbXYwrc=
Subject key identifier:   F9:40:09:24:E6:D7:29:0B:E3:83:DD:64:59:14:BF:2A:5B:EC:D3:99
Authority key identifier: 9F:B9:D7:ED:83:3E:1C:A6:E4:05:37:73:AC:16:42:14:88:91:08:CB
Certificate issuer:       /CN=9FB9D7ED833E1CA6E4053773AC164214889108CB
Certificate serial:       6C737F1063700D509F959615B2D5990BE090ED27
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FB9D7ED833E1CA6E4053773AC164214889108CB.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/bcb9ba7f-efd1-4994-a2a3-77993338b242/0/9FB9D7ED833E1CA6E4053773AC164214889108CB.mft
Manifest number:          02C8
Signing time:             Sun 25 Jan 2026 12:10:42 +0000
Manifest this update:     Sun 25 Jan 2026 12:05:42 +0000
Manifest next update:     Wed 28 Jan 2026 22:58:42 +0000
Files and hashes:         1: 9FB9D7ED833E1CA6E4053773AC164214889108CB.crl (hash: r3UZhZoXKfW5N7LLw81Lj3dPZZHxK0IE4ypiYRTJ1D4=)
                          2: 3130332e3134382e3139342e302f32342d3234203d3e20313430303033.roa (hash: NWZFKnhcY/aoMWV+2zpR3+GU8xiBKXVASrcCEyuCBhE=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/bcb9ba7f-efd1-4994-a2a3-77993338b242/0/9FB9D7ED833E1CA6E4053773AC164214889108CB.crl
                          rsync://repo-rpki.idnic.net/repo/bcb9ba7f-efd1-4994-a2a3-77993338b242/0/9FB9D7ED833E1CA6E4053773AC164214889108CB.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FB9D7ED833E1CA6E4053773AC164214889108CB.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Jan 2026 14:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:73:7f:10:63:70:0d:50:9f:95:96:15:b2:d5:99:0b:e0:90:ed:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9FB9D7ED833E1CA6E4053773AC164214889108CB
        Validity
            Not Before: Jan 25 12:05:42 2026 GMT
            Not After : Jan 28 22:58:42 2026 GMT
        Subject: CN=F9400924E6D7290BE383DD645914BF2A5BECD399
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:78:94:5e:31:56:44:d7:55:b1:3d:a3:54:78:
                    d7:ba:64:c3:aa:46:c1:83:a1:9b:32:a4:b4:34:2e:
                    b4:a0:b4:c1:91:cc:d8:96:91:a9:c2:3d:dd:eb:5c:
                    64:48:91:9a:48:a5:21:5e:28:ac:e6:fb:be:a6:86:
                    00:1c:09:74:6d:a7:9a:e8:3f:6b:d3:59:2f:24:5b:
                    e4:de:9c:15:0b:8f:44:9b:2a:0d:ec:bb:5b:87:e9:
                    b9:a4:f3:e6:1e:4f:96:8c:da:24:bd:83:5a:e1:78:
                    80:67:a1:88:7d:42:8d:8c:57:9f:b3:44:b4:8c:01:
                    ee:b0:a7:e0:39:ff:83:8b:98:14:55:f7:0d:9a:a5:
                    da:d9:14:98:99:ca:f6:77:6b:2d:90:57:f1:b4:cc:
                    d8:fd:95:a3:92:93:bd:e3:8e:56:28:c4:ba:63:c2:
                    a8:d9:47:0b:39:aa:23:c9:8b:87:23:35:f8:1d:82:
                    4e:9c:0e:04:17:71:02:d8:2f:c8:43:4c:42:4d:f4:
                    a4:c2:6d:ae:96:a0:39:0b:b2:41:4f:ec:10:23:31:
                    f5:c3:06:3c:a9:84:08:7c:86:a2:99:10:cc:f6:b6:
                    87:55:c2:1b:f0:05:be:e0:46:68:50:0a:3b:ef:3b:
                    b2:10:d7:fc:a6:da:ae:8e:24:c4:a8:16:e8:9f:6a:
                    5e:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:40:09:24:E6:D7:29:0B:E3:83:DD:64:59:14:BF:2A:5B:EC:D3:99
            X509v3 Authority Key Identifier:
                keyid:9F:B9:D7:ED:83:3E:1C:A6:E4:05:37:73:AC:16:42:14:88:91:08:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/bcb9ba7f-efd1-4994-a2a3-77993338b242/0/9FB9D7ED833E1CA6E4053773AC164214889108CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FB9D7ED833E1CA6E4053773AC164214889108CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bcb9ba7f-efd1-4994-a2a3-77993338b242/0/9FB9D7ED833E1CA6E4053773AC164214889108CB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:e2:65:13:96:5c:e5:11:e7:9e:c9:dc:2a:fa:00:41:cf:19:
         bf:1c:cb:e6:64:28:18:fb:e7:da:b7:9c:39:2d:09:d2:98:9f:
         c3:82:4d:2b:fb:1b:7d:e1:4e:f4:eb:0e:11:41:ef:99:04:7f:
         e4:b6:1a:06:ba:20:c9:86:47:e0:4f:1f:ec:90:68:e3:50:7b:
         7b:d2:4a:88:d3:a2:43:ea:66:66:c2:ac:c6:91:78:db:b3:e3:
         d2:49:f8:e9:93:59:0a:27:3f:fa:aa:5b:3b:b9:bb:95:6f:d8:
         f9:06:d2:79:b5:b3:f2:33:be:6b:22:08:4b:91:64:e7:8d:f5:
         b8:f5:e5:33:61:87:ec:0f:66:8e:50:28:5c:ba:43:fa:35:27:
         68:e8:49:ec:d6:47:5e:42:36:61:c1:7f:52:71:79:7a:64:02:
         f5:39:b2:df:35:c8:f2:d9:9b:15:68:4d:87:a1:98:e8:d0:8d:
         77:fd:29:b8:e0:a2:e5:0b:f4:00:b6:37:c9:82:0d:9d:cf:35:
         f7:84:1f:90:fd:db:16:8d:85:21:06:7d:e5:5a:16:82:46:66:
         46:5b:1e:72:4f:eb:7c:fd:20:98:80:f6:58:23:a4:5e:a1:cd:
         32:44:d9:13:58:c3:d7:4e:d8:5e:13:87:ab:eb:90:9c:da:67:
         27:e9:fa:26
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUbHN/EGNwDVCflZYVstWZC+CQ7ScwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUZCOUQ3RUQ4MzNFMUNBNkU0MDUzNzczQUMxNjQyMTQ4
ODkxMDhDQjAeFw0yNjAxMjUxMjA1NDJaFw0yNjAxMjgyMjU4NDJaMDMxMTAvBgNV
BAMTKEY5NDAwOTI0RTZENzI5MEJFMzgzREQ2NDU5MTRCRjJBNUJFQ0QzOTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDceJReMVZE11WxPaNUeNe6ZMOq
RsGDoZsypLQ0LrSgtMGRzNiWkanCPd3rXGRIkZpIpSFeKKzm+76mhgAcCXRtp5ro
P2vTWS8kW+TenBULj0SbKg3su1uH6bmk8+YeT5aM2iS9g1rheIBnoYh9Qo2MV5+z
RLSMAe6wp+A5/4OLmBRV9w2apdrZFJiZyvZ3ay2QV/G0zNj9laOSk73jjlYoxLpj
wqjZRws5qiPJi4cjNfgdgk6cDgQXcQLYL8hDTEJN9KTCba6WoDkLskFP7BAjMfXD
BjyphAh8hqKZEMz2todVwhvwBb7gRmhQCjvvO7IQ1/ym2q6OJMSoFuifal51AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU+UAJJObXKQvjg91kWRS/Klvs05kwHwYDVR0j
BBgwFoAUn7nX7YM+HKbkBTdzrBZCFIiRCMswDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i
Y2I5YmE3Zi1lZmQxLTQ5OTQtYTJhMy03Nzk5MzMzOGIyNDIvMC85RkI5RDdFRDgz
M0UxQ0E2RTQwNTM3NzNBQzE2NDIxNDg4OTEwOENCLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvOUZCOUQ3RUQ4MzNFMUNBNkU0MDUzNzczQUMxNjQyMTQ4ODkx
MDhDQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmNiOWJhN2YtZWZkMS00OTk0LWEy
YTMtNzc5OTMzMzhiMjQyLzAvOUZCOUQ3RUQ4MzNFMUNBNkU0MDUzNzczQUMxNjQy
MTQ4ODkxMDhDQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAEDiZROWXOUR557J3Cr6AEHPGb8cy+ZkKBj7
59q3nDktCdKYn8OCTSv7G33hTvTrDhFB75kEf+S2Gga6IMmGR+BPH+yQaONQe3vS
SojTokPqZmbCrMaReNuz49JJ+OmTWQonP/qqWzu5u5Vv2PkG0nm1s/IzvmsiCEuR
ZOeN9bj15TNhh+wPZo5QKFy6Q/o1J2joSezWR15CNmHBf1JxeXpkAvU5st81yPLZ
mxVoTYehmOjQjXf9KbjgouUL9AC2N8mCDZ3PNfeEH5D92xaNhSEGfeVaFoJGZkZb
HnJP63z9IJiA9lgjpF6hzTJE2RNYw9dO2F4Th6vrkJzaZyfp+iY=
-----END CERTIFICATE-----
Generated at Sun Jan 25 18:37:11 2026 by rpki-client