This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/0a1f3971-3a47-455d-ab30-e7c23b61b9f2/0/EB78214F248EFE08B4E462FDAFD4E70BC3D05A2F.mft
File:                     EB78214F248EFE08B4E462FDAFD4E70BC3D05A2F.mft (raw, json)
Hash identifier:          ul48Z3O2Nv4MyC9BURfDVFugYYMoxp6WhtTdFaM0wbY=
Subject key identifier:   A8:8D:94:67:ED:96:E2:20:95:1E:3C:69:30:C7:B8:E2:79:C9:4F:D8
Authority key identifier: EB:78:21:4F:24:8E:FE:08:B4:E4:62:FD:AF:D4:E7:0B:C3:D0:5A:2F
Certificate issuer:       /CN=EB78214F248EFE08B4E462FDAFD4E70BC3D05A2F
Certificate serial:       40CD6CA4DE225C5F3AA9249184AE8531F68DBCBC
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EB78214F248EFE08B4E462FDAFD4E70BC3D05A2F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/0a1f3971-3a47-455d-ab30-e7c23b61b9f2/0/EB78214F248EFE08B4E462FDAFD4E70BC3D05A2F.mft
Manifest number:          011B
Signing time:             Sun 25 Jan 2026 09:40:52 +0000
Manifest this update:     Sun 25 Jan 2026 09:35:52 +0000
Manifest next update:     Wed 28 Jan 2026 12:19:52 +0000
Files and hashes:         1: EB78214F248EFE08B4E462FDAFD4E70BC3D05A2F.crl (hash: PUnnlh/rnHUcQ0kRtsHgK7mgsMT44k96oK/ZOCYQUNs=)
                          2: 3130332e3130312e3231362e302f32332d3233203d3e20313530393431.roa (hash: 0KEJOj4To40f7hQCQKr4Kq8RhTmo523YXQIvq+ZY6HI=)
                          3: 3130332e3130312e3231372e302f32342d3234203d3e20313530393431.roa (hash: aAMjUzaN1yMPp7oXLSGICiOHUfNylQXYPCCHO4WZk9E=)
                          4: 3130332e3130312e3231362e302f32342d3234203d3e20313530393431.roa (hash: V76cC5CNnJtNiE3A1eNlVqFtp7QA7yYWZJ54/BrVb60=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/0a1f3971-3a47-455d-ab30-e7c23b61b9f2/0/EB78214F248EFE08B4E462FDAFD4E70BC3D05A2F.crl
                          rsync://repo-rpki.idnic.net/repo/0a1f3971-3a47-455d-ab30-e7c23b61b9f2/0/EB78214F248EFE08B4E462FDAFD4E70BC3D05A2F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EB78214F248EFE08B4E462FDAFD4E70BC3D05A2F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Jan 2026 12:19:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:cd:6c:a4:de:22:5c:5f:3a:a9:24:91:84:ae:85:31:f6:8d:bc:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB78214F248EFE08B4E462FDAFD4E70BC3D05A2F
        Validity
            Not Before: Jan 25 09:35:52 2026 GMT
            Not After : Jan 28 12:19:52 2026 GMT
        Subject: CN=A88D9467ED96E220951E3C6930C7B8E279C94FD8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:bf:bf:3c:ca:7d:ab:1f:10:ce:8b:17:f3:dc:
                    6a:91:a0:19:fb:35:e3:c5:26:fd:e4:52:3e:3c:c9:
                    b2:cc:cd:80:77:fc:68:36:9b:eb:08:81:3a:10:d5:
                    7e:94:be:5c:e8:7c:51:33:9e:49:c9:9e:4c:64:cb:
                    21:24:32:33:9c:25:37:d7:4d:bf:de:98:76:ad:07:
                    be:be:2d:3b:43:c5:cf:42:62:5b:d1:42:83:4d:80:
                    60:b3:4b:51:1b:d1:be:ad:d0:ed:bd:e1:67:11:05:
                    97:b0:8c:32:24:ba:ec:7c:d3:ad:f6:2b:c0:d9:fb:
                    7a:49:39:fb:fa:d4:6f:40:cc:92:53:c9:64:6d:00:
                    6d:b8:84:fc:ce:30:5d:6c:00:74:80:a4:f9:aa:9d:
                    20:b2:65:9c:5f:fb:5e:09:7e:1e:48:47:77:7e:9d:
                    2c:ab:33:a9:27:f9:1c:24:c0:f7:7f:87:cc:21:d0:
                    bd:60:f9:d7:fc:33:83:34:d7:35:64:db:cb:f5:6d:
                    16:12:ff:c4:d7:2d:20:6b:76:46:bd:d3:2b:6d:69:
                    b3:40:45:00:88:d4:6f:f9:5b:04:fb:9a:8f:8a:76:
                    5d:40:c9:01:41:a1:f7:2a:32:fc:ff:4f:3f:2a:c6:
                    6c:c2:98:14:78:cd:9d:e4:79:06:56:34:89:e0:21:
                    5f:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:8D:94:67:ED:96:E2:20:95:1E:3C:69:30:C7:B8:E2:79:C9:4F:D8
            X509v3 Authority Key Identifier:
                keyid:EB:78:21:4F:24:8E:FE:08:B4:E4:62:FD:AF:D4:E7:0B:C3:D0:5A:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/0a1f3971-3a47-455d-ab30-e7c23b61b9f2/0/EB78214F248EFE08B4E462FDAFD4E70BC3D05A2F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EB78214F248EFE08B4E462FDAFD4E70BC3D05A2F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0a1f3971-3a47-455d-ab30-e7c23b61b9f2/0/EB78214F248EFE08B4E462FDAFD4E70BC3D05A2F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:3c:b8:3e:36:e4:b1:76:68:e7:ea:a6:85:86:db:0e:44:2a:
         4d:86:5b:96:29:60:90:14:11:f3:57:3e:2b:3c:c8:7f:ba:5f:
         94:12:4b:ad:d8:3a:76:af:a1:55:46:ea:c4:58:5a:54:d0:d2:
         9e:65:cc:7a:e3:9e:36:8a:1a:39:60:7b:55:70:0c:03:f2:a3:
         50:3a:6e:b6:bb:3a:10:cd:a8:10:3d:49:0c:c3:03:b2:2c:59:
         69:c3:d2:80:fc:4b:10:01:7e:fa:c8:5b:e7:2d:df:59:93:c6:
         ec:64:a4:6d:87:fb:75:ed:77:68:a4:55:70:38:ec:9d:84:c8:
         90:7f:70:81:f3:69:d4:b7:e4:9e:34:73:99:fd:d7:76:fd:6d:
         aa:26:16:5b:44:8e:8e:8f:6d:b0:f2:34:d3:99:c6:8b:f8:93:
         a2:aa:47:3f:36:dd:63:cf:3c:d0:40:fe:11:1d:27:fc:11:97:
         db:57:56:d1:b1:39:5d:9a:56:7b:c7:ee:53:c8:48:06:4c:e5:
         1e:a3:c7:91:3d:b5:e6:21:32:03:c2:fc:50:9f:b5:c9:9e:62:
         07:73:4e:e5:06:85:5f:28:47:8e:7f:08:99:a5:a5:b5:29:7c:
         dc:d6:80:8b:04:26:55:c8:54:bc:fb:e8:b6:11:fb:3c:a4:01:
         49:00:a4:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:00:59 2026 by rpki-client