This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39.mft
File:                     FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39.mft (raw, json)
Hash identifier:          zCAfUbLOEIDHR3pKkUPs2JB1v3rA7qe67JlVoeasyvo=
Subject key identifier:   95:F6:CA:F6:20:FB:F6:49:AE:32:AE:25:67:81:71:8B:81:52:69:0B
Authority key identifier: FA:5B:CA:98:4E:EB:AF:FD:CE:D8:41:90:C7:07:56:DB:EB:3B:FF:39
Certificate issuer:       /CN=FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39
Certificate serial:       5172FBB7192B83E61A8BC89232AAD841D73F4BB8
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39.mft
Manifest number:          0309
Signing time:             Fri 23 Jan 2026 20:50:59 +0000
Manifest this update:     Fri 23 Jan 2026 20:45:59 +0000
Manifest next update:     Tue 27 Jan 2026 01:46:59 +0000
Files and hashes:         1: 323430323a653130303a33383a3a2f34382d3438203d3e203538343835.roa (hash: ZcG33pBZTzSD/OyfUqiIR26pFQTz1ZHq/I2vKc5L2Lk=)
                          2: 3130332e3234372e32302e302f32322d3234203d3e203538343835.roa (hash: 0yw7rRpcNLCQkltZhjGJL1siB8HST2OMsTJXjD26O8w=)
                          3: 3130332e3234372e32322e302f32342d3234203d3e203538343835.roa (hash: saNY2uHlV/XnejqjSZTyfzI/prOYKq0PQeW13/pFt9k=)
                          4: 3130332e3234372e32332e302f32342d3234203d3e203538343835.roa (hash: lzNm0/0IA9d3peGzozwFKwjutuLSs05RevbSqRZ75Wc=)
                          5: 3130332e3234372e32302e302f32342d3234203d3e203538343835.roa (hash: Z1gDiN/X+uv2C5f6v1h8WInw2+lPzjHj0oFTtpIP6pA=)
                          6: 323430323a653130303a3a2f33322d3438203d3e203538343835.roa (hash: JJglB/VlfiSRwxyeiN2g4JH/b5q2RqTOfEL3QFxIRWk=)
                          7: 323430323a653130303a37353a3a2f34382d3438203d3e203538343835.roa (hash: aHRt+E7BWGdjFLNGN2g9IGuN7mQDThteOWR07k+3Phs=)
                          8: 323430323a653130303a38303a3a2f34382d3438203d3e203538343835.roa (hash: f/URrW3I6+5vkW0D1aSS1Bkh+i2+LjuWyAbPuExcRpQ=)
                          9: 323430323a653130303a3330353a3a2f34382d3438203d3e203538343835.roa (hash: jMXfHZ5G6a1+HMzwB17/q65yvup/Qxz3sZvzBsrsAlg=)
                          10: 323430323a653130303a61653a3a2f34382d3438203d3e203538343835.roa (hash: jn8YvD6TNkp1LaERG+YoqpArjIVwe5+hvrSaozXb0+E=)
                          11: 323430323a653130303a61633a3a2f34382d3438203d3e203538343835.roa (hash: PJK40q7WUwTW88oYuOeJRlP3deJscpLSdiVo4TnCchE=)
                          12: 323430323a653130303a323030303a3a2f34382d3438203d3e203538343835.roa (hash: d1PRG5I24wLp0nZlSGZqsXMdn4LUKyh3+Rp9QJBPdWU=)
                          13: FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39.crl (hash: Z1E4ew9xMY+iz532aTz1+wVXLnKZgYIyaCHn9OGROoE=)
                          14: 323430323a653130303a38313a3a2f34382d3438203d3e203538343835.roa (hash: QYoY/WJkKnag3eKK6TqUfAN2/yGtdFRAxKAtoXHhjqo=)
                          15: 323430323a653130303a32303a3a2f34382d3438203d3e203538343835.roa (hash: JQBV4LZ7vr6myTyNSsVnH8wkRJsd1to3z2hSNW0KGDU=)
                          16: 3130332e3234372e32312e302f32342d3234203d3e203538343835.roa (hash: 34GAz6FSvQ986oiy73pgO3Nl806HiynZyDh81QhYAtI=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39.crl
                          rsync://repo-rpki.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Jan 2026 01:46:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:72:fb:b7:19:2b:83:e6:1a:8b:c8:92:32:aa:d8:41:d7:3f:4b:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39
        Validity
            Not Before: Jan 23 20:45:59 2026 GMT
            Not After : Jan 27 01:46:59 2026 GMT
        Subject: CN=95F6CAF620FBF649AE32AE256781718B8152690B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:d6:a9:92:43:cf:0b:61:a9:96:88:8a:48:3e:
                    e2:bf:bf:a4:91:7c:3d:0b:68:e6:28:d4:6d:db:5b:
                    c3:bb:8b:eb:cf:d2:e7:65:6e:bb:0a:0b:b5:28:e0:
                    e4:03:9e:d8:8d:85:b1:7e:8a:f3:d9:d5:21:d9:6d:
                    88:0d:34:3d:b0:6b:ec:66:f6:68:76:f6:d3:c7:b5:
                    44:d8:dc:38:a8:b8:c2:c9:c3:a6:a1:a8:15:5b:0e:
                    ac:ee:96:07:5f:38:3f:e8:09:9f:98:e0:f9:1d:6e:
                    46:37:48:47:20:d9:eb:91:d6:fc:d6:64:2c:b4:15:
                    49:69:2f:7a:e0:06:28:bf:f2:81:e7:fb:09:a3:dc:
                    21:32:6b:d6:0d:48:89:53:c3:5f:c0:b0:0e:1b:06:
                    1f:12:f5:bd:15:84:0f:9a:7e:ff:0a:d2:c0:3d:7d:
                    30:4d:69:85:50:0c:50:18:e4:85:79:b4:cb:94:13:
                    9c:68:e0:56:d3:97:b3:5d:1b:cf:09:9b:cd:c6:3c:
                    90:af:94:00:1f:cd:60:26:60:c5:20:cc:2a:33:76:
                    c7:7a:99:7d:c1:66:a8:d4:41:c5:04:73:a9:43:7b:
                    b9:df:28:f7:6a:14:3e:65:02:9d:8a:69:15:3f:a0:
                    b3:49:58:89:5e:cd:2c:27:68:bf:44:b4:8e:5a:b4:
                    b1:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:F6:CA:F6:20:FB:F6:49:AE:32:AE:25:67:81:71:8B:81:52:69:0B
            X509v3 Authority Key Identifier:
                keyid:FA:5B:CA:98:4E:EB:AF:FD:CE:D8:41:90:C7:07:56:DB:EB:3B:FF:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:b7:2f:87:12:07:6c:98:06:bb:a6:ce:9d:e8:42:bd:61:1d:
         ee:8c:d3:c7:9f:1c:30:99:9b:fd:0b:5a:f4:20:bd:aa:d3:c4:
         23:ba:eb:86:7b:c9:61:e7:01:e1:d6:39:26:bc:37:2a:8b:37:
         b4:78:5a:b1:36:a9:67:f9:bc:40:07:d4:a8:69:8e:13:41:b9:
         e8:9b:23:f3:07:48:14:bf:49:ff:24:ae:dc:07:2b:e9:03:57:
         0a:bf:ea:df:dc:7f:fb:8a:3e:bd:2f:8d:db:6e:cb:65:e3:b8:
         fc:2c:88:d4:2a:82:d4:a0:9e:0a:53:a4:00:75:61:30:46:78:
         84:5d:85:c9:ec:1e:8e:82:2c:89:4d:49:ec:34:15:e7:67:1f:
         53:a1:e2:7d:5a:19:be:25:45:45:7b:de:28:9a:27:3f:07:c1:
         a5:cb:50:b1:a4:0d:de:14:e6:e0:b9:50:15:a4:44:f2:1c:7d:
         2c:03:9a:3b:bd:2f:1f:21:6e:f9:8b:d9:01:e6:36:24:e4:eb:
         ac:7e:3e:8e:6b:d0:8d:fa:c6:a7:aa:7c:25:e6:a8:cb:39:43:
         89:ea:9c:4a:1d:8e:e7:04:09:4d:7a:52:84:1e:42:14:8b:1c:
         07:d1:61:8d:01:bf:28:28:00:68:f1:a4:f4:fa:b0:83:b4:84:
         e2:4b:11:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 00:44:22 2026 by rpki-client