This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/d47026a9-0c9a-4d79-ad67-2c9dbd366d0b/0/FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3.mft
File:                     FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3.mft (raw, json)
Hash identifier:          ENCAcxy4wb2gAnk6ygRCz1I0jwzT9AJQoaATvTxxwUM=
Subject key identifier:   0B:13:12:4E:F9:19:94:66:E5:81:A5:2A:5A:13:02:FB:2F:F6:07:8C
Authority key identifier: FC:D5:B5:62:FA:ED:9B:9D:67:F9:DE:5D:B7:05:78:BF:DB:00:57:B3
Certificate issuer:       /CN=FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3
Certificate serial:       133E5CB0314A90D0533496C89886D3D116B08100
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d47026a9-0c9a-4d79-ad67-2c9dbd366d0b/0/FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3.mft
Manifest number:          0358
Signing time:             Fri 05 Dec 2025 06:51:15 +0000
Manifest this update:     Fri 05 Dec 2025 06:46:15 +0000
Manifest next update:     Mon 08 Dec 2025 07:47:15 +0000
Files and hashes:         1: 3130332e3135312e3134302e302f32332d3233203d3e20313430343137.roa (hash: 8NA8ztqKmdQKSo6VJIi8+Ky4DaNAGzE3fau0y6GTEzI=)
                          2: 3130332e3135312e3134302e302f32332d3234203d3e20313430343137.roa (hash: maLwNGdhj2YMExFHAn5+1Sop9522GuyaLGRVR2YiAsA=)
                          3: FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3.crl (hash: gT+LZ94GXvH5v0J/LAxqMtlwIS6f9yERrsLBzUmYbDc=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d47026a9-0c9a-4d79-ad67-2c9dbd366d0b/0/FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3.crl
                          rsync://repo-rpki.idnic.net/repo/d47026a9-0c9a-4d79-ad67-2c9dbd366d0b/0/FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Dec 2025 07:47:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:3e:5c:b0:31:4a:90:d0:53:34:96:c8:98:86:d3:d1:16:b0:81:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3
        Validity
            Not Before: Dec  5 06:46:15 2025 GMT
            Not After : Dec  8 07:47:15 2025 GMT
        Subject: CN=0B13124EF9199466E581A52A5A1302FB2FF6078C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:c0:5b:5c:b2:32:87:70:b7:47:48:d7:09:68:
                    06:cb:16:c4:f2:f8:db:58:d6:dd:c7:3a:31:e5:1d:
                    16:34:2d:cd:20:9b:99:19:0b:ba:7e:de:fc:c6:9b:
                    73:55:e7:77:dc:62:e9:9d:d0:f5:27:48:1a:09:f4:
                    bd:2b:13:4a:4b:28:77:87:45:15:bc:d6:d6:a3:84:
                    79:d3:89:dc:4a:b9:7f:f3:3e:ea:d7:1a:70:4f:21:
                    39:c1:7a:27:80:40:30:44:52:6a:cd:30:b2:1d:ea:
                    67:f6:5d:75:a4:ec:6f:1a:b9:a7:66:23:1a:47:c8:
                    c8:c0:71:69:6b:94:d0:45:ec:50:ea:81:42:9c:13:
                    de:54:d9:59:0b:b6:ab:3c:40:90:26:03:e4:36:39:
                    01:88:68:51:9c:b3:9c:19:0a:95:e5:d5:c8:1a:95:
                    f7:0e:40:8b:10:41:f1:9e:78:76:95:fe:ad:33:42:
                    42:b9:c3:e6:cd:0a:f5:f9:40:c1:bc:d2:56:8f:f7:
                    54:a8:1b:61:bc:c2:17:aa:d7:d4:86:2d:44:ba:5d:
                    61:21:a2:4b:05:81:9c:b7:30:47:be:b2:45:46:e1:
                    5f:d2:a0:86:cf:f0:35:64:6d:c1:8c:ce:0f:68:95:
                    22:b0:93:2c:95:10:1f:81:32:fe:13:16:25:45:bf:
                    28:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:13:12:4E:F9:19:94:66:E5:81:A5:2A:5A:13:02:FB:2F:F6:07:8C
            X509v3 Authority Key Identifier:
                keyid:FC:D5:B5:62:FA:ED:9B:9D:67:F9:DE:5D:B7:05:78:BF:DB:00:57:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d47026a9-0c9a-4d79-ad67-2c9dbd366d0b/0/FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d47026a9-0c9a-4d79-ad67-2c9dbd366d0b/0/FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:2f:68:a0:88:70:74:7f:38:b7:cd:4a:ed:5e:5c:b4:b5:ee:
         15:0d:a4:25:2a:58:56:ee:5f:ce:a2:7a:fb:d8:97:77:1b:9c:
         d0:41:20:ba:8a:99:83:97:ae:02:94:51:6c:b2:0c:29:c6:ba:
         bf:a7:43:5e:32:af:36:a0:a6:a8:ba:56:a1:26:da:c1:36:ff:
         52:43:6c:47:86:b4:36:74:36:41:61:e4:45:12:a3:d1:a3:84:
         c1:d1:27:b9:2a:ab:11:52:b3:dc:2f:dc:b2:57:5b:4b:30:28:
         4f:7e:d3:b5:a1:26:f9:65:03:07:34:23:af:5d:bf:9d:d1:8a:
         99:d9:f5:6e:55:f8:82:5c:04:4b:8e:14:f6:a9:43:d6:de:de:
         cb:29:0a:c9:05:66:2e:03:9f:24:6a:bd:11:26:e1:cf:b5:87:
         ad:db:cd:49:97:13:b7:d9:19:90:2e:56:bc:6d:6d:9d:55:d5:
         e9:f3:cd:6c:f5:37:db:8c:01:22:3c:f6:21:04:0c:ae:87:ce:
         91:6a:23:f0:21:09:09:ad:43:2f:68:5d:ea:ea:d5:13:a7:e4:
         46:99:81:03:b8:13:18:e5:0b:b7:1e:3f:21:0e:7f:44:85:de:
         81:fb:3c:16:b4:21:67:0f:b8:c7:d3:b4:69:b2:c7:e2:35:82:
         f9:4c:e3:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 00:14:41 2025 by rpki-client