This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/a7afd57a-e6de-4a5f-b5c6-10865d5a8c98/0/FE5652AD4702104DB082C396B05EE5D04542E7D7.mft
File:                     FE5652AD4702104DB082C396B05EE5D04542E7D7.mft (raw, json)
Hash identifier:          ZpAtlY0j1kHOmZV3+AQYvOGzZ4o+agGU2tGN9bx2o4Q=
Subject key identifier:   47:90:34:56:AA:3C:ED:AE:DA:DA:B6:00:F8:AC:48:E8:64:19:5C:C9
Authority key identifier: FE:56:52:AD:47:02:10:4D:B0:82:C3:96:B0:5E:E5:D0:45:42:E7:D7
Certificate issuer:       /CN=FE5652AD4702104DB082C396B05EE5D04542E7D7
Certificate serial:       190F01FDA31312F97F41DA4C5163132B764F004E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FE5652AD4702104DB082C396B05EE5D04542E7D7.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a7afd57a-e6de-4a5f-b5c6-10865d5a8c98/0/FE5652AD4702104DB082C396B05EE5D04542E7D7.mft
Manifest number:          0188
Signing time:             Wed 17 Dec 2025 01:22:00 +0000
Manifest this update:     Wed 17 Dec 2025 01:17:00 +0000
Manifest next update:     Sat 20 Dec 2025 06:07:00 +0000
Files and hashes:         1: FE5652AD4702104DB082C396B05EE5D04542E7D7.crl (hash: eKt0v27ZsGAG4myGDd9HeS2lva+15gneMZGE0DkeQME=)
                          2: 3130332e3233392e32302e302f32332d3234203d3e20313531353139.roa (hash: J6vL2iPNUwb9fYjqqj1vv1gpk3+iSC5RPrrqhYMFLI8=)
                          3: 3130332e3233392e32302e302f32342d3234203d3e20313531353139.roa (hash: 20qa29YtuQDpydBxT+l3i2qfQTa2+tFQJ7mFZgoSVhk=)
                          4: 3130332e3233392e32312e302f32342d3234203d3e20313531353139.roa (hash: 03BXaxAzi9VaO+DQQ6QWjZsMJ2gPh3wF9aEYxb1vAPc=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a7afd57a-e6de-4a5f-b5c6-10865d5a8c98/0/FE5652AD4702104DB082C396B05EE5D04542E7D7.crl
                          rsync://repo-rpki.idnic.net/repo/a7afd57a-e6de-4a5f-b5c6-10865d5a8c98/0/FE5652AD4702104DB082C396B05EE5D04542E7D7.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FE5652AD4702104DB082C396B05EE5D04542E7D7.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Dec 2025 06:07:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:0f:01:fd:a3:13:12:f9:7f:41:da:4c:51:63:13:2b:76:4f:00:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FE5652AD4702104DB082C396B05EE5D04542E7D7
        Validity
            Not Before: Dec 17 01:17:00 2025 GMT
            Not After : Dec 20 06:07:00 2025 GMT
        Subject: CN=47903456AA3CEDAEDADAB600F8AC48E864195CC9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:08:c0:07:21:a4:72:d5:b4:2d:21:cb:ef:e1:
                    5e:3e:90:f9:e2:91:5a:b7:8c:ed:91:0e:e7:09:0e:
                    cc:d9:2b:a4:ce:ba:17:18:2c:ae:21:84:a1:d5:74:
                    81:fd:4b:8d:8e:19:8f:8b:b1:35:97:88:5c:dc:d6:
                    1e:4f:20:dc:38:e9:40:ea:fb:35:1d:38:46:fd:5f:
                    67:24:d5:3b:05:e4:23:b9:a3:8d:96:50:2d:f6:03:
                    b6:c1:97:4e:8e:13:d5:36:80:ea:de:85:cf:47:07:
                    6d:e6:aa:06:72:95:84:c8:d2:2b:c9:e3:d4:6b:80:
                    87:7e:6f:10:cf:db:bb:6f:d9:6c:59:95:f6:aa:f9:
                    e4:e9:82:0a:1e:cd:73:76:98:97:18:c4:f0:27:d0:
                    da:58:eb:44:55:1f:62:11:40:42:83:e8:f3:81:5f:
                    07:fd:77:fe:d6:31:0e:96:a7:58:3d:ba:99:79:44:
                    52:78:f7:e2:00:fb:79:cb:21:40:49:5f:36:65:0e:
                    c9:7b:c9:fd:d8:b8:c0:9d:73:7f:e8:01:df:64:f7:
                    04:65:45:86:04:c4:c5:98:95:e9:45:cf:79:d9:90:
                    16:b6:09:fa:61:a6:d3:e3:75:5b:e7:ae:cc:7e:38:
                    bf:b5:49:0a:de:cb:fd:68:0b:58:3a:03:61:ce:b9:
                    4f:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:90:34:56:AA:3C:ED:AE:DA:DA:B6:00:F8:AC:48:E8:64:19:5C:C9
            X509v3 Authority Key Identifier:
                keyid:FE:56:52:AD:47:02:10:4D:B0:82:C3:96:B0:5E:E5:D0:45:42:E7:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a7afd57a-e6de-4a5f-b5c6-10865d5a8c98/0/FE5652AD4702104DB082C396B05EE5D04542E7D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FE5652AD4702104DB082C396B05EE5D04542E7D7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a7afd57a-e6de-4a5f-b5c6-10865d5a8c98/0/FE5652AD4702104DB082C396B05EE5D04542E7D7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:3f:34:29:25:28:08:c3:ab:ef:5e:a4:87:0e:2c:5c:d5:9b:
         c9:03:8f:28:dd:6a:7c:99:72:53:f2:ed:cf:6e:69:67:a8:f7:
         b6:4a:74:08:2c:87:9a:a9:18:53:7d:e1:8e:40:b2:25:87:3d:
         d6:36:89:63:63:ad:22:cb:4f:1f:bc:e3:93:ac:fc:43:dd:4c:
         e0:2c:f6:87:9f:9b:03:77:31:2c:1b:f5:3e:27:4b:0a:cc:98:
         62:e5:b8:7a:d6:dc:de:ee:6b:f3:8e:fa:4a:ab:81:2e:07:2c:
         97:5c:43:dc:13:0d:05:81:14:11:a3:53:ca:9d:0d:df:72:75:
         93:fb:53:37:4a:5c:d4:6f:64:80:02:fb:f5:d6:07:37:c2:6a:
         20:26:7e:19:28:c7:3c:52:fb:73:7f:34:c1:d6:24:5d:77:e8:
         ad:98:4c:69:c3:de:8d:cb:59:96:f6:fc:0f:fa:18:59:0d:3d:
         7b:64:8c:a5:18:08:e9:5c:28:cd:c6:d4:9d:90:06:bf:b7:b6:
         23:47:b6:6a:aa:71:74:90:dd:fc:10:c6:3a:8d:bd:58:24:aa:
         86:da:09:88:df:33:d1:6a:15:fb:60:cf:90:85:f4:2a:74:af:
         02:06:5d:15:f1:30:fd:46:bb:8d:5b:e9:13:c1:79:c5:f0:2a:
         7e:d7:5b:6d
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUGQ8B/aMTEvl/QdpMUWMTK3ZPAE4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkU1NjUyQUQ0NzAyMTA0REIwODJDMzk2QjA1RUU1RDA0
NTQyRTdENzAeFw0yNTEyMTcwMTE3MDBaFw0yNTEyMjAwNjA3MDBaMDMxMTAvBgNV
BAMTKDQ3OTAzNDU2QUEzQ0VEQUVEQURBQjYwMEY4QUM0OEU4NjQxOTVDQzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxCMAHIaRy1bQtIcvv4V4+kPni
kVq3jO2RDucJDszZK6TOuhcYLK4hhKHVdIH9S42OGY+LsTWXiFzc1h5PINw46UDq
+zUdOEb9X2ck1TsF5CO5o42WUC32A7bBl06OE9U2gOrehc9HB23mqgZylYTI0ivJ
49RrgId+bxDP27tv2WxZlfaq+eTpggoezXN2mJcYxPAn0NpY60RVH2IRQEKD6POB
Xwf9d/7WMQ6Wp1g9upl5RFJ49+IA+3nLIUBJXzZlDsl7yf3YuMCdc3/oAd9k9wRl
RYYExMWYlelFz3nZkBa2CfphptPjdVvnrsx+OL+1SQrey/1oC1g6A2HOuU+NAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUR5A0Vqo87a7a2rYA+KxI6GQZXMkwHwYDVR0j
BBgwFoAU/lZSrUcCEE2wgsOWsF7l0EVC59cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
N2FmZDU3YS1lNmRlLTRhNWYtYjVjNi0xMDg2NWQ1YThjOTgvMC9GRTU2NTJBRDQ3
MDIxMDREQjA4MkMzOTZCMDVFRTVEMDQ1NDJFN0Q3LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRkU1NjUyQUQ0NzAyMTA0REIwODJDMzk2QjA1RUU1RDA0NTQy
RTdENy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTdhZmQ1N2EtZTZkZS00YTVmLWI1
YzYtMTA4NjVkNWE4Yzk4LzAvRkU1NjUyQUQ0NzAyMTA0REIwODJDMzk2QjA1RUU1
RDA0NTQyRTdENy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAJQ/NCklKAjDq+9epIcOLFzVm8kDjyjdanyZ
clPy7c9uaWeo97ZKdAgsh5qpGFN94Y5AsiWHPdY2iWNjrSLLTx+845Os/EPdTOAs
9oefmwN3MSwb9T4nSwrMmGLluHrW3N7ua/OO+kqrgS4HLJdcQ9wTDQWBFBGjU8qd
Dd9ydZP7UzdKXNRvZIAC+/XWBzfCaiAmfhkoxzxS+3N/NMHWJF136K2YTGnD3o3L
WZb2/A/6GFkNPXtkjKUYCOlcKM3G1J2QBr+3tiNHtmqqcXSQ3fwQxjqNvVgkqoba
CYjfM9FqFftgz5CF9Cp0rwIGXRXxMP1Gu41b6RPBecXwKn7XW20=
-----END CERTIFICATE-----
Generated at Fri Dec 19 03:05:41 2025 by rpki-client