This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39.mft
File:                     FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39.mft (raw, json)
Hash identifier:          Xn8hWbvUkDOhbCF6pDk7Ja0+C1DoTXXKoGoi9XKPRYU=
Subject key identifier:   71:1E:8A:7B:ED:56:68:06:B5:D9:B5:54:E1:89:6B:04:DB:08:0E:1D
Authority key identifier: FA:5B:CA:98:4E:EB:AF:FD:CE:D8:41:90:C7:07:56:DB:EB:3B:FF:39
Certificate issuer:       /CN=FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39
Certificate serial:       DF701C3219CA8A770C1C0529298E3A4F9B5139
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39.mft
Manifest number:          030D
Signing time:             Sun 01 Feb 2026 20:41:00 +0000
Manifest this update:     Sun 01 Feb 2026 20:36:00 +0000
Manifest next update:     Thu 05 Feb 2026 01:43:00 +0000
Files and hashes:         1: 323430323a653130303a3a2f33322d3438203d3e203538343835.roa (hash: JJglB/VlfiSRwxyeiN2g4JH/b5q2RqTOfEL3QFxIRWk=)
                          2: 323430323a653130303a38303a3a2f34382d3438203d3e203538343835.roa (hash: f/URrW3I6+5vkW0D1aSS1Bkh+i2+LjuWyAbPuExcRpQ=)
                          3: FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39.crl (hash: jdZlddRUeG+v0nn6TQ29vM2uPM+B0wjYy8adkmdOCtM=)
                          4: 3130332e3234372e32302e302f32322d3234203d3e203538343835.roa (hash: 0yw7rRpcNLCQkltZhjGJL1siB8HST2OMsTJXjD26O8w=)
                          5: 323430323a653130303a33383a3a2f34382d3438203d3e203538343835.roa (hash: ZcG33pBZTzSD/OyfUqiIR26pFQTz1ZHq/I2vKc5L2Lk=)
                          6: 3130332e3234372e32332e302f32342d3234203d3e203538343835.roa (hash: lzNm0/0IA9d3peGzozwFKwjutuLSs05RevbSqRZ75Wc=)
                          7: 3130332e3234372e32322e302f32342d3234203d3e203538343835.roa (hash: saNY2uHlV/XnejqjSZTyfzI/prOYKq0PQeW13/pFt9k=)
                          8: 323430323a653130303a3330353a3a2f34382d3438203d3e203538343835.roa (hash: jMXfHZ5G6a1+HMzwB17/q65yvup/Qxz3sZvzBsrsAlg=)
                          9: 323430323a653130303a38313a3a2f34382d3438203d3e203538343835.roa (hash: QYoY/WJkKnag3eKK6TqUfAN2/yGtdFRAxKAtoXHhjqo=)
                          10: 323430323a653130303a61633a3a2f34382d3438203d3e203538343835.roa (hash: PJK40q7WUwTW88oYuOeJRlP3deJscpLSdiVo4TnCchE=)
                          11: 323430323a653130303a61653a3a2f34382d3438203d3e203538343835.roa (hash: jn8YvD6TNkp1LaERG+YoqpArjIVwe5+hvrSaozXb0+E=)
                          12: 323430323a653130303a323030303a3a2f34382d3438203d3e203538343835.roa (hash: d1PRG5I24wLp0nZlSGZqsXMdn4LUKyh3+Rp9QJBPdWU=)
                          13: 323430323a653130303a37353a3a2f34382d3438203d3e203538343835.roa (hash: aHRt+E7BWGdjFLNGN2g9IGuN7mQDThteOWR07k+3Phs=)
                          14: 323430323a653130303a32303a3a2f34382d3438203d3e203538343835.roa (hash: JQBV4LZ7vr6myTyNSsVnH8wkRJsd1to3z2hSNW0KGDU=)
                          15: 3130332e3234372e32302e302f32342d3234203d3e203538343835.roa (hash: Z1gDiN/X+uv2C5f6v1h8WInw2+lPzjHj0oFTtpIP6pA=)
                          16: 3130332e3234372e32312e302f32342d3234203d3e203538343835.roa (hash: 34GAz6FSvQ986oiy73pgO3Nl806HiynZyDh81QhYAtI=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39.crl
                          rsync://repo-rpki.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Feb 2026 01:43:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            df:70:1c:32:19:ca:8a:77:0c:1c:05:29:29:8e:3a:4f:9b:51:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39
        Validity
            Not Before: Feb  1 20:36:00 2026 GMT
            Not After : Feb  5 01:43:00 2026 GMT
        Subject: CN=711E8A7BED566806B5D9B554E1896B04DB080E1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:df:4e:1c:16:b3:a2:ae:3e:93:88:d8:36:8e:
                    0b:3f:27:cb:36:d5:a9:18:cc:dd:b8:14:0e:b3:8d:
                    61:9b:d2:23:d3:83:78:10:c7:0a:e0:39:ff:5f:8e:
                    3f:ae:71:ab:e6:6b:eb:0c:be:47:b4:78:3d:d9:19:
                    60:57:9a:62:cb:09:e1:8a:d5:1a:46:3b:94:a4:0c:
                    96:a9:8f:f1:91:66:ff:ab:cb:f6:9c:0f:66:4e:6e:
                    3e:6c:62:01:04:bb:bb:8c:2e:bd:02:32:4f:c9:93:
                    47:a7:e6:0c:83:3a:22:2b:9d:ad:6f:e0:92:df:0f:
                    1e:cf:89:bf:25:a0:50:7d:2c:9e:f1:6d:6a:82:96:
                    ac:5a:8b:a8:65:af:81:8c:e8:24:8a:f6:4a:ec:f6:
                    0f:a6:a7:73:db:85:50:0b:1a:90:f9:94:e1:69:4c:
                    aa:e7:ad:b8:29:86:bb:ac:e0:fe:83:9d:c8:83:5f:
                    8f:5f:17:a1:c2:2b:c8:38:57:84:89:91:4c:59:7e:
                    63:b0:4f:1c:93:5d:82:03:7c:17:25:b1:b4:3c:f5:
                    7b:7f:e8:45:f8:44:73:58:19:c8:06:4d:6c:a6:c5:
                    c9:e4:44:ea:4e:ee:dd:c2:f1:03:14:b9:5e:2f:bf:
                    a4:36:43:55:fa:88:5c:a8:6e:6a:ed:0f:11:f8:2a:
                    7b:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:1E:8A:7B:ED:56:68:06:B5:D9:B5:54:E1:89:6B:04:DB:08:0E:1D
            X509v3 Authority Key Identifier:
                keyid:FA:5B:CA:98:4E:EB:AF:FD:CE:D8:41:90:C7:07:56:DB:EB:3B:FF:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:de:a7:7c:2c:9c:fc:1a:08:b2:51:cc:89:12:b4:8d:a6:b4:
         8f:02:db:1b:98:31:b7:53:bb:9a:02:4a:3e:ce:63:a1:fe:93:
         88:a4:90:b0:91:28:69:bd:00:90:13:1c:63:17:ed:7d:31:43:
         96:26:9c:a5:15:7f:9b:d5:43:47:b0:76:e0:89:70:31:19:33:
         ea:99:cd:9b:55:50:00:ba:55:ab:97:c2:8a:3c:33:56:8f:b6:
         8a:45:c3:40:a7:2d:b3:a5:f9:e1:a7:d7:6f:61:75:3f:5b:0a:
         b4:53:e8:6a:b0:f9:2b:b9:a2:5e:2a:34:04:2b:43:7f:17:0d:
         32:c5:d7:ae:31:ff:1a:a6:bf:f8:77:90:60:72:1b:96:cf:69:
         58:4d:b0:45:3f:f4:cb:42:9e:80:12:5a:7a:c8:1c:98:dc:41:
         d9:a1:73:6c:8b:98:f3:42:6e:a5:c7:9c:4b:51:d1:0a:0b:2d:
         80:79:f5:4a:17:11:a8:3c:b7:cc:c8:30:dd:0b:f9:21:5a:d5:
         39:09:c5:65:20:6e:3e:94:b6:bd:c2:99:da:cd:47:a2:d3:37:
         c6:5e:ee:b6:2a:1c:9e:1e:05:ec:7d:72:52:35:26:29:8e:ef:
         03:2a:81:c8:bf:1b:6a:2f:df:6a:fc:62:60:47:28:ac:f9:9c:
         fe:13:b6:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:43:09 2026 by rpki-client