This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/0/EEC1A7BF2D95D0BAFE37105E4BB1BB23601DD1DB.mft
File:                     EEC1A7BF2D95D0BAFE37105E4BB1BB23601DD1DB.mft (raw, json)
Hash identifier:          vbGcIAInjxOjoaHt/OIvYcrmINHIf61phRj4W8qWhHk=
Subject key identifier:   74:31:68:72:BF:F6:13:20:89:D4:FE:AC:D9:FD:B1:24:1F:C4:10:0B
Authority key identifier: EE:C1:A7:BF:2D:95:D0:BA:FE:37:10:5E:4B:B1:BB:23:60:1D:D1:DB
Certificate issuer:       /CN=EEC1A7BF2D95D0BAFE37105E4BB1BB23601DD1DB
Certificate serial:       418C538421786B4FC03EAEC8DB1B371363B44EF7
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/EEC1A7BF2D95D0BAFE37105E4BB1BB23601DD1DB.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/0/EEC1A7BF2D95D0BAFE37105E4BB1BB23601DD1DB.mft
Manifest number:          E5
Signing time:             Sun 07 Dec 2025 11:22:15 +0000
Manifest this update:     Sun 07 Dec 2025 11:17:15 +0000
Manifest next update:     Wed 10 Dec 2025 20:36:15 +0000
Files and hashes:         1: 3136302e32352e34352e302f32342d3234203d3e20313533303639.roa (hash: pjrXRUj5r2IszWCXojX+FWGkandw2VMiyslpGWMGbUA=)
                          2: EEC1A7BF2D95D0BAFE37105E4BB1BB23601DD1DB.crl (hash: 0GVqQu0M0wcKlsJj7/gmzlwo6RMqjAbvt46V7D1XwaM=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/0/EEC1A7BF2D95D0BAFE37105E4BB1BB23601DD1DB.crl
                          rsync://repo-rpki.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/0/EEC1A7BF2D95D0BAFE37105E4BB1BB23601DD1DB.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/EEC1A7BF2D95D0BAFE37105E4BB1BB23601DD1DB.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 10 Dec 2025 20:36:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:8c:53:84:21:78:6b:4f:c0:3e:ae:c8:db:1b:37:13:63:b4:4e:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EEC1A7BF2D95D0BAFE37105E4BB1BB23601DD1DB
        Validity
            Not Before: Dec  7 11:17:15 2025 GMT
            Not After : Dec 10 20:36:15 2025 GMT
        Subject: CN=74316872BFF6132089D4FEACD9FDB1241FC4100B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:9b:f4:ee:c1:44:93:74:ca:d0:47:11:9b:1a:
                    04:34:b0:f4:76:4b:df:09:91:0b:99:80:cb:2f:32:
                    de:14:87:c2:92:d6:04:fe:9e:69:42:7f:3d:8d:01:
                    77:b6:c6:5a:92:a7:c2:22:aa:1c:e6:77:67:75:d8:
                    75:ec:6f:1b:42:8c:7a:10:23:3d:a4:83:7a:e1:19:
                    4d:01:25:33:82:0e:e1:b3:79:57:c5:37:56:ab:a2:
                    4b:70:07:31:12:52:e8:17:46:13:5d:a5:15:e5:a8:
                    71:90:8a:58:fb:9b:56:7b:97:eb:78:bd:81:6b:59:
                    f2:91:63:f7:61:b4:97:1e:cb:ae:e6:2f:1d:cb:40:
                    f4:2f:a1:92:15:66:d9:4c:7a:c1:9b:09:d8:ae:38:
                    06:09:72:25:4b:d4:69:eb:fd:c7:29:0c:da:24:bc:
                    61:0d:8e:48:22:31:bf:85:69:e9:30:46:c6:6a:57:
                    24:4f:81:89:a6:94:80:4f:79:c9:7f:f5:fd:84:0b:
                    4c:35:1e:8a:39:9b:74:cc:13:88:cb:1f:08:cf:ff:
                    4e:df:13:0a:01:88:aa:7c:db:30:e2:05:28:a2:5e:
                    8c:23:bc:8e:d2:8d:bf:4a:0d:41:c3:01:c5:9e:4b:
                    5e:cd:f3:11:53:39:60:67:76:41:7c:a0:44:03:a8:
                    2b:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:31:68:72:BF:F6:13:20:89:D4:FE:AC:D9:FD:B1:24:1F:C4:10:0B
            X509v3 Authority Key Identifier:
                keyid:EE:C1:A7:BF:2D:95:D0:BA:FE:37:10:5E:4B:B1:BB:23:60:1D:D1:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/0/EEC1A7BF2D95D0BAFE37105E4BB1BB23601DD1DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/EEC1A7BF2D95D0BAFE37105E4BB1BB23601DD1DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/0/EEC1A7BF2D95D0BAFE37105E4BB1BB23601DD1DB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         db:c5:95:4d:8a:91:29:0c:36:8a:77:14:24:ae:e6:24:0f:e4:
         24:73:7d:a7:d8:30:a2:29:60:74:21:aa:1a:28:05:a4:2e:24:
         9b:7a:d9:b2:27:40:19:74:99:5e:c4:cf:75:2f:de:2e:30:e3:
         74:99:f7:9c:86:87:a6:6f:f6:78:c0:0e:1e:af:90:a5:39:e6:
         0e:63:46:33:5c:b8:0a:45:90:61:7c:49:d3:82:6c:6e:25:db:
         be:95:47:fe:a5:48:41:4f:17:d5:05:66:94:1c:1b:b4:a8:0e:
         bc:02:d2:fc:18:a4:72:30:5f:6b:b3:b0:42:dc:bc:e2:9d:17:
         28:55:82:40:a0:55:1b:4e:51:fc:2b:2c:c2:fa:15:55:99:f7:
         03:cf:03:8d:46:76:b8:0e:12:16:a6:15:4f:c3:44:1c:59:e5:
         8c:0d:7f:f2:33:58:d9:08:4a:53:f9:c7:20:9c:f1:ee:b8:57:
         54:a8:8d:84:4f:d4:5b:a0:dd:88:65:d0:67:1e:fe:8a:3b:ef:
         47:b8:f3:b3:57:2b:91:44:fe:dd:da:7c:4e:11:33:61:ba:5f:
         53:9c:ed:b0:34:99:99:69:38:a7:9c:bd:5f:45:30:08:76:7d:
         f8:bd:70:9c:6a:79:c2:03:7b:d6:95:37:7f:52:60:2d:05:9e:
         de:dc:cd:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 9 01:39:24 2025 by rpki-client