This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/7540cf80-9315-42c1-844e-bb03622a05c1/0/722FE79638E6D14E4794815122247CBEC27B8505.mft
File:                     722FE79638E6D14E4794815122247CBEC27B8505.mft (raw, json)
Hash identifier:          wTi0eEMyd0fFDQRZ0CjPcblw1+//QXO0xlSXsrBXXxE=
Subject key identifier:   AC:51:DE:66:0A:42:ED:D5:DE:92:B6:8E:1F:5A:5F:4C:4D:5D:09:A6
Authority key identifier: 72:2F:E7:96:38:E6:D1:4E:47:94:81:51:22:24:7C:BE:C2:7B:85:05
Certificate issuer:       /CN=722FE79638E6D14E4794815122247CBEC27B8505
Certificate serial:       2627136E2BEA9868087128CAF09D34CEFAD6F5F2
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/722FE79638E6D14E4794815122247CBEC27B8505.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7540cf80-9315-42c1-844e-bb03622a05c1/0/722FE79638E6D14E4794815122247CBEC27B8505.mft
Manifest number:          03F7
Signing time:             Fri 23 Jan 2026 12:30:42 +0000
Manifest this update:     Fri 23 Jan 2026 12:25:42 +0000
Manifest next update:     Mon 26 Jan 2026 22:02:42 +0000
Files and hashes:         1: 3130332e3136372e3136362e302f32342d3234203d3e20313431393834.roa (hash: Lha8Dc5V7yxaccwl2cB1wpI7D9zABdY3uxyScLd254Q=)
                          2: 722FE79638E6D14E4794815122247CBEC27B8505.crl (hash: SqcCSQAFHJ5zVrpI45EUGnQdU0Xx34SQ0Hx5VZ8RJow=)
                          3: 3130332e3136372e3136362e302f32332d3233203d3e20313431393834.roa (hash: uMhuVVCWV6KJ9BoKOLCiDb7P+XJG3YcMCjnNadUtMPc=)
                          4: 3130332e3136372e3136372e302f32342d3234203d3e20313431393834.roa (hash: mcmmT8pT8SsuE0p1UknEAcW7BeTtM+31BJ7lasnlFWU=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/7540cf80-9315-42c1-844e-bb03622a05c1/0/722FE79638E6D14E4794815122247CBEC27B8505.crl
                          rsync://repo-rpki.idnic.net/repo/7540cf80-9315-42c1-844e-bb03622a05c1/0/722FE79638E6D14E4794815122247CBEC27B8505.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/722FE79638E6D14E4794815122247CBEC27B8505.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Jan 2026 22:02:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:27:13:6e:2b:ea:98:68:08:71:28:ca:f0:9d:34:ce:fa:d6:f5:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=722FE79638E6D14E4794815122247CBEC27B8505
        Validity
            Not Before: Jan 23 12:25:42 2026 GMT
            Not After : Jan 26 22:02:42 2026 GMT
        Subject: CN=AC51DE660A42EDD5DE92B68E1F5A5F4C4D5D09A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:56:49:9e:e8:a0:ef:4a:ff:84:c8:d3:f1:20:
                    e9:45:05:1f:c1:bb:83:7f:70:e0:d4:ab:6b:a5:d4:
                    1b:2e:da:52:77:d8:8c:09:e2:b4:9d:cf:37:8e:4e:
                    6f:5a:1f:41:7f:cc:c5:05:e9:b1:1c:ba:b5:7a:aa:
                    d7:65:f8:32:d8:77:aa:9b:56:a5:5d:03:c6:a7:86:
                    ec:33:0d:52:c6:5b:d4:24:37:a0:fa:0e:95:55:64:
                    91:e0:71:c5:98:22:16:0a:3c:8c:80:69:28:92:6a:
                    4b:ea:c2:88:06:a5:0d:f3:81:11:e7:1b:95:82:50:
                    36:af:0e:6c:0a:4a:11:5c:a8:00:4b:14:85:a2:41:
                    c7:7f:f1:e8:15:7c:e1:83:a5:88:a8:b8:ba:50:8c:
                    06:94:03:2c:78:5a:85:08:b7:f4:62:79:c6:90:c3:
                    e0:cb:31:cd:78:d2:dd:c5:27:34:56:78:9d:17:5a:
                    2b:9b:87:a2:9a:be:a6:9a:26:dc:a1:0c:26:2c:58:
                    90:e1:86:5d:e9:55:30:7d:64:ea:a3:73:99:73:0e:
                    aa:6c:46:e4:7d:e8:89:51:b5:22:87:c6:ef:bd:91:
                    0e:37:cc:b9:2e:71:7d:84:1c:b7:35:74:e6:65:a9:
                    50:5b:ac:e2:e3:6f:2d:13:83:78:40:98:ed:c5:49:
                    b8:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:51:DE:66:0A:42:ED:D5:DE:92:B6:8E:1F:5A:5F:4C:4D:5D:09:A6
            X509v3 Authority Key Identifier:
                keyid:72:2F:E7:96:38:E6:D1:4E:47:94:81:51:22:24:7C:BE:C2:7B:85:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7540cf80-9315-42c1-844e-bb03622a05c1/0/722FE79638E6D14E4794815122247CBEC27B8505.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/722FE79638E6D14E4794815122247CBEC27B8505.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7540cf80-9315-42c1-844e-bb03622a05c1/0/722FE79638E6D14E4794815122247CBEC27B8505.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:a6:b1:91:76:e2:38:d6:94:07:c4:da:42:04:b0:c6:76:87:
         1b:90:63:e5:9d:4b:42:00:80:6a:36:c6:4b:36:c5:ee:bf:91:
         d6:9c:8f:2b:99:17:4d:44:01:ae:eb:3f:fa:0c:86:16:e2:d0:
         3b:10:5e:5c:2b:26:2c:bd:be:2b:71:5a:05:46:5b:ff:20:15:
         fe:72:99:5b:da:44:83:9f:86:db:66:97:df:a6:8d:d9:bd:08:
         50:67:9a:17:85:36:e6:ea:7f:ae:2c:f2:0c:ea:c4:46:50:46:
         60:7e:0f:af:94:aa:42:4f:ba:6f:79:07:28:e0:55:68:a5:37:
         1b:91:ca:fe:5c:cd:f3:13:73:81:da:19:c3:a6:d9:e7:9c:2b:
         10:8e:9b:4f:aa:90:72:1f:d4:05:18:48:ee:f3:13:85:7f:53:
         24:fe:a1:1f:bc:0d:8e:57:3a:5a:c3:b5:48:54:fa:15:77:e2:
         06:59:ff:8f:2b:41:4a:9c:db:e2:f3:17:5e:ac:91:50:f8:ff:
         d9:9d:ca:91:6b:0b:47:4c:ac:9e:a8:34:e1:f8:d0:be:1a:47:
         24:ce:6b:6b:9e:d7:f2:67:31:79:ac:cb:bd:9f:1b:6e:df:74:
         43:af:80:ed:d3:e0:00:d2:0a:d6:06:62:0e:31:6f:ea:11:37:
         30:6a:7e:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:23:33 2026 by rpki-client