This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/0/FC2DAAA409BA60DE33EC91F3A861D1A00719D426.mft
File:                     FC2DAAA409BA60DE33EC91F3A861D1A00719D426.mft (raw, json)
Hash identifier:          88pC1qcU1xxATKByA0W7FVTKVxATux06rUGNXrWuw5k=
Subject key identifier:   29:41:84:76:E5:83:05:D1:0E:9B:75:79:FB:65:9C:AC:BB:4C:D2:67
Authority key identifier: FC:2D:AA:A4:09:BA:60:DE:33:EC:91:F3:A8:61:D1:A0:07:19:D4:26
Certificate issuer:       /CN=FC2DAAA409BA60DE33EC91F3A861D1A00719D426
Certificate serial:       095F173F26C2F32694D4D52A4559FA612987618B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FC2DAAA409BA60DE33EC91F3A861D1A00719D426.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/0/FC2DAAA409BA60DE33EC91F3A861D1A00719D426.mft
Manifest number:          FB
Signing time:             Sat 06 Dec 2025 17:40:54 +0000
Manifest this update:     Sat 06 Dec 2025 17:35:54 +0000
Manifest next update:     Tue 09 Dec 2025 23:11:54 +0000
Files and hashes:         1: FC2DAAA409BA60DE33EC91F3A861D1A00719D426.crl (hash: Q3zP9CD47PFBLqTp7Y/aYX29m+BzQPilJe2d+QUEn0U=)
                          2: 3135372e36362e322e302f32332d3234203d3e20313532343430.roa (hash: 3ZS5/0NJnXKv4Pk0J4oSOH1r1VKtA3mh1qb3WAlsXUw=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/0/FC2DAAA409BA60DE33EC91F3A861D1A00719D426.crl
                          rsync://repo-rpki.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/0/FC2DAAA409BA60DE33EC91F3A861D1A00719D426.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FC2DAAA409BA60DE33EC91F3A861D1A00719D426.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Dec 2025 06:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:5f:17:3f:26:c2:f3:26:94:d4:d5:2a:45:59:fa:61:29:87:61:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC2DAAA409BA60DE33EC91F3A861D1A00719D426
        Validity
            Not Before: Dec  6 17:35:54 2025 GMT
            Not After : Dec  9 23:11:54 2025 GMT
        Subject: CN=29418476E58305D10E9B7579FB659CACBB4CD267
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:6a:ec:fc:a7:74:02:10:6c:0e:96:f0:40:2d:
                    6b:e5:01:b5:0b:84:59:de:44:58:c2:b5:fa:4a:48:
                    45:af:40:31:58:a8:fd:bf:f2:2f:88:54:59:0c:94:
                    5f:d2:af:34:27:db:36:41:51:eb:34:d4:c2:bc:7c:
                    99:cf:4c:36:55:61:a4:c5:a2:a9:8d:df:b8:6e:9e:
                    49:e3:3c:24:2f:66:2c:89:f5:c9:81:22:64:80:04:
                    7f:06:45:ed:f3:e2:c2:01:e1:9a:c8:9c:3e:a2:91:
                    ce:d9:d1:88:e9:f7:47:f7:a3:d3:8d:d7:dd:32:29:
                    02:73:da:41:d5:2f:35:fa:21:61:9a:e7:17:68:64:
                    33:72:6d:af:4f:de:ad:12:34:c8:5d:b6:96:50:1a:
                    e9:79:30:82:81:07:33:9e:82:bd:77:f1:73:4e:6c:
                    3c:c6:ac:fa:6b:68:83:02:cb:2f:9e:e1:ad:f7:dd:
                    c0:5c:55:13:83:38:e7:aa:61:8d:f4:60:e0:c9:44:
                    61:49:51:4b:df:4a:2e:c7:09:1e:79:0a:e9:bf:b2:
                    35:0b:0e:72:1b:fc:70:5e:1c:0c:77:f4:d0:07:f3:
                    57:8c:3f:60:13:06:0a:b7:3e:9a:b4:ad:07:51:4e:
                    a9:7c:fb:66:31:eb:18:3e:9e:ef:55:aa:06:2a:0c:
                    c8:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:41:84:76:E5:83:05:D1:0E:9B:75:79:FB:65:9C:AC:BB:4C:D2:67
            X509v3 Authority Key Identifier:
                keyid:FC:2D:AA:A4:09:BA:60:DE:33:EC:91:F3:A8:61:D1:A0:07:19:D4:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/0/FC2DAAA409BA60DE33EC91F3A861D1A00719D426.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FC2DAAA409BA60DE33EC91F3A861D1A00719D426.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/0/FC2DAAA409BA60DE33EC91F3A861D1A00719D426.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:6f:b8:52:a5:75:f8:91:a6:48:71:d0:ab:b3:c4:13:99:79:
         92:ed:e7:cf:4c:20:ca:f3:06:5f:93:98:ce:14:0b:7f:66:e4:
         b9:e5:86:e2:30:d8:28:1d:9c:97:5f:c6:94:96:2a:1e:df:7e:
         25:fb:00:b6:13:9d:de:b9:b6:ca:85:11:26:24:82:a5:bb:cb:
         77:7a:91:2d:b9:13:5e:0e:2a:bb:06:4b:c6:d7:80:b2:b0:7d:
         89:6c:6b:e8:1d:08:b0:15:04:16:a0:b0:8c:93:5a:77:d3:fb:
         eb:53:33:49:fa:8e:21:38:8f:32:02:77:41:c9:47:dc:51:95:
         a7:0a:ca:3e:03:f4:40:cb:30:3f:52:58:10:34:cb:73:b1:f6:
         c2:0c:25:08:3f:5b:2d:38:1d:36:64:12:a0:35:65:4b:81:56:
         3a:f2:84:b2:3c:e9:68:56:62:1d:b7:d1:d9:80:a0:a0:67:38:
         89:9d:dd:67:98:59:2c:94:47:fc:38:7c:05:2b:e7:b6:8c:a5:
         fe:d2:a5:f3:7a:34:11:86:5d:a2:cd:4b:f7:a6:e8:ad:8f:41:
         de:f8:75:0f:29:f4:fe:94:fc:23:70:0c:dd:e2:da:d6:08:ac:
         43:a3:b9:a3:a8:1b:6e:1a:5f:d3:8a:08:e0:3e:24:78:0b:ef:
         5c:85:1a:da
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUCV8XPybC8yaU1NUqRVn6YSmHYYswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkMyREFBQTQwOUJBNjBERTMzRUM5MUYzQTg2MUQxQTAw
NzE5RDQyNjAeFw0yNTEyMDYxNzM1NTRaFw0yNTEyMDkyMzExNTRaMDMxMTAvBgNV
BAMTKDI5NDE4NDc2RTU4MzA1RDEwRTlCNzU3OUZCNjU5Q0FDQkI0Q0QyNjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0auz8p3QCEGwOlvBALWvlAbUL
hFneRFjCtfpKSEWvQDFYqP2/8i+IVFkMlF/SrzQn2zZBUes01MK8fJnPTDZVYaTF
oqmN37hunknjPCQvZiyJ9cmBImSABH8GRe3z4sIB4ZrInD6ikc7Z0Yjp90f3o9ON
190yKQJz2kHVLzX6IWGa5xdoZDNyba9P3q0SNMhdtpZQGul5MIKBBzOegr138XNO
bDzGrPpraIMCyy+e4a333cBcVRODOOeqYY30YODJRGFJUUvfSi7HCR55Cum/sjUL
DnIb/HBeHAx39NAH81eMP2ATBgq3Ppq0rQdRTql8+2Yx6xg+nu9VqgYqDMj9AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUKUGEduWDBdEOm3V5+2WcrLtM0mcwHwYDVR0j
BBgwFoAU/C2qpAm6YN4z7JHzqGHRoAcZ1CYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81
ZmI4MDhlYi1jOThlLTQwMzYtYmU5YS0xOTNiYmNjNjQ4OTIvMC9GQzJEQUFBNDA5
QkE2MERFMzNFQzkxRjNBODYxRDFBMDA3MTlENDI2LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzEvRkMyREFBQTQwOUJBNjBERTMzRUM5MUYzQTg2MUQxQTAwNzE5
RDQyNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWZiODA4ZWItYzk4ZS00MDM2LWJl
OWEtMTkzYmJjYzY0ODkyLzAvRkMyREFBQTQwOUJBNjBERTMzRUM5MUYzQTg2MUQx
QTAwNzE5RDQyNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBACZvuFKldfiRpkhx0KuzxBOZeZLt589MIMrz
Bl+TmM4UC39m5LnlhuIw2CgdnJdfxpSWKh7ffiX7ALYTnd65tsqFESYkgqW7y3d6
kS25E14OKrsGS8bXgLKwfYlsa+gdCLAVBBagsIyTWnfT++tTM0n6jiE4jzICd0HJ
R9xRlacKyj4D9EDLMD9SWBA0y3Ox9sIMJQg/Wy04HTZkEqA1ZUuBVjryhLI86WhW
Yh230dmAoKBnOImd3WeYWSyUR/w4fAUr57aMpf7SpfN6NBGGXaLNS/em6K2PQd74
dQ8p9P6U/CNwDN3i2tYIrEOjuaOoG24aX9OKCOA+JHgL71yFGto=
-----END CERTIFICATE-----
Generated at Mon Dec 8 02:34:40 2025 by rpki-client