This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/92e95493-ae76-4cef-a08c-a20dfc9d2619/0/D79DCFAD73DC86775F136607372499D1F2C9E25C.mft
File:                     D79DCFAD73DC86775F136607372499D1F2C9E25C.mft (raw, json)
Hash identifier:          xggtjyNJwLr5EjirjZiwsg/wiOYc8Gtuu+y6Z+ldJg4=
Subject key identifier:   F8:68:30:ED:FB:9F:04:E3:50:3E:5D:46:53:38:9D:29:77:D2:D9:97
Authority key identifier: D7:9D:CF:AD:73:DC:86:77:5F:13:66:07:37:24:99:D1:F2:C9:E2:5C
Certificate issuer:       /CN=D79DCFAD73DC86775F136607372499D1F2C9E25C
Certificate serial:       2236586C9C89C3A2AAE8357B7B82D9FD1C973202
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D79DCFAD73DC86775F136607372499D1F2C9E25C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/92e95493-ae76-4cef-a08c-a20dfc9d2619/0/D79DCFAD73DC86775F136607372499D1F2C9E25C.mft
Manifest number:          013D
Signing time:             Sat 20 Dec 2025 13:01:29 +0000
Manifest this update:     Sat 20 Dec 2025 12:56:29 +0000
Manifest next update:     Tue 23 Dec 2025 15:12:29 +0000
Files and hashes:         1: D79DCFAD73DC86775F136607372499D1F2C9E25C.crl (hash: Dz3Gplcl+V4YfHslW6kRYNe692Wddjo4WMrmKTJqHAU=)
                          2: 3130332e3136312e3232382e302f32342d3234203d3e20313431363537.roa (hash: YI5TTtJnQG+fGB0QTZOZXBzGC7OWtcOUmujNcoTIZBY=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/92e95493-ae76-4cef-a08c-a20dfc9d2619/0/D79DCFAD73DC86775F136607372499D1F2C9E25C.crl
                          rsync://repo-rpki.idnic.net/repo/92e95493-ae76-4cef-a08c-a20dfc9d2619/0/D79DCFAD73DC86775F136607372499D1F2C9E25C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D79DCFAD73DC86775F136607372499D1F2C9E25C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 23 Dec 2025 15:12:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:36:58:6c:9c:89:c3:a2:aa:e8:35:7b:7b:82:d9:fd:1c:97:32:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D79DCFAD73DC86775F136607372499D1F2C9E25C
        Validity
            Not Before: Dec 20 12:56:29 2025 GMT
            Not After : Dec 23 15:12:29 2025 GMT
        Subject: CN=F86830EDFB9F04E3503E5D4653389D2977D2D997
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ac:1d:25:02:84:e5:7b:86:dd:18:3c:cc:ed:
                    10:3f:41:f5:e3:91:89:98:ba:12:c2:d7:c3:4d:36:
                    b6:98:44:63:9a:02:d6:e3:08:af:6e:a2:56:04:96:
                    07:96:f5:bb:6c:1c:b5:eb:43:28:df:b4:2c:be:f9:
                    aa:e5:0b:07:57:9d:11:05:95:f4:51:8b:4c:8a:68:
                    f0:35:bb:49:e0:24:8a:ec:05:8b:94:1d:e3:8b:4a:
                    53:f2:17:0a:03:98:13:96:f1:7c:44:0d:9d:e1:b0:
                    e4:02:39:6d:34:76:ce:02:f8:60:b5:f9:f3:40:6e:
                    db:1c:71:52:e8:8f:2a:ec:aa:ee:59:80:53:0a:9f:
                    ee:9e:44:36:9f:5e:41:4c:82:77:5c:fe:77:3c:33:
                    82:4c:7f:43:a1:23:11:5c:0c:ed:a5:4e:30:be:d8:
                    b1:9b:f9:01:31:8f:9a:56:02:3a:b6:07:f6:98:e9:
                    17:97:4e:10:80:48:65:7f:af:0f:3d:58:bd:83:9e:
                    ee:de:2f:ce:1a:e6:b2:bd:e3:54:b8:fa:d8:b0:b6:
                    7e:21:2e:cd:7b:a7:5c:3b:fa:77:02:71:6e:f0:0b:
                    1b:93:8a:75:2c:53:12:09:9b:3b:4d:64:e8:d6:51:
                    0a:67:bc:1f:f1:54:ac:78:8f:ee:ce:37:27:1a:b7:
                    d1:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:68:30:ED:FB:9F:04:E3:50:3E:5D:46:53:38:9D:29:77:D2:D9:97
            X509v3 Authority Key Identifier:
                keyid:D7:9D:CF:AD:73:DC:86:77:5F:13:66:07:37:24:99:D1:F2:C9:E2:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/92e95493-ae76-4cef-a08c-a20dfc9d2619/0/D79DCFAD73DC86775F136607372499D1F2C9E25C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D79DCFAD73DC86775F136607372499D1F2C9E25C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/92e95493-ae76-4cef-a08c-a20dfc9d2619/0/D79DCFAD73DC86775F136607372499D1F2C9E25C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:93:20:f1:09:cc:59:54:88:35:e0:81:95:88:30:8b:e9:62:
         cd:62:60:c6:ce:1e:2a:59:2f:14:0b:dc:ec:c3:54:89:4f:ac:
         83:1a:3c:d6:ff:66:04:61:0c:33:a1:68:38:dc:41:25:2e:4f:
         e6:90:a3:32:62:48:a7:2d:2b:74:8a:7a:db:ea:4a:30:ee:8d:
         c5:a8:9e:0e:2e:f2:06:63:6c:e9:bb:16:01:e6:8d:16:64:bc:
         0d:bd:91:be:50:63:23:a0:43:32:ee:5a:20:4c:69:14:b7:40:
         70:ff:d8:1b:51:8a:e7:6d:5a:e4:26:d6:d2:8e:de:2f:53:ce:
         b5:68:aa:a7:54:92:04:c6:a0:77:a1:59:78:68:1a:ff:83:52:
         75:06:a0:e0:80:ee:63:9f:ab:c5:8b:ee:6c:41:d3:3e:1e:9e:
         7c:c7:f7:4e:c1:f0:ab:7b:c8:88:03:f1:e5:35:36:f0:b3:5b:
         1b:a0:93:bc:71:92:e3:3c:c6:fc:5c:20:89:c7:fb:d6:dc:c9:
         b3:cc:e0:ab:01:2f:5c:75:ba:40:88:67:11:4e:f6:cd:80:2f:
         f2:20:59:80:e7:db:ba:e5:8e:bb:9e:a1:a6:71:a8:ac:16:fa:
         8c:e9:b9:89:dc:33:4d:32:7a:49:0d:ff:05:ae:78:dc:51:a7:
         35:b1:0e:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 13:21:25 2025 by rpki-client