This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39.mft
File:                     FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39.mft (raw, json)
Hash identifier:          tcWJEDCexCNWP8RQFXujmMaMQyAS9o3Y4cLaEImk5HY=
Subject key identifier:   C8:11:9F:1B:A6:47:8E:59:98:BD:30:CD:C8:30:11:71:F9:4A:93:BA
Authority key identifier: FA:5B:CA:98:4E:EB:AF:FD:CE:D8:41:90:C7:07:56:DB:EB:3B:FF:39
Certificate issuer:       /CN=FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39
Certificate serial:       456D7D43A979DC3660F6953617549CC6FADB7C35
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39.mft
Manifest number:          02F4
Signing time:             Sat 06 Dec 2025 18:00:58 +0000
Manifest this update:     Sat 06 Dec 2025 17:55:58 +0000
Manifest next update:     Wed 10 Dec 2025 05:57:58 +0000
Files and hashes:         1: 3130332e3234372e32312e302f32342d3234203d3e203538343835.roa (hash: 34GAz6FSvQ986oiy73pgO3Nl806HiynZyDh81QhYAtI=)
                          2: 3130332e3234372e32302e302f32342d3234203d3e203538343835.roa (hash: Z1gDiN/X+uv2C5f6v1h8WInw2+lPzjHj0oFTtpIP6pA=)
                          3: 323430323a653130303a33383a3a2f34382d3438203d3e203538343835.roa (hash: ZcG33pBZTzSD/OyfUqiIR26pFQTz1ZHq/I2vKc5L2Lk=)
                          4: 323430323a653130303a38313a3a2f34382d3438203d3e203538343835.roa (hash: QYoY/WJkKnag3eKK6TqUfAN2/yGtdFRAxKAtoXHhjqo=)
                          5: 3130332e3234372e32322e302f32342d3234203d3e203538343835.roa (hash: saNY2uHlV/XnejqjSZTyfzI/prOYKq0PQeW13/pFt9k=)
                          6: 323430323a653130303a3a2f33322d3438203d3e203538343835.roa (hash: JJglB/VlfiSRwxyeiN2g4JH/b5q2RqTOfEL3QFxIRWk=)
                          7: 323430323a653130303a323030303a3a2f34382d3438203d3e203538343835.roa (hash: d1PRG5I24wLp0nZlSGZqsXMdn4LUKyh3+Rp9QJBPdWU=)
                          8: 323430323a653130303a32303a3a2f34382d3438203d3e203538343835.roa (hash: JQBV4LZ7vr6myTyNSsVnH8wkRJsd1to3z2hSNW0KGDU=)
                          9: 323430323a653130303a61633a3a2f34382d3438203d3e203538343835.roa (hash: PJK40q7WUwTW88oYuOeJRlP3deJscpLSdiVo4TnCchE=)
                          10: 323430323a653130303a3330353a3a2f34382d3438203d3e203538343835.roa (hash: jMXfHZ5G6a1+HMzwB17/q65yvup/Qxz3sZvzBsrsAlg=)
                          11: 323430323a653130303a37353a3a2f34382d3438203d3e203538343835.roa (hash: aHRt+E7BWGdjFLNGN2g9IGuN7mQDThteOWR07k+3Phs=)
                          12: 323430323a653130303a38303a3a2f34382d3438203d3e203538343835.roa (hash: f/URrW3I6+5vkW0D1aSS1Bkh+i2+LjuWyAbPuExcRpQ=)
                          13: 323430323a653130303a61653a3a2f34382d3438203d3e203538343835.roa (hash: jn8YvD6TNkp1LaERG+YoqpArjIVwe5+hvrSaozXb0+E=)
                          14: FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39.crl (hash: tOI6RwAh2UwNxnyywRpyZ7+u9+KtdVoE6933hBkLog4=)
                          15: 3130332e3234372e32332e302f32342d3234203d3e203538343835.roa (hash: lzNm0/0IA9d3peGzozwFKwjutuLSs05RevbSqRZ75Wc=)
                          16: 3130332e3234372e32302e302f32322d3234203d3e203538343835.roa (hash: 0yw7rRpcNLCQkltZhjGJL1siB8HST2OMsTJXjD26O8w=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39.crl
                          rsync://repo-rpki.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Dec 2025 15:57:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:6d:7d:43:a9:79:dc:36:60:f6:95:36:17:54:9c:c6:fa:db:7c:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39
        Validity
            Not Before: Dec  6 17:55:58 2025 GMT
            Not After : Dec 10 05:57:58 2025 GMT
        Subject: CN=C8119F1BA6478E5998BD30CDC8301171F94A93BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:57:25:d7:d2:b9:7c:a9:e0:5e:f8:bb:e9:b4:
                    82:ab:68:5d:78:62:d8:fd:13:7e:de:e9:3a:34:cf:
                    02:ac:04:70:f6:e3:f0:92:40:cc:24:87:6f:fa:64:
                    34:c6:28:9b:5d:14:34:01:b1:76:81:8a:96:2b:41:
                    61:26:c8:02:2b:a5:dc:35:67:d2:9f:27:99:67:e7:
                    bc:73:50:13:5b:92:6a:7c:50:f1:80:7d:c9:12:d2:
                    40:cc:e7:e7:20:e7:f5:90:6d:93:94:e4:86:ff:19:
                    f5:d5:23:b5:0e:2c:b5:fc:0f:94:a3:c3:ce:af:7d:
                    6d:eb:3c:b7:6e:15:f0:4f:04:06:60:30:18:11:02:
                    bd:d6:67:1d:b6:cf:0a:66:fd:3f:d2:6a:3d:4f:72:
                    46:2e:3b:3a:8d:73:1a:5b:1e:8a:2e:45:9f:56:0b:
                    d3:7e:c3:de:35:35:15:21:d6:50:be:9f:1e:f0:e9:
                    dd:26:31:d7:81:42:1f:3f:f0:3a:f7:d3:77:99:e6:
                    56:b3:e6:37:95:9b:6a:7a:ad:b4:8c:30:c0:9c:82:
                    54:9a:4b:15:2a:1b:e9:6b:d1:53:0f:6b:ef:d4:7a:
                    8b:6c:0d:55:0a:74:b0:3d:52:1d:f9:27:96:d1:8d:
                    e0:34:92:dc:bb:9a:50:89:78:63:5f:ae:de:7c:0f:
                    24:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:11:9F:1B:A6:47:8E:59:98:BD:30:CD:C8:30:11:71:F9:4A:93:BA
            X509v3 Authority Key Identifier:
                keyid:FA:5B:CA:98:4E:EB:AF:FD:CE:D8:41:90:C7:07:56:DB:EB:3B:FF:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:32:8c:c0:c7:ef:31:4c:5e:7f:0b:ac:e1:fd:3e:9f:d4:d8:
         6b:42:9a:23:12:96:b4:01:f0:bc:16:72:b5:ee:c1:a9:77:15:
         2a:15:32:d0:9b:70:ab:5b:a2:ac:f9:6c:87:b6:d5:c9:ff:fe:
         e9:6c:e6:8b:06:1d:36:da:8e:21:7f:f5:53:0e:11:28:f3:64:
         94:67:34:76:99:a7:49:59:ad:9b:97:67:fc:be:8c:64:65:f5:
         67:1c:f4:29:43:5c:3d:64:a7:81:7d:7f:c9:7b:6a:63:fb:f6:
         0f:3c:2c:9b:25:26:fa:35:cd:c3:85:14:ef:c9:4b:e0:5d:eb:
         bb:28:13:20:c8:2f:28:8d:c5:3b:64:2a:2b:b3:04:80:fd:d1:
         a9:42:e0:d1:ee:df:7e:ef:e6:65:94:2c:1a:50:61:20:6c:b7:
         3d:22:cf:93:c0:ef:20:ab:a0:8e:d4:5d:51:bc:b9:30:a0:00:
         d6:2d:74:f8:4d:4a:35:fa:80:df:cc:d6:bf:00:56:13:97:74:
         7a:9c:fa:fd:60:24:11:63:0b:5f:86:92:f5:3e:27:44:d3:34:
         2f:b1:87:de:c2:c0:1a:9f:1d:cf:11:40:42:6b:ed:c8:22:79:
         2a:61:42:92:52:52:cc:36:8d:d3:40:a0:79:fc:c3:34:cd:f3:
         bc:dd:40:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 00:48:47 2025 by rpki-client