This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/0/FC2DAAA409BA60DE33EC91F3A861D1A00719D426.mft
File:                     FC2DAAA409BA60DE33EC91F3A861D1A00719D426.mft (raw, json)
Hash identifier:          ZT0fQuKMm+Eg5UPXVFmtAKDrnapDHSYCJrGNJoWGW/I=
Subject key identifier:   0E:48:72:F2:38:49:EA:BF:9D:78:8C:3F:2C:77:F1:FF:C5:57:A2:6D
Authority key identifier: FC:2D:AA:A4:09:BA:60:DE:33:EC:91:F3:A8:61:D1:A0:07:19:D4:26
Certificate issuer:       /CN=FC2DAAA409BA60DE33EC91F3A861D1A00719D426
Certificate serial:       01EDD254636C1C030FF35CC9824158A340D04C49
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FC2DAAA409BA60DE33EC91F3A861D1A00719D426.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/0/FC2DAAA409BA60DE33EC91F3A861D1A00719D426.mft
Manifest number:          010F
Signing time:             Tue 20 Jan 2026 06:50:55 +0000
Manifest this update:     Tue 20 Jan 2026 06:45:55 +0000
Manifest next update:     Fri 23 Jan 2026 16:12:55 +0000
Files and hashes:         1: FC2DAAA409BA60DE33EC91F3A861D1A00719D426.crl (hash: VD5neeocnIBm844jCX/Y70KBodf9YtK8Ag7MG+rPLbc=)
                          2: 3135372e36362e322e302f32332d3234203d3e20313532343430.roa (hash: 3ZS5/0NJnXKv4Pk0J4oSOH1r1VKtA3mh1qb3WAlsXUw=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/0/FC2DAAA409BA60DE33EC91F3A861D1A00719D426.crl
                          rsync://repo-rpki.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/0/FC2DAAA409BA60DE33EC91F3A861D1A00719D426.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FC2DAAA409BA60DE33EC91F3A861D1A00719D426.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 23 Jan 2026 16:12:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:ed:d2:54:63:6c:1c:03:0f:f3:5c:c9:82:41:58:a3:40:d0:4c:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC2DAAA409BA60DE33EC91F3A861D1A00719D426
        Validity
            Not Before: Jan 20 06:45:55 2026 GMT
            Not After : Jan 23 16:12:55 2026 GMT
        Subject: CN=0E4872F23849EABF9D788C3F2C77F1FFC557A26D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:9d:7f:23:fc:89:23:4b:33:7d:63:c6:4f:6d:
                    e3:48:93:f4:8b:d2:ba:27:0d:2f:84:1e:16:39:6c:
                    d0:13:78:35:3d:27:07:03:3a:8c:11:b6:0e:21:e3:
                    9b:f9:65:79:51:33:7d:35:1d:4c:64:ae:42:91:77:
                    14:37:20:74:5b:ec:87:35:02:6e:49:3b:56:51:4a:
                    10:f6:bb:22:71:d1:bb:6a:4f:8f:d7:2d:b6:71:ba:
                    73:16:f7:5e:32:47:66:4d:89:2e:8e:8e:5f:af:f9:
                    d3:79:f6:d0:9d:cf:24:0c:79:db:67:a7:46:4a:e9:
                    b8:46:d9:9d:c3:57:17:50:a1:9c:01:af:de:ae:72:
                    a6:44:68:43:63:4c:ce:ea:7d:c6:87:29:9e:1d:37:
                    83:02:54:ae:37:2e:1e:e5:42:ad:f9:ec:26:a3:58:
                    d9:09:87:8c:47:c5:44:bb:e8:16:f3:90:4d:12:fd:
                    8e:7a:bb:6a:1d:81:26:f0:71:4b:62:ce:68:2b:a1:
                    9e:32:da:e4:ad:66:a7:6d:86:d0:0e:97:24:86:98:
                    60:73:84:f2:5f:ac:c5:27:6c:2b:39:1d:5f:86:ad:
                    de:9e:f2:ee:30:87:4b:76:5f:ed:16:fd:f0:42:4c:
                    b5:f9:cd:0c:0f:7d:4e:6e:ad:a3:0b:12:a3:42:da:
                    9a:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:48:72:F2:38:49:EA:BF:9D:78:8C:3F:2C:77:F1:FF:C5:57:A2:6D
            X509v3 Authority Key Identifier:
                keyid:FC:2D:AA:A4:09:BA:60:DE:33:EC:91:F3:A8:61:D1:A0:07:19:D4:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/0/FC2DAAA409BA60DE33EC91F3A861D1A00719D426.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FC2DAAA409BA60DE33EC91F3A861D1A00719D426.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/0/FC2DAAA409BA60DE33EC91F3A861D1A00719D426.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:29:b2:eb:e0:c6:59:43:9c:75:07:1f:38:73:fa:5e:af:b0:
         f1:b1:21:46:25:9d:49:e1:34:17:5f:87:3d:bb:4c:80:5b:bd:
         af:1b:d4:78:ce:ac:53:9a:29:ca:08:84:6a:24:d5:62:b5:3d:
         9a:e1:b0:e3:e3:9a:e5:00:f3:49:8b:5a:9c:eb:a4:73:94:f9:
         4e:6b:6a:ec:c8:64:b9:12:bb:b3:19:75:f9:39:be:88:d0:7e:
         a4:98:a6:69:b8:7e:79:11:d9:0e:4a:99:68:a2:9c:c5:a7:5a:
         73:68:b9:ce:9f:1b:7b:60:72:61:57:85:29:79:a8:a2:6c:9d:
         4f:d8:25:80:4d:1e:a9:7f:f1:cc:8a:c4:6c:1b:87:80:eb:3f:
         8e:f1:7d:84:23:06:85:09:a8:c7:16:21:bc:fa:be:9b:9d:e5:
         72:6f:1c:02:75:c4:74:b4:8f:7c:d1:d9:13:45:11:8c:19:9b:
         f1:9d:5e:2b:5a:13:82:91:0a:14:ac:ec:83:83:24:dc:a4:2d:
         2e:71:5a:6d:68:92:9c:9c:9c:8f:ef:c2:fb:dc:ac:1d:01:7a:
         aa:41:b9:37:3d:40:5a:ad:52:b6:08:21:30:1d:6c:47:7d:85:
         f6:65:16:bd:8e:3f:4c:13:1d:98:24:e7:20:37:1f:1b:2e:a2:
         16:a0:f5:4e
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUAe3SVGNsHAMP81zJgkFYo0DQTEkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkMyREFBQTQwOUJBNjBERTMzRUM5MUYzQTg2MUQxQTAw
NzE5RDQyNjAeFw0yNjAxMjAwNjQ1NTVaFw0yNjAxMjMxNjEyNTVaMDMxMTAvBgNV
BAMTKDBFNDg3MkYyMzg0OUVBQkY5RDc4OEMzRjJDNzdGMUZGQzU1N0EyNkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTnX8j/IkjSzN9Y8ZPbeNIk/SL
0ronDS+EHhY5bNATeDU9JwcDOowRtg4h45v5ZXlRM301HUxkrkKRdxQ3IHRb7Ic1
Am5JO1ZRShD2uyJx0btqT4/XLbZxunMW914yR2ZNiS6Ojl+v+dN59tCdzyQMedtn
p0ZK6bhG2Z3DVxdQoZwBr96ucqZEaENjTM7qfcaHKZ4dN4MCVK43Lh7lQq357Caj
WNkJh4xHxUS76BbzkE0S/Y56u2odgSbwcUtizmgroZ4y2uStZqdthtAOlySGmGBz
hPJfrMUnbCs5HV+Grd6e8u4wh0t2X+0W/fBCTLX5zQwPfU5uraMLEqNC2porAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUDkhy8jhJ6r+deIw/LHfx/8VXom0wHwYDVR0j
BBgwFoAU/C2qpAm6YN4z7JHzqGHRoAcZ1CYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81
ZmI4MDhlYi1jOThlLTQwMzYtYmU5YS0xOTNiYmNjNjQ4OTIvMC9GQzJEQUFBNDA5
QkE2MERFMzNFQzkxRjNBODYxRDFBMDA3MTlENDI2LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzEvRkMyREFBQTQwOUJBNjBERTMzRUM5MUYzQTg2MUQxQTAwNzE5
RDQyNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWZiODA4ZWItYzk4ZS00MDM2LWJl
OWEtMTkzYmJjYzY0ODkyLzAvRkMyREFBQTQwOUJBNjBERTMzRUM5MUYzQTg2MUQx
QTAwNzE5RDQyNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBACgpsuvgxllDnHUHHzhz+l6vsPGxIUYlnUnh
NBdfhz27TIBbva8b1HjOrFOaKcoIhGok1WK1PZrhsOPjmuUA80mLWpzrpHOU+U5r
auzIZLkSu7MZdfk5vojQfqSYpmm4fnkR2Q5KmWiinMWnWnNouc6fG3tgcmFXhSl5
qKJsnU/YJYBNHql/8cyKxGwbh4DrP47xfYQjBoUJqMcWIbz6vpud5XJvHAJ1xHS0
j3zR2RNFEYwZm/GdXitaE4KRChSs7IODJNykLS5xWm1okpycnI/vwvvcrB0BeqpB
uTc9QFqtUrYIITAdbEd9hfZlFr2OP0wTHZgk5yA3Hxsuohag9U4=
-----END CERTIFICATE-----
Generated at Wed Jan 21 12:02:33 2026 by rpki-client