This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/47ad0a3a-26b8-449a-88ec-bf0398ea53a6/0/FBC39A6E177F8DD7BA5E257D4489C57574C07E81.mft
File:                     FBC39A6E177F8DD7BA5E257D4489C57574C07E81.mft (raw, json)
Hash identifier:          NobedRY02SOujQ++S1U0n8PIoQzbqet3+bv/Ufm5dbQ=
Subject key identifier:   F2:9E:75:44:C2:CF:72:46:00:9F:E7:BE:39:83:20:80:12:CB:00:01
Authority key identifier: FB:C3:9A:6E:17:7F:8D:D7:BA:5E:25:7D:44:89:C5:75:74:C0:7E:81
Certificate issuer:       /CN=FBC39A6E177F8DD7BA5E257D4489C57574C07E81
Certificate serial:       037102B9089AF09B3A7FC1B80E01B3BE41DC6AD5
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FBC39A6E177F8DD7BA5E257D4489C57574C07E81.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/47ad0a3a-26b8-449a-88ec-bf0398ea53a6/0/FBC39A6E177F8DD7BA5E257D4489C57574C07E81.mft
Manifest number:          CF
Signing time:             Thu 04 Dec 2025 21:31:52 +0000
Manifest this update:     Thu 04 Dec 2025 21:26:52 +0000
Manifest next update:     Mon 08 Dec 2025 03:15:52 +0000
Files and hashes:         1: 3136302e32352e3235302e302f32342d3234203d3e20313533303938.roa (hash: MrtKeNjFNhl14mhfxKI/GhEb/0ohG0B8bmQ7SLXWttE=)
                          2: 3136302e32352e3235302e302f32332d3233203d3e20313533303938.roa (hash: eL66HCHXLPzvvpIp6yZbwohxEw2vNNGKLUjoRHRX4l0=)
                          3: FBC39A6E177F8DD7BA5E257D4489C57574C07E81.crl (hash: inD/TBJM9NF296y7qeSza2f6OlTA4nExbGTfBoHO1d4=)
                          4: 3136302e32352e3235312e302f32342d3234203d3e20313533303938.roa (hash: +X50gpeSdWT/Y5d22C2/uBOgo8Xzo2+UIRSSAuVLkyI=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/47ad0a3a-26b8-449a-88ec-bf0398ea53a6/0/FBC39A6E177F8DD7BA5E257D4489C57574C07E81.crl
                          rsync://repo-rpki.idnic.net/repo/47ad0a3a-26b8-449a-88ec-bf0398ea53a6/0/FBC39A6E177F8DD7BA5E257D4489C57574C07E81.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FBC39A6E177F8DD7BA5E257D4489C57574C07E81.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Dec 2025 03:15:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:71:02:b9:08:9a:f0:9b:3a:7f:c1:b8:0e:01:b3:be:41:dc:6a:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBC39A6E177F8DD7BA5E257D4489C57574C07E81
        Validity
            Not Before: Dec  4 21:26:52 2025 GMT
            Not After : Dec  8 03:15:52 2025 GMT
        Subject: CN=F29E7544C2CF7246009FE7BE3983208012CB0001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:ff:cf:03:32:bf:c9:89:82:ad:b8:15:d8:ec:
                    51:df:d4:48:ef:23:42:50:e6:d7:bf:a1:ac:05:70:
                    2b:9e:2d:73:8b:2d:7e:7d:a7:d2:50:9f:31:a3:88:
                    f2:bf:e4:7c:71:0f:7c:86:c5:c0:67:a5:9d:9a:a0:
                    27:99:6a:c7:0d:97:5f:1b:62:55:8c:ce:31:4f:63:
                    0a:c0:93:5f:bd:83:d4:21:f5:c9:27:d2:78:79:d8:
                    67:c6:f2:fe:92:20:46:85:90:88:51:05:2c:54:64:
                    1c:0e:1b:40:26:69:c1:c7:ff:ed:e8:49:f0:e3:ef:
                    b9:ae:b3:cd:94:60:10:31:bb:0b:71:2a:9e:7e:1c:
                    36:cf:1d:05:ae:d4:6e:b6:36:b1:78:18:68:db:3a:
                    6e:e4:a1:19:81:21:9b:7d:e3:10:25:36:6e:70:57:
                    d2:8b:c6:fe:a5:4b:3f:8d:76:43:58:55:f7:75:ea:
                    f7:cd:a8:07:23:02:62:7e:80:5c:e0:bc:78:32:e5:
                    24:30:60:9a:17:a3:13:80:7e:42:b5:1e:86:07:7d:
                    0c:ee:c4:fb:00:7d:7a:1b:8f:82:5f:61:1a:7e:a8:
                    29:9f:76:b0:3d:d0:66:37:7d:7c:b7:bd:8f:ae:63:
                    51:84:a5:5b:e1:25:f1:c9:ad:27:13:f0:a2:2a:83:
                    a6:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:9E:75:44:C2:CF:72:46:00:9F:E7:BE:39:83:20:80:12:CB:00:01
            X509v3 Authority Key Identifier:
                keyid:FB:C3:9A:6E:17:7F:8D:D7:BA:5E:25:7D:44:89:C5:75:74:C0:7E:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/47ad0a3a-26b8-449a-88ec-bf0398ea53a6/0/FBC39A6E177F8DD7BA5E257D4489C57574C07E81.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FBC39A6E177F8DD7BA5E257D4489C57574C07E81.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/47ad0a3a-26b8-449a-88ec-bf0398ea53a6/0/FBC39A6E177F8DD7BA5E257D4489C57574C07E81.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:3e:d8:33:38:4d:ce:99:fe:d6:e4:79:8e:fa:12:07:50:4f:
         6d:8f:f3:9d:d4:14:b8:0d:78:6a:fd:d8:92:1c:21:6f:a9:43:
         c4:40:c8:64:19:21:4f:36:f5:94:b4:c5:d0:c4:c5:43:58:09:
         ac:aa:1b:82:49:07:5e:b1:81:c3:ca:61:3f:34:04:0a:f1:7a:
         4f:83:de:d9:14:64:d7:e7:23:44:8e:bf:8c:06:75:54:ee:a0:
         c5:54:6c:7f:42:14:12:6e:b8:52:bd:79:4e:03:98:25:01:a8:
         ca:fd:a5:84:fc:c6:7c:5e:95:f4:82:45:31:b7:8f:d7:e5:a0:
         2b:06:f5:32:16:9a:61:4b:43:2e:32:e3:40:d8:a4:e9:f4:c2:
         cc:83:6c:db:7c:ae:35:9f:24:00:07:f6:a1:cf:e2:78:4c:13:
         66:ad:01:b9:3a:7b:03:07:f7:df:cb:4a:3c:f3:bd:20:54:15:
         cf:cd:c3:06:bf:f4:28:9e:0b:16:d7:b6:6c:a9:0c:d8:26:32:
         e6:48:e8:2d:3d:17:1c:47:09:bb:cc:b4:c9:d2:97:1f:23:b9:
         a8:9b:39:fb:72:c3:cd:f3:5c:05:82:17:f5:14:52:3d:c4:b4:
         48:e5:8f:18:af:5a:21:3a:88:4e:22:0c:89:01:61:8a:e8:72:
         f4:8e:ab:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 14:37:03 2025 by rpki-client