This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/37224360-245d-4a1a-af36-f9befcdb70b7/0/ED137633BAEE661A0ACBBF277089F107CB59439A.mft
File:                     ED137633BAEE661A0ACBBF277089F107CB59439A.mft (raw, json)
Hash identifier:          AMFbdm3NSypkjG1FW8not9LgTkC2bTY4pR3E53x9ojw=
Subject key identifier:   20:57:F6:D3:99:C7:D6:44:8E:D2:AD:7F:D3:2D:38:C3:7E:C9:64:E9
Authority key identifier: ED:13:76:33:BA:EE:66:1A:0A:CB:BF:27:70:89:F1:07:CB:59:43:9A
Certificate issuer:       /CN=ED137633BAEE661A0ACBBF277089F107CB59439A
Certificate serial:       0C3EAD18C7FE519D500777E4DD19DFB9396E70A6
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ED137633BAEE661A0ACBBF277089F107CB59439A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/37224360-245d-4a1a-af36-f9befcdb70b7/0/ED137633BAEE661A0ACBBF277089F107CB59439A.mft
Manifest number:          01EC
Signing time:             Sun 25 Jan 2026 08:41:34 +0000
Manifest this update:     Sun 25 Jan 2026 08:36:34 +0000
Manifest next update:     Wed 28 Jan 2026 17:45:34 +0000
Files and hashes:         1: ED137633BAEE661A0ACBBF277089F107CB59439A.crl (hash: 5+vLHCgM5O7es/RgNEuks5ah6xPfw2N8XFqP/qH+fOE=)
                          2: 3130332e3136322e3130352e302f32342d3234203d3e20313337333136.roa (hash: lA0HvakrheoR+VMWrWjd7ZsfLODkGFiLcqbm8PHhQfs=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/37224360-245d-4a1a-af36-f9befcdb70b7/0/ED137633BAEE661A0ACBBF277089F107CB59439A.crl
                          rsync://repo-rpki.idnic.net/repo/37224360-245d-4a1a-af36-f9befcdb70b7/0/ED137633BAEE661A0ACBBF277089F107CB59439A.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ED137633BAEE661A0ACBBF277089F107CB59439A.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Jan 2026 14:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:3e:ad:18:c7:fe:51:9d:50:07:77:e4:dd:19:df:b9:39:6e:70:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ED137633BAEE661A0ACBBF277089F107CB59439A
        Validity
            Not Before: Jan 25 08:36:34 2026 GMT
            Not After : Jan 28 17:45:34 2026 GMT
        Subject: CN=2057F6D399C7D6448ED2AD7FD32D38C37EC964E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:2e:b2:da:81:54:4e:6e:d6:e6:17:33:42:2c:
                    8a:3b:72:4b:95:2a:8c:da:ff:11:78:cd:40:ec:fe:
                    80:f9:62:4b:18:ba:37:9f:7c:40:f5:34:d8:f7:ff:
                    f2:de:99:f0:1a:b7:e2:7e:d6:f5:ac:2b:0c:9b:8f:
                    a5:2e:60:4c:a4:93:e1:9c:10:5d:d9:eb:93:82:6a:
                    cf:b2:be:c2:de:8d:c7:56:4f:d2:75:5c:86:6c:2a:
                    94:5a:be:83:5e:f5:75:28:8e:90:2f:20:55:26:bc:
                    11:77:29:7c:bd:54:61:28:2c:b2:f5:b0:71:cc:05:
                    ad:ea:95:79:a9:64:d8:39:51:ec:c3:8a:80:76:48:
                    d7:02:3f:aa:78:ab:39:54:fd:51:bf:75:4f:77:5f:
                    f6:3d:67:10:97:1a:bc:08:ed:b8:fa:ee:5d:27:ae:
                    e7:31:c2:72:d5:2c:cb:e7:43:87:29:f2:0e:b8:c2:
                    bc:35:80:f9:b8:9a:0c:f8:cc:68:1a:b5:1a:67:1c:
                    c8:a8:78:37:6a:b7:93:26:46:5d:68:87:b0:15:62:
                    1e:7e:f9:6a:31:68:db:c5:48:73:92:c2:6e:96:65:
                    a8:bc:8a:46:90:18:ff:0f:91:71:2b:4d:12:42:16:
                    a0:17:d6:df:8f:d6:22:96:fe:69:ac:6f:cd:9e:4d:
                    fd:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:57:F6:D3:99:C7:D6:44:8E:D2:AD:7F:D3:2D:38:C3:7E:C9:64:E9
            X509v3 Authority Key Identifier:
                keyid:ED:13:76:33:BA:EE:66:1A:0A:CB:BF:27:70:89:F1:07:CB:59:43:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/37224360-245d-4a1a-af36-f9befcdb70b7/0/ED137633BAEE661A0ACBBF277089F107CB59439A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ED137633BAEE661A0ACBBF277089F107CB59439A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/37224360-245d-4a1a-af36-f9befcdb70b7/0/ED137633BAEE661A0ACBBF277089F107CB59439A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:04:00:9e:4a:ff:df:d4:1d:f2:a5:bd:68:df:d5:d3:61:dc:
         98:eb:25:ab:60:82:61:f9:ea:fd:5c:d6:ee:1a:70:b6:6b:61:
         cb:56:56:5f:c8:7c:15:dd:29:51:cd:15:6f:eb:fc:28:54:7e:
         a3:9f:c0:b9:5a:64:0d:4d:9b:39:fa:42:7c:4f:b0:c9:17:14:
         b6:46:88:12:c8:26:86:f4:6f:47:21:4b:c3:ec:48:15:bd:fa:
         43:22:5e:99:7f:8a:6b:1d:92:65:6b:39:c9:13:8f:89:01:0c:
         2e:cc:60:05:33:38:ce:2f:fa:45:de:bc:b0:5f:48:98:67:92:
         55:d7:cb:fc:c0:51:e1:f8:24:c7:57:49:ce:3e:66:46:b6:14:
         b9:90:ca:6a:15:7d:c7:df:37:81:8b:d7:12:06:7e:fb:7b:a7:
         77:6b:1e:a8:56:d3:d0:90:59:02:36:60:99:22:f8:14:b7:b0:
         5d:07:a0:2d:63:83:dd:69:f0:f3:d9:b1:47:d9:bb:e8:88:b2:
         bf:95:1c:34:19:ad:39:71:cd:ca:ca:33:ba:7f:13:f0:28:64:
         05:78:03:8b:82:ff:f8:fd:a2:b7:c3:67:d2:a7:33:c5:ac:51:
         ba:58:34:d1:ca:73:14:63:74:70:da:5d:ba:34:62:39:c3:ba:
         81:9d:bc:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:38:28 2026 by rpki-client