This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/68466889-c1ef-4410-ad9c-306c09e1be06/0/FE47963FB6E13EFC318606E3CA31013421827343.mft
File:                     FE47963FB6E13EFC318606E3CA31013421827343.mft (raw, json)
Hash identifier:          +Hsgk+DaORzew6ShGzHG9rtQHBPC/FctSuqZmxhNtTw=
Subject key identifier:   F1:F9:A0:B2:2A:D9:E6:21:0C:CF:60:69:14:6F:13:7D:BB:0F:79:B1
Authority key identifier: FE:47:96:3F:B6:E1:3E:FC:31:86:06:E3:CA:31:01:34:21:82:73:43
Certificate issuer:       /CN=FE47963FB6E13EFC318606E3CA31013421827343
Certificate serial:       3AB1D112AF7C612278A684961E6542B15D42AECA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FE47963FB6E13EFC318606E3CA31013421827343.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/68466889-c1ef-4410-ad9c-306c09e1be06/0/FE47963FB6E13EFC318606E3CA31013421827343.mft
Manifest number:          0154
Signing time:             Mon 26 Jan 2026 17:01:35 +0000
Manifest this update:     Mon 26 Jan 2026 16:56:35 +0000
Manifest next update:     Thu 29 Jan 2026 22:17:35 +0000
Files and hashes:         1: 3130332e36372e34392e302f32342d3234203d3e20313431363732.roa (hash: BDIVxvQovejwSTdQVoThOksyexqcbmKKBcpAZUy8WSU=)
                          2: FE47963FB6E13EFC318606E3CA31013421827343.crl (hash: jx+cXXXE4wQn7VfCteM/PdOznH3PzLhCJmpBmt8j5Q4=)
                          3: 3130332e3136322e3235322e302f32342d3234203d3e20313431363732.roa (hash: SKZ4JC2PVchiPELxqukX4ZUosexDdg2XkKRXWqgW864=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/68466889-c1ef-4410-ad9c-306c09e1be06/0/FE47963FB6E13EFC318606E3CA31013421827343.crl
                          rsync://repo-rpki.idnic.net/repo/68466889-c1ef-4410-ad9c-306c09e1be06/0/FE47963FB6E13EFC318606E3CA31013421827343.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FE47963FB6E13EFC318606E3CA31013421827343.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 29 Jan 2026 22:17:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:b1:d1:12:af:7c:61:22:78:a6:84:96:1e:65:42:b1:5d:42:ae:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FE47963FB6E13EFC318606E3CA31013421827343
        Validity
            Not Before: Jan 26 16:56:35 2026 GMT
            Not After : Jan 29 22:17:35 2026 GMT
        Subject: CN=F1F9A0B22AD9E6210CCF6069146F137DBB0F79B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:41:f4:42:7a:34:94:43:80:11:fd:bd:1a:ea:
                    20:31:6e:12:50:8b:1a:00:54:ce:5b:d3:75:b2:97:
                    16:3f:0a:e7:8a:49:65:4c:3d:11:89:91:20:fb:ef:
                    81:d8:7a:5f:d7:df:9a:49:83:af:c5:35:49:bf:54:
                    26:f5:c4:73:40:45:2a:c1:fa:86:3f:b3:f1:90:f9:
                    7c:df:ed:fa:57:ff:0d:a5:7d:8e:1f:4c:46:73:95:
                    82:54:f5:47:b8:39:9e:bf:2f:2e:7a:bb:8c:4e:14:
                    45:89:dc:15:a7:5e:af:58:25:d4:c0:d6:9c:76:39:
                    3a:3f:4b:ee:a2:da:89:28:37:ee:55:09:c4:8f:f9:
                    ed:91:9b:6f:eb:bd:f9:71:67:ca:af:c0:62:95:81:
                    2b:a4:99:9b:33:be:4f:c7:ce:3e:85:cf:d5:c2:ed:
                    9e:05:db:e6:e7:ca:37:f1:e7:e3:91:b6:9e:82:38:
                    64:07:03:35:b3:95:72:80:2c:2e:a0:21:95:6b:2b:
                    4d:a5:d9:75:d5:92:53:22:d0:e9:1f:53:c0:9d:21:
                    bf:31:a0:2d:0a:02:85:cb:a3:e9:e7:8f:33:2f:be:
                    a7:b2:d9:f2:39:95:f6:1d:0a:31:c0:dd:47:11:82:
                    f5:48:66:40:e7:73:72:bd:f9:6a:8f:27:91:c1:50:
                    14:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:F9:A0:B2:2A:D9:E6:21:0C:CF:60:69:14:6F:13:7D:BB:0F:79:B1
            X509v3 Authority Key Identifier:
                keyid:FE:47:96:3F:B6:E1:3E:FC:31:86:06:E3:CA:31:01:34:21:82:73:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/68466889-c1ef-4410-ad9c-306c09e1be06/0/FE47963FB6E13EFC318606E3CA31013421827343.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FE47963FB6E13EFC318606E3CA31013421827343.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/68466889-c1ef-4410-ad9c-306c09e1be06/0/FE47963FB6E13EFC318606E3CA31013421827343.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:4b:2f:ef:9d:c6:fb:48:87:4f:0b:32:26:44:5c:b1:be:4a:
         b1:68:c7:65:72:6e:dc:7e:84:81:a3:83:3c:08:2a:1a:46:8e:
         47:1f:50:62:e4:5e:5d:ae:7c:98:0b:c2:67:b3:63:c1:e9:a7:
         79:bc:1e:fc:1f:5b:f0:8a:87:c8:ae:eb:d4:43:c1:93:88:c3:
         7d:c5:9f:95:a2:01:ef:07:97:f2:2d:bc:15:de:1c:05:b2:81:
         44:c1:d5:bd:6d:1c:40:83:3c:a4:5d:c2:a1:b3:e3:9e:03:f0:
         4d:93:d6:9b:a9:22:8b:d6:fd:b3:fd:d5:8e:55:9c:14:d4:f3:
         29:0b:d7:79:bf:88:67:6e:d1:1c:a3:78:5b:1a:42:e5:ea:bb:
         da:d8:d0:83:63:60:7f:33:f0:62:20:30:0f:43:4e:1b:25:72:
         c4:4b:02:01:47:49:ba:e9:5a:b9:48:f0:3d:76:30:5d:af:c8:
         8d:41:4a:a9:85:96:4c:b4:08:48:a8:a2:5b:5f:88:94:4e:f1:
         84:e6:db:52:09:96:87:1b:43:d2:35:f8:bc:45:0a:bd:6a:18:
         64:82:37:d0:46:64:d9:7a:09:f9:75:31:4d:4a:10:e4:a8:d0:
         19:8c:e6:c0:99:cf:07:2c:0d:89:ef:a7:cf:64:e9:58:14:3f:
         99:05:14:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 28 18:49:46 2026 by rpki-client