This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.mft
File:                     BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.mft (raw, json)
Hash identifier:          7MZ7x6rVyE2iaLvUpzIfovaLnmYM00H5haBvv+M21Mw=
Subject key identifier:   DB:0D:69:A2:15:10:38:AC:BF:54:80:6F:C5:2E:57:46:13:17:5F:B0
Authority key identifier: BF:07:6E:A2:4A:68:CF:15:2C:32:3C:7A:3D:FD:3F:92:AF:E8:AA:2B
Certificate issuer:       /CN=BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B
Certificate serial:       38FCE8592274C394007155245556CEAAC2933D3B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.mft
Manifest number:          0552
Signing time:             Sun 25 Jan 2026 09:22:30 +0000
Manifest this update:     Sun 25 Jan 2026 09:17:30 +0000
Manifest next update:     Wed 28 Jan 2026 10:39:30 +0000
Files and hashes:         1: 3131312e36372e37362e302f32342d3234203d3e203536323333.roa (hash: q6kGIkTw1IEwFZ8E1rrhCKF72eKLzmU0iFvN+CMeGms=)
                          2: 3131312e36372e37332e302f32342d3234203d3e203536323333.roa (hash: LN/QrtLQN7eBHDeVxv+de8QzLZrhiGE5e9eCTFW2W9s=)
                          3: BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.crl (hash: sQQhBRPy0fNMW19eEKS19AYhph9IT3nd4PlcHcuUAq8=)
                          4: 3131312e36372e36342e302f31392d3234203d3e203435373836.roa (hash: WtJvSkSMcWIFCYDWJoeYFOWIHYYIU2e63ZAjyF2Lb8o=)
                          5: 323030313a6466303a63623a3a2f34382d3438203d3e203435373836.roa (hash: /ZSyzzH4osQQo8OEYTUKDqHS0TOIh680hRVxT7riSK4=)
                          6: 3131312e36372e38302e302f32332d3234203d3e203535363931.roa (hash: 6r7ytzVqOZCu9ltnazdoDFZyu1sN5kdyWtk6OiFCZME=)
                          7: 3130332e32312e38342e302f32322d3234203d3e203435373836.roa (hash: TQgzpMcLfaNgOb2UQ22DmepvwTBX2ZphizKn7sBXlfU=)
                          8: 34352e36342e3130302e302f32322d3234203d3e203435373836.roa (hash: sLI9kyH4UUKtJ48DuSDvIEt/kI9PlelTvUCSLOep6GI=)
                          9: 3138322e35302e3234302e302f32302d3234203d3e203435373836.roa (hash: duzHqAm6QedJQSgIxWwqnRHJ98BpWQZp6Vy/UDaP+2w=)
                          10: 3230322e36312e3130302e302f32332d3234203d3e203435373836.roa (hash: a8mTP5wqsK0/6i33hi9F2fx0vcrLrr8F0sXVOsBm+uM=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.crl
                          rsync://repo-rpki.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Jan 2026 10:39:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:fc:e8:59:22:74:c3:94:00:71:55:24:55:56:ce:aa:c2:93:3d:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B
        Validity
            Not Before: Jan 25 09:17:30 2026 GMT
            Not After : Jan 28 10:39:30 2026 GMT
        Subject: CN=DB0D69A2151038ACBF54806FC52E574613175FB0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:66:9f:40:3d:a1:a5:0b:24:87:63:ca:e1:55:
                    24:18:22:d0:40:35:5e:b1:78:2e:de:2a:8d:c2:3d:
                    07:2b:50:b9:2d:91:04:2d:28:a1:f6:6f:d4:6a:37:
                    d8:ee:9c:45:33:fa:1b:9b:78:9a:a4:19:e8:60:2a:
                    99:89:ad:52:98:25:4d:eb:ec:5a:e9:1c:09:cb:8a:
                    ba:f8:89:9d:f7:2d:7a:c3:f1:fd:37:aa:97:8a:cb:
                    76:54:42:a2:72:44:95:e5:56:d2:4e:1d:62:2c:a5:
                    14:3a:5b:bd:c6:17:79:b5:0f:d9:2d:6e:75:59:df:
                    c0:60:0c:dc:9e:43:31:d1:f1:78:85:b0:47:a8:cb:
                    fa:62:d3:a2:cc:70:4a:f4:c7:93:ba:9d:71:1f:3e:
                    74:22:54:a8:c7:92:d8:0b:ad:84:04:a9:93:64:0b:
                    ee:2b:35:50:40:0d:a0:7d:a0:ac:68:23:06:c8:94:
                    b3:ee:d4:bd:14:d4:cb:0b:01:5a:51:46:7f:36:a8:
                    9c:cf:27:ae:13:34:8a:99:c1:86:d8:67:18:e0:9e:
                    d1:0b:6f:84:57:ec:3d:21:3f:e8:27:d8:d8:be:08:
                    7d:8b:6c:84:2a:ae:c8:0e:92:f7:bd:99:79:4d:f5:
                    4f:3d:ae:f9:50:30:60:1d:20:b5:c4:f8:f9:c5:64:
                    51:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:0D:69:A2:15:10:38:AC:BF:54:80:6F:C5:2E:57:46:13:17:5F:B0
            X509v3 Authority Key Identifier:
                keyid:BF:07:6E:A2:4A:68:CF:15:2C:32:3C:7A:3D:FD:3F:92:AF:E8:AA:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:4c:4a:42:a7:86:86:03:93:9c:75:ba:c7:e1:fa:1d:dc:81:
         51:b6:99:dd:aa:65:b5:56:38:d2:d2:dc:54:fe:71:7e:7b:d0:
         9a:ba:78:d8:9c:ea:ff:af:c1:e7:f4:8c:83:a7:43:cd:45:27:
         3f:c6:84:69:8a:91:18:e9:ec:47:d6:6c:b8:7b:6d:bd:7b:0b:
         a3:5f:c1:db:cd:1c:c8:d0:76:b5:00:02:3b:cf:83:e8:c9:3e:
         d1:42:b3:28:57:f0:c4:b1:1c:99:17:2f:ee:bc:a5:43:c3:e3:
         f6:8f:e5:de:af:c4:88:d8:df:aa:11:e6:ff:55:3e:0b:e0:d5:
         eb:9d:f4:ae:8a:0b:e3:8e:4c:b3:b8:54:10:89:06:2b:74:c0:
         a8:0b:9c:26:a5:d6:bd:2b:80:ff:62:10:72:57:a3:c8:90:27:
         6e:ae:a0:5f:79:ad:cd:d9:3e:50:c1:af:41:d1:d2:1a:62:51:
         d2:76:f3:34:a5:ee:d5:54:b8:ba:da:ca:c2:af:45:83:8f:4a:
         a0:75:27:ed:de:3d:04:fb:2b:ee:6b:e3:cf:3b:b5:ce:10:71:
         0c:7d:5c:33:20:bd:be:3c:66:bc:fe:3e:19:b6:d0:29:7e:f8:
         7e:77:ab:86:c6:6e:25:f6:6f:c2:ae:bb:b6:a9:82:23:d4:38:
         7d:12:44:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:23:03 2026 by rpki-client