This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/4f6aa31a-dd0d-4c10-b5dd-b1a83fa57763/0/FC9DA1A7625B27FDB466B1D8A690377E4C7BCE72.mft
File:                     FC9DA1A7625B27FDB466B1D8A690377E4C7BCE72.mft (raw, json)
Hash identifier:          9fdGc5k2ednlsoq4dBb5YwgYsGinYflRuLbe7jjjXVA=
Subject key identifier:   B3:D9:A3:43:56:6F:66:8E:FB:BD:1F:37:F3:A4:4A:D9:DC:E5:A2:22
Authority key identifier: FC:9D:A1:A7:62:5B:27:FD:B4:66:B1:D8:A6:90:37:7E:4C:7B:CE:72
Certificate issuer:       /CN=FC9DA1A7625B27FDB466B1D8A690377E4C7BCE72
Certificate serial:       68263218FA19B97A0313CA7C21B55466007A73C5
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC9DA1A7625B27FDB466B1D8A690377E4C7BCE72.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/4f6aa31a-dd0d-4c10-b5dd-b1a83fa57763/0/FC9DA1A7625B27FDB466B1D8A690377E4C7BCE72.mft
Manifest number:          052E
Signing time:             Sat 06 Dec 2025 04:11:13 +0000
Manifest this update:     Sat 06 Dec 2025 04:06:13 +0000
Manifest next update:     Tue 09 Dec 2025 13:32:13 +0000
Files and hashes:         1: 3130332e33312e3130392e302f32342d3234203d3e20313333333630.roa (hash: 49661VGQ4ZvwDmpnxmNaIUS/VEvyTMAxvwwlmJQfjlM=)
                          2: FC9DA1A7625B27FDB466B1D8A690377E4C7BCE72.crl (hash: DBk0jXjbb7fp9uf4cQYoqv6/ULLaDjg3dD+hrZTmi28=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/4f6aa31a-dd0d-4c10-b5dd-b1a83fa57763/0/FC9DA1A7625B27FDB466B1D8A690377E4C7BCE72.crl
                          rsync://repo-rpki.idnic.net/repo/4f6aa31a-dd0d-4c10-b5dd-b1a83fa57763/0/FC9DA1A7625B27FDB466B1D8A690377E4C7BCE72.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC9DA1A7625B27FDB466B1D8A690377E4C7BCE72.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Dec 2025 13:32:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:26:32:18:fa:19:b9:7a:03:13:ca:7c:21:b5:54:66:00:7a:73:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC9DA1A7625B27FDB466B1D8A690377E4C7BCE72
        Validity
            Not Before: Dec  6 04:06:13 2025 GMT
            Not After : Dec  9 13:32:13 2025 GMT
        Subject: CN=B3D9A343566F668EFBBD1F37F3A44AD9DCE5A222
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:03:1f:8b:73:3f:e2:79:3a:41:db:33:a7:cd:
                    a3:66:cf:d0:29:45:91:2a:d0:84:e1:e3:55:79:f0:
                    b6:da:d9:8f:38:5d:9c:51:e7:45:47:40:a7:ed:bc:
                    09:0c:73:e6:60:52:d0:0c:19:9d:fd:a8:ec:aa:1e:
                    36:76:32:d9:76:ec:2c:1b:a6:82:49:46:d5:86:24:
                    4c:99:27:5f:04:bc:51:c0:d3:ee:11:b0:8f:6e:6d:
                    d8:11:4d:10:52:05:1d:92:44:a2:83:cd:75:4b:84:
                    e5:5b:b8:b2:fd:e4:0d:2e:75:11:29:84:55:8e:5a:
                    8f:1b:4a:21:31:67:db:5a:70:60:0d:71:aa:ff:d9:
                    28:72:22:25:0a:a0:5a:ab:e9:25:19:e7:5a:65:06:
                    d1:92:df:ef:f6:46:b3:6b:68:30:e5:60:54:68:7e:
                    49:2b:9e:ec:1f:d8:94:da:71:44:59:72:12:38:63:
                    ba:02:c0:87:91:e4:f1:fc:a9:c6:03:ff:4b:b7:c6:
                    73:6c:95:b6:50:37:4c:36:a5:e1:3c:65:af:f9:57:
                    34:e0:28:31:c8:10:43:d3:90:42:35:2e:a4:20:19:
                    96:1c:be:44:b6:22:a5:35:ee:9d:f3:3c:e9:16:28:
                    7a:4a:28:47:79:d1:e6:bf:ef:8e:aa:f9:14:ce:4d:
                    e1:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:D9:A3:43:56:6F:66:8E:FB:BD:1F:37:F3:A4:4A:D9:DC:E5:A2:22
            X509v3 Authority Key Identifier:
                keyid:FC:9D:A1:A7:62:5B:27:FD:B4:66:B1:D8:A6:90:37:7E:4C:7B:CE:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/4f6aa31a-dd0d-4c10-b5dd-b1a83fa57763/0/FC9DA1A7625B27FDB466B1D8A690377E4C7BCE72.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC9DA1A7625B27FDB466B1D8A690377E4C7BCE72.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4f6aa31a-dd0d-4c10-b5dd-b1a83fa57763/0/FC9DA1A7625B27FDB466B1D8A690377E4C7BCE72.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:df:e2:f5:73:b7:d4:cf:d5:74:a4:80:8c:68:13:46:cd:df:
         68:06:55:02:a7:91:83:6b:2a:66:73:46:05:29:4e:b9:cb:94:
         1a:65:60:96:2f:da:f4:9b:2f:b8:61:db:46:5a:37:80:ac:2c:
         0d:59:c8:b2:38:cc:54:cd:ec:46:09:63:b2:f6:63:b7:69:a1:
         4e:9f:3f:82:d0:36:c2:eb:a6:ba:6b:d7:5c:20:30:a0:ed:66:
         43:0c:37:2d:65:c1:9b:b9:8b:85:31:e4:70:00:fe:ef:99:0a:
         77:65:44:63:07:57:83:17:93:e2:8b:0a:d3:56:52:08:7f:3f:
         49:4e:b3:18:b8:5e:e8:c2:89:19:0b:cb:cf:97:3e:85:f0:59:
         e5:a4:e7:10:63:77:ca:ae:1a:48:48:c4:5b:b3:ec:9a:9a:82:
         96:4d:29:19:a5:61:e3:df:d9:9b:ac:0a:af:4f:5f:22:da:fd:
         48:98:f1:e7:48:29:59:bd:84:8e:cd:63:58:4f:0b:69:39:01:
         d4:7e:ad:d7:16:07:03:de:28:6b:1a:4f:6c:4c:ce:bd:ef:44:
         29:80:b3:36:95:7b:09:85:75:e3:52:cf:42:85:2f:35:03:22:
         27:45:77:19:ef:95:29:a9:67:44:f9:c6:60:11:da:79:3d:bc:
         ca:10:b9:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:56:43 2025 by rpki-client