This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/ede4719a-ace4-41f2-a070-8de3192b7f49/0/FC31DB70F7B2F17F13E92A2E7BAE5554792EFBBF.mft
File:                     FC31DB70F7B2F17F13E92A2E7BAE5554792EFBBF.mft (raw, json)
Hash identifier:          gOCW0n2Zt7gj66oTQ9nWjLaSt6vqEGDbtv0Fux9qYZ4=
Subject key identifier:   C2:4C:ED:E9:94:BF:31:F0:12:A9:82:36:99:BD:3F:71:76:2A:64:AA
Authority key identifier: FC:31:DB:70:F7:B2:F1:7F:13:E9:2A:2E:7B:AE:55:54:79:2E:FB:BF
Certificate issuer:       /CN=FC31DB70F7B2F17F13E92A2E7BAE5554792EFBBF
Certificate serial:       5FF0FD25CF6CB2B58F67D1EA4A9B15AE501420B4
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC31DB70F7B2F17F13E92A2E7BAE5554792EFBBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ede4719a-ace4-41f2-a070-8de3192b7f49/0/FC31DB70F7B2F17F13E92A2E7BAE5554792EFBBF.mft
Manifest number:          0542
Signing time:             Sat 31 Jan 2026 06:10:47 +0000
Manifest this update:     Sat 31 Jan 2026 06:05:47 +0000
Manifest next update:     Tue 03 Feb 2026 14:05:47 +0000
Files and hashes:         1: FC31DB70F7B2F17F13E92A2E7BAE5554792EFBBF.crl (hash: V0ZN0xIbm4A26Y24nEJKEfjQg4R/o8SYAIn00O5+jNI=)
                          2: 3230322e36312e39382e302f32332d3234203d3e203234353337.roa (hash: 7v+UWewpBXKuzE8AR/fYejkKyBNOrEBvR5vrqtJwA4s=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ede4719a-ace4-41f2-a070-8de3192b7f49/0/FC31DB70F7B2F17F13E92A2E7BAE5554792EFBBF.crl
                          rsync://repo-rpki.idnic.net/repo/ede4719a-ace4-41f2-a070-8de3192b7f49/0/FC31DB70F7B2F17F13E92A2E7BAE5554792EFBBF.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC31DB70F7B2F17F13E92A2E7BAE5554792EFBBF.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Feb 2026 14:05:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:f0:fd:25:cf:6c:b2:b5:8f:67:d1:ea:4a:9b:15:ae:50:14:20:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC31DB70F7B2F17F13E92A2E7BAE5554792EFBBF
        Validity
            Not Before: Jan 31 06:05:47 2026 GMT
            Not After : Feb  3 14:05:47 2026 GMT
        Subject: CN=C24CEDE994BF31F012A9823699BD3F71762A64AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:dd:3d:4c:52:78:df:0b:46:0b:33:5e:c8:97:
                    4c:06:80:68:a3:7e:cb:da:56:28:8c:db:c4:65:4d:
                    5a:3b:57:f7:34:13:ba:c5:d0:0e:65:a5:d5:2f:35:
                    0c:80:81:91:35:46:e3:0c:2a:c2:82:fd:4c:f4:ef:
                    c2:43:5a:dc:e5:5c:a6:ab:db:6d:a7:d6:66:83:cc:
                    9c:a1:a5:b1:05:c5:49:0b:3d:58:cf:42:45:c6:95:
                    41:cd:03:a4:8d:d5:2f:66:67:24:39:9b:bc:f0:03:
                    af:0c:b9:cc:e8:1d:2a:e7:66:13:d1:3c:15:22:e4:
                    1a:8a:7b:96:1d:ed:16:b6:e8:e7:4e:2c:8d:48:06:
                    90:82:20:9c:7c:c2:c3:b9:33:ae:3b:bd:f7:ac:71:
                    e6:d8:63:ed:1a:73:eb:d2:fc:a0:fb:34:7e:47:4e:
                    b6:c0:30:ca:02:e5:bf:8d:78:75:d6:0b:4c:fb:e5:
                    d5:df:07:70:47:17:0b:f6:87:b1:00:ec:a8:9f:be:
                    92:c2:e8:88:0a:e7:79:1d:d7:93:b2:08:47:ad:ec:
                    6c:2d:d2:c4:b7:37:1f:08:61:e3:b9:d8:6e:22:55:
                    2a:5f:27:22:ae:f0:d7:54:c5:7e:f8:d7:97:67:4d:
                    98:64:88:da:ba:a0:63:f5:2e:fe:48:16:1a:10:5f:
                    04:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:4C:ED:E9:94:BF:31:F0:12:A9:82:36:99:BD:3F:71:76:2A:64:AA
            X509v3 Authority Key Identifier:
                keyid:FC:31:DB:70:F7:B2:F1:7F:13:E9:2A:2E:7B:AE:55:54:79:2E:FB:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ede4719a-ace4-41f2-a070-8de3192b7f49/0/FC31DB70F7B2F17F13E92A2E7BAE5554792EFBBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC31DB70F7B2F17F13E92A2E7BAE5554792EFBBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ede4719a-ace4-41f2-a070-8de3192b7f49/0/FC31DB70F7B2F17F13E92A2E7BAE5554792EFBBF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:a3:ad:36:86:d4:9b:6d:78:d6:1b:0c:cc:9c:a0:42:cc:42:
         38:2b:82:e3:de:44:a8:6d:66:c6:1e:1c:d1:55:3f:df:1d:99:
         0d:9b:cb:3d:35:51:70:45:85:b3:c3:d4:eb:2e:dc:7c:c7:ff:
         13:63:24:8b:4a:92:a8:81:9f:92:5e:34:cf:5d:4a:3c:ce:a0:
         57:46:ce:89:f6:58:3b:d0:96:00:da:18:59:d6:33:8f:85:2a:
         c2:41:2a:91:6d:92:ca:21:af:59:1f:04:28:31:c4:31:6c:56:
         78:77:4b:40:1b:17:34:d6:9f:03:55:f6:bd:b0:ed:98:0a:4b:
         cf:62:8f:46:1a:42:4d:0c:af:c4:27:d8:3b:ea:e2:7c:e1:0f:
         20:b6:db:c9:41:f0:0c:8d:ae:40:ad:24:1f:bc:83:50:39:c8:
         e3:9d:05:97:26:80:3e:d2:f7:a3:ea:9a:ff:0b:79:ab:67:cf:
         2f:62:07:64:f9:7e:c8:4d:e6:d7:69:90:f5:61:08:16:73:82:
         29:91:15:f5:77:cf:27:92:df:83:bc:19:66:92:fe:65:5d:80:
         9d:3d:04:a5:c4:db:fc:a8:6b:f5:f2:ac:f6:dd:cc:a5:d7:a0:
         32:8f:1c:4f:14:00:82:c6:36:f8:65:49:81:3b:b1:c4:6e:b6:
         b6:bf:6c:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:42:16 2026 by rpki-client