This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/FC646066A689B77054AF95653FA324395357E6A3.mft
File:                     FC646066A689B77054AF95653FA324395357E6A3.mft (raw, json)
Hash identifier:          9wtzuOePRMw8ZgDeZeJNEANqfCbuC9B6MXWV2HBs7A8=
Subject key identifier:   55:6B:66:59:06:16:D4:77:27:04:EC:72:AA:45:F3:98:04:60:0A:16
Authority key identifier: FC:64:60:66:A6:89:B7:70:54:AF:95:65:3F:A3:24:39:53:57:E6:A3
Certificate issuer:       /CN=FC646066A689B77054AF95653FA324395357E6A3
Certificate serial:       4E5D0CB94F940C70AD5549028242B2CEEA9AC693
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC646066A689B77054AF95653FA324395357E6A3.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/FC646066A689B77054AF95653FA324395357E6A3.mft
Manifest number:          053D
Signing time:             Mon 22 Dec 2025 19:12:48 +0000
Manifest this update:     Mon 22 Dec 2025 19:07:48 +0000
Manifest next update:     Fri 26 Dec 2025 06:44:48 +0000
Files and hashes:         1: 3130332e3235342e3132362e302f32332d3234203d3e203535363533.roa (hash: 9BxarKCax6xXzwA7sCkwW9bstNPy4ZEaa9LRlsVppIQ=)
                          2: 31342e3130322e3135322e302f32342d3234203d3e203535363533.roa (hash: Ic0fHoziZDQ5ySiUrW0yV+eRMvxq+Fv+lvK78woem+Y=)
                          3: 3130332e31312e39362e302f32342d3234203d3e203535363533.roa (hash: H4PttalZLNptjPsZ0cni/wefIj1b5DtDJUp4pLmDsx8=)
                          4: 31342e3130322e3135332e302f32342d3234203d3e203535363532.roa (hash: is5MWGQz2ThLibcgEVqAwJiiHTPRuDzYs+szhUZM1uA=)
                          5: 3130332e31312e39372e302f32342d3234203d3e203535363533.roa (hash: zhsac+dR+hLwxuxKAvs58KLjwCG2OW3/qJ9XL7XL52Y=)
                          6: 323430323a633330303a3a2f33322d3438203d3e203535363533.roa (hash: bGPK4/XEobq1bk7eW0IqEOt5RrHUWnGxVvGe+M2MWVI=)
                          7: 3230322e35322e31322e302f32322d3234203d3e203535363533.roa (hash: r4N7YVGjSR/vf/OS/81YrBx8jNMdTo+vkJbDS2Aeqlg=)
                          8: 3130332e31312e39392e302f32342d3234203d3e203535363533.roa (hash: IOFzZe1IvwoIGSoJhxZwtkEkEW47dvJdJ0E5fC3jeys=)
                          9: 3130332e31312e39362e302f32322d3234203d3e203535363533.roa (hash: PVQdneK9Q2r+2YuMkyuS3S7JvDEOimiQ6kS5G4qY3D8=)
                          10: 31342e3130322e3135352e302f32342d3234203d3e203535363533.roa (hash: Aqv+Cv2xxpkL4seMoOW2PqWbLLYJHATV5/+tD0LtsgA=)
                          11: 3130332e31312e39382e302f32342d3234203d3e203535363533.roa (hash: Ulal03KaCVZbu0jye4Et6grNN6xfSzGRs7XoejJgRmc=)
                          12: FC646066A689B77054AF95653FA324395357E6A3.crl (hash: HcyP3I9kn9h2Be5WvxcFBxvA7kN2R8A6NKzjTepRFRs=)
                          13: 34332e3234392e3134302e302f32322d3234203d3e203535363533.roa (hash: VXuEsrUjBUraWB5GeM4W6dfuMEU9X+IXajG+jXJX29c=)
                          14: 31342e3130322e3135342e302f32342d3234203d3e203535363533.roa (hash: 3zcWmXCIsv3omjOiSti1UlbmTCz0e0HYT7ukX9kfxvE=)
                          15: 3230322e31302e36332e302f32342d3234203d3e203535363533.roa (hash: 3x/TagzWw9AEnitF9/BKz1IoUShxY7ix8DtkXTWs+vs=)
                          16: 31342e3130322e3135322e302f32322d3234203d3e203535363533.roa (hash: tcAOfelZsfvkpX9bUklTUsOMqUIe7iMnYq8XrY6rniM=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/FC646066A689B77054AF95653FA324395357E6A3.crl
                          rsync://repo-rpki.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/FC646066A689B77054AF95653FA324395357E6A3.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC646066A689B77054AF95653FA324395357E6A3.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 06:44:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:5d:0c:b9:4f:94:0c:70:ad:55:49:02:82:42:b2:ce:ea:9a:c6:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC646066A689B77054AF95653FA324395357E6A3
        Validity
            Not Before: Dec 22 19:07:48 2025 GMT
            Not After : Dec 26 06:44:48 2025 GMT
        Subject: CN=556B66590616D4772704EC72AA45F39804600A16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:13:42:e7:19:d6:af:6d:4f:8b:e8:6c:16:43:
                    31:2f:69:92:e2:04:36:3c:54:cd:6f:a7:58:b2:0c:
                    3d:17:67:7e:c8:ef:10:c7:89:d1:6a:af:07:57:52:
                    a6:e4:c6:57:0b:97:8f:0b:f7:37:9a:4f:7a:96:31:
                    69:1f:94:93:9a:3c:c0:69:4d:88:f4:09:2a:04:89:
                    03:35:f9:5a:dc:3b:a1:52:32:fa:46:49:9e:67:38:
                    05:d2:0a:2e:f5:37:06:dd:29:48:01:ce:c5:e6:34:
                    66:12:f0:d7:71:c4:14:71:7a:35:1a:b0:d0:df:74:
                    ab:e1:ef:69:45:37:c3:92:82:4a:b7:f1:f8:f0:7c:
                    9d:78:98:e5:8e:e9:cd:22:e7:d6:19:67:00:8c:05:
                    f2:1a:98:4a:71:12:83:ea:f8:8f:88:d5:ec:4d:fd:
                    4f:19:36:fe:50:0b:38:78:1f:07:5e:37:ee:13:fe:
                    21:39:7d:8b:8b:43:60:6e:0c:5c:f2:69:b3:1b:24:
                    ba:d7:b2:94:58:de:69:b1:c9:92:8a:62:17:e7:17:
                    dd:2d:1c:10:ed:74:75:22:10:99:04:65:4a:ac:87:
                    2d:4b:07:63:e3:12:b1:2f:06:2e:6a:e6:e6:ba:72:
                    2b:e0:a9:97:d8:06:e4:80:f3:45:5a:40:df:7f:24:
                    b7:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:6B:66:59:06:16:D4:77:27:04:EC:72:AA:45:F3:98:04:60:0A:16
            X509v3 Authority Key Identifier:
                keyid:FC:64:60:66:A6:89:B7:70:54:AF:95:65:3F:A3:24:39:53:57:E6:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/FC646066A689B77054AF95653FA324395357E6A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC646066A689B77054AF95653FA324395357E6A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/FC646066A689B77054AF95653FA324395357E6A3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:4d:97:84:bb:fd:00:c2:90:fd:b5:b5:b7:50:ff:63:30:8e:
         f8:56:54:a0:2d:4c:5f:11:ed:85:81:26:1d:bc:a0:b3:1c:d5:
         ee:c9:78:97:e5:97:bd:0e:4d:2f:cf:4e:7f:65:41:bd:81:99:
         f0:73:87:db:fa:0c:67:e0:10:62:46:4b:c1:58:6e:71:ea:ec:
         e6:ee:6d:4b:1b:fe:e9:d0:e0:17:83:73:ba:1a:cd:56:48:65:
         2c:b2:47:f2:56:48:54:b5:28:b6:6b:7c:8b:82:bf:ed:a0:25:
         9a:79:38:14:51:0a:a9:5d:83:38:5b:aa:5d:62:85:dd:18:92:
         48:3b:45:f3:98:80:f6:b6:e1:00:d9:76:41:d2:bf:e8:f1:83:
         f2:86:e2:8d:69:ed:9b:13:8e:c9:42:e8:4d:4c:39:9c:91:a7:
         6a:03:79:5e:e9:2a:5c:6a:72:3b:72:09:d5:83:67:2e:20:cc:
         6e:f7:30:3b:71:56:8e:24:12:a4:0f:e1:df:64:10:8b:38:6c:
         7d:f3:44:33:11:23:bb:6c:ea:63:f4:a2:c4:ed:93:31:32:18:
         6c:a4:57:ab:dc:0a:7b:ca:f4:12:1e:fc:21:f1:bd:56:5f:f2:
         58:9c:31:b3:c3:d0:12:c8:b4:09:25:8e:d7:dc:2f:f7:7a:2b:
         03:f8:dc:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 13:10:55 2025 by rpki-client