This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/FC646066A689B77054AF95653FA324395357E6A3.mft
File:                     FC646066A689B77054AF95653FA324395357E6A3.mft (raw, json)
Hash identifier:          o0YP5BukfylnQzFCxWaDhfh1K8GirYBBDLN/nGw05hA=
Subject key identifier:   D2:A8:2D:5B:C3:8B:64:C0:33:6F:4E:DA:C5:0E:F7:EB:BA:C5:2D:E6
Authority key identifier: FC:64:60:66:A6:89:B7:70:54:AF:95:65:3F:A3:24:39:53:57:E6:A3
Certificate issuer:       /CN=FC646066A689B77054AF95653FA324395357E6A3
Certificate serial:       02DFB8E960F6BC2D4ED68232A3A0171F0DBC60DF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC646066A689B77054AF95653FA324395357E6A3.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/FC646066A689B77054AF95653FA324395357E6A3.mft
Manifest number:          0536
Signing time:             Sun 07 Dec 2025 02:02:17 +0000
Manifest this update:     Sun 07 Dec 2025 01:57:17 +0000
Manifest next update:     Wed 10 Dec 2025 04:25:17 +0000
Files and hashes:         1: FC646066A689B77054AF95653FA324395357E6A3.crl (hash: +5Bs0a3a25mYHXxAdCS3HOdwZ62UPYwDPbgSiv8CA7g=)
                          2: 3130332e31312e39372e302f32342d3234203d3e203535363533.roa (hash: zhsac+dR+hLwxuxKAvs58KLjwCG2OW3/qJ9XL7XL52Y=)
                          3: 3130332e31312e39362e302f32322d3234203d3e203535363533.roa (hash: PVQdneK9Q2r+2YuMkyuS3S7JvDEOimiQ6kS5G4qY3D8=)
                          4: 3130332e31312e39392e302f32342d3234203d3e203535363533.roa (hash: IOFzZe1IvwoIGSoJhxZwtkEkEW47dvJdJ0E5fC3jeys=)
                          5: 31342e3130322e3135342e302f32342d3234203d3e203535363533.roa (hash: 3zcWmXCIsv3omjOiSti1UlbmTCz0e0HYT7ukX9kfxvE=)
                          6: 31342e3130322e3135332e302f32342d3234203d3e203535363532.roa (hash: is5MWGQz2ThLibcgEVqAwJiiHTPRuDzYs+szhUZM1uA=)
                          7: 323430323a633330303a3a2f33322d3438203d3e203535363533.roa (hash: bGPK4/XEobq1bk7eW0IqEOt5RrHUWnGxVvGe+M2MWVI=)
                          8: 3130332e3235342e3132362e302f32332d3234203d3e203535363533.roa (hash: 9BxarKCax6xXzwA7sCkwW9bstNPy4ZEaa9LRlsVppIQ=)
                          9: 3230322e31302e36332e302f32342d3234203d3e203535363533.roa (hash: 3x/TagzWw9AEnitF9/BKz1IoUShxY7ix8DtkXTWs+vs=)
                          10: 31342e3130322e3135322e302f32322d3234203d3e203535363533.roa (hash: tcAOfelZsfvkpX9bUklTUsOMqUIe7iMnYq8XrY6rniM=)
                          11: 34332e3234392e3134302e302f32322d3234203d3e203535363533.roa (hash: VXuEsrUjBUraWB5GeM4W6dfuMEU9X+IXajG+jXJX29c=)
                          12: 3130332e31312e39382e302f32342d3234203d3e203535363533.roa (hash: Ulal03KaCVZbu0jye4Et6grNN6xfSzGRs7XoejJgRmc=)
                          13: 31342e3130322e3135352e302f32342d3234203d3e203535363533.roa (hash: Aqv+Cv2xxpkL4seMoOW2PqWbLLYJHATV5/+tD0LtsgA=)
                          14: 31342e3130322e3135322e302f32342d3234203d3e203535363533.roa (hash: Ic0fHoziZDQ5ySiUrW0yV+eRMvxq+Fv+lvK78woem+Y=)
                          15: 3130332e31312e39362e302f32342d3234203d3e203535363533.roa (hash: H4PttalZLNptjPsZ0cni/wefIj1b5DtDJUp4pLmDsx8=)
                          16: 3230322e35322e31322e302f32322d3234203d3e203535363533.roa (hash: r4N7YVGjSR/vf/OS/81YrBx8jNMdTo+vkJbDS2Aeqlg=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/FC646066A689B77054AF95653FA324395357E6A3.crl
                          rsync://repo-rpki.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/FC646066A689B77054AF95653FA324395357E6A3.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC646066A689B77054AF95653FA324395357E6A3.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Dec 2025 15:57:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:df:b8:e9:60:f6:bc:2d:4e:d6:82:32:a3:a0:17:1f:0d:bc:60:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC646066A689B77054AF95653FA324395357E6A3
        Validity
            Not Before: Dec  7 01:57:17 2025 GMT
            Not After : Dec 10 04:25:17 2025 GMT
        Subject: CN=D2A82D5BC38B64C0336F4EDAC50EF7EBBAC52DE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:2e:1b:e1:b2:69:68:52:99:8f:2f:ed:3b:a8:
                    53:a7:f2:30:fb:53:78:a0:b0:6d:81:c9:e8:89:58:
                    67:5a:fc:df:9b:8b:51:8d:3b:e1:5f:59:14:e4:89:
                    3b:09:48:08:ad:bb:69:6a:b1:75:0b:60:d1:3a:d2:
                    92:9f:a6:65:cd:94:26:c0:c3:ee:20:85:cc:2c:d5:
                    11:1c:cc:bb:71:ae:d0:7c:0a:b7:5e:a3:e2:be:e9:
                    b3:5c:f3:1f:52:52:16:2a:20:bc:c0:ee:89:fc:a4:
                    f1:d6:a0:76:7e:1d:0b:20:23:0e:bb:97:c2:f9:09:
                    46:18:3b:ee:a8:8b:1c:d8:83:ed:fc:76:39:72:74:
                    0a:e6:3b:84:5f:e5:31:5b:c0:c6:f2:2a:29:5f:90:
                    d8:68:91:60:97:18:23:23:2d:76:6a:a3:f3:b7:8c:
                    e1:64:46:a0:c5:f0:11:80:40:48:3c:dc:b2:65:05:
                    e0:c3:83:8b:28:99:d8:66:5f:67:51:dd:cf:3f:ee:
                    d6:12:bf:1e:fa:6f:85:de:eb:fc:60:91:56:23:a7:
                    ea:5e:2e:53:a1:b6:33:17:6f:3d:24:46:77:e0:59:
                    76:e2:14:2a:79:51:e9:72:3b:46:e1:af:3b:10:21:
                    77:fe:57:66:25:07:e4:0e:1e:af:a2:a2:c9:9c:18:
                    3b:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:A8:2D:5B:C3:8B:64:C0:33:6F:4E:DA:C5:0E:F7:EB:BA:C5:2D:E6
            X509v3 Authority Key Identifier:
                keyid:FC:64:60:66:A6:89:B7:70:54:AF:95:65:3F:A3:24:39:53:57:E6:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/FC646066A689B77054AF95653FA324395357E6A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC646066A689B77054AF95653FA324395357E6A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/FC646066A689B77054AF95653FA324395357E6A3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:ae:e7:e1:ed:4d:40:e2:2a:10:c4:cc:15:81:0e:48:49:a3:
         6e:59:d3:31:74:80:5e:40:3b:28:f2:10:6a:b9:44:fd:28:7c:
         d1:d0:29:1d:e1:cc:5f:67:21:a3:ab:ed:95:07:11:73:d2:c2:
         7c:d2:25:38:cc:80:12:be:17:97:fd:39:b1:87:d1:45:81:31:
         3c:3f:8d:cd:67:f1:bb:aa:ae:d1:19:5d:b0:46:b2:1e:0c:18:
         1b:02:9a:31:75:32:4a:65:6c:ae:52:35:6a:b6:76:ba:96:3c:
         4e:eb:e4:4b:7b:68:9e:2e:1b:07:50:73:d8:4a:47:53:1b:42:
         b6:15:7b:58:4a:30:fe:58:8f:51:1d:90:d4:f4:39:b1:57:77:
         81:f9:0d:bf:c7:75:67:f7:11:75:63:a2:41:91:e7:0b:e8:17:
         83:72:5b:71:f0:c6:93:a1:e7:9e:75:83:81:37:23:4e:8e:55:
         93:3f:4d:eb:95:99:f1:b3:c3:77:93:0b:e4:d8:db:c0:53:92:
         41:9f:0b:3f:d1:58:38:68:7a:ad:c9:1b:50:8f:09:43:ad:51:
         60:f1:dd:99:3d:33:83:44:69:5f:e6:b9:9a:6e:f3:e5:a0:fc:
         aa:d0:dd:c5:35:ef:62:43:ef:c8:11:54:05:a0:c5:2b:48:ab:
         8e:69:01:de
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUAt+46WD2vC1O1oIyo6AXHw28YN8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkM2NDYwNjZBNjg5Qjc3MDU0QUY5NTY1M0ZBMzI0Mzk1
MzU3RTZBMzAeFw0yNTEyMDcwMTU3MTdaFw0yNTEyMTAwNDI1MTdaMDMxMTAvBgNV
BAMTKEQyQTgyRDVCQzM4QjY0QzAzMzZGNEVEQUM1MEVGN0VCQkFDNTJERTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFLhvhsmloUpmPL+07qFOn8jD7
U3igsG2ByeiJWGda/N+bi1GNO+FfWRTkiTsJSAitu2lqsXULYNE60pKfpmXNlCbA
w+4ghcws1REczLtxrtB8Crdeo+K+6bNc8x9SUhYqILzA7on8pPHWoHZ+HQsgIw67
l8L5CUYYO+6oixzYg+38djlydArmO4Rf5TFbwMbyKilfkNhokWCXGCMjLXZqo/O3
jOFkRqDF8BGAQEg83LJlBeDDg4somdhmX2dR3c8/7tYSvx76b4Xe6/xgkVYjp+pe
LlOhtjMXbz0kRnfgWXbiFCp5UelyO0bhrzsQIXf+V2YlB+QOHq+iosmcGDuhAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU0qgtW8OLZMAzb07axQ7367rFLeYwHwYDVR0j
BBgwFoAU/GRgZqaJt3BUr5VlP6MkOVNX5qMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j
OTc0NjVlMy03OGEwLTQ5NjUtYWUxNC1lNGNiNGQwZmMxODUvMC9GQzY0NjA2NkE2
ODlCNzcwNTRBRjk1NjUzRkEzMjQzOTUzNTdFNkEzLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRkM2NDYwNjZBNjg5Qjc3MDU0QUY5NTY1M0ZBMzI0Mzk1MzU3
RTZBMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzk3NDY1ZTMtNzhhMC00OTY1LWFl
MTQtZTRjYjRkMGZjMTg1LzAvRkM2NDYwNjZBNjg5Qjc3MDU0QUY5NTY1M0ZBMzI0
Mzk1MzU3RTZBMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAEuu5+HtTUDiKhDEzBWBDkhJo25Z0zF0gF5A
OyjyEGq5RP0ofNHQKR3hzF9nIaOr7ZUHEXPSwnzSJTjMgBK+F5f9ObGH0UWBMTw/
jc1n8buqrtEZXbBGsh4MGBsCmjF1MkplbK5SNWq2drqWPE7r5Et7aJ4uGwdQc9hK
R1MbQrYVe1hKMP5Yj1EdkNT0ObFXd4H5Db/HdWf3EXVjokGR5wvoF4NyW3HwxpOh
5551g4E3I06OVZM/TeuVmfGzw3eTC+TY28BTkkGfCz/RWDhoeq3JG1CPCUOtUWDx
3Zk9M4NEaV/muZpu8+Wg/KrQ3cU172JD78gRVAWgxStIq45pAd4=
-----END CERTIFICATE-----
Generated at Sun Dec 7 03:49:29 2025 by rpki-client