This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/51e94243-87f0-426f-a9ca-4c19edb06b42/0/FBACFC63658425B36399C4B9D0322622B8C5B7F0.mft
File:                     FBACFC63658425B36399C4B9D0322622B8C5B7F0.mft (raw, json)
Hash identifier:          JcpidcVm0In5rANJpq9mSc5afJTPm7amXgjpRSJb8T4=
Subject key identifier:   6F:74:55:EB:46:C1:69:09:CA:6A:5C:D1:71:C6:5E:6C:16:CF:14:60
Authority key identifier: FB:AC:FC:63:65:84:25:B3:63:99:C4:B9:D0:32:26:22:B8:C5:B7:F0
Certificate issuer:       /CN=FBACFC63658425B36399C4B9D0322622B8C5B7F0
Certificate serial:       034B5218BF730307A9FCC670A875690DE3C1C9E7
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FBACFC63658425B36399C4B9D0322622B8C5B7F0.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/51e94243-87f0-426f-a9ca-4c19edb06b42/0/FBACFC63658425B36399C4B9D0322622B8C5B7F0.mft
Manifest number:          054B
Signing time:             Fri 23 Jan 2026 21:52:06 +0000
Manifest this update:     Fri 23 Jan 2026 21:47:06 +0000
Manifest next update:     Tue 27 Jan 2026 00:51:06 +0000
Files and hashes:         1: 3130332e3233342e3231382e302f32342d3234203d3e203338373638.roa (hash: vWQKx1TT5Vb7zbmKfpDwSS1ZiebEmEmR3LksZYKeYp8=)
                          2: 323430373a336538303a3a2f33322d3438203d3e203338373638.roa (hash: jCqzfoNt2x+8bcJ6fatZirQ8CiZyxgl3URZLZEZ3szo=)
                          3: FBACFC63658425B36399C4B9D0322622B8C5B7F0.crl (hash: nLEH65Dnhe27K5bLoWjhYa8kHIKVZ4ianrqnisI56OQ=)
                          4: 323430373a336538303a363a3a2f34382d3438203d3e203338343936.roa (hash: 4k+7oiIZgf8A+xoNtWkGh4r/bBNQQHgBlobDBAPY3jY=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/51e94243-87f0-426f-a9ca-4c19edb06b42/0/FBACFC63658425B36399C4B9D0322622B8C5B7F0.crl
                          rsync://repo-rpki.idnic.net/repo/51e94243-87f0-426f-a9ca-4c19edb06b42/0/FBACFC63658425B36399C4B9D0322622B8C5B7F0.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FBACFC63658425B36399C4B9D0322622B8C5B7F0.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Jan 2026 00:51:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:4b:52:18:bf:73:03:07:a9:fc:c6:70:a8:75:69:0d:e3:c1:c9:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBACFC63658425B36399C4B9D0322622B8C5B7F0
        Validity
            Not Before: Jan 23 21:47:06 2026 GMT
            Not After : Jan 27 00:51:06 2026 GMT
        Subject: CN=6F7455EB46C16909CA6A5CD171C65E6C16CF1460
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:8d:59:3d:22:83:d1:62:37:a2:bd:8c:11:80:
                    80:3c:42:f8:98:5d:9d:82:ac:2f:3f:14:47:b5:22:
                    47:a3:08:f0:89:fe:27:5a:a7:3b:53:83:37:fe:3c:
                    a9:66:f5:77:1d:52:69:89:c8:d3:20:31:2b:d0:ad:
                    9f:4a:31:55:86:82:9f:79:c3:0d:0a:72:14:79:03:
                    0c:86:51:3e:6a:5a:cb:58:c9:98:60:29:30:7f:2d:
                    0b:75:97:38:21:7a:00:9b:33:75:76:45:58:cf:f9:
                    88:42:92:5e:70:32:1b:35:50:5c:07:de:84:93:f1:
                    83:5f:bd:a4:12:99:63:7c:1d:45:18:f1:0c:53:fb:
                    f8:be:f8:7a:f6:24:04:80:65:d4:0c:24:15:5a:6d:
                    6c:3a:b0:15:64:8b:52:57:d4:49:99:24:64:db:ab:
                    60:e6:2e:ad:be:88:de:d1:d0:8a:c9:5e:0a:87:8d:
                    82:92:db:88:8a:a2:37:29:6b:af:66:63:df:40:a8:
                    b6:91:0f:31:21:7e:c3:78:0d:e3:1a:cc:d8:9e:34:
                    ac:77:80:03:7c:e8:09:c6:6d:62:82:06:96:ba:f1:
                    32:bd:2c:5c:a7:61:4b:34:9f:5e:9e:c9:da:e4:16:
                    88:05:cc:a4:58:50:23:58:41:b7:0d:71:4f:f0:12:
                    89:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:74:55:EB:46:C1:69:09:CA:6A:5C:D1:71:C6:5E:6C:16:CF:14:60
            X509v3 Authority Key Identifier:
                keyid:FB:AC:FC:63:65:84:25:B3:63:99:C4:B9:D0:32:26:22:B8:C5:B7:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/51e94243-87f0-426f-a9ca-4c19edb06b42/0/FBACFC63658425B36399C4B9D0322622B8C5B7F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FBACFC63658425B36399C4B9D0322622B8C5B7F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/51e94243-87f0-426f-a9ca-4c19edb06b42/0/FBACFC63658425B36399C4B9D0322622B8C5B7F0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:bb:92:ba:a0:54:72:63:71:75:ff:f0:53:9a:68:56:1f:5a:
         02:2b:4d:b1:8b:2b:62:8c:fa:97:60:bf:91:ff:f8:70:03:22:
         6b:3e:b7:30:55:1a:b6:1c:8b:d8:f2:16:40:dd:f2:6f:b0:b8:
         a8:e7:8e:a3:cf:8d:6c:8d:fa:8e:26:2f:f7:e1:8c:82:d0:92:
         56:cf:af:a6:14:cd:a4:1b:48:ce:95:b2:53:22:88:e4:7b:db:
         6d:1a:d2:c1:7a:45:e3:87:e9:88:5e:18:70:2d:f0:0f:84:81:
         de:63:0a:1b:62:f8:81:9b:8b:2a:f1:b2:e0:02:95:a6:e5:fb:
         cf:6c:39:20:db:c7:bb:3b:59:a5:69:fa:d2:24:68:5a:55:47:
         0e:63:42:c3:48:2b:98:1e:57:6f:ac:f7:8f:f9:22:42:1a:56:
         fc:39:0e:71:20:45:16:d4:a4:ce:59:84:76:ab:b9:c6:63:b9:
         42:4d:26:1b:60:64:69:90:72:23:79:83:99:5f:49:f5:a4:00:
         ff:72:48:dc:be:fd:cc:2c:82:a9:22:78:3a:cc:58:f2:2f:15:
         e3:d9:86:bc:2f:e9:01:6b:94:13:bb:79:7d:89:1e:1e:05:50:
         80:c2:ba:6a:5f:1f:73:f8:e3:a7:b4:89:68:bd:b5:88:91:f1:
         ea:ed:e1:82
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUA0tSGL9zAwep/MZwqHVpDePByecwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkJBQ0ZDNjM2NTg0MjVCMzYzOTlDNEI5RDAzMjI2MjJC
OEM1QjdGMDAeFw0yNjAxMjMyMTQ3MDZaFw0yNjAxMjcwMDUxMDZaMDMxMTAvBgNV
BAMTKDZGNzQ1NUVCNDZDMTY5MDlDQTZBNUNEMTcxQzY1RTZDMTZDRjE0NjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/jVk9IoPRYjeivYwRgIA8QviY
XZ2CrC8/FEe1IkejCPCJ/idapztTgzf+PKlm9XcdUmmJyNMgMSvQrZ9KMVWGgp95
ww0KchR5AwyGUT5qWstYyZhgKTB/LQt1lzghegCbM3V2RVjP+YhCkl5wMhs1UFwH
3oST8YNfvaQSmWN8HUUY8QxT+/i++Hr2JASAZdQMJBVabWw6sBVki1JX1EmZJGTb
q2DmLq2+iN7R0IrJXgqHjYKS24iKojcpa69mY99AqLaRDzEhfsN4DeMazNieNKx3
gAN86AnGbWKCBpa68TK9LFynYUs0n16eydrkFogFzKRYUCNYQbcNcU/wEokVAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUb3RV60bBaQnKalzRccZebBbPFGAwHwYDVR0j
BBgwFoAU+6z8Y2WEJbNjmcS50DImIrjFt/AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81
MWU5NDI0My04N2YwLTQyNmYtYTljYS00YzE5ZWRiMDZiNDIvMC9GQkFDRkM2MzY1
ODQyNUIzNjM5OUM0QjlEMDMyMjYyMkI4QzVCN0YwLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRkJBQ0ZDNjM2NTg0MjVCMzYzOTlDNEI5RDAzMjI2MjJCOEM1
QjdGMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTFlOTQyNDMtODdmMC00MjZmLWE5
Y2EtNGMxOWVkYjA2YjQyLzAvRkJBQ0ZDNjM2NTg0MjVCMzYzOTlDNEI5RDAzMjI2
MjJCOEM1QjdGMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAGK7krqgVHJjcXX/8FOaaFYfWgIrTbGLK2KM
+pdgv5H/+HADIms+tzBVGrYci9jyFkDd8m+wuKjnjqPPjWyN+o4mL/fhjILQklbP
r6YUzaQbSM6VslMiiOR7220a0sF6ReOH6YheGHAt8A+Egd5jChti+IGbiyrxsuAC
labl+89sOSDbx7s7WaVp+tIkaFpVRw5jQsNIK5geV2+s94/5IkIaVvw5DnEgRRbU
pM5ZhHarucZjuUJNJhtgZGmQciN5g5lfSfWkAP9ySNy+/cwsgqkieDrMWPIvFePZ
hrwv6QFrlBO7eX2JHh4FUIDCumpfH3P446e0iWi9tYiR8ert4YI=
-----END CERTIFICATE-----
Generated at Sun Jan 25 18:44:10 2026 by rpki-client