This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/1d07e3d8-9bfc-4483-a2dd-afa4593811e5/0/FABDB6E44451B7F0378AE92C2750EBFE5A3CFA38.mft
File:                     FABDB6E44451B7F0378AE92C2750EBFE5A3CFA38.mft (raw, json)
Hash identifier:          O3rbKTG93VBtGIFhYTzb4qcrfTIWiLqhufV12/fMxk8=
Subject key identifier:   1C:00:60:21:5D:39:9B:6E:E8:69:F8:D8:5D:CC:E6:65:88:9C:27:D8
Authority key identifier: FA:BD:B6:E4:44:51:B7:F0:37:8A:E9:2C:27:50:EB:FE:5A:3C:FA:38
Certificate issuer:       /CN=FABDB6E44451B7F0378AE92C2750EBFE5A3CFA38
Certificate serial:       21ECB66F14D6A2F53CFFEB6E75B7279B340B3101
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FABDB6E44451B7F0378AE92C2750EBFE5A3CFA38.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/1d07e3d8-9bfc-4483-a2dd-afa4593811e5/0/FABDB6E44451B7F0378AE92C2750EBFE5A3CFA38.mft
Manifest number:          0513
Signing time:             Fri 05 Dec 2025 00:21:50 +0000
Manifest this update:     Fri 05 Dec 2025 00:16:50 +0000
Manifest next update:     Mon 08 Dec 2025 04:59:50 +0000
Files and hashes:         1: 323430363a613063303a3a2f33322d3332203d3e20313337333331.roa (hash: Ai0eZhLY+4L7mdTG5liUS7qc6ABicMzreMWiAuYqKfU=)
                          2: FABDB6E44451B7F0378AE92C2750EBFE5A3CFA38.crl (hash: qG3BdNrXwAu8f3T77mjmMapsmOXWV06ve8Qh/22YK/s=)
                          3: 3130332e3135372e3131362e302f32332d3234203d3e20313337333331.roa (hash: gepyqAbuiPaUA1F4qNan63WSMqffSkJDQ7owW86Bv/s=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/1d07e3d8-9bfc-4483-a2dd-afa4593811e5/0/FABDB6E44451B7F0378AE92C2750EBFE5A3CFA38.crl
                          rsync://repo-rpki.idnic.net/repo/1d07e3d8-9bfc-4483-a2dd-afa4593811e5/0/FABDB6E44451B7F0378AE92C2750EBFE5A3CFA38.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FABDB6E44451B7F0378AE92C2750EBFE5A3CFA38.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Dec 2025 04:59:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:ec:b6:6f:14:d6:a2:f5:3c:ff:eb:6e:75:b7:27:9b:34:0b:31:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FABDB6E44451B7F0378AE92C2750EBFE5A3CFA38
        Validity
            Not Before: Dec  5 00:16:50 2025 GMT
            Not After : Dec  8 04:59:50 2025 GMT
        Subject: CN=1C0060215D399B6EE869F8D85DCCE665889C27D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:ee:55:74:17:96:2e:26:82:36:04:65:fc:de:
                    59:ba:11:27:97:45:f5:63:6b:f3:56:73:e4:22:76:
                    75:e7:2c:5c:fb:8c:96:4c:a9:00:7d:db:ce:69:d8:
                    86:c7:4d:6d:34:41:78:ce:81:99:c6:7e:cf:21:68:
                    f1:7a:f0:72:aa:3e:1b:b1:03:ec:fa:84:8c:70:2f:
                    39:65:10:72:e9:76:c0:b1:77:08:86:3a:73:3b:72:
                    af:dd:71:f1:2c:3c:5b:c3:10:92:9c:31:e8:40:2a:
                    67:78:9c:84:0f:96:8b:da:62:02:c4:8b:4a:ca:2e:
                    6d:ba:5e:b8:05:f9:2e:79:54:53:8d:da:9b:bc:d4:
                    e7:2f:6e:2e:85:4a:f7:4e:b5:dd:df:f4:ec:eb:cf:
                    74:12:e4:88:ca:1e:1e:fb:f1:77:f5:3b:4b:e3:c4:
                    82:7e:dc:4e:15:fe:ac:95:df:f8:02:6f:85:fe:35:
                    2c:47:25:b1:0e:92:61:b9:44:69:e9:54:47:27:61:
                    6b:05:81:af:d7:5f:97:83:3a:80:fe:68:38:1f:fc:
                    2b:20:88:99:7e:21:42:b3:81:de:bd:13:50:fc:cc:
                    21:e0:c3:5f:40:8c:9d:69:ba:da:a9:d7:89:5c:17:
                    07:a8:73:9e:44:9d:0b:b3:e8:57:4a:05:ea:27:80:
                    8a:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:00:60:21:5D:39:9B:6E:E8:69:F8:D8:5D:CC:E6:65:88:9C:27:D8
            X509v3 Authority Key Identifier:
                keyid:FA:BD:B6:E4:44:51:B7:F0:37:8A:E9:2C:27:50:EB:FE:5A:3C:FA:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/1d07e3d8-9bfc-4483-a2dd-afa4593811e5/0/FABDB6E44451B7F0378AE92C2750EBFE5A3CFA38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FABDB6E44451B7F0378AE92C2750EBFE5A3CFA38.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1d07e3d8-9bfc-4483-a2dd-afa4593811e5/0/FABDB6E44451B7F0378AE92C2750EBFE5A3CFA38.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:4e:47:f7:fe:e4:69:70:8e:1e:42:5e:f0:1c:a4:cd:64:96:
         1e:9d:73:ae:fb:2a:0b:d2:87:1f:f3:99:b0:f8:3e:f9:33:78:
         ac:d8:bc:3e:e1:af:15:11:c4:4d:bc:25:dc:22:a0:15:16:00:
         a8:1d:2a:73:b0:0e:ff:2e:aa:32:ff:3b:e0:9b:54:07:d7:41:
         9b:f3:30:34:54:3c:1f:92:96:40:b2:8b:70:fa:38:0d:e9:d8:
         cc:15:01:b7:eb:c8:f2:ab:fe:d3:b2:84:d6:d9:4f:85:3b:73:
         ea:4a:02:b2:64:df:99:ef:66:74:8c:58:10:8e:ca:14:fe:64:
         38:85:b7:f1:6a:de:ee:8b:f6:28:8d:bc:c6:6c:0f:01:b1:a5:
         0b:e1:8b:29:5c:c6:13:d7:56:e9:cc:c0:ca:48:01:24:38:a2:
         0a:e7:aa:58:40:d9:71:de:7a:15:90:b6:e1:b4:db:73:bf:41:
         a8:09:aa:5c:78:c2:c0:f5:2f:86:61:7e:11:6b:5e:df:ac:7d:
         b7:94:0b:7b:9d:ef:f9:24:81:34:d8:1b:d1:4b:57:9c:46:3c:
         ae:eb:49:05:0f:58:66:d5:b5:a1:6b:b5:83:05:0c:cb:11:42:
         09:5c:b8:8a:bc:6b:93:f9:fa:66:91:59:c2:a6:31:83:f4:65:
         db:25:57:33
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUIey2bxTWovU8/+tudbcnmzQLMQEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkFCREI2RTQ0NDUxQjdGMDM3OEFFOTJDMjc1MEVCRkU1
QTNDRkEzODAeFw0yNTEyMDUwMDE2NTBaFw0yNTEyMDgwNDU5NTBaMDMxMTAvBgNV
BAMTKDFDMDA2MDIxNUQzOTlCNkVFODY5RjhEODVEQ0NFNjY1ODg5QzI3RDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDu7lV0F5YuJoI2BGX83lm6ESeX
RfVja/NWc+QidnXnLFz7jJZMqQB9285p2IbHTW00QXjOgZnGfs8haPF68HKqPhux
A+z6hIxwLzllEHLpdsCxdwiGOnM7cq/dcfEsPFvDEJKcMehAKmd4nIQPlovaYgLE
i0rKLm26XrgF+S55VFON2pu81Ocvbi6FSvdOtd3f9Ozrz3QS5IjKHh778Xf1O0vj
xIJ+3E4V/qyV3/gCb4X+NSxHJbEOkmG5RGnpVEcnYWsFga/XX5eDOoD+aDgf/Csg
iJl+IUKzgd69E1D8zCHgw19AjJ1putqp14lcFweoc55EnQuz6FdKBeongIovAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUHABgIV05m27oafjYXczmZYicJ9gwHwYDVR0j
BBgwFoAU+r225ERRt/A3iuksJ1Dr/lo8+jgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x
ZDA3ZTNkOC05YmZjLTQ0ODMtYTJkZC1hZmE0NTkzODExZTUvMC9GQUJEQjZFNDQ0
NTFCN0YwMzc4QUU5MkMyNzUwRUJGRTVBM0NGQTM4LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRkFCREI2RTQ0NDUxQjdGMDM3OEFFOTJDMjc1MEVCRkU1QTND
RkEzOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWQwN2UzZDgtOWJmYy00NDgzLWEy
ZGQtYWZhNDU5MzgxMWU1LzAvRkFCREI2RTQ0NDUxQjdGMDM3OEFFOTJDMjc1MEVC
RkU1QTNDRkEzOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAEROR/f+5Glwjh5CXvAcpM1klh6dc677KgvS
hx/zmbD4PvkzeKzYvD7hrxURxE28JdwioBUWAKgdKnOwDv8uqjL/O+CbVAfXQZvz
MDRUPB+SlkCyi3D6OA3p2MwVAbfryPKr/tOyhNbZT4U7c+pKArJk35nvZnSMWBCO
yhT+ZDiFt/Fq3u6L9iiNvMZsDwGxpQvhiylcxhPXVunMwMpIASQ4ogrnqlhA2XHe
ehWQtuG023O/QagJqlx4wsD1L4ZhfhFrXt+sfbeUC3ud7/kkgTTYG9FLV5xGPK7r
SQUPWGbVtaFrtYMFDMsRQglcuIq8a5P5+maRWcKmMYP0ZdslVzM=
-----END CERTIFICATE-----
Generated at Sat Dec 6 22:51:43 2025 by rpki-client