This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/73f75088-088e-41c0-bfce-edc69beafd4a/0/FED49ABCDA1C9D097F52AD26D8001C0C36632C89.mft
File:                     FED49ABCDA1C9D097F52AD26D8001C0C36632C89.mft (raw, json)
Hash identifier:          Sij9B/AhKyVzmFQC2mjNvmdctbxIrxZ5Lt4Ik5miwnQ=
Subject key identifier:   9D:26:A7:53:28:4C:D8:76:28:83:21:43:7C:AF:C6:F7:ED:6F:CC:8F
Authority key identifier: FE:D4:9A:BC:DA:1C:9D:09:7F:52:AD:26:D8:00:1C:0C:36:63:2C:89
Certificate issuer:       /CN=FED49ABCDA1C9D097F52AD26D8001C0C36632C89
Certificate serial:       21ED3EFBDDAE6F876FEF92356141AAA6253C5563
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FED49ABCDA1C9D097F52AD26D8001C0C36632C89.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/73f75088-088e-41c0-bfce-edc69beafd4a/0/FED49ABCDA1C9D097F52AD26D8001C0C36632C89.mft
Manifest number:          0281
Signing time:             Sun 14 Dec 2025 02:10:47 +0000
Manifest this update:     Sun 14 Dec 2025 02:05:47 +0000
Manifest next update:     Wed 17 Dec 2025 03:26:47 +0000
Files and hashes:         1: 3130332e3138302e3139342e302f32342d3234203d3e2039333431.roa (hash: E01mZ15UIJ+QTIPPcGks35isU/hOcW6+FEQB5HchAFc=)
                          2: 3130332e3138302e3139352e302f32342d3234203d3e2039333431.roa (hash: jasipL9tt5lF7HvMmB9WMDxphox1aLuH+uQXtrmFRL8=)
                          3: 3130332e3138302e3139342e302f32332d3233203d3e2039333431.roa (hash: T5Fz3OXAuav/iqbItkD85kgf8QFMTkSpBn4rOH0yfRc=)
                          4: FED49ABCDA1C9D097F52AD26D8001C0C36632C89.crl (hash: Red6ePi8SjP9uiyqmQPC1UGwesIgxNRqHFxECF6IbUE=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/73f75088-088e-41c0-bfce-edc69beafd4a/0/FED49ABCDA1C9D097F52AD26D8001C0C36632C89.crl
                          rsync://repo-rpki.idnic.net/repo/73f75088-088e-41c0-bfce-edc69beafd4a/0/FED49ABCDA1C9D097F52AD26D8001C0C36632C89.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FED49ABCDA1C9D097F52AD26D8001C0C36632C89.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 17 Dec 2025 03:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:ed:3e:fb:dd:ae:6f:87:6f:ef:92:35:61:41:aa:a6:25:3c:55:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FED49ABCDA1C9D097F52AD26D8001C0C36632C89
        Validity
            Not Before: Dec 14 02:05:47 2025 GMT
            Not After : Dec 17 03:26:47 2025 GMT
        Subject: CN=9D26A753284CD876288321437CAFC6F7ED6FCC8F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:fb:42:3f:dd:76:77:da:a1:9f:a0:e6:3a:c5:
                    0a:30:21:6a:35:8f:1a:27:be:03:c2:3c:26:0c:eb:
                    8c:a4:9a:a8:55:25:99:db:bf:c3:b3:45:86:3f:8b:
                    8a:e5:18:9f:07:ca:6c:bb:b6:e9:6e:3e:c0:e5:5e:
                    af:49:c9:ea:ad:74:d4:8b:45:31:45:52:10:33:b4:
                    99:7e:39:aa:98:43:0f:65:95:d9:ba:58:33:8a:61:
                    49:ac:77:f4:14:ab:8f:09:8a:f3:31:e5:08:d4:7c:
                    a0:6c:bc:4b:56:55:14:1a:1e:5c:45:af:a8:c4:fc:
                    8a:78:b9:ab:3c:ca:89:b0:68:f8:78:1a:47:97:b9:
                    d1:ca:49:4c:b8:6c:0a:9e:e0:48:2b:26:58:14:a4:
                    e6:01:5b:2f:52:05:dd:2f:cb:45:5a:a3:54:cd:e6:
                    5d:07:1d:59:8f:1f:94:06:3f:4f:ad:4b:1e:2b:74:
                    d5:8f:49:8d:98:66:c1:cb:9c:64:af:e4:0e:12:b0:
                    bb:23:af:64:7b:00:77:07:6a:80:44:d5:3a:96:11:
                    c8:4c:cd:d6:2a:8d:69:74:49:e6:7b:83:96:a3:b7:
                    34:a6:ee:57:54:5b:3f:0d:35:3b:7c:88:bc:fc:fb:
                    f8:13:0a:c7:e1:d1:a4:13:1f:6a:85:0a:21:f5:b8:
                    16:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:26:A7:53:28:4C:D8:76:28:83:21:43:7C:AF:C6:F7:ED:6F:CC:8F
            X509v3 Authority Key Identifier:
                keyid:FE:D4:9A:BC:DA:1C:9D:09:7F:52:AD:26:D8:00:1C:0C:36:63:2C:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/73f75088-088e-41c0-bfce-edc69beafd4a/0/FED49ABCDA1C9D097F52AD26D8001C0C36632C89.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FED49ABCDA1C9D097F52AD26D8001C0C36632C89.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73f75088-088e-41c0-bfce-edc69beafd4a/0/FED49ABCDA1C9D097F52AD26D8001C0C36632C89.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:ae:93:f0:d7:7c:f9:d2:07:99:90:76:b0:f1:56:79:78:c4:
         33:c3:e7:84:90:8a:cd:c6:bf:bf:be:a8:d1:1b:0f:b1:79:13:
         7c:2e:06:fb:2d:cb:e0:4a:be:9d:93:d3:f5:8b:44:99:5e:a9:
         a2:3b:ed:54:05:03:59:7e:4c:de:d3:c2:bf:b2:a5:b9:a9:b3:
         29:59:c1:ee:6b:76:d1:a9:9a:a2:1f:b5:f4:c4:32:eb:ad:9c:
         51:d6:8c:c9:40:6a:2f:33:36:1e:84:5e:a5:25:f8:19:fd:37:
         ab:9a:cc:4d:9d:2c:58:ed:98:82:39:7d:de:4a:d4:f4:e2:26:
         c3:67:f5:80:9d:2d:d5:b7:38:34:06:42:e0:17:e9:24:05:64:
         ab:cf:06:9e:9b:4a:4c:2f:fe:28:db:81:5b:93:d2:22:04:a4:
         1d:8b:2d:15:e6:85:a6:5f:ae:d7:01:09:65:06:5e:0d:73:09:
         f1:c3:12:a9:1b:39:fe:07:03:28:48:10:02:dd:f4:3e:86:87:
         e8:45:07:ab:d0:8d:d4:e8:c6:d5:06:59:8c:7e:c0:11:01:a5:
         14:f4:9b:b4:2f:06:8b:36:b6:24:58:ea:30:26:74:3a:50:08:
         c9:e2:4a:63:80:c9:a1:cb:5f:29:dc:b4:b4:68:e6:2d:28:2f:
         b0:60:37:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 15 22:12:42 2025 by rpki-client