This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/FC646066A689B77054AF95653FA324395357E6A3.mft
File:                     FC646066A689B77054AF95653FA324395357E6A3.mft (raw, json)
Hash identifier:          vxQE151mtma1Sm2kg0F49Sm4JQw6G1Armf7KLhcguCw=
Subject key identifier:   D1:5B:9C:5A:9B:1E:19:D1:6C:E0:F1:C0:1B:FD:F2:34:38:99:D3:86
Authority key identifier: FC:64:60:66:A6:89:B7:70:54:AF:95:65:3F:A3:24:39:53:57:E6:A3
Certificate issuer:       /CN=FC646066A689B77054AF95653FA324395357E6A3
Certificate serial:       1703F5312118BCC3940000D6E4EBFF6FDF4FAC29
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC646066A689B77054AF95653FA324395357E6A3.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/FC646066A689B77054AF95653FA324395357E6A3.mft
Manifest number:          0534
Signing time:             Tue 02 Dec 2025 23:52:21 +0000
Manifest this update:     Tue 02 Dec 2025 23:47:21 +0000
Manifest next update:     Sat 06 Dec 2025 00:25:21 +0000
Files and hashes:         1: 3130332e31312e39392e302f32342d3234203d3e203535363533.roa (hash: IOFzZe1IvwoIGSoJhxZwtkEkEW47dvJdJ0E5fC3jeys=)
                          2: 31342e3130322e3135352e302f32342d3234203d3e203535363533.roa (hash: Aqv+Cv2xxpkL4seMoOW2PqWbLLYJHATV5/+tD0LtsgA=)
                          3: 3130332e31312e39362e302f32342d3234203d3e203535363533.roa (hash: H4PttalZLNptjPsZ0cni/wefIj1b5DtDJUp4pLmDsx8=)
                          4: 323430323a633330303a3a2f33322d3438203d3e203535363533.roa (hash: bGPK4/XEobq1bk7eW0IqEOt5RrHUWnGxVvGe+M2MWVI=)
                          5: 3130332e31312e39372e302f32342d3234203d3e203535363533.roa (hash: zhsac+dR+hLwxuxKAvs58KLjwCG2OW3/qJ9XL7XL52Y=)
                          6: 31342e3130322e3135342e302f32342d3234203d3e203535363533.roa (hash: 3zcWmXCIsv3omjOiSti1UlbmTCz0e0HYT7ukX9kfxvE=)
                          7: 31342e3130322e3135322e302f32322d3234203d3e203535363533.roa (hash: tcAOfelZsfvkpX9bUklTUsOMqUIe7iMnYq8XrY6rniM=)
                          8: 3130332e31312e39382e302f32342d3234203d3e203535363533.roa (hash: Ulal03KaCVZbu0jye4Et6grNN6xfSzGRs7XoejJgRmc=)
                          9: 31342e3130322e3135332e302f32342d3234203d3e203535363532.roa (hash: is5MWGQz2ThLibcgEVqAwJiiHTPRuDzYs+szhUZM1uA=)
                          10: 3230322e31302e36332e302f32342d3234203d3e203535363533.roa (hash: 3x/TagzWw9AEnitF9/BKz1IoUShxY7ix8DtkXTWs+vs=)
                          11: FC646066A689B77054AF95653FA324395357E6A3.crl (hash: BXiMie9Ipmq8tVefScVbz8kmO1q6raJGtUd29UrchPo=)
                          12: 3130332e31312e39362e302f32322d3234203d3e203535363533.roa (hash: PVQdneK9Q2r+2YuMkyuS3S7JvDEOimiQ6kS5G4qY3D8=)
                          13: 34332e3234392e3134302e302f32322d3234203d3e203535363533.roa (hash: VXuEsrUjBUraWB5GeM4W6dfuMEU9X+IXajG+jXJX29c=)
                          14: 3230322e35322e31322e302f32322d3234203d3e203535363533.roa (hash: r4N7YVGjSR/vf/OS/81YrBx8jNMdTo+vkJbDS2Aeqlg=)
                          15: 31342e3130322e3135322e302f32342d3234203d3e203535363533.roa (hash: Ic0fHoziZDQ5ySiUrW0yV+eRMvxq+Fv+lvK78woem+Y=)
                          16: 3130332e3235342e3132362e302f32332d3234203d3e203535363533.roa (hash: 9BxarKCax6xXzwA7sCkwW9bstNPy4ZEaa9LRlsVppIQ=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/FC646066A689B77054AF95653FA324395357E6A3.crl
                          rsync://repo-rpki.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/FC646066A689B77054AF95653FA324395357E6A3.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC646066A689B77054AF95653FA324395357E6A3.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 06 Dec 2025 00:25:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:03:f5:31:21:18:bc:c3:94:00:00:d6:e4:eb:ff:6f:df:4f:ac:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC646066A689B77054AF95653FA324395357E6A3
        Validity
            Not Before: Dec  2 23:47:21 2025 GMT
            Not After : Dec  6 00:25:21 2025 GMT
        Subject: CN=D15B9C5A9B1E19D16CE0F1C01BFDF2343899D386
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:6c:de:bf:ae:97:ac:bb:55:73:6b:37:45:d3:
                    b5:1d:15:93:df:28:1b:4f:08:11:b0:50:24:b2:dd:
                    7f:d3:11:35:37:9e:78:db:b4:81:1e:17:02:a5:e7:
                    af:8f:12:49:fa:6b:de:6a:a6:90:95:87:fc:fa:cc:
                    b8:3a:d3:40:16:93:ec:a3:db:01:b4:5a:8c:a7:ad:
                    91:02:3c:a2:35:e8:47:15:c3:e8:eb:ad:8d:22:26:
                    70:5f:15:81:59:5d:01:49:a8:cb:74:0e:b9:32:f6:
                    86:b7:92:f9:27:3d:6a:90:3b:fc:76:f6:75:a7:40:
                    93:b9:27:64:eb:3f:f5:01:0f:e4:d3:77:05:c9:a6:
                    9c:af:69:e3:04:35:bd:11:3c:57:a3:fe:d1:28:5c:
                    f8:fe:c4:a3:d3:00:1b:be:f2:21:31:03:3b:b7:75:
                    e7:68:09:16:58:48:41:d6:09:c0:9f:44:21:27:18:
                    9c:a9:75:99:e4:90:ee:5e:50:b6:2b:06:dd:4c:26:
                    90:00:cf:92:77:d0:f1:70:2f:96:93:4f:08:a3:9b:
                    24:3e:c0:4a:b7:a8:3e:91:28:3f:6e:d6:81:e2:a4:
                    53:3b:09:1e:dd:0d:a8:c0:93:8a:ac:68:0e:81:0d:
                    33:66:c3:03:d5:4b:6b:78:06:8f:56:ec:b6:c5:b0:
                    42:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:5B:9C:5A:9B:1E:19:D1:6C:E0:F1:C0:1B:FD:F2:34:38:99:D3:86
            X509v3 Authority Key Identifier:
                keyid:FC:64:60:66:A6:89:B7:70:54:AF:95:65:3F:A3:24:39:53:57:E6:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/FC646066A689B77054AF95653FA324395357E6A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC646066A689B77054AF95653FA324395357E6A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/FC646066A689B77054AF95653FA324395357E6A3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:a3:48:53:ba:d3:c9:12:5b:4c:18:33:ae:99:ed:24:51:08:
         b1:27:e3:4f:ab:75:13:82:a0:94:a8:66:26:6e:b6:7b:29:f4:
         fe:21:07:f8:6d:56:cb:5d:d6:35:76:0a:54:2e:a5:78:17:db:
         97:91:56:4c:0f:f1:da:42:57:99:60:6b:f1:16:2a:c7:60:f3:
         f9:41:0a:ef:9a:0e:89:e4:a7:31:4b:e9:64:65:54:9f:31:32:
         3d:1f:b6:4e:5d:e2:0b:d4:ea:36:68:35:08:00:38:c3:c3:e5:
         58:e2:45:37:1e:c7:01:7b:dd:2c:b9:99:2c:12:03:52:53:9e:
         dc:9e:f0:6c:8d:2b:92:a6:ad:32:bf:ec:96:d5:ee:16:dc:67:
         d9:d0:3b:2b:9b:a2:30:24:b1:ee:af:e9:d3:14:9f:a0:9b:69:
         e2:cc:88:64:f0:51:79:a4:cd:c1:d9:26:da:30:53:93:12:1e:
         15:c5:81:c3:25:d6:97:d1:a1:ad:85:b3:35:47:78:dd:6a:ca:
         88:ed:22:86:c5:75:e2:4f:ad:b9:28:cc:17:32:c8:c4:e4:98:
         6d:a5:48:a3:ef:f0:0a:24:22:cd:d4:8b:a9:4e:b6:58:78:dc:
         d0:09:56:6f:0a:f2:c8:83:60:0f:e8:9e:eb:b8:b4:9b:ab:d9:
         f8:0a:c0:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 16:09:09 2025 by rpki-client