This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/010fef48-1ee8-4342-a541-2510fb15b96b/0/79FE7055A022B9483725E25688019B44DD3B94A7.mft
File:                     79FE7055A022B9483725E25688019B44DD3B94A7.mft (raw, json)
Hash identifier:          NeW8eqX3xdAt/CmVwtb/fNhaQzQeYrSMYTy3hkWZZMQ=
Subject key identifier:   DD:DD:32:63:24:6F:DC:ED:74:BE:50:04:A9:6D:86:93:AB:9B:3E:87
Authority key identifier: 79:FE:70:55:A0:22:B9:48:37:25:E2:56:88:01:9B:44:DD:3B:94:A7
Certificate issuer:       /CN=79FE7055A022B9483725E25688019B44DD3B94A7
Certificate serial:       275D7CDC6AE713C583D40DA9B2F0602DD19656D4
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/79FE7055A022B9483725E25688019B44DD3B94A7.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/010fef48-1ee8-4342-a541-2510fb15b96b/0/79FE7055A022B9483725E25688019B44DD3B94A7.mft
Manifest number:          01B0
Signing time:             Thu 18 Dec 2025 23:01:55 +0000
Manifest this update:     Thu 18 Dec 2025 22:56:55 +0000
Manifest next update:     Mon 22 Dec 2025 04:34:55 +0000
Files and hashes:         1: 3130332e3136362e36342e302f32332d3233203d3e20313431393333.roa (hash: 87MbWbcpbuYz/jA532wWmodn6onL837yUxMFGvpwPFI=)
                          2: 79FE7055A022B9483725E25688019B44DD3B94A7.crl (hash: RomKtGy6oqqC4Bcp8KwYzvTdr+HO4YFjjaDd0ytnAMo=)
                          3: 3130332e3136362e36352e302f32342d3234203d3e20313431393333.roa (hash: JPLl/hy4axlRwDQrEu4V49OB2Rke2spaKxfeyHQ9IW4=)
                          4: 3130332e3136362e36342e302f32342d3234203d3e20313431393333.roa (hash: 12jFbdnsYk9rD4iS++1s1WoECdiA7iCZNam2RETSvhY=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/010fef48-1ee8-4342-a541-2510fb15b96b/0/79FE7055A022B9483725E25688019B44DD3B94A7.crl
                          rsync://repo-rpki.idnic.net/repo/010fef48-1ee8-4342-a541-2510fb15b96b/0/79FE7055A022B9483725E25688019B44DD3B94A7.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/79FE7055A022B9483725E25688019B44DD3B94A7.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 22 Dec 2025 03:43:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:5d:7c:dc:6a:e7:13:c5:83:d4:0d:a9:b2:f0:60:2d:d1:96:56:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79FE7055A022B9483725E25688019B44DD3B94A7
        Validity
            Not Before: Dec 18 22:56:55 2025 GMT
            Not After : Dec 22 04:34:55 2025 GMT
        Subject: CN=DDDD3263246FDCED74BE5004A96D8693AB9B3E87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:13:94:0d:69:ac:1f:48:a2:ec:f0:aa:1f:8b:
                    85:97:e5:a2:02:f6:0f:f7:05:d4:32:f5:31:72:e2:
                    ef:a5:37:96:02:bf:ef:09:cf:89:b4:1c:ad:f6:34:
                    79:dd:f7:bc:39:a8:ec:a2:05:24:05:da:ec:a6:8b:
                    87:73:b6:3b:53:dd:ff:03:3b:c4:ce:bd:ab:af:8a:
                    75:ac:fb:53:af:77:d9:b1:f0:02:af:3f:56:9f:8a:
                    12:68:a7:98:6c:1f:3b:4b:0f:8a:25:13:35:2b:6c:
                    c5:75:f1:2a:0d:53:11:a5:d6:a1:66:9a:be:2c:b1:
                    be:1c:77:c9:c7:68:43:1f:8c:cd:0b:b1:ee:5d:93:
                    b4:2e:fe:e6:17:c6:f4:09:ff:07:b2:86:6c:6e:6c:
                    b6:e0:7b:d8:a5:3c:bc:b6:a8:f2:87:2c:0b:a6:18:
                    30:95:8c:c6:54:aa:ce:0c:e6:91:47:11:56:34:fc:
                    4d:53:71:24:ec:7f:f1:bb:44:d9:db:6f:cd:56:c0:
                    8f:d9:09:d3:87:f9:e0:94:05:dc:2a:09:70:da:9e:
                    5a:f3:ea:19:c3:02:f4:7b:a2:36:29:99:a2:f8:24:
                    c6:da:b0:ef:33:f7:9e:03:a3:79:3e:57:9f:5a:cb:
                    65:b7:af:00:59:ad:c2:fb:4c:78:99:c3:a3:f4:9b:
                    4f:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:DD:32:63:24:6F:DC:ED:74:BE:50:04:A9:6D:86:93:AB:9B:3E:87
            X509v3 Authority Key Identifier:
                keyid:79:FE:70:55:A0:22:B9:48:37:25:E2:56:88:01:9B:44:DD:3B:94:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/010fef48-1ee8-4342-a541-2510fb15b96b/0/79FE7055A022B9483725E25688019B44DD3B94A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/79FE7055A022B9483725E25688019B44DD3B94A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/010fef48-1ee8-4342-a541-2510fb15b96b/0/79FE7055A022B9483725E25688019B44DD3B94A7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:61:9b:3a:91:c8:b4:53:c0:92:ec:ce:c3:1f:b8:d4:aa:f4:
         30:c0:82:9c:38:7f:3f:82:47:21:2f:cd:ba:82:3f:ea:d2:f4:
         5e:d6:4a:b1:53:2e:be:8d:d5:8f:60:5e:ec:5e:07:55:47:a0:
         90:8d:5e:d6:41:9d:c1:25:22:24:55:1d:90:47:49:e1:1c:47:
         22:13:75:69:01:32:f7:60:64:29:94:a1:30:a8:ad:78:16:59:
         8e:78:6d:ec:ef:a5:1b:4e:85:20:c0:f2:1b:a6:2e:54:a0:8b:
         59:f7:ad:81:31:b4:ec:14:27:78:38:ba:0e:58:e8:dc:39:58:
         2e:ff:2a:3a:f8:26:c4:b0:bf:a3:fd:03:24:1b:97:6d:ab:a3:
         a0:ac:84:8f:22:c3:52:49:19:2e:da:bb:19:a1:93:11:da:89:
         0f:8a:2f:84:4c:e7:09:40:04:9f:03:8b:d7:8c:c0:37:58:61:
         1a:a2:dc:f5:97:de:78:9a:d1:1d:cd:38:1d:5d:0f:ca:6c:ba:
         db:20:da:d9:50:40:fd:5c:c2:26:19:90:90:23:dc:dd:66:48:
         ae:d6:bd:66:ba:58:45:7e:aa:9a:69:32:04:db:77:3d:67:17:
         da:f0:7b:81:90:1e:87:f6:c7:cb:65:7f:8e:b7:6f:e5:e6:88:
         08:18:02:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 09:48:11 2025 by rpki-client