This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39.mft
File:                     FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39.mft (raw, json)
Hash identifier:          0esRiOoZWrLHubpD3ms0E/to+1hTMSMz1kuPQvkH96A=
Subject key identifier:   1D:DA:93:B7:49:45:52:5D:AE:9B:6C:C0:A6:C2:EA:D5:2E:01:4C:DC
Authority key identifier: FA:5B:CA:98:4E:EB:AF:FD:CE:D8:41:90:C7:07:56:DB:EB:3B:FF:39
Certificate issuer:       /CN=FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39
Certificate serial:       0F4A48CE5D5EF5424F7C27B079C7CA7E18073E2E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39.mft
Manifest number:          02F9
Signing time:             Thu 18 Dec 2025 12:20:58 +0000
Manifest this update:     Thu 18 Dec 2025 12:15:58 +0000
Manifest next update:     Sun 21 Dec 2025 23:23:58 +0000
Files and hashes:         1: FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39.crl (hash: WuaXy5Qv1rZHrf8Vu/yL8k0qRC2aNkS5BIEYbfWUV4g=)
                          2: 3130332e3234372e32302e302f32342d3234203d3e203538343835.roa (hash: Z1gDiN/X+uv2C5f6v1h8WInw2+lPzjHj0oFTtpIP6pA=)
                          3: 3130332e3234372e32302e302f32322d3234203d3e203538343835.roa (hash: 0yw7rRpcNLCQkltZhjGJL1siB8HST2OMsTJXjD26O8w=)
                          4: 3130332e3234372e32322e302f32342d3234203d3e203538343835.roa (hash: saNY2uHlV/XnejqjSZTyfzI/prOYKq0PQeW13/pFt9k=)
                          5: 3130332e3234372e32312e302f32342d3234203d3e203538343835.roa (hash: 34GAz6FSvQ986oiy73pgO3Nl806HiynZyDh81QhYAtI=)
                          6: 323430323a653130303a323030303a3a2f34382d3438203d3e203538343835.roa (hash: d1PRG5I24wLp0nZlSGZqsXMdn4LUKyh3+Rp9QJBPdWU=)
                          7: 323430323a653130303a3330353a3a2f34382d3438203d3e203538343835.roa (hash: jMXfHZ5G6a1+HMzwB17/q65yvup/Qxz3sZvzBsrsAlg=)
                          8: 323430323a653130303a38313a3a2f34382d3438203d3e203538343835.roa (hash: QYoY/WJkKnag3eKK6TqUfAN2/yGtdFRAxKAtoXHhjqo=)
                          9: 323430323a653130303a33383a3a2f34382d3438203d3e203538343835.roa (hash: ZcG33pBZTzSD/OyfUqiIR26pFQTz1ZHq/I2vKc5L2Lk=)
                          10: 323430323a653130303a3a2f33322d3438203d3e203538343835.roa (hash: JJglB/VlfiSRwxyeiN2g4JH/b5q2RqTOfEL3QFxIRWk=)
                          11: 323430323a653130303a61653a3a2f34382d3438203d3e203538343835.roa (hash: jn8YvD6TNkp1LaERG+YoqpArjIVwe5+hvrSaozXb0+E=)
                          12: 323430323a653130303a38303a3a2f34382d3438203d3e203538343835.roa (hash: f/URrW3I6+5vkW0D1aSS1Bkh+i2+LjuWyAbPuExcRpQ=)
                          13: 323430323a653130303a61633a3a2f34382d3438203d3e203538343835.roa (hash: PJK40q7WUwTW88oYuOeJRlP3deJscpLSdiVo4TnCchE=)
                          14: 323430323a653130303a32303a3a2f34382d3438203d3e203538343835.roa (hash: JQBV4LZ7vr6myTyNSsVnH8wkRJsd1to3z2hSNW0KGDU=)
                          15: 323430323a653130303a37353a3a2f34382d3438203d3e203538343835.roa (hash: aHRt+E7BWGdjFLNGN2g9IGuN7mQDThteOWR07k+3Phs=)
                          16: 3130332e3234372e32332e302f32342d3234203d3e203538343835.roa (hash: lzNm0/0IA9d3peGzozwFKwjutuLSs05RevbSqRZ75Wc=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39.crl
                          rsync://repo-rpki.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 21 Dec 2025 23:23:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:4a:48:ce:5d:5e:f5:42:4f:7c:27:b0:79:c7:ca:7e:18:07:3e:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39
        Validity
            Not Before: Dec 18 12:15:58 2025 GMT
            Not After : Dec 21 23:23:58 2025 GMT
        Subject: CN=1DDA93B74945525DAE9B6CC0A6C2EAD52E014CDC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:fe:c3:e6:6d:d7:18:fb:a3:5a:cb:29:90:b2:
                    d9:46:43:84:07:eb:4c:fe:51:a8:cc:07:d4:7f:6c:
                    59:85:9d:65:74:d9:38:ff:02:44:8e:61:b1:45:09:
                    9d:ca:cd:4b:2a:30:63:5d:31:66:b7:a9:6b:2f:f8:
                    fe:f1:6c:b5:b0:1e:8c:f8:f5:5c:39:f5:8a:1d:6e:
                    03:0e:ee:7d:48:2b:83:75:08:4e:ae:53:67:f4:3c:
                    8d:73:02:e3:79:cb:cf:9f:68:b7:44:d6:53:a0:87:
                    54:2e:71:b1:55:01:42:87:21:15:66:de:be:9c:93:
                    55:22:2c:be:dc:33:37:86:31:8d:29:8e:d8:c6:85:
                    24:46:67:08:fd:5d:f6:29:14:09:02:13:b9:a2:44:
                    5e:a4:a8:96:a8:30:58:44:a5:0f:17:fa:7d:1e:32:
                    7e:8a:ff:64:64:37:48:78:1d:0f:e9:a9:81:c1:19:
                    cd:f5:65:c7:df:41:04:f6:5c:82:78:75:f4:7c:20:
                    d9:c7:17:3a:58:cc:17:b8:55:7e:5f:fb:91:60:28:
                    7f:80:7a:20:4c:9c:d7:88:5d:b7:29:fe:1d:61:bf:
                    33:9e:e5:b6:05:1d:6f:72:e2:d0:91:59:45:6a:dd:
                    ab:9d:db:8e:d1:b7:c7:dd:60:be:42:9b:60:42:78:
                    fe:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:DA:93:B7:49:45:52:5D:AE:9B:6C:C0:A6:C2:EA:D5:2E:01:4C:DC
            X509v3 Authority Key Identifier:
                keyid:FA:5B:CA:98:4E:EB:AF:FD:CE:D8:41:90:C7:07:56:DB:EB:3B:FF:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:9e:60:2d:65:28:90:74:7c:86:a5:a6:67:ed:1d:b6:6e:6a:
         70:a4:c3:cd:78:d7:96:ee:87:72:9f:40:d2:26:fd:67:b8:ef:
         08:4d:3a:69:36:92:bd:57:e1:37:98:7f:3b:92:01:99:a2:c5:
         a8:b1:f3:72:70:99:82:71:06:e5:06:13:9f:41:e2:22:46:a8:
         68:3b:86:91:ea:db:e9:43:6f:ff:f0:f0:77:30:92:4b:c9:92:
         f9:a7:d6:bf:ac:f9:27:d2:30:44:73:95:35:60:ef:0e:fc:01:
         63:71:73:d0:00:2f:7c:74:46:1c:3d:1f:e1:d1:a4:58:a5:8f:
         2d:ed:9f:aa:cd:4a:68:19:fb:44:26:0b:c8:c4:b8:18:22:c5:
         4d:be:f4:7a:40:2a:ac:26:f7:ed:65:b6:8a:9e:c7:82:63:4f:
         28:55:61:aa:80:0a:51:0c:46:cd:0b:09:b1:89:31:c7:f6:5b:
         8e:6c:dc:d4:1e:06:04:08:d1:28:02:95:3c:22:d2:ac:06:5a:
         f2:ab:59:fa:94:0f:8f:aa:87:48:bb:13:2d:76:d5:05:f2:f7:
         fb:42:b0:3e:21:2a:27:80:6a:89:0a:6a:dd:4f:2e:59:ef:27:
         65:94:1f:cb:61:e0:38:2a:25:55:c4:72:9c:0f:e4:a8:d9:4e:
         09:63:0a:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 20:09:16 2025 by rpki-client