This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/1653247a-a56e-424a-a07b-36a2511d7caa/0/FE880CC93B6284E6833106A5BEB71A0CDDE57C0B.mft
File:                     FE880CC93B6284E6833106A5BEB71A0CDDE57C0B.mft (raw, json)
Hash identifier:          caAc/TjjENPiz3fcIOzb4FcjFbldKM7LO0mSU5lZoZg=
Subject key identifier:   19:F2:2C:70:97:3A:08:D2:01:C5:D4:F3:F4:A3:2D:1F:F6:2C:56:8B
Authority key identifier: FE:88:0C:C9:3B:62:84:E6:83:31:06:A5:BE:B7:1A:0C:DD:E5:7C:0B
Certificate issuer:       /CN=FE880CC93B6284E6833106A5BEB71A0CDDE57C0B
Certificate serial:       6918D04313F7940FD4D51FAF9CDE3B8929D58E8A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FE880CC93B6284E6833106A5BEB71A0CDDE57C0B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/1653247a-a56e-424a-a07b-36a2511d7caa/0/FE880CC93B6284E6833106A5BEB71A0CDDE57C0B.mft
Manifest number:          0232
Signing time:             Sun 01 Feb 2026 10:02:14 +0000
Manifest this update:     Sun 01 Feb 2026 09:57:14 +0000
Manifest next update:     Wed 04 Feb 2026 17:04:14 +0000
Files and hashes:         1: 3130332e31332e3133392e302f32342d3234203d3e20313530323135.roa (hash: cU1g8IvJ9xTyNpUSLD7UlYtWkf7YESigdS5w5xzxaBQ=)
                          2: FE880CC93B6284E6833106A5BEB71A0CDDE57C0B.crl (hash: Ks2uHTURscOsUcTllgnU3gnc5iue/dHAucQByyFoJXQ=)
                          3: 3130332e31332e3133382e302f32342d3234203d3e20313530323135.roa (hash: 6ADoYkeIrhNdhv/k4Oyj/4jDcP6VkQMjB86DXlVYGIc=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/1653247a-a56e-424a-a07b-36a2511d7caa/0/FE880CC93B6284E6833106A5BEB71A0CDDE57C0B.crl
                          rsync://repo-rpki.idnic.net/repo/1653247a-a56e-424a-a07b-36a2511d7caa/0/FE880CC93B6284E6833106A5BEB71A0CDDE57C0B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FE880CC93B6284E6833106A5BEB71A0CDDE57C0B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Feb 2026 17:04:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:18:d0:43:13:f7:94:0f:d4:d5:1f:af:9c:de:3b:89:29:d5:8e:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FE880CC93B6284E6833106A5BEB71A0CDDE57C0B
        Validity
            Not Before: Feb  1 09:57:14 2026 GMT
            Not After : Feb  4 17:04:14 2026 GMT
        Subject: CN=19F22C70973A08D201C5D4F3F4A32D1FF62C568B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:de:53:96:2d:68:60:63:9e:c1:b8:8a:de:6a:
                    1b:ed:c1:ef:7d:5c:7c:40:fd:bd:78:c7:8b:4b:6b:
                    f9:b2:33:62:24:db:9f:ff:23:cb:f3:20:5c:2d:f3:
                    14:5a:be:27:60:8e:86:9d:69:6d:31:97:e6:35:28:
                    29:4e:d4:12:84:e5:3f:0c:5a:79:f1:e4:34:0d:5a:
                    16:66:e2:3c:2f:fa:bc:b0:5c:9b:f1:1c:d7:8a:4a:
                    28:cf:44:31:b3:e8:80:3a:49:2b:05:25:45:c7:31:
                    17:13:f7:86:8c:86:be:8e:9a:95:a2:01:e3:de:c5:
                    d8:66:64:ce:8c:4a:e0:c7:bc:eb:93:34:75:63:34:
                    f7:f4:f0:50:5c:cd:21:34:6f:c4:0c:b0:7b:17:65:
                    15:97:85:71:f7:21:88:90:7d:50:56:b6:d1:39:89:
                    0c:08:f3:ae:fd:88:d8:70:80:7a:ef:e7:86:6a:84:
                    bc:d9:a3:5a:56:b4:06:d9:98:2c:1d:54:73:c3:e6:
                    87:97:99:8a:45:b3:22:25:bf:99:84:5e:be:ac:0e:
                    dd:eb:ef:57:e8:40:28:22:2e:94:11:df:05:6d:7b:
                    e2:0f:35:e0:9c:5d:f5:53:57:ac:fc:8c:3e:15:d2:
                    13:b7:69:b7:10:2e:41:b3:6d:f5:c2:c8:01:f0:03:
                    16:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:F2:2C:70:97:3A:08:D2:01:C5:D4:F3:F4:A3:2D:1F:F6:2C:56:8B
            X509v3 Authority Key Identifier:
                keyid:FE:88:0C:C9:3B:62:84:E6:83:31:06:A5:BE:B7:1A:0C:DD:E5:7C:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/1653247a-a56e-424a-a07b-36a2511d7caa/0/FE880CC93B6284E6833106A5BEB71A0CDDE57C0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FE880CC93B6284E6833106A5BEB71A0CDDE57C0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1653247a-a56e-424a-a07b-36a2511d7caa/0/FE880CC93B6284E6833106A5BEB71A0CDDE57C0B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:1e:40:63:63:28:c5:5f:da:c8:b9:11:62:5b:a4:14:f9:11:
         30:e9:c4:b1:8d:70:94:24:aa:3a:92:16:e1:78:ed:4a:2f:dc:
         20:11:ed:bc:6b:86:f2:e0:b5:f0:7d:e9:61:1b:ca:a4:d0:21:
         b6:97:a9:d7:17:8a:3e:7b:d0:07:14:f4:64:49:42:d8:01:98:
         c8:a0:be:cd:9f:7e:bd:7d:28:c9:ce:8d:39:19:b7:79:d1:3c:
         b6:db:6c:e1:8a:0e:71:a8:e3:59:4b:f9:3e:a6:69:cb:d9:61:
         bd:11:5f:ef:31:c1:e1:5a:4d:c1:d8:46:32:80:dd:5c:22:c1:
         04:1e:7d:fd:5f:1d:b3:0b:01:d8:64:08:54:a1:c8:0a:38:86:
         0e:f5:92:7d:2a:46:32:3c:68:13:e5:91:03:98:91:62:43:01:
         c2:f6:21:9d:47:41:74:64:1c:bb:3b:c8:e5:2d:31:1b:8b:ca:
         31:2a:51:04:9e:a0:53:5a:a4:60:9a:26:eb:04:27:12:03:2a:
         cf:65:c3:67:46:03:b7:3d:01:c8:3d:47:7a:f4:9d:a0:9d:10:
         41:05:46:40:70:5f:47:5b:e8:54:80:e8:bc:c6:48:48:2e:07:
         e7:c5:2d:5d:ef:62:61:cc:47:79:f8:67:94:dd:8d:9a:88:fc:
         ac:75:36:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 10:05:09 2026 by rpki-client