This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/50661332-3773-45d6-801a-1d7eae341cac/0/EE6CBB9BBDADA4EABD41A094453212A55B300C81.mft
File:                     EE6CBB9BBDADA4EABD41A094453212A55B300C81.mft (raw, json)
Hash identifier:          DCcaEK802WmcdQhXWGJkEgJ1/jJtj5h9IXFrB5bt9ic=
Subject key identifier:   35:CC:83:E1:E6:FA:1F:17:D5:DE:44:D3:56:BD:88:D3:7C:81:92:BB
Authority key identifier: EE:6C:BB:9B:BD:AD:A4:EA:BD:41:A0:94:45:32:12:A5:5B:30:0C:81
Certificate issuer:       /CN=EE6CBB9BBDADA4EABD41A094453212A55B300C81
Certificate serial:       4C19DD8AA09522D40F51CE87FB4A829AB3514625
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EE6CBB9BBDADA4EABD41A094453212A55B300C81.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/50661332-3773-45d6-801a-1d7eae341cac/0/EE6CBB9BBDADA4EABD41A094453212A55B300C81.mft
Manifest number:          0279
Signing time:             Fri 05 Dec 2025 01:40:02 +0000
Manifest this update:     Fri 05 Dec 2025 01:35:02 +0000
Manifest next update:     Mon 08 Dec 2025 12:17:02 +0000
Files and hashes:         1: 3130332e3138302e3136372e302f32342d3234203d3e20313439333635.roa (hash: Phrb52AXZmiSjCEH8v4hSx3FLobSCLusxbUEU/TljuU=)
                          2: 3130332e3138302e3136362e302f32342d3234203d3e20313439333635.roa (hash: 0JmyDde/8xa7KVgULa8LHSN/eOm6rNnYk0rlEuieKDo=)
                          3: EE6CBB9BBDADA4EABD41A094453212A55B300C81.crl (hash: AG7UGcx5BVP9+UdfbpLMRRRJPAlcjlGRYg3+nJeuhBM=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/50661332-3773-45d6-801a-1d7eae341cac/0/EE6CBB9BBDADA4EABD41A094453212A55B300C81.crl
                          rsync://repo-rpki.idnic.net/repo/50661332-3773-45d6-801a-1d7eae341cac/0/EE6CBB9BBDADA4EABD41A094453212A55B300C81.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EE6CBB9BBDADA4EABD41A094453212A55B300C81.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Dec 2025 12:17:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:19:dd:8a:a0:95:22:d4:0f:51:ce:87:fb:4a:82:9a:b3:51:46:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE6CBB9BBDADA4EABD41A094453212A55B300C81
        Validity
            Not Before: Dec  5 01:35:02 2025 GMT
            Not After : Dec  8 12:17:02 2025 GMT
        Subject: CN=35CC83E1E6FA1F17D5DE44D356BD88D37C8192BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:3c:23:be:cb:93:96:fc:06:f4:d7:d5:de:f8:
                    c9:47:8a:8f:cc:84:88:dd:e3:6b:1c:45:4c:48:6d:
                    60:46:cc:49:d3:d5:b3:24:52:b7:69:42:df:d4:06:
                    6c:60:e1:9d:ef:73:9a:90:d8:b1:ef:55:ac:e5:b3:
                    24:d4:83:f1:96:d5:ae:b6:37:4a:7e:ee:63:c6:c6:
                    f9:33:a9:16:56:31:5e:83:31:c8:a3:c9:b9:3b:15:
                    1d:81:0e:3f:b8:23:5f:64:62:94:1b:da:c4:50:fa:
                    06:4d:0a:63:6f:44:85:24:26:57:2c:29:4e:c8:08:
                    0c:dc:b1:a9:b9:de:58:fb:38:5e:35:f5:d4:b0:6a:
                    a3:35:01:76:e1:95:d8:c7:f9:13:13:0a:77:ef:d0:
                    c2:5e:4b:c5:2a:5d:dd:fe:52:a4:cf:d1:0d:eb:0f:
                    b6:31:49:83:7c:59:21:bc:81:fa:e7:98:d2:2b:cc:
                    df:34:96:ed:ea:23:a6:4b:bd:0a:3d:2b:8b:8d:fd:
                    2f:06:c9:2a:b0:92:e7:d0:39:76:72:6a:ed:4a:87:
                    51:f6:95:9a:66:54:71:76:9a:8a:9b:83:87:e6:6c:
                    15:fd:4c:a5:18:74:e5:65:a5:95:40:bc:a0:71:25:
                    e0:ab:6e:6f:fe:d1:d6:c8:33:87:b6:74:b2:dc:e0:
                    93:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:CC:83:E1:E6:FA:1F:17:D5:DE:44:D3:56:BD:88:D3:7C:81:92:BB
            X509v3 Authority Key Identifier:
                keyid:EE:6C:BB:9B:BD:AD:A4:EA:BD:41:A0:94:45:32:12:A5:5B:30:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/50661332-3773-45d6-801a-1d7eae341cac/0/EE6CBB9BBDADA4EABD41A094453212A55B300C81.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EE6CBB9BBDADA4EABD41A094453212A55B300C81.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/50661332-3773-45d6-801a-1d7eae341cac/0/EE6CBB9BBDADA4EABD41A094453212A55B300C81.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:91:76:94:49:97:8d:c9:d1:aa:e3:70:a4:c8:3e:fa:9d:51:
         a8:92:51:94:c8:04:8f:9d:b8:23:09:c7:8c:ef:b6:57:d7:de:
         6d:9b:c3:e7:3b:a1:96:7b:d9:28:c9:a9:68:c0:da:09:3f:b1:
         e0:af:0a:79:b6:2d:6e:61:1f:39:82:fc:9f:ed:8d:30:2c:4d:
         56:72:47:74:0c:11:fc:a1:56:60:9d:2a:60:7a:a4:ee:35:51:
         71:dc:06:b2:5f:d3:32:a5:16:7d:1f:61:8d:f6:f2:ce:86:31:
         e4:75:2c:5a:c7:9c:0b:f9:60:5c:95:a9:6e:d5:0f:29:63:b7:
         a2:ad:cb:9f:f1:a1:c2:79:f6:84:5e:6c:54:0c:f1:02:0b:88:
         13:38:78:13:73:6e:df:d5:b8:6a:7b:eb:d5:26:4b:48:a5:1d:
         c5:16:9e:bb:72:aa:c9:31:70:98:f4:49:37:f8:fc:60:7d:5e:
         fa:ff:64:a5:14:f0:49:3f:c6:33:98:ec:b6:c9:fb:d2:b2:3f:
         90:34:1e:fb:a9:64:aa:95:88:a8:1d:5f:40:e1:56:a4:40:59:
         f4:36:2d:c7:76:02:e4:e4:b7:fd:54:ba:8c:65:62:b7:41:37:
         f0:9a:ff:97:c5:79:76:ac:05:8d:c6:0a:16:f2:23:54:ce:1a:
         c2:b7:25:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 07:13:34 2025 by rpki-client