This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/8165e481-5a79-4868-a4e4-facfd922d813/0/FB3AAFE074610C85854BE75082EC16E60A126879.mft
File:                     FB3AAFE074610C85854BE75082EC16E60A126879.mft (raw, json)
Hash identifier:          enSeJ0phk8YJglpx2ZzcHYWDkbjrxKgpeO+qrUGYoSY=
Subject key identifier:   FD:3B:BC:8D:95:3F:EB:B7:7F:E1:16:88:58:55:94:FA:BB:37:1F:91
Authority key identifier: FB:3A:AF:E0:74:61:0C:85:85:4B:E7:50:82:EC:16:E6:0A:12:68:79
Certificate issuer:       /CN=FB3AAFE074610C85854BE75082EC16E60A126879
Certificate serial:       2C4DE100D624EE6055ED99A42A603159ABCBA583
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FB3AAFE074610C85854BE75082EC16E60A126879.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8165e481-5a79-4868-a4e4-facfd922d813/0/FB3AAFE074610C85854BE75082EC16E60A126879.mft
Manifest number:          012B
Signing time:             Sat 31 Jan 2026 05:00:46 +0000
Manifest this update:     Sat 31 Jan 2026 04:55:46 +0000
Manifest next update:     Tue 03 Feb 2026 08:22:46 +0000
Files and hashes:         1: FB3AAFE074610C85854BE75082EC16E60A126879.crl (hash: gmTgnabZpILuA/t/UeUdUqKULfVX272rZMo4DEPS8S4=)
                          2: 3130332e3135302e3135392e302f32342d3234203d3e20313430343331.roa (hash: e3s751+uHuq2vHbykLAhhBQ6L17VHuRd5Etg83ChrxA=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8165e481-5a79-4868-a4e4-facfd922d813/0/FB3AAFE074610C85854BE75082EC16E60A126879.crl
                          rsync://repo-rpki.idnic.net/repo/8165e481-5a79-4868-a4e4-facfd922d813/0/FB3AAFE074610C85854BE75082EC16E60A126879.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FB3AAFE074610C85854BE75082EC16E60A126879.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Feb 2026 08:22:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:4d:e1:00:d6:24:ee:60:55:ed:99:a4:2a:60:31:59:ab:cb:a5:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB3AAFE074610C85854BE75082EC16E60A126879
        Validity
            Not Before: Jan 31 04:55:46 2026 GMT
            Not After : Feb  3 08:22:46 2026 GMT
        Subject: CN=FD3BBC8D953FEBB77FE11688585594FABB371F91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:65:f4:a5:47:c5:b0:16:c3:44:09:34:c8:da:
                    29:b1:5f:5e:44:d5:ec:dd:2b:58:9c:6f:cb:4f:97:
                    46:8c:00:7b:10:16:0a:09:89:03:3f:58:cc:26:b9:
                    d1:d5:0a:33:cc:05:c3:7e:09:af:3b:63:f3:09:bf:
                    c0:f4:7e:fb:df:b6:5b:38:01:9d:a8:e4:aa:59:ae:
                    36:22:cf:e7:f5:02:c7:6d:2b:23:65:cc:b5:31:a6:
                    21:11:5b:db:a9:90:85:ea:f1:51:50:82:15:22:38:
                    57:99:71:49:b5:ed:70:df:46:d9:85:40:d9:68:30:
                    37:54:fc:35:17:d8:ef:71:b0:87:09:96:85:16:c2:
                    5a:86:d3:a6:3f:1c:f0:bd:42:21:b7:cc:07:88:44:
                    c9:b5:ef:83:c3:56:d7:42:d4:12:27:00:c4:eb:2c:
                    4c:cd:97:41:54:b9:cb:e9:55:7f:d8:39:d1:0d:71:
                    c7:b6:96:a6:39:ad:12:8d:b9:a9:de:8d:d2:9f:53:
                    52:91:eb:bf:7c:38:e1:f8:81:05:fc:d1:5f:cc:99:
                    bc:a7:86:c8:ef:ba:44:fd:e9:19:cf:81:ef:62:f6:
                    0a:eb:d2:e9:11:39:dc:4d:68:df:04:58:94:2b:8b:
                    32:ab:bf:9e:cc:10:9e:29:0e:0e:dc:81:5f:1c:74:
                    4d:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:3B:BC:8D:95:3F:EB:B7:7F:E1:16:88:58:55:94:FA:BB:37:1F:91
            X509v3 Authority Key Identifier:
                keyid:FB:3A:AF:E0:74:61:0C:85:85:4B:E7:50:82:EC:16:E6:0A:12:68:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8165e481-5a79-4868-a4e4-facfd922d813/0/FB3AAFE074610C85854BE75082EC16E60A126879.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FB3AAFE074610C85854BE75082EC16E60A126879.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8165e481-5a79-4868-a4e4-facfd922d813/0/FB3AAFE074610C85854BE75082EC16E60A126879.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:92:a8:0b:17:c3:3f:fb:e8:e5:bc:df:aa:d1:3e:cd:7e:2f:
         23:66:41:ac:10:94:89:14:97:73:76:43:0d:cc:62:68:de:f4:
         2d:45:80:06:3e:a9:ab:29:a3:0e:d7:40:46:69:35:4f:18:c0:
         22:29:67:98:1b:0f:f5:1f:b5:75:bc:5f:7d:25:38:65:0c:d2:
         64:a1:01:3b:4e:8d:f1:e5:14:42:54:0d:81:ee:fb:77:4c:4f:
         4c:94:44:05:ea:c4:4e:f3:f8:95:6c:5f:75:eb:5d:d0:22:aa:
         2f:08:0b:dc:e6:af:a8:26:35:e1:05:ae:6b:c1:79:6e:42:3b:
         8b:33:6c:19:ef:66:98:ff:15:db:4e:4e:04:c9:cc:44:b4:ed:
         58:b4:9e:83:16:87:21:43:ea:cb:57:6b:92:81:f4:4a:02:af:
         3b:58:7b:1a:66:1d:2f:2d:f4:af:0d:b1:12:3a:48:81:71:7e:
         e7:c8:a9:c9:bf:b7:7c:f8:61:7f:15:e6:9a:a1:97:c2:1f:5e:
         5c:a3:b6:b3:df:c4:61:0c:9e:b7:62:87:9c:47:0a:ff:b0:21:
         47:6c:64:7f:b5:7f:69:a6:e8:cd:c9:be:fa:01:c2:a9:d6:59:
         60:53:35:3f:05:e4:76:a4:79:0e:c9:b2:07:6d:2a:6b:91:8d:
         a6:6e:1d:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 10:03:40 2026 by rpki-client