This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/4f6aa31a-dd0d-4c10-b5dd-b1a83fa57763/0/FC9DA1A7625B27FDB466B1D8A690377E4C7BCE72.mft
File:                     FC9DA1A7625B27FDB466B1D8A690377E4C7BCE72.mft (raw, json)
Hash identifier:          v34JW2vxeT6JqWU8C51cndLQzzGkuuR8yVYNGT0KXe4=
Subject key identifier:   0B:E9:03:DD:D2:63:25:07:5C:2B:E8:46:42:0C:16:AE:72:FC:67:F6
Authority key identifier: FC:9D:A1:A7:62:5B:27:FD:B4:66:B1:D8:A6:90:37:7E:4C:7B:CE:72
Certificate issuer:       /CN=FC9DA1A7625B27FDB466B1D8A690377E4C7BCE72
Certificate serial:       511ED359BF4D9FE18FAA149203CF6505F14FC9DD
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC9DA1A7625B27FDB466B1D8A690377E4C7BCE72.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/4f6aa31a-dd0d-4c10-b5dd-b1a83fa57763/0/FC9DA1A7625B27FDB466B1D8A690377E4C7BCE72.mft
Manifest number:          0548
Signing time:             Mon 02 Feb 2026 08:11:13 +0000
Manifest this update:     Mon 02 Feb 2026 08:06:13 +0000
Manifest next update:     Thu 05 Feb 2026 15:53:13 +0000
Files and hashes:         1: 3130332e33312e3130392e302f32342d3234203d3e20313333333630.roa (hash: 49661VGQ4ZvwDmpnxmNaIUS/VEvyTMAxvwwlmJQfjlM=)
                          2: FC9DA1A7625B27FDB466B1D8A690377E4C7BCE72.crl (hash: OmMKBpreJb6oIPrjS2XWGO7YiSb38PXsj24SizR4eZ0=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/4f6aa31a-dd0d-4c10-b5dd-b1a83fa57763/0/FC9DA1A7625B27FDB466B1D8A690377E4C7BCE72.crl
                          rsync://repo-rpki.idnic.net/repo/4f6aa31a-dd0d-4c10-b5dd-b1a83fa57763/0/FC9DA1A7625B27FDB466B1D8A690377E4C7BCE72.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC9DA1A7625B27FDB466B1D8A690377E4C7BCE72.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Feb 2026 05:24:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:1e:d3:59:bf:4d:9f:e1:8f:aa:14:92:03:cf:65:05:f1:4f:c9:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC9DA1A7625B27FDB466B1D8A690377E4C7BCE72
        Validity
            Not Before: Feb  2 08:06:13 2026 GMT
            Not After : Feb  5 15:53:13 2026 GMT
        Subject: CN=0BE903DDD26325075C2BE846420C16AE72FC67F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:6d:82:53:f1:56:07:d1:28:c6:ff:f1:64:92:
                    ac:46:79:2c:3d:32:29:5e:96:8b:ae:c7:1a:b5:4b:
                    65:16:43:53:2b:0a:05:d7:8e:b3:1a:ad:4d:5f:26:
                    55:bd:a6:eb:58:61:d4:24:28:b7:07:6f:cc:13:8e:
                    bc:19:98:d4:a5:e1:02:12:f4:13:b4:f0:05:90:3f:
                    33:52:8f:61:5f:7b:0c:f2:b2:f6:9f:a2:99:f9:5f:
                    57:16:10:7e:2b:30:a5:b6:51:c6:c8:b3:df:d1:0c:
                    15:64:8a:89:d3:30:b8:d2:f7:3d:bb:0f:60:87:f1:
                    df:c9:6c:86:34:92:35:3e:84:c3:d9:01:8a:2c:16:
                    d1:41:2b:b0:e6:af:61:04:d6:e7:f2:33:fe:a7:db:
                    ac:f0:bc:42:17:09:ef:de:1c:c8:c6:d9:e9:d4:33:
                    e0:33:62:50:69:18:66:97:9e:7a:78:9a:7b:f5:5a:
                    db:69:39:66:a1:e5:0a:94:7f:0c:2c:01:6c:bf:3c:
                    80:6a:5d:5a:14:2c:fe:8b:8a:25:d9:f9:d3:9f:af:
                    24:c5:ad:e9:a1:e9:0f:6b:29:b7:60:dc:5b:09:19:
                    63:71:93:51:d0:cd:ba:f5:1c:51:1c:b6:90:e1:4c:
                    43:78:1d:fa:6a:e1:46:11:d3:d2:d5:1c:61:2b:69:
                    83:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:E9:03:DD:D2:63:25:07:5C:2B:E8:46:42:0C:16:AE:72:FC:67:F6
            X509v3 Authority Key Identifier:
                keyid:FC:9D:A1:A7:62:5B:27:FD:B4:66:B1:D8:A6:90:37:7E:4C:7B:CE:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/4f6aa31a-dd0d-4c10-b5dd-b1a83fa57763/0/FC9DA1A7625B27FDB466B1D8A690377E4C7BCE72.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC9DA1A7625B27FDB466B1D8A690377E4C7BCE72.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4f6aa31a-dd0d-4c10-b5dd-b1a83fa57763/0/FC9DA1A7625B27FDB466B1D8A690377E4C7BCE72.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:7e:51:bd:df:4f:62:9c:9f:71:c4:60:61:5d:6b:c3:fd:8e:
         e0:82:0b:b2:19:99:66:1c:26:f6:e8:95:c7:c9:c8:5b:b4:39:
         1d:33:f3:2c:2a:a9:d7:b1:a0:e6:04:1b:2a:d3:51:8d:1a:82:
         c2:89:09:bc:3f:0b:b9:a3:db:bd:6a:45:1d:f1:74:02:cd:6d:
         12:be:a5:3c:d1:0e:56:9e:4a:e5:81:36:c1:bb:d3:22:66:f6:
         32:7e:e4:d6:27:27:46:72:4e:ad:12:b7:d6:c1:5e:e7:46:42:
         7b:2d:77:21:02:2c:af:24:14:d5:9a:0f:15:d4:91:87:a6:b6:
         eb:18:b1:cd:4f:45:d8:64:03:c2:a7:a8:9b:e9:32:89:eb:09:
         dc:47:b1:38:f2:78:37:76:c1:c6:45:e8:3a:3d:5b:70:27:c3:
         43:23:28:43:06:ac:57:a5:6e:fe:ae:b9:b7:31:eb:9c:3e:bc:
         e1:93:1a:f7:d4:8c:05:b4:1a:75:de:30:b6:72:7f:63:20:12:
         41:8c:55:79:89:7c:7d:86:4a:f5:f9:cd:d2:51:d1:67:50:4f:
         09:85:c6:bf:ed:71:ca:46:72:0f:01:3d:05:b7:30:73:77:b9:
         42:33:70:81:c7:4c:39:ab:c8:ab:8b:41:55:9b:dc:6e:68:9c:
         00:32:26:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 10:02:17 2026 by rpki-client