This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/f884c935-3e33-4456-aca7-24f33a17a1a4/0/779E25B9DB276068183F9078FE6306678EBE79BE.mft
File:                     779E25B9DB276068183F9078FE6306678EBE79BE.mft (raw, json)
Hash identifier:          ddoWAApsXuF7zrFPgQA0cyOEqetCix/btwngUiJxxvY=
Subject key identifier:   4B:D1:3D:7A:29:25:34:BE:D4:A9:69:BB:B0:1F:81:A8:55:69:17:F3
Authority key identifier: 77:9E:25:B9:DB:27:60:68:18:3F:90:78:FE:63:06:67:8E:BE:79:BE
Certificate issuer:       /CN=779E25B9DB276068183F9078FE6306678EBE79BE
Certificate serial:       5C798DDBF82C21D74E2DB1803574F440FEC03AB8
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/779E25B9DB276068183F9078FE6306678EBE79BE.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f884c935-3e33-4456-aca7-24f33a17a1a4/0/779E25B9DB276068183F9078FE6306678EBE79BE.mft
Manifest number:          09
Signing time:             Sun 07 Dec 2025 08:12:13 +0000
Manifest this update:     Sun 07 Dec 2025 08:07:13 +0000
Manifest next update:     Wed 10 Dec 2025 19:09:13 +0000
Files and hashes:         1: 779E25B9DB276068183F9078FE6306678EBE79BE.crl (hash: OHnBmyEzugIKVm32CgMI/o9X6x8jEJ4j7bm+k0juHio=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f884c935-3e33-4456-aca7-24f33a17a1a4/0/779E25B9DB276068183F9078FE6306678EBE79BE.crl
                          rsync://repo-rpki.idnic.net/repo/f884c935-3e33-4456-aca7-24f33a17a1a4/0/779E25B9DB276068183F9078FE6306678EBE79BE.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/779E25B9DB276068183F9078FE6306678EBE79BE.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Dec 2025 06:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:79:8d:db:f8:2c:21:d7:4e:2d:b1:80:35:74:f4:40:fe:c0:3a:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=779E25B9DB276068183F9078FE6306678EBE79BE
        Validity
            Not Before: Dec  7 08:07:13 2025 GMT
            Not After : Dec 10 19:09:13 2025 GMT
        Subject: CN=4BD13D7A292534BED4A969BBB01F81A8556917F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:ec:40:dd:61:49:05:ae:d3:70:31:30:00:a5:
                    6c:fb:0c:f0:b4:89:b6:d7:f9:2f:73:16:3b:7d:6c:
                    73:f5:e3:8c:af:f5:eb:31:1f:cb:25:0e:1b:28:af:
                    c5:00:2d:b9:eb:68:db:97:2f:5c:72:95:07:4c:44:
                    87:22:d2:f6:30:1a:6a:ca:a0:2a:de:7b:12:06:8e:
                    81:02:a7:63:e1:99:56:c2:05:d7:97:2a:4f:fc:07:
                    3c:08:2c:3d:f6:77:04:5f:de:89:dd:51:e7:a1:41:
                    1c:3f:78:f9:f3:14:81:10:a7:ec:66:7f:bb:9c:41:
                    29:b6:f5:41:fb:6f:a9:37:d9:70:a4:be:19:56:14:
                    aa:f6:87:66:b3:4e:89:c2:f2:3c:36:2d:5f:c7:f5:
                    da:03:08:fe:ea:34:8e:68:73:37:5c:14:7a:53:58:
                    4e:e0:e7:45:51:c9:f3:4b:1b:d5:da:81:59:27:76:
                    83:22:39:24:77:73:ac:5e:5b:17:d5:3d:8c:33:ee:
                    9b:94:28:58:27:1b:2a:51:b6:fd:fc:12:7f:41:ea:
                    33:45:c5:ac:8e:0a:88:62:15:b6:17:fe:bb:8c:7f:
                    18:30:65:8e:ea:4a:8f:31:ef:a3:f8:85:b4:80:65:
                    3e:70:b3:14:cb:75:ca:f7:e8:de:ab:0a:a7:09:23:
                    bc:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:D1:3D:7A:29:25:34:BE:D4:A9:69:BB:B0:1F:81:A8:55:69:17:F3
            X509v3 Authority Key Identifier:
                keyid:77:9E:25:B9:DB:27:60:68:18:3F:90:78:FE:63:06:67:8E:BE:79:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f884c935-3e33-4456-aca7-24f33a17a1a4/0/779E25B9DB276068183F9078FE6306678EBE79BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/779E25B9DB276068183F9078FE6306678EBE79BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f884c935-3e33-4456-aca7-24f33a17a1a4/0/779E25B9DB276068183F9078FE6306678EBE79BE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:6a:3e:ac:a5:00:7f:21:52:98:20:7a:7b:ae:cf:45:db:6f:
         9e:ed:24:46:d4:a6:76:d5:aa:91:67:0d:00:0f:f2:66:c2:b1:
         0e:63:a1:80:30:20:21:a8:9d:f1:47:3b:65:bb:39:25:5c:29:
         66:7f:ad:f6:13:80:df:0b:01:f9:a9:7e:cc:db:3c:30:01:4b:
         ea:69:e4:33:83:8f:d8:63:26:7d:e7:44:b4:87:0b:11:1e:47:
         50:74:18:d0:37:20:43:58:fe:ed:13:07:90:4a:95:f4:6b:02:
         11:7c:5e:00:6f:01:24:cd:ee:f7:4c:0d:d1:3d:8c:d6:a2:2c:
         8d:cf:14:92:cf:9a:dc:eb:0f:6a:38:7a:70:04:00:b2:71:66:
         c3:cd:a0:98:fd:f4:43:57:2d:0c:83:ef:99:c0:59:0b:c9:47:
         6c:f3:bc:78:19:7c:10:a9:57:a1:b5:7e:9a:e6:ed:05:2c:ab:
         3f:65:1c:ee:f7:0f:f5:00:ea:86:3a:dd:28:0b:c1:f3:5d:b9:
         d8:54:75:ea:db:68:31:24:a6:c1:87:6c:ea:43:63:ac:7f:6c:
         e1:0a:fe:ea:3c:ee:5f:84:e9:16:b9:a2:18:85:91:a9:32:bd:
         74:7a:96:a7:9d:88:25:37:e2:9d:0e:ec:4b:8a:30:52:cf:48:
         f1:d4:1a:96
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUXHmN2/gsIddOLbGANXT0QP7AOrgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzc5RTI1QjlEQjI3NjA2ODE4M0Y5MDc4RkU2MzA2Njc4
RUJFNzlCRTAeFw0yNTEyMDcwODA3MTNaFw0yNTEyMTAxOTA5MTNaMDMxMTAvBgNV
BAMTKDRCRDEzRDdBMjkyNTM0QkVENEE5NjlCQkIwMUY4MUE4NTU2OTE3RjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDa7EDdYUkFrtNwMTAApWz7DPC0
ibbX+S9zFjt9bHP144yv9esxH8slDhsor8UALbnraNuXL1xylQdMRIci0vYwGmrK
oCreexIGjoECp2PhmVbCBdeXKk/8BzwILD32dwRf3ondUeehQRw/ePnzFIEQp+xm
f7ucQSm29UH7b6k32XCkvhlWFKr2h2azTonC8jw2LV/H9doDCP7qNI5oczdcFHpT
WE7g50VRyfNLG9XagVkndoMiOSR3c6xeWxfVPYwz7puUKFgnGypRtv38En9B6jNF
xayOCohiFbYX/ruMfxgwZY7qSo8x76P4hbSAZT5wsxTLdcr36N6rCqcJI7z7AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUS9E9eiklNL7UqWm7sB+BqFVpF/MwHwYDVR0j
BBgwFoAUd54ludsnYGgYP5B4/mMGZ46+eb4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m
ODg0YzkzNS0zZTMzLTQ0NTYtYWNhNy0yNGYzM2ExN2ExYTQvMC83NzlFMjVCOURC
Mjc2MDY4MTgzRjkwNzhGRTYzMDY2NzhFQkU3OUJFLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzEvNzc5RTI1QjlEQjI3NjA2ODE4M0Y5MDc4RkU2MzA2Njc4RUJF
NzlCRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjg4NGM5MzUtM2UzMy00NDU2LWFj
YTctMjRmMzNhMTdhMWE0LzAvNzc5RTI1QjlEQjI3NjA2ODE4M0Y5MDc4RkU2MzA2
Njc4RUJFNzlCRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBACVqPqylAH8hUpggenuuz0Xbb57tJEbUpnbV
qpFnDQAP8mbCsQ5joYAwICGonfFHO2W7OSVcKWZ/rfYTgN8LAfmpfszbPDABS+pp
5DODj9hjJn3nRLSHCxEeR1B0GNA3IENY/u0TB5BKlfRrAhF8XgBvASTN7vdMDdE9
jNaiLI3PFJLPmtzrD2o4enAEALJxZsPNoJj99ENXLQyD75nAWQvJR2zzvHgZfBCp
V6G1fprm7QUsqz9lHO73D/UA6oY63SgLwfNdudhUderbaDEkpsGHbOpDY6x/bOEK
/uo87l+E6Ra5ohiFkakyvXR6lqediCU34p0O7EuKMFLPSPHUGpY=
-----END CERTIFICATE-----
Generated at Sun Dec 7 18:57:15 2025 by rpki-client