This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/e256bbba-1826-4d86-b873-2f6dd6325771/1/C79C17C4F5C843791A7028B499932A84B65CD399.mft
File:                     C79C17C4F5C843791A7028B499932A84B65CD399.mft (raw, json)
Hash identifier:          x0j/1lb7pBwCwD1q41LfNLySoReh/aNIeHFkfyU5Ibs=
Subject key identifier:   1C:4D:99:17:EB:49:A3:9E:AE:33:33:AB:67:3C:7A:D7:79:92:6E:B3
Authority key identifier: C7:9C:17:C4:F5:C8:43:79:1A:70:28:B4:99:93:2A:84:B6:5C:D3:99
Certificate issuer:       /CN=C79C17C4F5C843791A7028B499932A84B65CD399
Certificate serial:       76325A3BBAB85DAA18153AC0029B2845D557E10C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C79C17C4F5C843791A7028B499932A84B65CD399.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e256bbba-1826-4d86-b873-2f6dd6325771/1/C79C17C4F5C843791A7028B499932A84B65CD399.mft
Manifest number:          EB
Signing time:             Sat 06 Dec 2025 20:41:29 +0000
Manifest this update:     Sat 06 Dec 2025 20:36:29 +0000
Manifest next update:     Wed 10 Dec 2025 02:27:29 +0000
Files and hashes:         1: C79C17C4F5C843791A7028B499932A84B65CD399.crl (hash: h3PcfsAVwPFJB2mlZlNG6Rm8Du5MBQstDI3qwMXe9vs=)
                          2: 323030313a6466333a646663303a3a2f34382d3438203d3e20313532383030.roa (hash: xoAFKq/o5an6vKaY7+FEI8eF7uN0DJPTXe0V7TuXoIk=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e256bbba-1826-4d86-b873-2f6dd6325771/1/C79C17C4F5C843791A7028B499932A84B65CD399.crl
                          rsync://repo-rpki.idnic.net/repo/e256bbba-1826-4d86-b873-2f6dd6325771/1/C79C17C4F5C843791A7028B499932A84B65CD399.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C79C17C4F5C843791A7028B499932A84B65CD399.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Dec 2025 15:57:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:32:5a:3b:ba:b8:5d:aa:18:15:3a:c0:02:9b:28:45:d5:57:e1:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C79C17C4F5C843791A7028B499932A84B65CD399
        Validity
            Not Before: Dec  6 20:36:29 2025 GMT
            Not After : Dec 10 02:27:29 2025 GMT
        Subject: CN=1C4D9917EB49A39EAE3333AB673C7AD779926EB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:5c:de:3d:46:7c:a5:ce:1d:e9:cb:24:aa:4e:
                    c7:02:38:e3:9c:00:5a:29:a1:98:cf:e7:f5:e4:9f:
                    49:76:d7:3a:58:61:68:7f:ee:98:78:5e:80:27:19:
                    43:47:09:1b:4b:df:e2:fc:a9:9b:06:ad:65:d6:fa:
                    87:9f:91:f6:d6:f3:1e:07:b3:83:24:22:cb:13:54:
                    e0:6b:0d:83:c7:4c:99:42:3e:fc:a3:e8:e8:6c:a9:
                    bf:13:93:da:e0:95:9e:6d:0c:08:23:73:b2:a6:d9:
                    94:cb:3b:c0:d1:ea:55:10:34:ef:15:89:48:e4:fa:
                    66:b9:11:33:77:a8:9a:30:2e:67:49:2a:90:fa:9c:
                    19:80:b1:2c:de:a8:d1:76:fd:4b:ed:a7:8e:e9:2f:
                    4b:3d:07:0b:d8:bd:ea:ec:e3:ed:24:5e:bf:4b:37:
                    fb:e2:fd:08:d6:53:a0:54:b7:4a:5e:52:f0:5c:ef:
                    49:b7:5f:c6:36:01:24:f8:0f:bd:fc:a1:1c:c5:22:
                    52:a2:33:c4:52:2c:0c:cd:43:5e:e7:58:0f:38:fa:
                    d8:5f:cc:2d:ca:81:b3:2b:6c:83:e8:c9:77:0d:a7:
                    0e:85:7d:4a:19:cc:9b:45:b2:fe:83:e2:f3:c3:7c:
                    0c:e9:f1:53:0d:aa:e3:75:c7:92:fa:dd:ae:44:6f:
                    5d:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:4D:99:17:EB:49:A3:9E:AE:33:33:AB:67:3C:7A:D7:79:92:6E:B3
            X509v3 Authority Key Identifier:
                keyid:C7:9C:17:C4:F5:C8:43:79:1A:70:28:B4:99:93:2A:84:B6:5C:D3:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e256bbba-1826-4d86-b873-2f6dd6325771/1/C79C17C4F5C843791A7028B499932A84B65CD399.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C79C17C4F5C843791A7028B499932A84B65CD399.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e256bbba-1826-4d86-b873-2f6dd6325771/1/C79C17C4F5C843791A7028B499932A84B65CD399.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:a3:8d:15:6c:a8:f4:39:34:7b:2a:69:32:b1:db:12:5e:f6:
         f2:68:b6:4f:ac:06:85:61:30:55:36:cb:5f:a9:18:e3:05:f2:
         9c:48:33:18:8c:05:aa:3f:07:0c:1e:9b:85:c0:98:a6:79:f1:
         4a:df:84:1d:21:df:60:cc:27:f6:22:af:c9:ab:47:30:ab:c0:
         ab:28:6c:b7:80:13:04:b6:af:e6:97:87:24:9a:46:28:15:51:
         30:92:19:5f:d1:05:f1:e5:89:e1:3d:a7:1a:45:25:fe:96:85:
         53:99:db:11:9b:d7:10:2c:db:22:b6:ad:1c:37:f0:5e:72:5f:
         c3:89:4a:46:5c:ff:86:9d:ad:28:d1:19:80:22:a9:10:5f:2b:
         48:d5:20:53:d5:33:82:93:1c:9a:8a:02:16:14:4f:ad:bf:90:
         d7:b2:21:8d:8c:32:ab:a8:56:f5:bd:4c:00:0c:fa:12:c4:55:
         33:e4:20:17:d4:0a:35:a5:92:c1:58:e4:41:7b:a0:7b:1b:25:
         a7:34:0f:7a:84:82:e0:67:02:a9:a7:02:68:c1:c6:2d:f8:cd:
         1e:c5:83:d5:da:d2:e9:18:9a:8f:02:7f:c5:b3:60:56:78:3f:
         c0:51:80:66:88:46:e2:99:37:69:2c:b6:15:89:85:fc:50:01:
         d2:5f:03:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 07:34:32 2025 by rpki-client