This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/2312a146-f954-47e3-b93f-92c2fe6d89ea/0/EBDA939B37F36E8A9F581B1036E01C32F1F3D9DF.mft
File:                     EBDA939B37F36E8A9F581B1036E01C32F1F3D9DF.mft (raw, json)
Hash identifier:          Y8vczGMUI8mbXHXJhmsDRVzSc0YfiM9GAuCflJMVP+w=
Subject key identifier:   7F:20:61:AC:08:A2:E0:B0:A8:D7:F9:1B:12:22:31:BB:B8:25:DC:53
Authority key identifier: EB:DA:93:9B:37:F3:6E:8A:9F:58:1B:10:36:E0:1C:32:F1:F3:D9:DF
Certificate issuer:       /CN=EBDA939B37F36E8A9F581B1036E01C32F1F3D9DF
Certificate serial:       11AB7B78DFD6EFDEE22AC3FE746944B45E405CA6
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EBDA939B37F36E8A9F581B1036E01C32F1F3D9DF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2312a146-f954-47e3-b93f-92c2fe6d89ea/0/EBDA939B37F36E8A9F581B1036E01C32F1F3D9DF.mft
Manifest number:          01CC
Signing time:             Sun 25 Jan 2026 06:01:41 +0000
Manifest this update:     Sun 25 Jan 2026 05:56:41 +0000
Manifest next update:     Wed 28 Jan 2026 10:46:41 +0000
Files and hashes:         1: 3130332e3132322e302e302f32332d3234203d3e20313335343737.roa (hash: YSf7tTcq2YBd3VoXe5ADd93qTcdEqoHYWIyKTfCU3yg=)
                          2: EBDA939B37F36E8A9F581B1036E01C32F1F3D9DF.crl (hash: E73QKSGlaGq3jmkjYKA0ZM0wJgGvwbIbXn18FT04KR8=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/2312a146-f954-47e3-b93f-92c2fe6d89ea/0/EBDA939B37F36E8A9F581B1036E01C32F1F3D9DF.crl
                          rsync://repo-rpki.idnic.net/repo/2312a146-f954-47e3-b93f-92c2fe6d89ea/0/EBDA939B37F36E8A9F581B1036E01C32F1F3D9DF.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EBDA939B37F36E8A9F581B1036E01C32F1F3D9DF.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Jan 2026 10:46:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:ab:7b:78:df:d6:ef:de:e2:2a:c3:fe:74:69:44:b4:5e:40:5c:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EBDA939B37F36E8A9F581B1036E01C32F1F3D9DF
        Validity
            Not Before: Jan 25 05:56:41 2026 GMT
            Not After : Jan 28 10:46:41 2026 GMT
        Subject: CN=7F2061AC08A2E0B0A8D7F91B122231BBB825DC53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d4:30:8f:6a:04:94:ec:fc:af:82:a6:e5:34:
                    26:3f:ef:a2:ea:f3:74:64:97:5d:7f:1b:75:00:35:
                    f9:4d:a9:17:5f:a1:7d:60:00:14:4e:78:75:6e:87:
                    bd:91:5b:28:e3:83:b6:c6:7a:12:3a:0a:b0:ec:d2:
                    28:eb:75:05:53:1c:e7:74:80:07:3f:63:97:3e:8c:
                    cb:2c:3f:4b:95:19:6d:95:ae:8c:2a:88:5c:ef:29:
                    0c:3b:aa:d8:e4:46:15:bd:e3:b2:dd:0a:ee:bd:a0:
                    b0:15:d8:1c:b0:4c:49:8e:4a:49:86:8d:19:21:fa:
                    02:f7:74:cf:9f:af:ac:11:0b:9a:17:3e:76:ad:2b:
                    a9:db:b6:0c:11:0b:98:98:52:10:9a:ea:69:1e:83:
                    28:66:65:18:29:08:a0:d9:bd:f6:70:88:29:8d:3c:
                    d0:74:be:00:f7:fc:14:24:52:ef:51:59:ac:82:7f:
                    cf:b1:0c:bd:5d:eb:5c:db:f8:07:55:75:6c:7a:96:
                    1c:87:6f:f9:7a:7d:6b:86:da:67:ea:6c:64:d0:0c:
                    b4:78:21:8d:40:1d:71:e1:32:a3:ba:8e:85:32:93:
                    36:85:05:83:e3:99:9b:03:3c:63:2f:5b:c6:b1:2b:
                    3e:c7:cf:1f:b6:ef:4b:9a:59:86:42:68:41:08:a3:
                    49:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:20:61:AC:08:A2:E0:B0:A8:D7:F9:1B:12:22:31:BB:B8:25:DC:53
            X509v3 Authority Key Identifier:
                keyid:EB:DA:93:9B:37:F3:6E:8A:9F:58:1B:10:36:E0:1C:32:F1:F3:D9:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2312a146-f954-47e3-b93f-92c2fe6d89ea/0/EBDA939B37F36E8A9F581B1036E01C32F1F3D9DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EBDA939B37F36E8A9F581B1036E01C32F1F3D9DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2312a146-f954-47e3-b93f-92c2fe6d89ea/0/EBDA939B37F36E8A9F581B1036E01C32F1F3D9DF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:b0:3f:03:48:d3:9a:a0:a3:c0:56:57:44:72:88:b8:28:68:
         7d:7b:70:df:a5:44:14:5c:e2:c1:fb:e2:f6:83:a3:e7:21:e0:
         6f:27:4f:c1:42:ac:7f:f0:06:43:e1:78:48:f2:87:74:28:8f:
         98:50:08:6d:84:fc:fe:f8:58:0c:9a:a3:30:f3:ee:58:08:3d:
         59:17:66:29:34:71:12:d1:8c:88:c6:5a:82:12:f2:6c:53:32:
         b0:0c:0c:8a:d8:98:bc:10:ca:af:41:18:f3:43:f9:2e:6f:ce:
         bd:bf:0c:42:96:7f:64:d2:7f:3d:4a:07:65:8c:0a:67:52:1b:
         ea:91:bd:13:d8:9d:1c:b3:59:ec:c9:5e:27:cc:3a:10:80:d5:
         fc:42:3c:2c:a3:99:fa:52:c3:1a:50:0d:73:50:8f:b0:b4:8f:
         d0:fa:91:91:53:bc:66:2c:e1:bd:65:3f:67:5e:87:03:6b:16:
         6b:f2:c1:86:e7:24:1b:4a:97:03:b5:02:3c:5f:c8:6d:e4:01:
         c2:d4:8a:0a:0c:28:3f:3c:1a:b8:21:d9:60:89:f8:44:d0:d8:
         2f:54:a7:ea:24:26:22:f3:7b:d0:bc:d9:c8:7b:2e:c2:93:cf:
         2e:e8:5b:cc:95:5e:5e:1d:be:58:b9:28:4b:39:d5:e0:8d:01:
         8e:95:c6:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:58:38 2026 by rpki-client