This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/0461d7a7-a11e-400b-9170-c797ed88d702/0/FED855DD505D24B6FE25BD8656297329F7EF4785.mft
File:                     FED855DD505D24B6FE25BD8656297329F7EF4785.mft (raw, json)
Hash identifier:          2DZjGh6TbXSzy9uZGcEYHKyO+nMJlgQQQqaHOhlP/Uk=
Subject key identifier:   81:90:92:FE:87:81:F2:05:35:33:53:6E:B8:E5:21:DF:88:35:7A:14
Authority key identifier: FE:D8:55:DD:50:5D:24:B6:FE:25:BD:86:56:29:73:29:F7:EF:47:85
Certificate issuer:       /CN=FED855DD505D24B6FE25BD8656297329F7EF4785
Certificate serial:       70AF8EEA9AAADC56FEC1289B2E3E71DC131109D7
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FED855DD505D24B6FE25BD8656297329F7EF4785.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/0461d7a7-a11e-400b-9170-c797ed88d702/0/FED855DD505D24B6FE25BD8656297329F7EF4785.mft
Manifest number:          04BE
Signing time:             Sun 25 Jan 2026 09:51:30 +0000
Manifest this update:     Sun 25 Jan 2026 09:46:30 +0000
Manifest next update:     Wed 28 Jan 2026 15:48:30 +0000
Files and hashes:         1: 3130332e3130352e3132382e302f32342d3234203d3e203137373237.roa (hash: X2PEKknjtTcnLsrGiadMk08xxZNciTvdVjNrgOP4sHk=)
                          2: 3130332e3130352e3133302e302f32342d3234203d3e203137373237.roa (hash: yMrj8AoB/ixjd6PVgwO256Xjq06xuds8sgMBoLkTbyM=)
                          3: FED855DD505D24B6FE25BD8656297329F7EF4785.crl (hash: E1DPsQAOQKPQFnsjGIvhvoNZdE1UAfaze6Bq0jHRknY=)
                          4: 3130332e3130352e3132382e302f32322d3232203d3e203137373237.roa (hash: IhDRQtUCQIm4IOPr5vP9tEfWgB4QjIXQlUOAr7HBNq4=)
                          5: 3130332e3130352e3132392e302f32342d3234203d3e203137373237.roa (hash: hPyIxp0hj3k+joStahsmifFKwjq2yL5rkOsyq1Wlc34=)
                          6: 3130332e3130352e3133312e302f32342d3234203d3e203137373237.roa (hash: MeNQV5B+OerhDUDBOkfR5BHmeZ2GFCk+XtpnzmEeM9I=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/0461d7a7-a11e-400b-9170-c797ed88d702/0/FED855DD505D24B6FE25BD8656297329F7EF4785.crl
                          rsync://repo-rpki.idnic.net/repo/0461d7a7-a11e-400b-9170-c797ed88d702/0/FED855DD505D24B6FE25BD8656297329F7EF4785.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FED855DD505D24B6FE25BD8656297329F7EF4785.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Jan 2026 14:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:af:8e:ea:9a:aa:dc:56:fe:c1:28:9b:2e:3e:71:dc:13:11:09:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FED855DD505D24B6FE25BD8656297329F7EF4785
        Validity
            Not Before: Jan 25 09:46:30 2026 GMT
            Not After : Jan 28 15:48:30 2026 GMT
        Subject: CN=819092FE8781F2053533536EB8E521DF88357A14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:e1:95:73:20:af:42:53:0e:84:48:69:73:68:
                    df:f7:c3:33:a5:09:b4:37:65:3a:a9:90:ae:b7:07:
                    88:86:ee:d8:37:1d:54:c2:41:12:c2:ab:3c:38:bc:
                    3a:1d:8b:1a:ff:20:1e:a2:53:fc:3e:c9:32:1b:51:
                    d5:76:51:ab:a1:d5:1e:5d:c9:3e:70:b9:6b:74:60:
                    bf:88:46:61:30:17:ce:6b:15:e8:05:e5:3e:21:2f:
                    60:39:0e:ef:fb:b7:aa:f0:2f:f6:a5:3a:73:a0:24:
                    84:e9:20:10:56:be:29:50:c5:51:33:68:fc:40:20:
                    6b:16:a7:7b:05:67:13:48:fb:69:b5:69:e9:f9:3a:
                    31:d6:d0:e4:62:fc:79:c4:2a:d8:5c:de:2b:6a:d7:
                    e7:35:68:ae:3e:b5:7f:46:2c:b3:db:00:56:b4:a2:
                    ba:8c:30:61:87:c6:38:d2:24:54:56:bf:aa:0b:3a:
                    ef:c7:5f:18:23:c6:b7:7c:be:67:3d:f3:b0:1e:79:
                    ec:06:62:e3:bc:5e:cb:d7:7d:04:2a:b7:f0:0a:c2:
                    43:2c:c2:41:8d:f0:b6:90:9b:e2:47:0e:53:36:f5:
                    0e:d3:34:e2:cf:61:92:5a:2b:c0:ce:5d:1c:21:91:
                    58:f1:36:8f:7a:32:52:a7:5e:cb:bf:59:b8:93:53:
                    ac:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:90:92:FE:87:81:F2:05:35:33:53:6E:B8:E5:21:DF:88:35:7A:14
            X509v3 Authority Key Identifier:
                keyid:FE:D8:55:DD:50:5D:24:B6:FE:25:BD:86:56:29:73:29:F7:EF:47:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/0461d7a7-a11e-400b-9170-c797ed88d702/0/FED855DD505D24B6FE25BD8656297329F7EF4785.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FED855DD505D24B6FE25BD8656297329F7EF4785.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0461d7a7-a11e-400b-9170-c797ed88d702/0/FED855DD505D24B6FE25BD8656297329F7EF4785.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         da:d7:60:95:89:f0:f2:4d:ba:cb:a5:3a:31:60:48:97:62:2a:
         23:7a:29:06:10:ee:4d:8f:fd:eb:fa:7b:fa:70:24:70:47:2a:
         e5:e9:e4:52:5b:76:48:d4:8e:44:f6:13:1d:2c:09:0e:9f:a8:
         4f:14:7e:83:4b:ec:f3:f9:02:19:2d:8c:9e:db:61:df:5d:e2:
         f2:3f:bb:75:99:18:eb:73:15:16:eb:54:44:05:d1:bf:3d:c4:
         15:a1:7f:ae:d2:9f:6a:b5:c6:d4:91:0e:f8:08:ed:39:ea:37:
         af:0c:6f:62:b0:50:8a:2c:74:2d:ca:f1:c5:a1:c1:20:a0:b7:
         db:ae:ab:4c:65:84:f1:05:aa:fb:9b:e0:68:8f:11:4a:f8:53:
         25:3e:e1:31:56:84:e5:19:be:fe:1b:ea:7c:65:d2:07:05:9a:
         1d:8a:d8:0e:fd:b5:f1:94:82:63:ba:c6:7b:35:38:9a:b2:f5:
         3d:fb:70:e3:09:41:76:8b:c3:e5:6b:4a:ae:67:f0:fc:75:e7:
         8e:d0:c9:e9:8a:6e:a1:7a:bf:60:65:c4:41:7d:50:fb:18:d8:
         17:0d:65:69:f4:bc:78:9d:10:4c:1a:89:76:fa:e8:b7:d7:cb:
         8d:f9:f4:b6:a2:33:dd:1b:c1:46:c8:c6:18:37:6a:4d:e5:ba:
         b8:44:42:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:08:23 2026 by rpki-client