This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/1c04ded8-b0f5-4594-8e0e-911ecb77ee73/0/FA62D828544F70BEAD8B3C04A86175E4FB07C4B6.mft
File:                     FA62D828544F70BEAD8B3C04A86175E4FB07C4B6.mft (raw, json)
Hash identifier:          FQEgspAmihqB4XRk+6ohTv9uaL62AvCyJi7AfszvSYM=
Subject key identifier:   42:CA:9E:DA:6E:DC:CA:1A:08:F0:97:75:EC:DA:A7:87:E8:D4:A1:72
Authority key identifier: FA:62:D8:28:54:4F:70:BE:AD:8B:3C:04:A8:61:75:E4:FB:07:C4:B6
Certificate issuer:       /CN=FA62D828544F70BEAD8B3C04A86175E4FB07C4B6
Certificate serial:       7DD406435A67C5A2D093B285599CB8EB5368A22E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FA62D828544F70BEAD8B3C04A86175E4FB07C4B6.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/1c04ded8-b0f5-4594-8e0e-911ecb77ee73/0/FA62D828544F70BEAD8B3C04A86175E4FB07C4B6.mft
Manifest number:          ED
Signing time:             Sat 06 Dec 2025 19:50:46 +0000
Manifest this update:     Sat 06 Dec 2025 19:45:46 +0000
Manifest next update:     Tue 09 Dec 2025 22:05:46 +0000
Files and hashes:         1: FA62D828544F70BEAD8B3C04A86175E4FB07C4B6.crl (hash: 4/yoTDVabO5LVHVUacG7GiRd58EykBe1ujxfRYR0OSo=)
                          2: 3135372e36362e33372e302f32342d3234203d3e20313338383034.roa (hash: elAlykoINKnAZ1hNxzJ7Wy9Qz4JU3YMP6UNvlutp4wU=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/1c04ded8-b0f5-4594-8e0e-911ecb77ee73/0/FA62D828544F70BEAD8B3C04A86175E4FB07C4B6.crl
                          rsync://repo-rpki.idnic.net/repo/1c04ded8-b0f5-4594-8e0e-911ecb77ee73/0/FA62D828544F70BEAD8B3C04A86175E4FB07C4B6.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FA62D828544F70BEAD8B3C04A86175E4FB07C4B6.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Dec 2025 06:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:d4:06:43:5a:67:c5:a2:d0:93:b2:85:59:9c:b8:eb:53:68:a2:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA62D828544F70BEAD8B3C04A86175E4FB07C4B6
        Validity
            Not Before: Dec  6 19:45:46 2025 GMT
            Not After : Dec  9 22:05:46 2025 GMT
        Subject: CN=42CA9EDA6EDCCA1A08F09775ECDAA787E8D4A172
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:79:3d:17:cf:4f:ab:4e:02:5f:ab:dd:1f:7d:
                    4a:f9:33:5b:58:74:7a:d7:a0:da:27:eb:4a:a8:48:
                    6c:b3:ed:01:71:ee:58:4c:c2:29:d0:18:e0:8b:ad:
                    33:b2:a2:12:c1:9c:58:8a:3a:6f:81:67:21:09:3c:
                    c8:12:7a:28:04:fa:6c:4f:3c:b7:62:2e:21:d7:c1:
                    07:14:ea:27:2f:41:41:2c:1c:82:36:37:71:df:ee:
                    fb:2b:8f:50:b5:0b:08:95:58:93:ce:e3:9d:5f:e9:
                    d6:a2:96:da:6d:9d:f4:d2:e4:b1:de:4d:03:9e:63:
                    fb:3f:07:de:8a:fd:fa:2a:67:37:f2:e0:56:b9:c2:
                    12:a3:1f:9b:ed:b1:1e:61:ec:ee:40:75:92:42:a7:
                    0b:dd:a4:22:85:6c:b2:b7:fb:28:26:6f:c2:b5:80:
                    a1:45:4a:0a:02:04:2c:fb:ee:e6:eb:79:82:39:6a:
                    3c:20:95:9c:e2:f4:d5:54:9f:33:a0:7e:6a:a4:a2:
                    74:f9:d5:bc:15:11:bb:af:87:69:1a:8e:6a:91:a7:
                    7d:fd:b6:e6:cd:f6:8d:6d:ef:06:7c:de:11:96:73:
                    5e:fb:c1:44:47:d8:9f:99:00:a0:8e:60:6b:16:87:
                    cf:db:e2:e5:c6:6e:8c:59:1e:c2:28:21:ad:17:8a:
                    b8:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:CA:9E:DA:6E:DC:CA:1A:08:F0:97:75:EC:DA:A7:87:E8:D4:A1:72
            X509v3 Authority Key Identifier:
                keyid:FA:62:D8:28:54:4F:70:BE:AD:8B:3C:04:A8:61:75:E4:FB:07:C4:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/1c04ded8-b0f5-4594-8e0e-911ecb77ee73/0/FA62D828544F70BEAD8B3C04A86175E4FB07C4B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FA62D828544F70BEAD8B3C04A86175E4FB07C4B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1c04ded8-b0f5-4594-8e0e-911ecb77ee73/0/FA62D828544F70BEAD8B3C04A86175E4FB07C4B6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:b3:4d:12:22:0a:53:6b:ce:5a:a9:a9:01:85:39:e3:ed:9b:
         e8:81:54:27:db:1f:dc:ef:77:f1:48:78:25:30:50:cb:96:de:
         b1:b2:cf:f9:7f:7a:83:ea:09:4e:83:db:57:d6:61:bd:55:33:
         22:56:6e:91:b5:16:b8:ae:89:9a:58:cc:72:84:74:d5:52:be:
         3b:76:cd:49:c2:a0:63:8b:d5:61:5e:60:de:ad:5a:02:93:83:
         09:f5:91:87:5d:66:0e:1f:0e:5f:3d:41:39:58:d0:43:b1:71:
         e6:ef:90:28:50:1b:35:44:db:28:d4:b6:d4:08:b2:ea:b5:1a:
         0d:74:bb:5e:47:d6:11:91:96:b0:47:5b:41:20:07:1f:3e:a3:
         8d:51:da:08:fc:b7:6a:87:cd:21:7b:44:09:03:c8:94:b8:08:
         df:30:d6:32:61:3b:54:f9:d9:28:35:a7:1c:1a:84:cd:64:82:
         f9:ab:f4:f9:4a:4d:1f:e4:ce:33:4c:5a:22:94:72:d8:8d:8a:
         bf:99:3e:ec:64:e9:e0:b4:91:6e:5d:ec:04:28:9c:89:b7:63:
         b4:d6:0c:88:66:9c:f1:9c:55:00:43:79:50:f3:e6:a3:17:7d:
         3c:e2:56:9a:8e:6d:25:2d:7f:4f:64:98:fc:5c:aa:02:c0:0c:
         5d:ae:23:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 06:58:33 2025 by rpki-client