This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/45869181-ea55-421d-aba8-6968314c8d80/0/79D1595B22C90AC275A4090AF3BE0AEF665EA81B.mft
File:                     79D1595B22C90AC275A4090AF3BE0AEF665EA81B.mft (raw, json)
Hash identifier:          sd+htUxtHWbnyAoNAErEUH9nBVvFP37LZtg9X3T3r6s=
Subject key identifier:   91:A4:4B:43:1B:8F:7F:57:91:81:BC:03:73:02:60:60:FC:98:70:EC
Authority key identifier: 79:D1:59:5B:22:C9:0A:C2:75:A4:09:0A:F3:BE:0A:EF:66:5E:A8:1B
Certificate issuer:       /CN=79D1595B22C90AC275A4090AF3BE0AEF665EA81B
Certificate serial:       25F634612694F43C36549DAADA44BF1C670D7FE9
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/79D1595B22C90AC275A4090AF3BE0AEF665EA81B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/45869181-ea55-421d-aba8-6968314c8d80/0/79D1595B22C90AC275A4090AF3BE0AEF665EA81B.mft
Manifest number:          04
Signing time:             Thu 18 Dec 2025 04:07:23 +0000
Manifest this update:     Thu 18 Dec 2025 04:02:23 +0000
Manifest next update:     Sun 21 Dec 2025 09:42:23 +0000
Files and hashes:         1: 79D1595B22C90AC275A4090AF3BE0AEF665EA81B.crl (hash: 7vJNEs4HGYKdW4gFYwEdzzpL2P8W4R/FTyy+vc/rzO4=)
                          2: 323030313a6466303a62363a3a2f34382d3438203d3e203633353130.roa (hash: kNYG7SAIiKgSyZG2fQIJ5rRy8D++wscSmsfqJ/JMAnk=)
                          3: 3230322e342e3138362e302f32342d3234203d3e203633353130.roa (hash: IUKB7IZZcAxdadF7KgMG0SMyWM3kl7UBq8kwg4xktxk=)
                          4: 3130332e34312e3136392e302f32342d3234203d3e203633353130.roa (hash: YbMzsklhUnNFLiUL3eUvckWsyku5p4eRcoUqgAfUbbs=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/45869181-ea55-421d-aba8-6968314c8d80/0/79D1595B22C90AC275A4090AF3BE0AEF665EA81B.crl
                          rsync://repo-rpki.idnic.net/repo/45869181-ea55-421d-aba8-6968314c8d80/0/79D1595B22C90AC275A4090AF3BE0AEF665EA81B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/79D1595B22C90AC275A4090AF3BE0AEF665EA81B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 21 Dec 2025 09:42:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:f6:34:61:26:94:f4:3c:36:54:9d:aa:da:44:bf:1c:67:0d:7f:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79D1595B22C90AC275A4090AF3BE0AEF665EA81B
        Validity
            Not Before: Dec 18 04:02:23 2025 GMT
            Not After : Dec 21 09:42:23 2025 GMT
        Subject: CN=91A44B431B8F7F579181BC0373026060FC9870EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f7:b9:38:cc:e7:73:93:e0:4b:9a:c7:f7:29:
                    90:87:8b:1b:07:13:76:f9:09:b4:85:86:91:38:7f:
                    e1:d9:1f:ad:5d:45:ac:e5:db:ea:ef:cc:3e:0c:13:
                    8b:9f:db:94:47:7d:a0:c5:f8:17:af:d3:e2:1c:e7:
                    e9:d9:97:80:be:14:40:0e:b5:b0:a8:f3:11:cc:3f:
                    0a:b4:d6:a6:06:c8:0d:34:f6:65:72:24:98:0a:c2:
                    c8:a0:80:f3:2a:e2:0b:fe:8e:0d:1b:24:24:54:9a:
                    08:b0:22:44:28:2e:bc:e8:67:50:9f:32:ba:3f:f4:
                    4c:be:d6:97:76:4c:db:a6:c9:f7:df:6b:de:f6:89:
                    3f:c0:fb:a9:2a:4b:cd:69:2d:46:93:27:07:2c:64:
                    3f:2b:84:25:d5:2e:57:09:9e:78:0a:14:59:89:52:
                    48:4e:c6:b8:a3:a1:4e:7a:14:17:0c:86:9e:a7:b0:
                    fc:ef:e1:56:aa:a2:3a:89:9d:bc:70:67:1d:6e:b6:
                    d1:1a:2a:04:d9:07:ad:c8:64:0a:80:da:d8:20:b8:
                    26:2f:47:fb:50:26:f5:0e:ed:07:3b:ba:1e:c9:b6:
                    52:2b:37:02:0c:21:3d:fd:9c:d6:05:29:d7:fe:94:
                    3b:15:7a:18:39:5b:c9:d6:ad:8a:30:f0:f5:2a:19:
                    54:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:A4:4B:43:1B:8F:7F:57:91:81:BC:03:73:02:60:60:FC:98:70:EC
            X509v3 Authority Key Identifier:
                keyid:79:D1:59:5B:22:C9:0A:C2:75:A4:09:0A:F3:BE:0A:EF:66:5E:A8:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/45869181-ea55-421d-aba8-6968314c8d80/0/79D1595B22C90AC275A4090AF3BE0AEF665EA81B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/79D1595B22C90AC275A4090AF3BE0AEF665EA81B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/45869181-ea55-421d-aba8-6968314c8d80/0/79D1595B22C90AC275A4090AF3BE0AEF665EA81B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:ca:63:e7:95:e1:54:ab:fc:05:f6:5f:6d:5c:08:12:48:37:
         ab:e6:3d:0a:c6:db:08:01:26:0a:09:a7:b0:59:19:11:44:1c:
         40:1b:ee:7f:dd:6b:43:6d:b0:53:dd:a8:9d:62:a1:bd:47:2b:
         cd:7b:96:80:34:8c:cf:fb:2f:e0:18:c0:ac:4e:c1:d1:39:26:
         ca:6c:a8:f0:68:a4:50:2f:38:b8:20:bb:16:0b:b1:55:54:8d:
         61:00:5b:e4:23:63:6a:a7:f8:3b:36:22:0d:7e:b3:4c:dd:de:
         59:ad:98:44:83:f1:17:f0:d3:c8:7a:b6:62:97:0b:3b:21:ca:
         c7:36:4e:45:94:e4:6d:c2:ad:d8:36:5c:8f:e3:d8:18:a7:87:
         5e:1a:d2:3e:93:d8:0c:9b:c9:54:3e:c8:dc:18:a8:d1:4b:d1:
         4c:3f:7e:29:51:90:84:28:28:d7:00:30:a7:f5:85:15:22:ee:
         a4:02:bc:8c:33:3b:7c:2b:b4:26:4a:cc:af:3a:97:4e:46:86:
         47:77:82:80:8b:2b:56:0e:82:0d:78:af:f4:04:0b:b8:f9:15:
         c7:54:21:44:72:89:e3:74:a0:85:84:06:49:2b:8b:97:90:be:
         f3:e8:5f:39:f7:5f:48:52:0d:9c:cf:10:45:80:54:b5:ba:f0:
         bc:08:22:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 08:05:03 2025 by rpki-client