This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/543cc6a8-e7aa-4f37-bd08-f2eb57e88736/0/EFBA99D11F5C07B48EC639EB1119AB525D8050AF.mft
File:                     EFBA99D11F5C07B48EC639EB1119AB525D8050AF.mft (raw, json)
Hash identifier:          82KtqCiYBV3DZH++AKykQScg/Hxd0gAcMvYr5HkvWs4=
Subject key identifier:   09:7C:CA:11:AA:BD:85:E8:C0:2E:4C:CA:BF:1A:6B:E2:68:90:4F:60
Authority key identifier: EF:BA:99:D1:1F:5C:07:B4:8E:C6:39:EB:11:19:AB:52:5D:80:50:AF
Certificate issuer:       /CN=EFBA99D11F5C07B48EC639EB1119AB525D8050AF
Certificate serial:       1352E6FA026ED5B2AF2C72270E79AF8AA3725D10
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFBA99D11F5C07B48EC639EB1119AB525D8050AF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/543cc6a8-e7aa-4f37-bd08-f2eb57e88736/0/EFBA99D11F5C07B48EC639EB1119AB525D8050AF.mft
Manifest number:          0169
Signing time:             Sat 24 Jan 2026 08:32:05 +0000
Manifest this update:     Sat 24 Jan 2026 08:27:05 +0000
Manifest next update:     Tue 27 Jan 2026 16:44:05 +0000
Files and hashes:         1: EFBA99D11F5C07B48EC639EB1119AB525D8050AF.crl (hash: y9GCQ7xoD6HnARGdmA+H0A9v2WTFfQ3Y5ao0ZheZtvU=)
                          2: 3130332e3136362e3132322e302f32332d3233203d3e20313431393435.roa (hash: C7+rbLPo0B/cgVSkvwAdhCUpa719Bxq+aRwWMlLdIX8=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/543cc6a8-e7aa-4f37-bd08-f2eb57e88736/0/EFBA99D11F5C07B48EC639EB1119AB525D8050AF.crl
                          rsync://repo-rpki.idnic.net/repo/543cc6a8-e7aa-4f37-bd08-f2eb57e88736/0/EFBA99D11F5C07B48EC639EB1119AB525D8050AF.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFBA99D11F5C07B48EC639EB1119AB525D8050AF.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Jan 2026 16:44:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:52:e6:fa:02:6e:d5:b2:af:2c:72:27:0e:79:af:8a:a3:72:5d:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EFBA99D11F5C07B48EC639EB1119AB525D8050AF
        Validity
            Not Before: Jan 24 08:27:05 2026 GMT
            Not After : Jan 27 16:44:05 2026 GMT
        Subject: CN=097CCA11AABD85E8C02E4CCABF1A6BE268904F60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:8e:9c:4b:f9:74:4e:94:94:d8:4e:02:49:46:
                    07:5a:9c:aa:c2:5b:7e:1e:ca:6d:89:f5:c4:00:9a:
                    e9:b8:20:2c:d5:c3:eb:0c:5d:37:49:1f:a9:62:a2:
                    64:82:ff:48:36:a0:6e:be:a9:d4:a5:58:f4:63:57:
                    bb:ba:04:29:53:ee:90:f5:c9:58:26:c4:27:80:67:
                    cb:cf:09:e0:08:0e:4b:85:1a:e0:1a:49:ce:53:62:
                    1c:a3:7e:05:79:71:26:48:fb:84:77:49:91:e7:b5:
                    8d:2e:17:be:a0:2f:04:91:11:d5:a2:37:bc:89:70:
                    b6:eb:bf:05:be:55:7a:0b:ff:38:2b:a3:56:66:fe:
                    56:13:5d:3f:b1:96:de:79:1f:4d:49:31:78:8a:78:
                    36:b0:b2:30:26:84:21:45:61:7a:66:e1:5f:fd:65:
                    85:65:dc:66:31:85:33:e4:a0:66:c6:e8:39:c2:db:
                    5d:87:1d:57:9e:a3:88:1f:b4:e7:17:5f:f7:5e:97:
                    09:56:43:1f:e1:c7:8e:99:25:f7:8d:f7:20:61:26:
                    db:76:f8:24:2d:18:c4:f8:82:e2:e5:d0:ec:7f:35:
                    31:3e:16:9a:f6:4c:9f:a4:a5:83:ea:0c:d7:65:d8:
                    37:d7:9c:80:d2:d9:6c:ba:b5:9f:d1:76:ac:04:ca:
                    19:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:7C:CA:11:AA:BD:85:E8:C0:2E:4C:CA:BF:1A:6B:E2:68:90:4F:60
            X509v3 Authority Key Identifier:
                keyid:EF:BA:99:D1:1F:5C:07:B4:8E:C6:39:EB:11:19:AB:52:5D:80:50:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/543cc6a8-e7aa-4f37-bd08-f2eb57e88736/0/EFBA99D11F5C07B48EC639EB1119AB525D8050AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFBA99D11F5C07B48EC639EB1119AB525D8050AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/543cc6a8-e7aa-4f37-bd08-f2eb57e88736/0/EFBA99D11F5C07B48EC639EB1119AB525D8050AF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:69:af:fd:1e:79:26:38:5a:fc:9c:70:3a:65:e8:50:cc:50:
         01:ae:6e:5e:00:b8:30:0f:8f:02:c5:ca:ab:c2:e3:15:99:93:
         42:da:fa:4f:c0:44:1c:16:df:4b:e2:48:ad:d6:24:be:40:c8:
         8a:f9:b1:4a:9e:d2:64:b9:d8:41:ac:af:2a:2f:bd:cf:4a:0f:
         aa:47:0e:50:a2:77:06:d7:e4:e7:75:93:0e:15:a4:cf:fe:88:
         f7:fb:ad:10:17:d4:ed:c9:51:72:ad:08:da:33:30:f9:d5:8f:
         8d:2f:f6:75:ad:54:90:c8:05:2e:24:96:1c:54:fe:7e:42:63:
         c2:d6:76:eb:e0:cd:69:fb:fc:d4:17:df:d7:0a:b6:34:45:02:
         07:78:c5:d1:c3:0b:87:f4:46:17:c4:e8:8b:14:73:5d:7e:3b:
         7f:bd:eb:56:ea:11:66:03:19:2f:b4:06:71:1b:f5:11:be:0e:
         ea:f6:b6:d4:c1:bf:0d:ae:30:87:fb:9d:9e:58:46:2b:ff:e9:
         f3:f8:5b:f2:7e:e1:e2:aa:f5:3f:d4:0a:e1:7b:92:e8:13:22:
         4c:52:d0:d1:26:81:99:fa:dc:fe:d9:e9:03:a9:d4:37:78:bf:
         6e:f1:6a:27:08:af:d5:d3:0e:02:74:8b:6c:4c:2b:05:8b:2d:
         3e:91:18:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:32:29 2026 by rpki-client