This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/56031fd0-5840-4ac1-bfb1-35f71fd2404c/0/EED8A9475E4020DA0F2BEF589D15102EB06B658F.mft
File:                     EED8A9475E4020DA0F2BEF589D15102EB06B658F.mft (raw, json)
Hash identifier:          lsP5r/QNRHiN7iUlhA7l2kjMxMW6q7tiMRN1HBRWFJc=
Subject key identifier:   8B:61:CD:66:A8:79:4E:DE:56:A2:EB:51:4F:F9:64:AB:48:DA:10:AB
Authority key identifier: EE:D8:A9:47:5E:40:20:DA:0F:2B:EF:58:9D:15:10:2E:B0:6B:65:8F
Certificate issuer:       /CN=EED8A9475E4020DA0F2BEF589D15102EB06B658F
Certificate serial:       257CF135623F527DDE0321C011B56A4F61983BD7
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EED8A9475E4020DA0F2BEF589D15102EB06B658F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/56031fd0-5840-4ac1-bfb1-35f71fd2404c/0/EED8A9475E4020DA0F2BEF589D15102EB06B658F.mft
Manifest number:          0543
Signing time:             Sun 25 Jan 2026 05:10:47 +0000
Manifest this update:     Sun 25 Jan 2026 05:05:47 +0000
Manifest next update:     Wed 28 Jan 2026 12:47:47 +0000
Files and hashes:         1: EED8A9475E4020DA0F2BEF589D15102EB06B658F.crl (hash: sFjd2fWFVTNlL9XxPwKg7OHyCHYCZwFiuuDitvDUwYM=)
                          2: 3130332e37392e39312e302f32342d3234203d3e203634333035.roa (hash: mguZPFd0yEF7BbBBd2+SDugjtQLZV2wjK9kQOQsORjM=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/56031fd0-5840-4ac1-bfb1-35f71fd2404c/0/EED8A9475E4020DA0F2BEF589D15102EB06B658F.crl
                          rsync://repo-rpki.idnic.net/repo/56031fd0-5840-4ac1-bfb1-35f71fd2404c/0/EED8A9475E4020DA0F2BEF589D15102EB06B658F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EED8A9475E4020DA0F2BEF589D15102EB06B658F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Jan 2026 12:47:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:7c:f1:35:62:3f:52:7d:de:03:21:c0:11:b5:6a:4f:61:98:3b:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EED8A9475E4020DA0F2BEF589D15102EB06B658F
        Validity
            Not Before: Jan 25 05:05:47 2026 GMT
            Not After : Jan 28 12:47:47 2026 GMT
        Subject: CN=8B61CD66A8794EDE56A2EB514FF964AB48DA10AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:67:ad:5f:7c:d8:c6:08:74:1f:f4:a0:aa:e2:
                    9a:88:bf:50:13:9e:21:a7:63:cd:60:5a:cd:ab:fe:
                    22:b6:b7:0b:96:ae:f9:ca:dc:56:32:ca:70:04:a5:
                    62:ba:a0:82:bc:17:58:97:cf:7f:48:a8:59:97:c2:
                    fb:21:5e:29:7e:1c:c9:a6:59:14:64:a7:3c:7b:4e:
                    b4:52:29:69:23:7d:5d:78:cf:c9:7f:0a:0b:79:bf:
                    98:94:34:57:d9:6d:48:78:28:73:21:77:d2:8a:22:
                    96:77:98:7d:5d:0d:d4:33:07:09:78:5c:b6:f4:b4:
                    ca:a8:cb:02:3f:1d:44:51:73:f1:ac:a0:1f:85:6f:
                    c1:11:a7:44:50:ff:f5:8c:fc:72:0b:be:97:87:fd:
                    0d:d2:22:de:2a:b1:60:d5:15:ae:df:d1:07:50:cc:
                    a5:f8:b7:d7:63:9e:7c:06:8b:ef:0b:11:5f:7d:94:
                    39:b9:13:2e:0b:d2:a8:19:57:e3:66:4b:fe:ed:db:
                    56:bf:7c:1d:e7:fb:50:1a:1d:65:7a:91:16:93:01:
                    89:b3:ad:ae:6c:e9:00:7b:66:28:cf:b5:04:ef:59:
                    2d:cb:90:7b:8d:39:75:7f:9d:12:47:57:39:fa:b4:
                    b6:ab:e5:cd:59:b8:76:43:0b:95:aa:bf:ed:19:23:
                    80:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:61:CD:66:A8:79:4E:DE:56:A2:EB:51:4F:F9:64:AB:48:DA:10:AB
            X509v3 Authority Key Identifier:
                keyid:EE:D8:A9:47:5E:40:20:DA:0F:2B:EF:58:9D:15:10:2E:B0:6B:65:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/56031fd0-5840-4ac1-bfb1-35f71fd2404c/0/EED8A9475E4020DA0F2BEF589D15102EB06B658F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EED8A9475E4020DA0F2BEF589D15102EB06B658F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/56031fd0-5840-4ac1-bfb1-35f71fd2404c/0/EED8A9475E4020DA0F2BEF589D15102EB06B658F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:c3:70:13:17:40:68:32:33:d1:7c:40:23:9d:93:c9:1f:d6:
         6d:7b:a3:aa:4b:eb:93:7a:49:e9:87:a2:68:49:08:58:c3:62:
         23:89:9c:13:c6:23:85:4c:13:ff:81:9c:e2:6b:ff:ad:9b:78:
         b3:8f:af:b0:85:e0:61:34:99:ca:20:55:25:e5:82:28:79:41:
         35:a5:2e:e3:34:e8:03:14:bb:11:83:3c:20:e9:a0:92:09:64:
         b1:ce:a4:02:e1:97:9a:64:87:90:9e:e4:79:be:5f:d5:92:7a:
         33:ed:f0:eb:85:8f:7a:ee:5f:3c:d5:ba:83:e6:fe:90:f3:c4:
         71:6b:3d:0a:e5:a6:40:56:d3:7e:a4:12:81:bb:a5:9f:05:bc:
         63:d7:56:0d:43:81:9b:8d:fa:36:a9:4e:cf:ed:5a:92:97:81:
         20:0f:3c:9f:14:ee:be:0e:9f:56:e6:ce:6f:5d:b2:71:c2:fc:
         71:0c:da:5f:08:ff:fe:ed:d2:6c:11:05:f6:2e:b3:4c:74:4c:
         db:03:88:57:6f:7b:55:15:1e:12:31:79:14:78:4d:25:3b:ae:
         47:0e:84:db:00:5f:0e:1f:79:50:b7:9e:5a:17:fe:ba:19:ee:
         5c:01:38:63:5e:4a:95:6e:59:46:03:ba:b5:3c:f9:ec:4f:79:
         f0:c6:7e:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:58:33 2026 by rpki-client