This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/1/FA479894B4849679EBB9029580F04B8BD74CE048.mft
File:                     FA479894B4849679EBB9029580F04B8BD74CE048.mft (raw, json)
Hash identifier:          a45kza6AHx+ICvnSq1KRW/gj4kNWLXlwFbOWvJzdaxU=
Subject key identifier:   98:EE:4F:07:9F:18:D4:1B:49:63:D3:C8:C6:90:E6:1B:58:4E:73:55
Authority key identifier: FA:47:98:94:B4:84:96:79:EB:B9:02:95:80:F0:4B:8B:D7:4C:E0:48
Certificate issuer:       /CN=FA479894B4849679EBB9029580F04B8BD74CE048
Certificate serial:       6134BA86EAFA04AF6EEB45B103F7F6C31B5F5AB6
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FA479894B4849679EBB9029580F04B8BD74CE048.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/1/FA479894B4849679EBB9029580F04B8BD74CE048.mft
Manifest number:          C3
Signing time:             Fri 05 Dec 2025 21:21:36 +0000
Manifest this update:     Fri 05 Dec 2025 21:16:36 +0000
Manifest next update:     Tue 09 Dec 2025 08:13:36 +0000
Files and hashes:         1: FA479894B4849679EBB9029580F04B8BD74CE048.crl (hash: P1IUNydDqQJpNALnQ+VvVvsPYmsuu7odbL7zllUzH2c=)
                          2: 323030313a6466343a343463303a3a2f34382d3438203d3e20313533313137.roa (hash: TN7coRRv7ozdQ4MBQjtVExbapiKpR2cs6McrqrVZTKc=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/1/FA479894B4849679EBB9029580F04B8BD74CE048.crl
                          rsync://repo-rpki.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/1/FA479894B4849679EBB9029580F04B8BD74CE048.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FA479894B4849679EBB9029580F04B8BD74CE048.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Dec 2025 08:13:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:34:ba:86:ea:fa:04:af:6e:eb:45:b1:03:f7:f6:c3:1b:5f:5a:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA479894B4849679EBB9029580F04B8BD74CE048
        Validity
            Not Before: Dec  5 21:16:36 2025 GMT
            Not After : Dec  9 08:13:36 2025 GMT
        Subject: CN=98EE4F079F18D41B4963D3C8C690E61B584E7355
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:a4:92:0c:4c:c3:b2:ae:cf:8f:31:73:99:d0:
                    7f:f9:db:9f:d5:89:7e:22:0c:5e:26:20:dc:30:ee:
                    10:7c:98:59:4a:b0:03:5f:05:ef:ed:66:79:ee:f8:
                    3c:0a:0f:f3:08:b8:ba:d8:ef:5d:2a:95:9e:c4:16:
                    46:76:97:a3:85:70:3b:a5:d3:dd:7e:63:0e:dd:a1:
                    8d:9a:0a:09:07:d3:1d:62:3d:95:bf:48:af:3c:72:
                    bc:dc:d7:25:15:3b:2d:9e:f6:5d:0d:c6:6b:93:af:
                    f4:42:1f:24:b7:51:ff:43:10:1e:e5:6f:88:f8:67:
                    6a:94:0e:ce:19:ec:fd:84:b6:c7:86:f8:ff:f1:cb:
                    0b:56:a9:b4:c6:6e:94:2f:c9:c8:72:44:4d:c7:12:
                    f3:da:0e:28:b2:7d:66:a1:8d:46:46:e5:39:4c:6f:
                    84:28:b4:d6:21:30:e5:c3:c7:17:88:15:6d:62:ae:
                    2b:ff:95:a8:95:b4:d4:fb:19:d6:cf:13:7f:5d:45:
                    02:b7:8b:68:1a:7b:76:3a:96:80:46:0a:6d:10:e7:
                    ce:14:7f:60:c8:39:e0:3a:99:da:e4:86:4b:9d:17:
                    9f:4c:25:b2:d6:89:0f:75:29:8b:04:fe:8e:cd:7f:
                    e7:5a:d5:4c:4f:2d:92:55:95:60:e8:ad:65:a8:23:
                    fc:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:EE:4F:07:9F:18:D4:1B:49:63:D3:C8:C6:90:E6:1B:58:4E:73:55
            X509v3 Authority Key Identifier:
                keyid:FA:47:98:94:B4:84:96:79:EB:B9:02:95:80:F0:4B:8B:D7:4C:E0:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/1/FA479894B4849679EBB9029580F04B8BD74CE048.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FA479894B4849679EBB9029580F04B8BD74CE048.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/1/FA479894B4849679EBB9029580F04B8BD74CE048.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:62:b7:cc:cc:51:7b:49:7d:13:8c:5c:47:70:fc:7d:f7:b8:
         5e:58:15:2f:37:59:25:56:08:95:f4:d4:25:2b:b1:8e:28:84:
         68:cd:76:f9:22:b5:f3:9d:19:c7:5f:c6:e8:62:15:0d:ae:ea:
         67:06:1e:72:3c:89:67:16:98:3b:d3:6b:83:94:0b:fa:00:c0:
         f7:5c:10:1d:31:2e:bb:82:53:cb:83:00:5b:af:d7:fa:8c:81:
         64:a7:59:f9:d2:2c:2a:e9:21:2a:24:3f:13:fc:eb:e1:28:9c:
         14:23:03:97:c1:fd:96:37:0e:c7:10:10:41:48:f2:1d:22:24:
         36:f0:ef:2a:d4:e5:d4:b1:f5:7f:7f:ea:cb:30:77:9b:3d:04:
         c3:6a:84:f1:a6:d3:b2:e5:b4:33:28:0d:06:aa:d9:04:92:d1:
         96:c0:23:95:34:5e:0a:4c:4e:4d:e4:ed:f8:5d:5e:8b:2c:4f:
         a5:a7:0e:f1:32:ea:4c:0c:e2:85:35:5d:5d:d9:d7:71:0b:5a:
         42:c0:64:da:db:60:d4:74:ef:18:c4:05:d8:e8:45:c0:68:a2:
         a8:9f:53:9d:d5:8f:14:4b:d7:7f:11:8d:0d:8c:af:b3:d6:2e:
         be:79:80:03:ef:20:1a:40:3a:34:31:4f:56:30:91:a5:36:d7:
         f8:1d:c5:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:57:49 2025 by rpki-client