This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/ad87beed-6330-4f33-9105-87722cdf2dd0/0/FB3FCC1A69B1BD92D6A319D7FD820EEECE674245.mft
File:                     FB3FCC1A69B1BD92D6A319D7FD820EEECE674245.mft (raw, json)
Hash identifier:          0YezOsZJpwVvNkrtIGXpVqnItRKD+SaJ7dFOuEdPzJw=
Subject key identifier:   7C:4C:A9:8A:D8:DF:EC:79:1A:C3:11:47:F5:5E:BE:6E:3A:9B:85:F6
Authority key identifier: FB:3F:CC:1A:69:B1:BD:92:D6:A3:19:D7:FD:82:0E:EE:CE:67:42:45
Certificate issuer:       /CN=FB3FCC1A69B1BD92D6A319D7FD820EEECE674245
Certificate serial:       1C4F8B10E56F11B5956D7CD62DE94DA9EA95B97C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FB3FCC1A69B1BD92D6A319D7FD820EEECE674245.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ad87beed-6330-4f33-9105-87722cdf2dd0/0/FB3FCC1A69B1BD92D6A319D7FD820EEECE674245.mft
Manifest number:          03AC
Signing time:             Sun 07 Dec 2025 02:21:31 +0000
Manifest this update:     Sun 07 Dec 2025 02:16:31 +0000
Manifest next update:     Wed 10 Dec 2025 07:56:31 +0000
Files and hashes:         1: 3130332e3136342e3137302e302f32332d3234203d3e203137393935.roa (hash: KS9w1B5P8a3jbKsmFzr3W5flDVbhE11L0B9cjjDxpnE=)
                          2: FB3FCC1A69B1BD92D6A319D7FD820EEECE674245.crl (hash: UBpFbuTraMsa42S1+F9uirHeNxIu9jsiz4KHDtU1Em0=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ad87beed-6330-4f33-9105-87722cdf2dd0/0/FB3FCC1A69B1BD92D6A319D7FD820EEECE674245.crl
                          rsync://repo-rpki.idnic.net/repo/ad87beed-6330-4f33-9105-87722cdf2dd0/0/FB3FCC1A69B1BD92D6A319D7FD820EEECE674245.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FB3FCC1A69B1BD92D6A319D7FD820EEECE674245.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Dec 2025 15:57:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:4f:8b:10:e5:6f:11:b5:95:6d:7c:d6:2d:e9:4d:a9:ea:95:b9:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB3FCC1A69B1BD92D6A319D7FD820EEECE674245
        Validity
            Not Before: Dec  7 02:16:31 2025 GMT
            Not After : Dec 10 07:56:31 2025 GMT
        Subject: CN=7C4CA98AD8DFEC791AC31147F55EBE6E3A9B85F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:37:1e:63:41:ff:b8:0c:9a:09:69:23:9a:f9:
                    e0:c3:fe:a0:91:55:3d:fe:8c:68:cd:36:45:d4:bd:
                    b9:0a:d5:61:01:83:80:36:a7:00:b1:ae:23:2a:b6:
                    69:3e:f8:3a:f4:10:95:db:dc:4d:d2:18:88:bc:1b:
                    e5:5d:97:59:bf:e4:0e:77:6d:4c:89:47:07:1e:5d:
                    91:85:42:23:b4:c4:30:4c:e3:a2:9e:99:ce:3b:61:
                    40:37:4a:69:77:77:37:b8:ec:cb:87:40:c8:07:0f:
                    ba:90:d1:d7:b9:ee:80:34:31:5c:56:9d:cd:af:4f:
                    8b:e0:2f:09:fd:95:46:1b:86:81:f6:00:54:26:97:
                    e9:c3:93:84:45:4f:79:b1:3c:f5:07:bd:90:4b:bc:
                    45:9a:ef:b9:07:dc:9e:3e:03:6e:50:3d:36:d8:49:
                    2f:09:9d:3e:db:1d:db:54:6d:e9:16:14:0e:f7:be:
                    7d:d0:0d:b4:62:dd:36:de:ab:97:91:f8:66:b7:7b:
                    8f:7c:42:17:f9:51:66:c4:9d:ea:07:49:c4:95:08:
                    6c:62:fe:cc:08:08:da:03:cb:da:7e:4b:e8:b5:2b:
                    23:9e:ab:42:60:db:4d:cd:08:ef:e3:35:59:a2:72:
                    82:1b:db:1d:4e:7c:1e:28:f3:7d:01:79:44:2c:6f:
                    04:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:4C:A9:8A:D8:DF:EC:79:1A:C3:11:47:F5:5E:BE:6E:3A:9B:85:F6
            X509v3 Authority Key Identifier:
                keyid:FB:3F:CC:1A:69:B1:BD:92:D6:A3:19:D7:FD:82:0E:EE:CE:67:42:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ad87beed-6330-4f33-9105-87722cdf2dd0/0/FB3FCC1A69B1BD92D6A319D7FD820EEECE674245.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FB3FCC1A69B1BD92D6A319D7FD820EEECE674245.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ad87beed-6330-4f33-9105-87722cdf2dd0/0/FB3FCC1A69B1BD92D6A319D7FD820EEECE674245.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:e1:d1:c9:35:01:16:63:22:c3:d7:86:11:10:10:c7:21:86:
         f1:5c:12:6c:29:a0:6b:79:7b:b5:76:9e:4f:51:4a:e4:f6:2d:
         43:04:b1:09:6b:09:d1:e4:bf:ab:1d:38:b1:f2:75:8b:f8:98:
         c7:f0:b5:e7:af:9e:70:f4:9a:57:0b:06:a3:60:c3:41:99:ad:
         55:de:7e:7b:88:a7:c9:0f:94:a4:0e:35:5e:da:ce:f8:b0:de:
         4d:a9:9f:a1:48:7a:90:94:b9:76:6b:05:80:df:c3:94:e9:f5:
         16:5e:e9:3c:87:b5:f0:bf:30:a2:10:c7:d4:d0:5a:5a:e1:aa:
         5a:c4:69:6b:af:ac:0b:3f:f0:b4:8a:79:6b:08:9e:1d:21:e1:
         d5:b1:3a:62:27:7c:33:b7:c9:19:b4:c4:c4:be:85:ad:8c:6f:
         0d:fa:8e:af:e2:47:85:9f:02:f2:ba:11:0f:4a:50:2d:0c:d0:
         5b:0a:cf:ec:28:3c:80:e1:af:39:52:9f:9f:78:e5:2c:a1:e2:
         51:18:3c:0a:09:b8:20:9f:20:54:6a:00:58:d6:cd:6c:74:bf:
         69:73:78:9a:f3:28:66:2a:4e:5d:bb:c6:39:46:4d:13:19:4c:
         1a:a3:06:67:3e:33:db:5a:7a:b8:ad:cf:73:bb:c7:ab:7a:fe:
         ba:52:69:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 05:18:01 2025 by rpki-client