This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0/B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308.mft
File:                     B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308.mft (raw, json)
Hash identifier:          aacYY5kvFFqpkvOgbjCa0Yn01c+SMIpDIOAXP0mP070=
Subject key identifier:   CB:4E:20:FA:81:FA:05:74:2C:31:8E:D4:E1:4B:F5:E8:5A:D6:98:2D
Authority key identifier: B8:C2:A2:B1:B2:11:64:AF:8E:AE:E3:87:C7:D9:A5:D9:4D:4F:83:08
Certificate issuer:       /CN=B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308
Certificate serial:       6BC363B7095260F6E98A29DEE1DD5F7E7EC8AF78
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0/B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308.mft
Manifest number:          01EB
Signing time:             Sun 25 Jan 2026 12:11:11 +0000
Manifest this update:     Sun 25 Jan 2026 12:06:11 +0000
Manifest next update:     Wed 28 Jan 2026 20:08:11 +0000
Files and hashes:         1: 3230322e3135392e35302e302f32332d3234203d3e203435373239.roa (hash: jbeNAM8uIrcuyXo9L60I9mV9bFqM+96eyJHSvni2ZAo=)
                          2: B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308.crl (hash: BG56BPkDbbiydhXu96+l44NeeNTy94UTXx5QP7zyKcc=)
                          3: 3230322e3135392e39362e302f31392d3234203d3e2039333430.roa (hash: Ovv2ETM/TwcVTfyu6Kr+ausDEpr6HmSaSG285SkzGoE=)
                          4: 3230322e3135332e3232342e302f31392d3234203d3e2039333430.roa (hash: PymGJBtcf2BbEhLIvNoHiy1Mb2P/x61Bs29YxaHSsg8=)
                          5: 3230322e35332e3232342e302f31392d3234203d3e2039333430.roa (hash: cxySA+7GoKy0ZBQ953Jz7wXFE+7U1S6vU/NAFozpO4w=)
                          6: 3131372e35342e302e302f31362d3234203d3e2039333430.roa (hash: UieSxZjEvKIMrWcJdH2TDXUustdkDqF4w0J/hh4yLRA=)
                          7: 3230322e3135392e302e302f31382d3234203d3e2039333430.roa (hash: Juur4GxLWpPp32FXP5B1lQD8F+2wWzZU/lQ5cSimSag=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0/B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308.crl
                          rsync://repo-rpki.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0/B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Jan 2026 14:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:c3:63:b7:09:52:60:f6:e9:8a:29:de:e1:dd:5f:7e:7e:c8:af:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308
        Validity
            Not Before: Jan 25 12:06:11 2026 GMT
            Not After : Jan 28 20:08:11 2026 GMT
        Subject: CN=CB4E20FA81FA05742C318ED4E14BF5E85AD6982D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:d9:0b:5a:dc:fe:2a:f8:32:65:7b:16:3a:f4:
                    de:1d:a1:f9:d9:58:5a:61:99:2b:c9:4a:16:62:d2:
                    82:45:4b:0a:bd:19:65:d9:5e:f1:eb:9d:c8:1c:d6:
                    f3:3a:43:3b:a4:a8:ac:ee:16:3a:ba:85:08:89:b6:
                    49:63:c6:a2:4f:ad:e5:2b:76:ec:c9:23:f1:ce:95:
                    a4:c5:fd:77:d5:49:a0:79:de:2d:f0:35:f3:d1:24:
                    9e:4a:28:27:2b:83:f8:69:48:24:5a:19:de:93:ab:
                    1c:4d:c2:26:44:70:8d:ef:35:19:62:86:b7:c8:fb:
                    25:16:71:ea:2b:40:cb:bd:cb:7e:28:38:de:55:e9:
                    06:2e:0c:cd:e3:02:fb:c1:11:54:bd:ed:a0:0b:53:
                    a3:ef:de:8e:0d:2c:89:87:74:e0:dd:73:e9:cb:88:
                    34:bf:8d:73:83:36:67:22:be:f5:bb:ab:f7:cd:ea:
                    c1:ee:3e:75:d4:46:b3:52:a0:52:53:a1:43:7d:56:
                    82:a2:4d:26:85:db:1f:82:b1:3f:0a:da:a0:be:11:
                    fa:76:dc:b0:8e:23:d5:11:bc:61:ed:be:5d:e8:43:
                    38:50:bc:b2:fc:53:95:b0:fe:cd:f8:43:15:b6:c9:
                    15:2b:bd:42:0b:71:4b:85:bf:a1:c3:67:91:d2:6f:
                    58:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:4E:20:FA:81:FA:05:74:2C:31:8E:D4:E1:4B:F5:E8:5A:D6:98:2D
            X509v3 Authority Key Identifier:
                keyid:B8:C2:A2:B1:B2:11:64:AF:8E:AE:E3:87:C7:D9:A5:D9:4D:4F:83:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0/B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0/B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:cd:50:e4:4f:41:41:3b:36:4b:e1:5a:ce:5c:e3:90:5d:99:
         05:c7:0c:ff:86:bb:d8:80:0a:eb:bf:57:af:a3:de:c9:e0:f6:
         e2:82:b2:20:c6:b5:7e:ec:bf:f3:61:aa:96:38:fb:ae:9d:54:
         fe:f8:e1:cb:e4:d3:6f:2a:cf:18:5d:84:e9:38:83:2e:0f:4e:
         f0:ca:0e:e8:50:ab:17:56:c2:db:df:ec:04:c1:06:06:72:a0:
         85:8f:f9:32:24:80:e9:cd:b1:d4:3b:b8:16:c0:7a:7d:b2:c2:
         4e:04:5b:9d:4e:dc:f7:68:de:78:73:45:94:c5:14:4c:94:db:
         b1:b1:06:cc:80:c2:59:4e:14:f5:3a:d2:11:0b:05:7f:d9:e4:
         96:a6:3f:5b:6b:92:f2:38:f2:d0:42:81:90:8f:dc:d5:d2:63:
         dd:21:3e:32:e4:d3:09:0e:9c:16:29:66:80:9e:7a:e1:98:fc:
         6b:70:a0:1c:77:54:aa:92:ae:04:d4:43:c7:f5:14:1b:61:15:
         51:74:51:c5:eb:6e:2b:5f:7b:fc:4b:a9:ac:7c:de:46:f2:f7:
         bf:66:b4:be:0d:06:e8:75:2b:63:bf:ba:ad:ba:c1:cc:73:8e:
         d0:c4:2a:a6:71:0e:f2:85:71:08:b8:c9:93:dc:48:8a:e9:03:
         15:59:a3:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:19:38 2026 by rpki-client