This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/478fd4af-fe67-45c8-80b7-06fc118df8e2/0/FCD05385904E00F3C10A339EE19D924D72FFAE0E.mft
File:                     FCD05385904E00F3C10A339EE19D924D72FFAE0E.mft (raw, json)
Hash identifier:          FRE2ixpF1ogheXlNia1lNsh8gB2EgMrfDYWKqjmnwdk=
Subject key identifier:   59:00:FF:38:AA:FA:18:6E:F5:B2:AF:92:A1:19:C2:74:77:AE:0F:C2
Authority key identifier: FC:D0:53:85:90:4E:00:F3:C1:0A:33:9E:E1:9D:92:4D:72:FF:AE:0E
Certificate issuer:       /CN=FCD05385904E00F3C10A339EE19D924D72FFAE0E
Certificate serial:       028913220AEE678CDF1CBB3502A3585D93E656DE
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FCD05385904E00F3C10A339EE19D924D72FFAE0E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/478fd4af-fe67-45c8-80b7-06fc118df8e2/0/FCD05385904E00F3C10A339EE19D924D72FFAE0E.mft
Manifest number:          053A
Signing time:             Sat 06 Dec 2025 08:01:49 +0000
Manifest this update:     Sat 06 Dec 2025 07:56:49 +0000
Manifest next update:     Tue 09 Dec 2025 16:31:49 +0000
Files and hashes:         1: 3137352e3135382e33322e302f31392d3234203d3e20313335343738.roa (hash: atmaN7VfuZGEAxBx3mBciW1u2N3hThOAJ46HBH8lQC0=)
                          2: 3137352e3135382e33322e302f32322d3234203d3e2034373837.roa (hash: TuVqDXW8MpVE10vVBcu9sQVQsL0l/kEvRxGqJqvUgn0=)
                          3: FCD05385904E00F3C10A339EE19D924D72FFAE0E.crl (hash: 1ICnobZDubYX9P5ceXxCQC0dvx+Qh5lSv8+ReyfViYo=)
                          4: 323430323a393830303a343030343a3a2f34382d3438203d3e203436303235.roa (hash: 7Zt9Qo2CwU5k43ZU/bzxQ7yO/llsHySgXleKYAIqOl0=)
                          5: 3137352e3135382e34382e302f32302d3234203d3e20313335343738.roa (hash: 94hNYux8eWZz1uyVT99V5HDegQ13UDwZ7M1KtXnNuOw=)
                          6: 323430323a393830303a343030333a3a2f34382d3438203d3e203338353038.roa (hash: kVCBdk2VmpyopZqVmrScI5B0Mvq/xa323JLB5pEhsQA=)
                          7: 323430323a393830303a343030323a3a2f34382d3438203d3e20313331313139.roa (hash: romvh4P9a79Pr4J569XqtgjdGIrqpQXhEG/K5DHlLes=)
                          8: 323430323a393830303a343030313a3a2f34382d3438203d3e20313331313138.roa (hash: d5986EOySqOf25Kh0+1S+OCcFuFk0+QM0Sd3IiA6baE=)
                          9: 3137352e3135382e33322e302f32302d3234203d3e20313335343738.roa (hash: 7pDLsHgOcZwn1eSxA+Npm2ov2bKnIJgWI3SSJl41Zls=)
                          10: 323430323a393830303a343030363a3a2f34382d3438203d3e20313338313338.roa (hash: qLMS5n6MICGX7jMIWrfU1gynyNSBdRm2V/YFupb8Gq4=)
                          11: 323430323a393830303a343030303a3a2f34382d3438203d3e20313331313137.roa (hash: EhLhnkz+tJZEa0MJMT1YkNCBA4ZvjDWQMMMtcKGynfI=)
                          12: 323430323a393830303a343030353a3a2f34382d3438203d3e20313336313038.roa (hash: ONp4B01vgh7iWIU+RoQbzYAR3JD5eNkfucFDErVtZKQ=)
                          13: 323430323a393830303a343031303a3a2f34382d3438203d3e20333937373633.roa (hash: MBiGxv0ZO20HmuL2lUlmVAx4s0nmUR8oNwBPTRWxbyM=)
                          14: 323430323a393830303a3a2f33322d3438203d3e203338313538.roa (hash: YuhlhGpBa/rvdjFiICmkr20uOyD33Y2ob8cJ0jjldVM=)
                          15: 3132312e3130302e302e302f32312d3234203d3e203338313538.roa (hash: R/eJpCGlRI/zV/XFrfuap+1qh+BYzQ+18W4bHCKPljo=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/478fd4af-fe67-45c8-80b7-06fc118df8e2/0/FCD05385904E00F3C10A339EE19D924D72FFAE0E.crl
                          rsync://repo-rpki.idnic.net/repo/478fd4af-fe67-45c8-80b7-06fc118df8e2/0/FCD05385904E00F3C10A339EE19D924D72FFAE0E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FCD05385904E00F3C10A339EE19D924D72FFAE0E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Dec 2025 15:57:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:89:13:22:0a:ee:67:8c:df:1c:bb:35:02:a3:58:5d:93:e6:56:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FCD05385904E00F3C10A339EE19D924D72FFAE0E
        Validity
            Not Before: Dec  6 07:56:49 2025 GMT
            Not After : Dec  9 16:31:49 2025 GMT
        Subject: CN=5900FF38AAFA186EF5B2AF92A119C27477AE0FC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:5c:b0:c7:ca:31:93:79:84:86:26:8a:11:30:
                    06:1c:7c:3f:32:d9:c9:df:01:c3:dd:39:94:71:c8:
                    67:e6:d8:b1:cf:5c:3a:70:61:81:d6:70:ee:0c:98:
                    91:e2:ac:be:9b:f6:e1:b5:e4:ca:29:ee:52:73:54:
                    d5:33:4e:fa:4a:17:8b:1c:65:22:f2:c7:05:3b:ab:
                    c8:f5:ef:da:7f:fe:5c:5f:db:c1:00:c5:46:b7:ab:
                    11:66:fe:be:1b:c4:bd:cd:e5:f1:83:6b:09:dd:20:
                    43:3f:1a:7b:08:d9:44:dc:56:6b:e6:a8:17:15:b0:
                    3d:8d:ce:2c:d7:d2:b3:16:e3:1f:76:71:46:b3:a1:
                    27:0c:0d:e6:e9:13:a7:fd:cb:9f:40:2a:1b:4d:45:
                    69:ce:7b:ec:1a:75:29:cb:89:aa:85:c6:2f:f3:96:
                    87:a6:89:76:ff:18:3f:18:d3:a8:01:ab:ae:27:ab:
                    3b:12:8c:65:74:b0:8f:9c:07:c5:2e:be:e8:fc:bf:
                    ac:6e:e2:34:54:17:36:9d:9c:1a:a1:02:e8:66:ed:
                    52:99:41:7c:48:5b:ba:73:7e:85:da:21:47:62:1e:
                    43:b9:ff:0e:76:10:a6:c4:56:c3:4f:be:35:07:c7:
                    4e:bc:99:5b:15:f8:dd:d7:37:84:ef:c5:5d:51:33:
                    19:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:00:FF:38:AA:FA:18:6E:F5:B2:AF:92:A1:19:C2:74:77:AE:0F:C2
            X509v3 Authority Key Identifier:
                keyid:FC:D0:53:85:90:4E:00:F3:C1:0A:33:9E:E1:9D:92:4D:72:FF:AE:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/478fd4af-fe67-45c8-80b7-06fc118df8e2/0/FCD05385904E00F3C10A339EE19D924D72FFAE0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FCD05385904E00F3C10A339EE19D924D72FFAE0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/478fd4af-fe67-45c8-80b7-06fc118df8e2/0/FCD05385904E00F3C10A339EE19D924D72FFAE0E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:fa:26:32:f4:a2:61:5d:e5:c8:66:c7:02:dd:82:7e:e1:76:
         6f:e5:8c:41:ec:58:8c:03:db:d1:5a:a1:92:10:8f:fd:62:df:
         50:61:c5:e7:cc:ae:92:3b:70:90:82:51:8d:13:82:89:91:7f:
         35:fc:4e:ae:9e:2c:ac:88:83:7a:1d:45:16:61:c2:17:12:0a:
         c4:e6:3b:38:3a:80:e8:d3:c0:b1:ef:22:53:45:40:f5:36:eb:
         65:3d:ba:6b:9c:aa:61:8c:f3:40:8e:b6:e9:a9:bb:dd:fd:57:
         f7:69:df:9f:e8:fb:56:79:f0:64:a7:2a:d7:e5:a8:f2:40:06:
         f2:73:3e:69:db:08:8c:9a:6b:ba:38:fa:15:db:50:7f:fa:96:
         72:e7:9d:92:05:fc:cb:b9:73:ca:2d:91:61:31:65:1f:03:9e:
         a5:2b:04:7c:e9:11:ab:57:49:f6:a6:db:4a:00:11:58:9f:84:
         af:37:3e:af:a7:73:2b:4e:fe:fc:a3:79:07:f8:81:04:54:3f:
         56:d3:a3:88:37:d4:6d:b4:dc:26:23:35:6a:ac:17:2a:9c:34:
         83:c8:e9:78:42:62:3b:7a:46:1f:50:2b:ff:7b:ed:2f:d5:c8:
         eb:d6:d2:fd:01:b1:31:97:f3:82:10:c5:a6:e9:50:d8:44:53:
         02:a3:95:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:16:02 2025 by rpki-client