This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/1/2C79B7AB0E4E8035C8B4DC24DE38586111050545.mft
File:                     2C79B7AB0E4E8035C8B4DC24DE38586111050545.mft (raw, json)
Hash identifier:          Esq8DZ+aiCEYfpG6P0GAyKhLb4+ZjLhubURXC47bZ/Y=
Subject key identifier:   9F:ED:99:69:2B:7F:88:55:E4:F0:4F:A9:83:E1:B5:EA:08:0F:3C:4B
Authority key identifier: 2C:79:B7:AB:0E:4E:80:35:C8:B4:DC:24:DE:38:58:61:11:05:05:45
Certificate issuer:       /CN=2C79B7AB0E4E8035C8B4DC24DE38586111050545
Certificate serial:       5089616F25408C8C3866444EF3B6BD0DC22283EE
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2C79B7AB0E4E8035C8B4DC24DE38586111050545.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/1/2C79B7AB0E4E8035C8B4DC24DE38586111050545.mft
Manifest number:          11
Signing time:             Mon 19 Jan 2026 16:32:26 +0000
Manifest this update:     Mon 19 Jan 2026 16:27:26 +0000
Manifest next update:     Thu 22 Jan 2026 19:10:26 +0000
Files and hashes:         1: 2C79B7AB0E4E8035C8B4DC24DE38586111050545.crl (hash: R6S4eg6uulKBsiTkGGLsKojkOdIaMCZpSf4H5nEbOTM=)
                          2: 3135372e38352e3230362e302f32342d3234203d3e20313339393934.roa (hash: iiwS82zB9GxKCjKKyiKUK9GjzAqb1QNfmgk+53pJJDQ=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/1/2C79B7AB0E4E8035C8B4DC24DE38586111050545.crl
                          rsync://repo-rpki.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/1/2C79B7AB0E4E8035C8B4DC24DE38586111050545.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2C79B7AB0E4E8035C8B4DC24DE38586111050545.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 22 Jan 2026 19:10:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:89:61:6f:25:40:8c:8c:38:66:44:4e:f3:b6:bd:0d:c2:22:83:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C79B7AB0E4E8035C8B4DC24DE38586111050545
        Validity
            Not Before: Jan 19 16:27:26 2026 GMT
            Not After : Jan 22 19:10:26 2026 GMT
        Subject: CN=9FED99692B7F8855E4F04FA983E1B5EA080F3C4B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:15:35:1d:bc:96:ce:00:1b:25:2c:11:d1:78:
                    70:bc:3b:f9:cd:9a:a9:11:df:15:8b:b2:1b:da:65:
                    8b:14:46:a3:5e:d8:8b:47:aa:bc:85:20:58:39:64:
                    68:ad:ee:34:67:29:59:03:94:bc:f1:95:9e:29:27:
                    0e:c6:de:50:2c:7f:9b:b9:a1:79:e3:81:78:7e:36:
                    f3:76:89:32:a9:a4:36:e3:a2:30:6c:0b:34:cf:4c:
                    ec:6b:5d:80:57:73:38:93:d4:68:ec:ee:ce:bc:9e:
                    6c:81:71:67:eb:8d:ce:7c:26:36:31:aa:59:f1:ff:
                    ff:d3:45:aa:7d:22:d8:48:0d:b4:a5:d7:1f:62:f6:
                    08:e1:77:e8:31:15:3d:d6:09:f4:c8:61:ec:55:84:
                    73:f7:ad:e6:eb:f4:6d:94:d8:bb:77:c5:b4:b3:f9:
                    57:75:72:5d:a6:c0:6f:12:4e:de:c4:df:ac:c6:d6:
                    cc:d8:73:b1:1c:62:e0:ff:64:f6:7e:f0:46:2a:d3:
                    62:85:96:fb:a1:93:96:2f:0c:e1:66:8d:90:d9:dc:
                    d9:13:f2:80:34:6a:3c:3b:ae:b6:9d:75:f0:f8:a6:
                    04:b0:e5:e1:2c:b0:51:e1:06:82:6e:1f:3d:2d:be:
                    7e:a5:f6:03:33:de:51:c2:dc:bf:d3:2d:cf:24:a9:
                    a7:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:ED:99:69:2B:7F:88:55:E4:F0:4F:A9:83:E1:B5:EA:08:0F:3C:4B
            X509v3 Authority Key Identifier:
                keyid:2C:79:B7:AB:0E:4E:80:35:C8:B4:DC:24:DE:38:58:61:11:05:05:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/1/2C79B7AB0E4E8035C8B4DC24DE38586111050545.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2C79B7AB0E4E8035C8B4DC24DE38586111050545.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/1/2C79B7AB0E4E8035C8B4DC24DE38586111050545.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:96:f5:eb:44:c6:df:a5:ea:ba:0a:e5:5d:60:43:da:0c:9e:
         7a:a2:96:3b:2a:c7:83:d5:e4:e0:43:e2:2d:4a:26:ad:c0:18:
         a0:00:18:1f:ec:ad:73:2b:63:51:05:8f:ac:66:a8:e1:51:86:
         5a:fa:4b:c9:3d:60:96:1f:b5:a2:61:fc:dd:66:a7:e1:cb:6f:
         2d:7e:f9:c1:a1:32:38:d9:cb:22:54:19:10:da:5a:c8:7d:7d:
         32:69:84:47:26:4c:f4:76:45:d4:fa:3f:52:fa:04:ac:05:7e:
         8e:1b:5c:41:01:e5:19:d7:77:db:d0:cb:46:ad:7e:c9:49:ad:
         92:8d:a4:cc:a6:ad:bf:e0:20:d8:b2:2f:6b:99:23:f9:91:53:
         20:16:b4:dc:ce:ce:40:bc:74:6e:7c:62:1e:aa:6d:d9:c6:44:
         a7:5b:6e:e7:bd:20:0a:4a:12:dc:d5:d6:a4:ae:b8:77:8c:60:
         3d:15:61:0a:98:56:fe:08:91:c2:8b:9f:fa:a3:81:63:31:7e:
         61:d2:1e:e0:c5:4e:c8:91:3e:ef:dc:69:16:98:4f:0c:d4:26:
         9d:42:61:cc:fa:fc:ad:6c:ee:12:d9:3b:66:6c:45:4f:d2:84:
         77:87:06:5f:ed:75:d4:5a:cc:25:d8:56:a0:c6:35:89:e3:46:
         49:2d:4e:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 12:00:40 2026 by rpki-client