This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/e256bbba-1826-4d86-b873-2f6dd6325771/1/C79C17C4F5C843791A7028B499932A84B65CD399.mft
File:                     C79C17C4F5C843791A7028B499932A84B65CD399.mft (raw, json)
Hash identifier:          LSAnFqErrD0p5p38knUpE9BTQ8vC2PPCJ4HdrPEta3o=
Subject key identifier:   75:CE:23:02:C5:85:AE:E5:D8:D6:DF:10:66:19:4D:BD:54:B4:8E:94
Authority key identifier: C7:9C:17:C4:F5:C8:43:79:1A:70:28:B4:99:93:2A:84:B6:5C:D3:99
Certificate issuer:       /CN=C79C17C4F5C843791A7028B499932A84B65CD399
Certificate serial:       08C36EB72A15DD74738C3F9D615CBAB614D257E5
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C79C17C4F5C843791A7028B499932A84B65CD399.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e256bbba-1826-4d86-b873-2f6dd6325771/1/C79C17C4F5C843791A7028B499932A84B65CD399.mft
Manifest number:          0100
Signing time:             Fri 23 Jan 2026 15:11:27 +0000
Manifest this update:     Fri 23 Jan 2026 15:06:27 +0000
Manifest next update:     Mon 26 Jan 2026 22:34:27 +0000
Files and hashes:         1: C79C17C4F5C843791A7028B499932A84B65CD399.crl (hash: eEWZXVIxnAzOe18mSY/w28PfsdEBqvj7Oi+sw5nbMgg=)
                          2: 323030313a6466333a646663303a3a2f34382d3438203d3e20313532383030.roa (hash: xoAFKq/o5an6vKaY7+FEI8eF7uN0DJPTXe0V7TuXoIk=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e256bbba-1826-4d86-b873-2f6dd6325771/1/C79C17C4F5C843791A7028B499932A84B65CD399.crl
                          rsync://repo-rpki.idnic.net/repo/e256bbba-1826-4d86-b873-2f6dd6325771/1/C79C17C4F5C843791A7028B499932A84B65CD399.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C79C17C4F5C843791A7028B499932A84B65CD399.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Jan 2026 22:34:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:c3:6e:b7:2a:15:dd:74:73:8c:3f:9d:61:5c:ba:b6:14:d2:57:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C79C17C4F5C843791A7028B499932A84B65CD399
        Validity
            Not Before: Jan 23 15:06:27 2026 GMT
            Not After : Jan 26 22:34:27 2026 GMT
        Subject: CN=75CE2302C585AEE5D8D6DF1066194DBD54B48E94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:61:35:cc:c8:7f:67:50:a7:2c:ef:0f:51:3b:
                    b1:46:b7:24:3b:53:1b:3b:ff:08:2e:c9:92:27:5a:
                    78:26:c5:1a:16:24:a0:c8:cd:ac:d5:4f:02:f0:c8:
                    be:eb:db:c0:42:3d:10:29:c5:0e:68:fa:43:a4:8a:
                    f7:16:69:f4:1f:ec:24:11:20:da:31:e1:ad:57:f0:
                    6f:56:57:1c:6d:d8:43:68:1f:36:3a:5a:84:5e:78:
                    a3:2e:dc:68:67:11:94:53:c7:66:ef:47:e8:40:82:
                    14:1c:fa:33:b5:cb:89:80:78:f5:eb:9d:c9:34:f8:
                    0b:fc:3f:ca:d6:f8:60:19:00:07:12:83:20:0f:5f:
                    67:04:27:5d:e4:e0:f3:7e:eb:8d:1f:c4:ea:1a:9f:
                    0b:e4:40:18:83:29:ac:86:f1:ba:6c:1d:10:4d:b8:
                    b6:63:dd:47:3e:89:52:86:13:d4:8c:13:56:1a:15:
                    9f:c4:16:6e:1c:3e:dc:66:87:fe:67:48:4e:cf:51:
                    b2:a5:66:aa:ef:46:ac:f7:d1:ac:3f:24:54:83:06:
                    66:6c:39:bf:6a:8a:81:8e:01:06:af:cd:6a:8d:52:
                    4b:d3:61:7d:bd:91:2c:7c:27:13:36:81:f7:ef:45:
                    c7:30:84:35:83:43:e9:eb:4a:98:be:a7:1c:72:d3:
                    78:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:CE:23:02:C5:85:AE:E5:D8:D6:DF:10:66:19:4D:BD:54:B4:8E:94
            X509v3 Authority Key Identifier:
                keyid:C7:9C:17:C4:F5:C8:43:79:1A:70:28:B4:99:93:2A:84:B6:5C:D3:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e256bbba-1826-4d86-b873-2f6dd6325771/1/C79C17C4F5C843791A7028B499932A84B65CD399.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C79C17C4F5C843791A7028B499932A84B65CD399.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e256bbba-1826-4d86-b873-2f6dd6325771/1/C79C17C4F5C843791A7028B499932A84B65CD399.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:2f:24:3a:75:7c:bb:eb:3e:3c:42:2e:db:6b:85:fd:2c:85:
         79:79:66:0d:c2:94:ee:7a:08:08:b6:8a:c5:4a:c8:3a:dd:d5:
         55:c0:6d:1a:1c:5c:c4:51:34:d0:60:c7:f3:e4:1c:30:ea:c1:
         06:d5:e6:53:d3:87:20:ec:6f:56:6d:d3:c3:d1:7c:1e:11:4b:
         18:ba:e8:33:50:36:ef:9b:b6:61:25:1e:cd:0c:c8:29:c1:51:
         74:a4:e5:67:7d:c5:50:90:39:df:e6:64:88:40:1e:cd:0f:3a:
         bc:5c:62:f0:c7:db:5b:a9:88:26:2b:12:39:06:65:2b:6e:22:
         a3:9b:54:08:db:8d:f2:50:7b:9f:2c:54:ed:1c:2a:30:da:81:
         d7:23:dc:d9:5c:4b:91:9f:48:0e:51:a8:f0:4d:00:0d:c5:03:
         20:88:b5:d2:f1:1c:d7:47:c4:56:51:8d:9e:c7:21:39:e2:2e:
         16:b6:d0:8a:5a:fb:77:85:3a:fd:7d:53:5f:28:9f:bd:e0:b7:
         e6:82:a1:f5:f1:4c:67:14:af:6f:b6:a3:ff:a0:af:fa:d6:7a:
         78:06:9c:55:ad:57:39:bc:d2:f5:a4:ae:33:ba:34:80:9d:21:
         9e:88:45:32:7c:65:5a:31:3e:67:5b:88:5b:11:3f:d1:78:4c:
         ec:4c:38:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:36:36 2026 by rpki-client