This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/4f6aa31a-dd0d-4c10-b5dd-b1a83fa57763/0/FC9DA1A7625B27FDB466B1D8A690377E4C7BCE72.mft
File:                     FC9DA1A7625B27FDB466B1D8A690377E4C7BCE72.mft (raw, json)
Hash identifier:          6HnewpfTfwk+IQ4ko9KkIqcCj9PBjZQcCXE76+qEC7w=
Subject key identifier:   45:FE:97:3F:45:E1:01:23:B3:A1:FE:78:F2:0E:66:9F:6B:F5:88:4A
Authority key identifier: FC:9D:A1:A7:62:5B:27:FD:B4:66:B1:D8:A6:90:37:7E:4C:7B:CE:72
Certificate issuer:       /CN=FC9DA1A7625B27FDB466B1D8A690377E4C7BCE72
Certificate serial:       73268712056687F19F95B3A6002D622EBD775B4E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC9DA1A7625B27FDB466B1D8A690377E4C7BCE72.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/4f6aa31a-dd0d-4c10-b5dd-b1a83fa57763/0/FC9DA1A7625B27FDB466B1D8A690377E4C7BCE72.mft
Manifest number:          052C
Signing time:             Mon 01 Dec 2025 11:21:16 +0000
Manifest this update:     Mon 01 Dec 2025 11:16:16 +0000
Manifest next update:     Thu 04 Dec 2025 18:43:16 +0000
Files and hashes:         1: 3130332e33312e3130392e302f32342d3234203d3e20313333333630.roa (hash: 49661VGQ4ZvwDmpnxmNaIUS/VEvyTMAxvwwlmJQfjlM=)
                          2: FC9DA1A7625B27FDB466B1D8A690377E4C7BCE72.crl (hash: R5VMul9qa+TasDvyV/Co8J88JoW+BdrvktghOfe612Q=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/4f6aa31a-dd0d-4c10-b5dd-b1a83fa57763/0/FC9DA1A7625B27FDB466B1D8A690377E4C7BCE72.crl
                          rsync://repo-rpki.idnic.net/repo/4f6aa31a-dd0d-4c10-b5dd-b1a83fa57763/0/FC9DA1A7625B27FDB466B1D8A690377E4C7BCE72.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC9DA1A7625B27FDB466B1D8A690377E4C7BCE72.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 04 Dec 2025 18:43:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:26:87:12:05:66:87:f1:9f:95:b3:a6:00:2d:62:2e:bd:77:5b:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC9DA1A7625B27FDB466B1D8A690377E4C7BCE72
        Validity
            Not Before: Dec  1 11:16:16 2025 GMT
            Not After : Dec  4 18:43:16 2025 GMT
        Subject: CN=45FE973F45E10123B3A1FE78F20E669F6BF5884A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:0f:75:88:7c:54:41:df:ec:7c:05:7a:8c:05:
                    02:3d:2c:30:42:08:c2:1f:82:38:32:ee:51:ea:24:
                    bd:9e:eb:4a:51:2a:b9:6b:85:7f:88:16:66:30:cf:
                    9d:5c:0f:13:2d:62:1a:58:dc:8d:5e:5e:4a:31:55:
                    0b:19:08:f1:9e:99:7d:14:b0:3c:e6:3e:bf:27:5e:
                    54:80:a8:c7:a0:27:7b:9e:50:d5:9b:09:a8:17:8e:
                    0b:14:63:7d:1d:51:e0:64:d9:b4:13:71:50:84:6a:
                    c8:23:5b:d4:8b:8d:f0:33:ca:d5:ee:00:e0:38:ce:
                    fd:6f:46:84:94:7e:6a:1b:94:e4:07:bf:fe:79:06:
                    4e:6a:1c:85:e8:45:b4:4e:aa:79:70:1a:e4:03:dc:
                    75:d2:f1:05:1f:27:88:37:72:93:8f:43:95:4c:a8:
                    b0:9e:dc:72:4c:2c:35:39:52:c3:6c:90:3f:b0:09:
                    99:9f:8f:08:c9:4f:f2:7e:70:c2:b3:48:ec:91:07:
                    d8:16:49:dd:cd:59:ba:d3:8d:fb:7d:9f:77:70:6d:
                    7c:f5:5a:d7:32:30:f2:08:fc:35:0d:b0:11:2a:ff:
                    72:f9:02:25:a2:05:e4:ea:d8:ae:a1:8f:0e:8b:a3:
                    36:5c:bb:d7:67:de:d8:2c:5a:b2:0a:a1:60:96:28:
                    66:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:FE:97:3F:45:E1:01:23:B3:A1:FE:78:F2:0E:66:9F:6B:F5:88:4A
            X509v3 Authority Key Identifier:
                keyid:FC:9D:A1:A7:62:5B:27:FD:B4:66:B1:D8:A6:90:37:7E:4C:7B:CE:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/4f6aa31a-dd0d-4c10-b5dd-b1a83fa57763/0/FC9DA1A7625B27FDB466B1D8A690377E4C7BCE72.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC9DA1A7625B27FDB466B1D8A690377E4C7BCE72.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4f6aa31a-dd0d-4c10-b5dd-b1a83fa57763/0/FC9DA1A7625B27FDB466B1D8A690377E4C7BCE72.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:c3:c5:30:f8:17:fc:32:31:ab:fc:a7:15:a5:98:9b:ac:35:
         4e:23:74:13:9a:12:3c:1c:64:32:8a:9a:c6:b6:1f:34:22:1f:
         8e:68:1a:6e:d4:29:d1:47:bd:f2:00:74:a8:06:29:fd:38:e4:
         7b:a4:f1:96:97:d6:5b:03:8b:ee:c1:63:81:03:90:61:a9:6e:
         85:1e:a5:f1:60:c2:f7:4d:f5:63:5e:72:b4:d2:24:4f:a1:d1:
         d0:40:1e:cd:8a:a9:27:5e:93:ef:bd:9e:9b:33:f9:47:ed:cb:
         a7:d1:e8:50:c8:7f:f3:8c:3f:e4:0c:c1:8f:24:ff:96:9c:98:
         01:ec:e0:21:67:1b:7f:82:c6:e9:8e:92:98:62:59:d9:01:6c:
         9f:8d:ca:49:40:6f:ec:13:05:67:ab:12:06:00:6e:31:80:8d:
         84:7d:5c:89:a1:ae:d3:93:31:f4:47:d9:6e:90:53:50:d1:d7:
         30:5a:7e:5a:21:2f:b6:2a:c4:bd:75:64:dd:0a:e9:f8:c7:47:
         16:0b:42:ab:7b:d4:9a:20:ea:60:75:b1:b3:84:53:4c:c5:c9:
         d9:ee:75:28:88:04:be:a1:b4:8e:93:34:33:7b:a1:4c:b5:22:
         72:8d:95:4a:ab:9c:6c:32:e3:22:6f:cf:03:3e:a2:15:1a:52:
         b7:89:1a:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 13:56:50 2025 by rpki-client