This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/29fc996f-72ca-4d6b-a0e7-ff5bc42b0589/0/EECC4A44F09594EB711EA1F6F34B958D19A3B4FD.mft
File:                     EECC4A44F09594EB711EA1F6F34B958D19A3B4FD.mft (raw, json)
Hash identifier:          emiPI8sh8edB23hNbQ3Fcs+hFE/FKPhmCNSiZbpYGOU=
Subject key identifier:   EC:AA:DE:E3:0F:65:F3:B0:9F:76:8B:F3:43:B8:C0:F3:61:C2:F1:E6
Authority key identifier: EE:CC:4A:44:F0:95:94:EB:71:1E:A1:F6:F3:4B:95:8D:19:A3:B4:FD
Certificate issuer:       /CN=EECC4A44F09594EB711EA1F6F34B958D19A3B4FD
Certificate serial:       381D6706007117D7482768617284F47561F11CEF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EECC4A44F09594EB711EA1F6F34B958D19A3B4FD.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/29fc996f-72ca-4d6b-a0e7-ff5bc42b0589/0/EECC4A44F09594EB711EA1F6F34B958D19A3B4FD.mft
Manifest number:          01C1
Signing time:             Thu 04 Dec 2025 20:31:27 +0000
Manifest this update:     Thu 04 Dec 2025 20:26:27 +0000
Manifest next update:     Mon 08 Dec 2025 04:06:27 +0000
Files and hashes:         1: EECC4A44F09594EB711EA1F6F34B958D19A3B4FD.crl (hash: 6cRYD87g0Cn/biDc6VSJiCC9HuDVBC6uGwoXhO1H9Lo=)
                          2: 3130332e3230342e31352e302f32342d3234203d3e20313530393230.roa (hash: 84mIKFs557T9blcI7/exXdbBapxr7Cu4g0VLqBjO/cg=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/29fc996f-72ca-4d6b-a0e7-ff5bc42b0589/0/EECC4A44F09594EB711EA1F6F34B958D19A3B4FD.crl
                          rsync://repo-rpki.idnic.net/repo/29fc996f-72ca-4d6b-a0e7-ff5bc42b0589/0/EECC4A44F09594EB711EA1F6F34B958D19A3B4FD.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EECC4A44F09594EB711EA1F6F34B958D19A3B4FD.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Dec 2025 04:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:1d:67:06:00:71:17:d7:48:27:68:61:72:84:f4:75:61:f1:1c:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EECC4A44F09594EB711EA1F6F34B958D19A3B4FD
        Validity
            Not Before: Dec  4 20:26:27 2025 GMT
            Not After : Dec  8 04:06:27 2025 GMT
        Subject: CN=ECAADEE30F65F3B09F768BF343B8C0F361C2F1E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:79:99:b2:3a:52:04:c1:d5:ad:82:60:40:4d:
                    5b:e6:fc:43:a7:0f:d2:a0:64:7b:52:5d:12:b0:d8:
                    48:4f:13:51:bd:ec:a5:87:f4:b4:22:3e:c5:67:88:
                    39:b2:75:00:0e:a7:0c:93:f8:a0:33:1a:03:f4:2f:
                    2c:b9:36:f4:7f:93:af:bd:89:7b:fa:5e:db:2c:0b:
                    69:51:a8:2d:9d:a0:80:49:2d:6f:3c:32:b6:c0:e6:
                    fa:41:a6:fd:e9:63:cb:ce:31:50:dd:c4:6d:a3:55:
                    62:0d:22:0c:c8:7a:f0:08:30:cd:23:e9:68:c7:5e:
                    44:0f:35:e8:1f:c3:3e:be:86:69:ee:2d:e9:a1:77:
                    9e:6a:cc:56:e3:00:a0:f2:4b:ed:9f:a9:6d:2f:d3:
                    5a:92:3c:80:c8:a9:d6:69:69:0e:96:e5:24:fd:e0:
                    53:b8:f6:cb:d5:b3:04:ba:7a:75:be:97:ed:01:ca:
                    a0:d6:87:cc:52:41:25:cd:3c:04:c3:5e:7a:1b:ad:
                    31:92:a4:27:25:ee:5f:50:64:88:a5:b5:30:fb:88:
                    df:5d:e6:58:57:6c:8b:8b:2d:ed:93:8d:b6:85:f6:
                    b4:52:f1:61:d0:12:b5:fc:d9:17:fc:62:e6:fc:b2:
                    78:87:ca:36:b6:0d:a8:73:ab:61:b6:63:6e:00:14:
                    f8:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:AA:DE:E3:0F:65:F3:B0:9F:76:8B:F3:43:B8:C0:F3:61:C2:F1:E6
            X509v3 Authority Key Identifier:
                keyid:EE:CC:4A:44:F0:95:94:EB:71:1E:A1:F6:F3:4B:95:8D:19:A3:B4:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/29fc996f-72ca-4d6b-a0e7-ff5bc42b0589/0/EECC4A44F09594EB711EA1F6F34B958D19A3B4FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EECC4A44F09594EB711EA1F6F34B958D19A3B4FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/29fc996f-72ca-4d6b-a0e7-ff5bc42b0589/0/EECC4A44F09594EB711EA1F6F34B958D19A3B4FD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:fa:43:d8:cb:e6:0d:90:e3:0d:0a:3c:45:2e:9b:ff:8f:09:
         d0:51:7f:60:a3:60:69:6b:e7:43:b1:73:1b:68:ed:15:31:8d:
         ce:e7:05:fe:51:a7:03:f1:2b:af:df:21:1f:d2:6e:f9:09:18:
         f0:bd:a5:3f:04:83:e3:37:6e:10:54:a1:66:90:97:5a:be:48:
         7e:cf:86:7d:a7:fb:9d:e1:42:5c:06:df:6a:00:77:a9:71:d6:
         f1:7c:6b:7d:fa:70:12:5f:fd:bc:88:ee:2c:4b:7e:c6:31:c5:
         cc:ac:2f:d0:38:7c:4e:d7:59:4c:a0:45:ff:84:3e:89:28:e6:
         d8:6c:b8:a6:b5:7e:29:51:5d:86:e6:5f:a5:4f:47:16:7c:75:
         a9:e9:cc:86:b9:18:6f:2e:2e:b0:75:7d:15:3e:66:e2:33:13:
         dd:41:7f:41:20:56:f7:20:cd:2a:64:d0:a0:2f:86:9a:39:55:
         d3:9e:8a:ed:b7:36:bf:c1:2a:d9:0d:47:d5:83:55:01:9c:00:
         02:e8:c2:e3:7b:8a:15:c3:97:f7:f5:b4:fc:d8:92:74:27:bb:
         ec:c8:8d:7b:43:eb:39:b1:7c:3c:eb:11:f4:60:ef:df:af:fc:
         b9:29:51:0b:07:f5:b8:a3:e3:c3:0f:50:a4:39:d5:92:04:1c:
         f3:47:8d:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 01:50:05 2025 by rpki-client