This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/8216f1bd-958e-47f5-948e-87e11e92e601/0/4E9222CE79B9CFEF260C837523FE2684407D535B.mft
File:                     4E9222CE79B9CFEF260C837523FE2684407D535B.mft (raw, json)
Hash identifier:          qOuse6UjpV1Dq1/aysv9qvpiqpnZYJpMEeR2e3vMV9M=
Subject key identifier:   FC:39:77:47:51:7B:90:8B:13:09:13:18:59:61:02:C4:77:65:27:60
Authority key identifier: 4E:92:22:CE:79:B9:CF:EF:26:0C:83:75:23:FE:26:84:40:7D:53:5B
Certificate issuer:       /CN=4E9222CE79B9CFEF260C837523FE2684407D535B
Certificate serial:       603B0029F46B21951B4ACA10B46B299D4A873951
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E9222CE79B9CFEF260C837523FE2684407D535B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8216f1bd-958e-47f5-948e-87e11e92e601/0/4E9222CE79B9CFEF260C837523FE2684407D535B.mft
Manifest number:          B7
Signing time:             Fri 23 Jan 2026 19:11:01 +0000
Manifest this update:     Fri 23 Jan 2026 19:06:01 +0000
Manifest next update:     Tue 27 Jan 2026 01:58:01 +0000
Files and hashes:         1: 4E9222CE79B9CFEF260C837523FE2684407D535B.crl (hash: s7l2BJqjRlZ4EjrXI+ZDrX6rnrJAaJh7Fs9JZe83X0M=)
                          2: 3130332e3234322e37362e302f32342d3234203d3e20313338303737.roa (hash: ZyJrdfvAEVZbeVLqPiqVTGVt7Z4QPKAa+3EvCLOTlmU=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8216f1bd-958e-47f5-948e-87e11e92e601/0/4E9222CE79B9CFEF260C837523FE2684407D535B.crl
                          rsync://repo-rpki.idnic.net/repo/8216f1bd-958e-47f5-948e-87e11e92e601/0/4E9222CE79B9CFEF260C837523FE2684407D535B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E9222CE79B9CFEF260C837523FE2684407D535B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Jan 2026 01:58:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:3b:00:29:f4:6b:21:95:1b:4a:ca:10:b4:6b:29:9d:4a:87:39:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4E9222CE79B9CFEF260C837523FE2684407D535B
        Validity
            Not Before: Jan 23 19:06:01 2026 GMT
            Not After : Jan 27 01:58:01 2026 GMT
        Subject: CN=FC397747517B908B13091318596102C477652760
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:cc:9e:47:93:6f:81:1a:e2:28:aa:08:28:73:
                    7f:7d:02:6a:f5:ec:18:fc:f6:72:02:c8:02:09:15:
                    de:dd:ba:ca:ce:b3:e7:a5:72:af:2f:a3:24:68:1b:
                    ee:79:d2:11:09:65:4c:83:23:c7:3f:1e:67:7c:15:
                    8d:07:7c:3f:bb:45:59:5a:b8:ac:bc:a0:91:d2:33:
                    51:77:ea:05:88:be:04:cf:0a:e9:1b:d4:29:4c:41:
                    3b:f6:58:92:80:53:be:63:a6:09:c5:e2:65:30:93:
                    3d:08:d8:fc:51:d7:d6:88:dd:32:89:0b:92:76:ac:
                    c5:10:83:31:3a:5a:9d:1f:27:dc:45:03:5d:2d:1e:
                    8e:d1:49:78:41:60:50:91:5b:b8:fd:b8:1a:19:cf:
                    8d:48:8b:16:38:ac:d4:42:21:9e:43:57:a8:61:ee:
                    2f:69:fa:51:2e:00:ae:ae:94:d1:be:bf:4b:9f:31:
                    39:5a:54:fd:81:48:18:31:cd:37:e8:9f:d6:18:3f:
                    ca:aa:a3:b6:c3:bc:61:93:79:10:bb:ba:43:3f:0d:
                    e5:32:75:15:fe:79:94:fb:b8:76:72:bd:fe:52:93:
                    b0:77:bc:0e:5a:ef:bd:e7:c9:1f:28:f2:ef:5c:8c:
                    4d:59:ce:35:64:c5:fb:ae:4e:de:fa:af:ad:c4:3d:
                    47:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:39:77:47:51:7B:90:8B:13:09:13:18:59:61:02:C4:77:65:27:60
            X509v3 Authority Key Identifier:
                keyid:4E:92:22:CE:79:B9:CF:EF:26:0C:83:75:23:FE:26:84:40:7D:53:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8216f1bd-958e-47f5-948e-87e11e92e601/0/4E9222CE79B9CFEF260C837523FE2684407D535B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E9222CE79B9CFEF260C837523FE2684407D535B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8216f1bd-958e-47f5-948e-87e11e92e601/0/4E9222CE79B9CFEF260C837523FE2684407D535B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:1a:a0:f1:81:57:0c:b4:a6:b6:13:98:60:58:c6:c8:2c:b4:
         1c:50:e2:ae:6e:1f:7c:f4:66:f7:16:50:90:32:9b:da:39:99:
         eb:ca:cc:9d:52:ea:4a:85:cf:d1:3c:9a:4d:5a:c0:45:0f:f7:
         b5:6e:5e:40:d4:54:2c:21:a7:56:aa:98:65:c3:82:b9:39:ca:
         1d:8f:72:ea:ba:74:e8:9e:c2:d4:38:21:38:ee:d7:00:29:44:
         a4:a2:ed:a5:f4:90:4b:be:36:6c:4b:08:2d:20:22:b7:c8:c6:
         e6:48:0f:df:c0:e7:a0:92:bd:9b:61:82:e1:2b:1d:fa:d1:dd:
         34:a4:fc:72:6f:72:85:4c:76:f4:2a:79:22:07:5f:b9:6a:04:
         1b:17:76:57:af:60:70:a3:99:9a:8d:87:36:c5:41:55:f7:26:
         68:7d:77:6b:2b:0f:1f:3d:d9:bc:c1:7d:72:b3:aa:c7:e8:03:
         a9:d1:3c:81:00:d9:2a:8b:b4:b1:4d:6b:25:0e:25:d8:35:10:
         38:79:be:27:08:7d:d0:43:72:0f:24:fa:9b:13:69:94:17:4e:
         d7:bd:e2:54:29:b1:06:3f:59:5d:f3:a5:91:21:8f:a5:d1:1a:
         fe:91:30:bf:7b:b3:c6:d4:4f:33:fd:0e:94:76:62:ba:2a:ca:
         21:61:d2:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:37:08 2026 by rpki-client