This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39.mft
File:                     FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39.mft (raw, json)
Hash identifier:          RCOSVvpiz2/vcI/z2pEoL481DK6CkzeG9vKLECvhbGI=
Subject key identifier:   01:6E:18:32:C7:F1:A8:A0:18:6C:3F:D0:81:97:5D:5C:56:98:40:A5
Authority key identifier: FA:5B:CA:98:4E:EB:AF:FD:CE:D8:41:90:C7:07:56:DB:EB:3B:FF:39
Certificate issuer:       /CN=FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39
Certificate serial:       6E944C6375E8DECE5C63CBF9354677E5E9D1C230
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39.mft
Manifest number:          02F2
Signing time:             Mon 01 Dec 2025 22:41:00 +0000
Manifest this update:     Mon 01 Dec 2025 22:36:00 +0000
Manifest next update:     Fri 05 Dec 2025 09:00:00 +0000
Files and hashes:         1: 3130332e3234372e32302e302f32342d3234203d3e203538343835.roa (hash: Z1gDiN/X+uv2C5f6v1h8WInw2+lPzjHj0oFTtpIP6pA=)
                          2: 323430323a653130303a33383a3a2f34382d3438203d3e203538343835.roa (hash: ZcG33pBZTzSD/OyfUqiIR26pFQTz1ZHq/I2vKc5L2Lk=)
                          3: 323430323a653130303a61633a3a2f34382d3438203d3e203538343835.roa (hash: PJK40q7WUwTW88oYuOeJRlP3deJscpLSdiVo4TnCchE=)
                          4: 323430323a653130303a3330353a3a2f34382d3438203d3e203538343835.roa (hash: jMXfHZ5G6a1+HMzwB17/q65yvup/Qxz3sZvzBsrsAlg=)
                          5: 323430323a653130303a38313a3a2f34382d3438203d3e203538343835.roa (hash: QYoY/WJkKnag3eKK6TqUfAN2/yGtdFRAxKAtoXHhjqo=)
                          6: FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39.crl (hash: OzpogH+3dbn+gUvvtwUlXBpb6Oy/5M28n1v2nQyUC0I=)
                          7: 323430323a653130303a38303a3a2f34382d3438203d3e203538343835.roa (hash: f/URrW3I6+5vkW0D1aSS1Bkh+i2+LjuWyAbPuExcRpQ=)
                          8: 323430323a653130303a61653a3a2f34382d3438203d3e203538343835.roa (hash: jn8YvD6TNkp1LaERG+YoqpArjIVwe5+hvrSaozXb0+E=)
                          9: 323430323a653130303a32303a3a2f34382d3438203d3e203538343835.roa (hash: JQBV4LZ7vr6myTyNSsVnH8wkRJsd1to3z2hSNW0KGDU=)
                          10: 3130332e3234372e32302e302f32322d3234203d3e203538343835.roa (hash: 0yw7rRpcNLCQkltZhjGJL1siB8HST2OMsTJXjD26O8w=)
                          11: 3130332e3234372e32322e302f32342d3234203d3e203538343835.roa (hash: saNY2uHlV/XnejqjSZTyfzI/prOYKq0PQeW13/pFt9k=)
                          12: 323430323a653130303a3a2f33322d3438203d3e203538343835.roa (hash: JJglB/VlfiSRwxyeiN2g4JH/b5q2RqTOfEL3QFxIRWk=)
                          13: 3130332e3234372e32332e302f32342d3234203d3e203538343835.roa (hash: lzNm0/0IA9d3peGzozwFKwjutuLSs05RevbSqRZ75Wc=)
                          14: 323430323a653130303a323030303a3a2f34382d3438203d3e203538343835.roa (hash: d1PRG5I24wLp0nZlSGZqsXMdn4LUKyh3+Rp9QJBPdWU=)
                          15: 3130332e3234372e32312e302f32342d3234203d3e203538343835.roa (hash: 34GAz6FSvQ986oiy73pgO3Nl806HiynZyDh81QhYAtI=)
                          16: 323430323a653130303a37353a3a2f34382d3438203d3e203538343835.roa (hash: aHRt+E7BWGdjFLNGN2g9IGuN7mQDThteOWR07k+3Phs=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39.crl
                          rsync://repo-rpki.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 05 Dec 2025 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:94:4c:63:75:e8:de:ce:5c:63:cb:f9:35:46:77:e5:e9:d1:c2:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39
        Validity
            Not Before: Dec  1 22:36:00 2025 GMT
            Not After : Dec  5 09:00:00 2025 GMT
        Subject: CN=016E1832C7F1A8A0186C3FD081975D5C569840A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:2a:c5:41:37:e9:8f:fb:c2:ce:33:37:c1:4c:
                    7e:80:6c:85:27:c1:b7:7f:e6:7c:38:d1:e8:f0:72:
                    5e:6e:68:e4:e6:2a:e4:9e:fc:b1:92:a2:f9:78:59:
                    d6:ac:23:65:e8:54:80:db:38:81:7d:75:d5:c5:e2:
                    19:0b:b7:65:48:80:82:15:9f:d5:62:76:ee:ab:26:
                    ec:54:58:56:c2:7f:d2:27:3f:29:37:32:47:33:f7:
                    8a:6e:48:d8:3a:3e:5c:ac:45:40:97:ca:ba:7a:8a:
                    62:01:9f:f2:fd:26:b0:13:c6:c1:23:c8:80:bc:30:
                    5e:2b:c2:d9:92:e0:ee:60:a3:0a:ef:57:61:1a:ad:
                    5b:be:1b:9e:c2:40:77:54:12:18:51:78:ff:da:0a:
                    75:f7:65:66:64:21:25:61:59:28:9a:a4:3b:01:53:
                    98:12:28:d4:c2:01:c1:25:c2:af:f0:32:a4:27:62:
                    1c:a5:d5:c0:a8:f2:16:cc:31:70:7d:2a:db:43:b3:
                    dc:1f:a2:41:ce:87:14:89:0e:0a:f5:68:09:31:69:
                    24:94:c9:65:07:5d:ad:35:17:ff:60:5b:88:7a:19:
                    e3:20:01:28:b6:b5:71:20:42:9f:b9:db:1a:aa:84:
                    70:89:71:20:a6:9f:d0:7a:e0:88:23:72:01:20:71:
                    52:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:6E:18:32:C7:F1:A8:A0:18:6C:3F:D0:81:97:5D:5C:56:98:40:A5
            X509v3 Authority Key Identifier:
                keyid:FA:5B:CA:98:4E:EB:AF:FD:CE:D8:41:90:C7:07:56:DB:EB:3B:FF:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:f3:5f:a3:e4:34:d9:08:30:31:d7:52:ca:d6:dd:46:71:18:
         68:61:eb:c0:41:58:89:4f:73:d1:f8:74:e9:6f:27:8c:da:ba:
         5e:1b:81:e8:9a:67:ec:d4:08:59:9e:03:55:fa:14:45:d1:ca:
         37:3f:74:e9:59:bc:54:2f:0a:ce:4a:8c:d4:fe:4c:4b:14:8f:
         5c:b7:7a:fe:b7:a4:51:65:14:69:0f:23:79:80:22:98:08:9a:
         22:83:a9:05:fa:8b:b2:cc:14:af:04:c0:dc:44:8f:ff:ab:c2:
         28:27:c2:d9:29:33:94:72:99:fc:ed:ee:45:12:58:01:4f:76:
         61:ec:49:85:b9:8a:09:80:2d:f0:0d:58:a1:54:29:00:8c:aa:
         88:3e:9d:9c:b7:dc:a3:f9:19:bb:ff:53:72:17:3d:48:74:67:
         fb:8f:7a:16:21:15:61:55:c2:ab:99:7b:d2:ea:d2:bf:31:17:
         48:cd:0b:f2:36:76:26:59:62:d5:6d:a0:d0:b9:96:a6:81:dc:
         66:09:13:91:0f:2b:b9:6e:de:3c:2b:b7:f0:b1:d0:b1:70:a2:
         9c:2d:e8:00:88:9f:75:7f:17:3a:4f:5e:67:cc:cb:e8:bb:41:
         0c:00:d8:4c:86:04:2b:4e:15:5d:80:eb:b5:9c:55:67:b1:0b:
         1b:37:1c:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 14:43:58 2025 by rpki-client