This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/b8993a93-5889-4e02-9e95-769cb89e0035/0/4F679A207D2588B709C82CDAB000736182F881E1.mft
File:                     4F679A207D2588B709C82CDAB000736182F881E1.mft (raw, json)
Hash identifier:          OschoAnh6kq8L9Ke17tpzNozFnkh68Y7WFzF4zecdTM=
Subject key identifier:   26:90:4A:C5:3B:D8:F9:73:92:66:F4:BB:8D:BE:7C:9D:1E:75:12:CE
Authority key identifier: 4F:67:9A:20:7D:25:88:B7:09:C8:2C:DA:B0:00:73:61:82:F8:81:E1
Certificate issuer:       /CN=4F679A207D2588B709C82CDAB000736182F881E1
Certificate serial:       55BF2C7CCF551A71F7F0DA3A5951896EEEFF9160
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F679A207D2588B709C82CDAB000736182F881E1.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b8993a93-5889-4e02-9e95-769cb89e0035/0/4F679A207D2588B709C82CDAB000736182F881E1.mft
Manifest number:          023D
Signing time:             Sat 24 Jan 2026 22:31:12 +0000
Manifest this update:     Sat 24 Jan 2026 22:26:12 +0000
Manifest next update:     Wed 28 Jan 2026 08:55:12 +0000
Files and hashes:         1: 4F679A207D2588B709C82CDAB000736182F881E1.crl (hash: 0ruSYGLn1HxtwT/m/w8Hx9jQ6xj9AA1YK0B1kTGbhBU=)
                          2: 3130332e3139342e34362e302f32332d3234203d3e20313439393731.roa (hash: ibNTSX4YXpvUj4AJgfecXLMI8i0TnCNMvaVKKjw+4v8=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/b8993a93-5889-4e02-9e95-769cb89e0035/0/4F679A207D2588B709C82CDAB000736182F881E1.crl
                          rsync://repo-rpki.idnic.net/repo/b8993a93-5889-4e02-9e95-769cb89e0035/0/4F679A207D2588B709C82CDAB000736182F881E1.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F679A207D2588B709C82CDAB000736182F881E1.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Jan 2026 08:55:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:bf:2c:7c:cf:55:1a:71:f7:f0:da:3a:59:51:89:6e:ee:ff:91:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F679A207D2588B709C82CDAB000736182F881E1
        Validity
            Not Before: Jan 24 22:26:12 2026 GMT
            Not After : Jan 28 08:55:12 2026 GMT
        Subject: CN=26904AC53BD8F9739266F4BB8DBE7C9D1E7512CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ba:5e:21:48:1b:11:4d:9e:d8:72:2c:23:61:
                    20:34:b0:7b:56:b9:a6:3a:a3:d9:74:32:3e:87:98:
                    5c:17:1a:81:cb:5a:2d:0d:c3:69:0f:88:4d:e6:aa:
                    0f:2a:80:2f:24:93:3f:63:32:f2:7d:05:fe:16:56:
                    a2:e2:d6:c3:9b:28:fc:6a:3b:4c:d4:a3:40:9c:a8:
                    fe:c6:a5:89:fd:fc:bd:9a:b5:df:af:c6:61:2b:00:
                    8a:0f:cb:a9:3d:b4:f9:04:e6:fa:87:45:46:95:37:
                    4d:a8:53:e9:2c:b9:a6:c9:82:61:4e:67:1d:08:ea:
                    b7:c2:b4:92:62:9d:cc:13:aa:81:6b:90:f2:58:c6:
                    fa:dd:3e:1b:e8:6a:c7:f4:b4:6b:95:05:60:a3:5b:
                    96:79:87:4a:db:d1:b1:67:83:d5:d4:94:cf:3b:71:
                    b1:ec:19:42:81:87:b1:c7:10:38:fa:a2:77:e1:8c:
                    3e:38:21:cd:be:66:87:90:dc:b8:33:68:d1:e4:ed:
                    32:b1:77:f1:85:d6:18:87:5f:3b:da:2b:bf:70:9d:
                    90:99:5c:9e:fb:68:eb:f8:c6:b9:f4:2f:cc:5e:a1:
                    3a:ef:01:1c:b0:eb:ca:a6:ca:01:0e:48:70:51:a9:
                    7c:a0:5c:76:0a:68:95:f2:2a:5a:63:51:51:47:51:
                    75:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:90:4A:C5:3B:D8:F9:73:92:66:F4:BB:8D:BE:7C:9D:1E:75:12:CE
            X509v3 Authority Key Identifier:
                keyid:4F:67:9A:20:7D:25:88:B7:09:C8:2C:DA:B0:00:73:61:82:F8:81:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b8993a93-5889-4e02-9e95-769cb89e0035/0/4F679A207D2588B709C82CDAB000736182F881E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F679A207D2588B709C82CDAB000736182F881E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b8993a93-5889-4e02-9e95-769cb89e0035/0/4F679A207D2588B709C82CDAB000736182F881E1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cc:20:78:f0:63:76:a2:1c:cd:91:c3:ce:6d:c8:56:7a:b7:88:
         8f:c3:45:86:b5:9a:b4:b7:ae:c5:a9:92:a1:75:b5:1d:c0:ef:
         4d:45:90:47:b5:9b:5c:fb:38:9f:15:68:29:fc:86:0f:94:6e:
         5d:d2:db:69:4b:66:fe:97:13:9e:08:16:8d:98:7a:dc:1d:5e:
         56:bc:f8:42:fc:b5:4b:73:00:a4:1d:2c:eb:a2:35:1b:1d:77:
         38:e1:b8:3f:ea:3a:8c:06:b8:df:d1:61:85:c3:27:5a:84:ef:
         87:98:6c:87:8d:93:41:d3:26:76:80:b5:af:f1:d6:04:3f:d4:
         20:52:36:81:91:25:11:06:17:2d:29:f5:6d:e1:d6:80:9f:01:
         ae:4a:95:41:40:0f:15:c7:cd:df:17:6d:76:7f:19:10:1c:3f:
         af:94:8f:1e:40:ae:05:02:3d:09:e1:75:cd:60:61:f5:3e:fa:
         db:7c:a8:ee:8c:29:b7:32:a2:61:78:60:fa:e6:b6:6c:e9:0c:
         3e:cf:66:f4:57:ec:39:1b:b3:67:b3:1a:b3:65:6b:b4:f2:4f:
         44:82:8c:b6:05:4d:4a:39:36:15:a4:37:a6:f5:db:9c:ca:1d:
         1f:75:c1:9d:7d:df:ea:8c:de:51:2d:0a:5c:f6:1c:69:f4:ad:
         45:a4:25:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:48:24 2026 by rpki-client