This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/45869181-ea55-421d-aba8-6968314c8d80/0/79D1595B22C90AC275A4090AF3BE0AEF665EA81B.mft
File:                     79D1595B22C90AC275A4090AF3BE0AEF665EA81B.mft (raw, json)
Hash identifier:          EAUAsO51ujW+kpreEYN3io9quIzP4AwoSU+q6mncEqE=
Subject key identifier:   3C:86:CC:EE:2E:70:2F:93:3E:F6:4D:3A:F2:EC:8F:1A:BD:51:BF:C8
Authority key identifier: 79:D1:59:5B:22:C9:0A:C2:75:A4:09:0A:F3:BE:0A:EF:66:5E:A8:1B
Certificate issuer:       /CN=79D1595B22C90AC275A4090AF3BE0AEF665EA81B
Certificate serial:       27125E43B0B09F07FB043638AFEF62B100756E3E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/79D1595B22C90AC275A4090AF3BE0AEF665EA81B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/45869181-ea55-421d-aba8-6968314c8d80/0/79D1595B22C90AC275A4090AF3BE0AEF665EA81B.mft
Manifest number:          15
Signing time:             Sun 25 Jan 2026 15:21:27 +0000
Manifest this update:     Sun 25 Jan 2026 15:16:27 +0000
Manifest next update:     Wed 28 Jan 2026 21:02:27 +0000
Files and hashes:         1: 323030313a6466303a62363a3a2f34382d3438203d3e203633353130.roa (hash: kNYG7SAIiKgSyZG2fQIJ5rRy8D++wscSmsfqJ/JMAnk=)
                          2: 79D1595B22C90AC275A4090AF3BE0AEF665EA81B.crl (hash: Vs+dW0nx5QNerj0Ve81uBuLO+0ZyTseT+4J52KreL3I=)
                          3: 3230322e342e3138362e302f32342d3234203d3e203633353130.roa (hash: IUKB7IZZcAxdadF7KgMG0SMyWM3kl7UBq8kwg4xktxk=)
                          4: 3130332e34312e3136392e302f32342d3234203d3e203633353130.roa (hash: YbMzsklhUnNFLiUL3eUvckWsyku5p4eRcoUqgAfUbbs=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/45869181-ea55-421d-aba8-6968314c8d80/0/79D1595B22C90AC275A4090AF3BE0AEF665EA81B.crl
                          rsync://repo-rpki.idnic.net/repo/45869181-ea55-421d-aba8-6968314c8d80/0/79D1595B22C90AC275A4090AF3BE0AEF665EA81B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/79D1595B22C90AC275A4090AF3BE0AEF665EA81B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Jan 2026 14:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:12:5e:43:b0:b0:9f:07:fb:04:36:38:af:ef:62:b1:00:75:6e:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79D1595B22C90AC275A4090AF3BE0AEF665EA81B
        Validity
            Not Before: Jan 25 15:16:27 2026 GMT
            Not After : Jan 28 21:02:27 2026 GMT
        Subject: CN=3C86CCEE2E702F933EF64D3AF2EC8F1ABD51BFC8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:9c:c4:ed:22:b7:d5:75:33:18:95:de:3e:44:
                    8d:a6:70:e9:1c:c3:2c:1e:ea:cd:08:91:e7:1a:ae:
                    bf:3a:2b:a1:85:d8:80:f5:39:c8:c0:da:76:37:41:
                    69:17:23:20:b8:72:79:4f:2f:72:76:23:ff:14:4f:
                    5d:3d:dd:9f:a9:9d:2a:d3:4b:56:17:77:28:c3:1d:
                    45:f5:62:b7:3f:0f:9d:fe:80:05:52:bb:f5:be:b5:
                    f4:d9:8f:46:0a:ce:04:81:89:de:a5:5a:99:36:4a:
                    aa:f9:b7:16:24:02:07:69:0d:98:34:c4:df:40:92:
                    c3:eb:c2:dc:8b:99:83:ca:30:30:d8:d2:b7:43:e1:
                    09:32:8d:3c:1f:ec:22:e8:45:c7:db:49:10:5f:b8:
                    8f:fd:8d:7d:a8:9c:04:2c:dc:8a:a5:20:0d:aa:e3:
                    58:6a:2c:d7:0c:a9:ac:d6:f9:e4:16:be:87:75:f6:
                    ba:82:02:cb:4b:e5:fd:5f:35:71:6d:4f:59:2b:1a:
                    56:33:50:fe:9f:0e:1c:cc:53:5a:cb:16:97:a5:16:
                    7f:d2:4a:e9:08:25:fc:67:c3:84:29:1f:51:9f:27:
                    30:1a:f8:e5:16:2c:dc:3a:df:81:ee:63:9e:78:67:
                    4e:47:79:c2:6a:13:73:99:be:88:61:32:8c:8c:02:
                    96:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:86:CC:EE:2E:70:2F:93:3E:F6:4D:3A:F2:EC:8F:1A:BD:51:BF:C8
            X509v3 Authority Key Identifier:
                keyid:79:D1:59:5B:22:C9:0A:C2:75:A4:09:0A:F3:BE:0A:EF:66:5E:A8:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/45869181-ea55-421d-aba8-6968314c8d80/0/79D1595B22C90AC275A4090AF3BE0AEF665EA81B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/79D1595B22C90AC275A4090AF3BE0AEF665EA81B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/45869181-ea55-421d-aba8-6968314c8d80/0/79D1595B22C90AC275A4090AF3BE0AEF665EA81B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:8b:6d:88:ed:4b:2c:97:78:73:4e:39:fa:a1:d6:7a:54:dc:
         69:df:2d:b8:78:11:c7:99:a9:97:53:8e:c9:0c:cb:77:5d:f9:
         88:16:53:71:68:91:ff:a4:4c:3e:e2:50:ca:74:f4:f3:bf:16:
         bd:4c:b2:7c:98:5f:4f:2f:65:4c:65:cd:87:6c:0b:86:47:90:
         6d:27:9c:e5:a2:7b:53:48:60:3c:6d:50:08:9d:01:46:ac:2e:
         de:28:15:72:81:a4:df:ca:74:fb:4b:ad:f9:85:29:3a:46:ed:
         10:ab:94:52:8a:2f:9c:e0:2f:bc:f2:f7:21:07:f5:c1:55:a2:
         d5:1f:db:aa:29:7f:4b:50:16:ab:27:50:6a:4e:ab:33:b6:24:
         56:e6:7a:38:fa:bd:e8:3c:c9:2f:84:fb:f2:be:02:53:9f:b9:
         d0:7e:9e:7b:2b:00:19:37:42:37:24:b1:d2:65:df:06:e5:8e:
         86:95:38:13:cd:b3:0b:78:c1:1f:5e:a3:50:d1:b5:a1:91:a2:
         0c:31:aa:c3:9d:d3:28:92:a4:f3:0a:43:8b:3f:22:9c:7d:2f:
         47:17:e2:09:1a:99:b7:de:2e:27:fc:99:f5:98:ab:e6:9a:d1:
         c0:75:db:b5:2f:32:12:6e:fc:f5:cd:84:8d:7b:91:f0:01:7d:
         c5:54:41:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:34:51 2026 by rpki-client