This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/fa674668-0613-4a64-9323-547636b7d8b0/0/B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.mft
File:                     B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.mft (raw, json)
Hash identifier:          cAQK/ThM1beZbyC7lZALlBl2kpxkAqqIq9+21XHwj5w=
Subject key identifier:   1D:B3:83:62:74:42:89:E1:A8:A3:A9:DD:23:D9:3E:1B:3A:65:8C:F6
Authority key identifier: B8:B4:7D:E5:74:D4:4D:4C:C9:A3:E4:E2:E1:F7:AC:9C:B0:AE:A0:B5
Certificate issuer:       /CN=B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5
Certificate serial:       28B85F038F34ACD2C7F8653A3785D37AAA4EA09B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/fa674668-0613-4a64-9323-547636b7d8b0/0/B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.mft
Manifest number:          01CF
Signing time:             Fri 23 Jan 2026 22:32:19 +0000
Manifest this update:     Fri 23 Jan 2026 22:27:19 +0000
Manifest next update:     Mon 26 Jan 2026 22:50:19 +0000
Files and hashes:         1: B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.crl (hash: adCYEmxl12DGoR14i3RzWLjcRZVGICTlijPvlNkXWEI=)
                          2: 3130332e3131372e35362e302f32332d3234203d3e20313336303532.roa (hash: hTMhFpyCQFUqahvHac3PbyQvEBFh/2YhQZ3DB9bPPjE=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/fa674668-0613-4a64-9323-547636b7d8b0/0/B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.crl
                          rsync://repo-rpki.idnic.net/repo/fa674668-0613-4a64-9323-547636b7d8b0/0/B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Jan 2026 22:50:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:b8:5f:03:8f:34:ac:d2:c7:f8:65:3a:37:85:d3:7a:aa:4e:a0:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5
        Validity
            Not Before: Jan 23 22:27:19 2026 GMT
            Not After : Jan 26 22:50:19 2026 GMT
        Subject: CN=1DB38362744289E1A8A3A9DD23D93E1B3A658CF6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b3:e9:e7:72:70:6f:ee:b4:51:2d:5f:63:11:
                    fe:81:85:6e:b1:5c:8b:4b:0e:5f:7b:6d:70:6e:17:
                    37:b3:f9:41:4c:d9:fc:e3:21:14:01:d8:4e:ca:fc:
                    89:d3:0d:c5:c4:1b:69:31:fc:1e:8b:98:40:90:e7:
                    77:76:c3:0b:7d:5f:99:50:ca:84:be:5c:31:a3:f6:
                    55:95:4c:8b:a8:aa:70:33:92:f4:7f:5a:37:be:d7:
                    a2:ac:99:4d:f1:64:b0:05:b2:ad:aa:58:33:ef:d5:
                    a2:02:a3:29:f9:37:82:43:6b:59:d1:d9:5d:4b:54:
                    e3:86:d9:ec:0b:cd:12:11:0e:5c:22:e9:03:50:87:
                    39:2f:89:c4:96:24:d9:01:7b:03:b0:bd:f7:f8:95:
                    e6:ed:bf:7f:df:d3:4d:bd:35:48:28:02:24:50:d3:
                    c2:fa:fa:a8:44:46:77:27:c7:a0:b5:03:11:ea:fb:
                    c5:6b:f1:58:de:87:b8:d5:c3:41:86:c2:91:10:19:
                    9c:4b:b9:33:ac:9b:53:09:57:04:00:ef:dd:8c:eb:
                    1e:8d:36:8a:97:8b:0d:13:fb:86:d9:f5:e2:be:ac:
                    fc:4a:8d:44:a0:89:f2:c2:9f:98:dc:de:80:d5:e3:
                    cc:54:db:f0:ca:7e:d6:db:7a:f0:76:03:68:c0:63:
                    a5:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:B3:83:62:74:42:89:E1:A8:A3:A9:DD:23:D9:3E:1B:3A:65:8C:F6
            X509v3 Authority Key Identifier:
                keyid:B8:B4:7D:E5:74:D4:4D:4C:C9:A3:E4:E2:E1:F7:AC:9C:B0:AE:A0:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/fa674668-0613-4a64-9323-547636b7d8b0/0/B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fa674668-0613-4a64-9323-547636b7d8b0/0/B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:b4:3e:40:96:88:90:4a:1c:c9:dc:da:48:79:a4:d7:64:9f:
         1f:bd:dc:a0:18:bb:e6:2f:90:76:80:5a:39:1e:72:2e:0e:6a:
         6a:b1:52:a0:95:68:f9:d1:15:fd:33:b8:3e:69:e4:96:0e:01:
         d3:04:e3:16:e5:1f:97:ae:24:8e:a7:32:01:ea:cc:ba:4f:49:
         1d:93:db:c2:90:10:e6:d6:ed:a5:35:bc:d0:fc:f0:16:2f:38:
         14:16:92:1e:3e:18:91:86:c8:13:c2:47:a7:07:60:b0:c5:a1:
         2a:f5:7e:e5:a5:63:13:96:f9:2b:65:dd:17:4d:df:dc:85:ac:
         2f:aa:ab:a1:a9:7c:0a:55:8c:69:ad:70:e6:51:59:6a:b5:74:
         17:aa:c2:4f:3e:c7:61:27:eb:ac:58:69:fc:70:ae:22:88:23:
         03:fc:fb:c7:ee:55:b1:aa:cb:6e:9b:1e:59:9b:6e:60:3b:38:
         82:7a:9c:aa:97:7d:78:66:e1:05:33:b8:2f:1f:45:7e:c3:0d:
         10:71:60:d4:c5:d2:be:ec:07:9f:be:f2:e0:e4:3b:5f:09:a9:
         c1:78:2f:c9:ae:50:e6:a4:96:0d:cc:a4:90:0b:54:1a:07:33:
         2e:fb:9a:a1:b8:4e:e5:31:3e:50:68:b8:ad:60:38:78:d5:d7:
         b2:41:2d:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:23:38 2026 by rpki-client