This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/97dc7ee5-ce67-45cd-9881-43489ab2b1a5/0/79204255412F26FC4519CA94E35B93EF4E47BC73.mft
File:                     79204255412F26FC4519CA94E35B93EF4E47BC73.mft (raw, json)
Hash identifier:          nq2DUp3e4VwsJbx8wtRAryf5IH8j4tyB9X0OH22Y+24=
Subject key identifier:   44:05:77:3D:0C:02:A5:1E:DD:A2:8E:47:71:74:87:A7:BE:C3:E5:EC
Authority key identifier: 79:20:42:55:41:2F:26:FC:45:19:CA:94:E3:5B:93:EF:4E:47:BC:73
Certificate issuer:       /CN=79204255412F26FC4519CA94E35B93EF4E47BC73
Certificate serial:       75AEB187B847A60486A1BE859C0BF8EA1EEB37D5
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/79204255412F26FC4519CA94E35B93EF4E47BC73.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/97dc7ee5-ce67-45cd-9881-43489ab2b1a5/0/79204255412F26FC4519CA94E35B93EF4E47BC73.mft
Manifest number:          03B1
Signing time:             Wed 17 Dec 2025 12:01:13 +0000
Manifest this update:     Wed 17 Dec 2025 11:56:13 +0000
Manifest next update:     Sat 20 Dec 2025 23:21:13 +0000
Files and hashes:         1: 3130332e3136342e32322e302f32332d3234203d3e203137393935.roa (hash: sTN/8QbT7vMBdY4lWuaimWErVYuLZoinw920451use8=)
                          2: 79204255412F26FC4519CA94E35B93EF4E47BC73.crl (hash: +xHiLqfYm3tb3okMr39rM6CMsq0dRJqfqLrfQLLKAQg=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/97dc7ee5-ce67-45cd-9881-43489ab2b1a5/0/79204255412F26FC4519CA94E35B93EF4E47BC73.crl
                          rsync://repo-rpki.idnic.net/repo/97dc7ee5-ce67-45cd-9881-43489ab2b1a5/0/79204255412F26FC4519CA94E35B93EF4E47BC73.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/79204255412F26FC4519CA94E35B93EF4E47BC73.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Dec 2025 23:21:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:ae:b1:87:b8:47:a6:04:86:a1:be:85:9c:0b:f8:ea:1e:eb:37:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79204255412F26FC4519CA94E35B93EF4E47BC73
        Validity
            Not Before: Dec 17 11:56:13 2025 GMT
            Not After : Dec 20 23:21:13 2025 GMT
        Subject: CN=4405773D0C02A51EDDA28E47717487A7BEC3E5EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:f8:ad:06:c4:66:20:39:e6:46:d0:7f:4c:b2:
                    17:4c:90:64:5c:69:21:d9:fa:4f:4b:5b:fc:18:94:
                    0e:cf:60:5a:3e:74:4e:62:fe:34:46:f0:3b:0a:1f:
                    7f:98:40:38:ad:d3:ab:f3:48:cb:05:9a:cd:0c:c2:
                    bb:40:f9:d9:51:e9:45:c0:f5:ab:80:cb:99:8e:02:
                    fb:d6:34:2f:fb:67:b6:70:bd:6a:32:cf:e3:47:ab:
                    ac:52:97:07:2b:d2:fc:ff:f6:cb:c2:01:45:6a:e7:
                    f5:96:22:bd:b3:9b:ef:33:1f:e3:54:bf:b3:e7:a2:
                    45:b6:50:05:32:c1:2b:c2:ad:93:ba:63:3f:89:a2:
                    0e:db:69:42:eb:97:6a:c1:ab:fa:e0:41:b9:71:be:
                    f8:c1:82:20:a4:cb:40:7c:15:70:62:d7:c5:99:75:
                    27:45:36:ba:dc:52:4b:a0:e2:b8:34:0a:4f:7d:f5:
                    31:73:e3:b8:cf:83:5e:47:3a:6b:af:46:f1:ea:0f:
                    ea:c6:27:fb:c5:01:12:17:cb:6a:40:2e:6c:84:15:
                    28:dd:91:47:9c:4f:e3:c8:36:1a:1d:30:2c:45:5e:
                    dd:31:57:74:84:9b:78:46:62:39:e6:5f:12:f5:8c:
                    f2:00:96:9c:44:ac:b4:7c:d3:39:1e:77:04:1d:fe:
                    da:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:05:77:3D:0C:02:A5:1E:DD:A2:8E:47:71:74:87:A7:BE:C3:E5:EC
            X509v3 Authority Key Identifier:
                keyid:79:20:42:55:41:2F:26:FC:45:19:CA:94:E3:5B:93:EF:4E:47:BC:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/97dc7ee5-ce67-45cd-9881-43489ab2b1a5/0/79204255412F26FC4519CA94E35B93EF4E47BC73.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/79204255412F26FC4519CA94E35B93EF4E47BC73.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/97dc7ee5-ce67-45cd-9881-43489ab2b1a5/0/79204255412F26FC4519CA94E35B93EF4E47BC73.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:2a:1e:36:d9:fb:67:4f:6f:32:39:c5:70:0c:82:5b:e9:86:
         fb:04:be:1f:d4:17:e7:80:bc:02:a6:fc:31:7e:13:d8:80:78:
         cf:dd:93:a7:80:90:f5:02:8f:31:e6:e3:12:0a:ba:63:8f:7c:
         5b:a2:bf:af:ee:eb:cb:5f:81:d7:8a:c3:02:92:96:c3:52:90:
         e9:14:55:22:9c:8a:ca:2e:92:c0:df:32:74:0e:55:0e:ed:27:
         78:5b:a7:69:dc:b6:c4:64:97:9a:6d:37:03:83:2e:fe:76:be:
         21:f8:8f:f3:d8:2c:8c:11:cf:85:41:66:f9:db:3f:05:51:a7:
         21:55:a4:64:d7:a2:32:bc:20:f9:7a:b0:8f:8b:da:f2:a8:fc:
         65:95:cc:c6:8e:68:d4:8a:94:10:e0:fe:ee:b9:01:01:47:ed:
         9c:d5:1f:c8:96:4c:75:3c:f4:5b:c0:9e:0b:60:c1:cf:d9:3d:
         94:49:f1:a0:43:0c:41:aa:e4:89:78:e8:4a:ba:da:ec:12:be:
         6f:7d:28:35:b0:f6:b3:16:8e:3c:5b:1c:07:d1:af:fa:ba:82:
         ea:25:17:56:cc:f6:aa:ef:68:82:45:63:aa:03:2a:a6:73:a7:
         88:05:37:63:71:cc:f3:b6:19:da:d6:a6:d8:6b:48:ed:3f:fe:
         2a:34:f5:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 18:08:58 2025 by rpki-client