This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/757e6878-6cb2-4a5f-b553-bceb2c95c76c/0/EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1.mft
File:                     EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1.mft (raw, json)
Hash identifier:          PHQLj+u/xxwE6o6m2TeYqjf9eDSQ8uKY9e7d52XKBaU=
Subject key identifier:   D0:5C:F8:D1:4C:E5:BE:7A:EE:21:FA:16:6F:03:29:65:E7:F3:E6:B9
Authority key identifier: EE:72:DE:38:4F:9A:B7:FA:D6:C3:B2:86:3A:5D:B1:28:1E:5E:DC:A1
Certificate issuer:       /CN=EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1
Certificate serial:       7FF67444DE24274C70D4681157BC81FA17B44ABA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/757e6878-6cb2-4a5f-b553-bceb2c95c76c/0/EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1.mft
Manifest number:          0164
Signing time:             Sat 24 Jan 2026 08:20:43 +0000
Manifest this update:     Sat 24 Jan 2026 08:15:43 +0000
Manifest next update:     Tue 27 Jan 2026 11:07:43 +0000
Files and hashes:         1: EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1.crl (hash: 2U3aLue7rEOJvLKF7QEv1GFiPufihsWGIwXG60P5Q40=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/757e6878-6cb2-4a5f-b553-bceb2c95c76c/0/EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1.crl
                          rsync://repo-rpki.idnic.net/repo/757e6878-6cb2-4a5f-b553-bceb2c95c76c/0/EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Jan 2026 11:07:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:f6:74:44:de:24:27:4c:70:d4:68:11:57:bc:81:fa:17:b4:4a:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1
        Validity
            Not Before: Jan 24 08:15:43 2026 GMT
            Not After : Jan 27 11:07:43 2026 GMT
        Subject: CN=D05CF8D14CE5BE7AEE21FA166F032965E7F3E6B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:bd:e3:50:72:89:a4:83:42:10:b1:62:db:90:
                    40:03:89:e1:15:f2:ee:80:39:17:6a:1f:34:bc:16:
                    1d:55:df:31:07:4a:77:fe:1c:02:a2:8f:91:de:64:
                    65:39:5a:dc:23:01:74:1b:dd:c9:3c:ab:70:e9:48:
                    de:17:52:51:85:27:45:d4:57:06:d3:3a:6d:67:ee:
                    e7:52:59:9b:6e:5f:3a:62:d5:39:09:e6:0c:d6:f9:
                    6d:73:b6:ad:1c:64:a9:d1:dd:54:8d:e1:9d:fd:1a:
                    52:d6:e8:29:a7:1b:a3:c4:f8:a5:6d:89:68:42:c3:
                    61:8c:48:ec:a9:a3:6c:1c:67:26:61:23:45:d1:a0:
                    64:d0:7a:d0:32:71:6c:ae:bd:09:2e:79:b6:62:17:
                    96:04:5e:f2:26:14:cd:71:bb:d5:e9:9a:59:43:b8:
                    7a:b1:13:18:e8:28:f5:89:54:bf:12:c9:33:c4:3d:
                    ae:fa:f0:96:f2:60:43:aa:74:70:98:89:fb:a8:b8:
                    9c:f7:46:b2:7f:fc:48:dc:80:22:bd:3d:e8:22:1c:
                    76:3c:39:69:a7:4c:fb:21:46:79:2b:86:ed:d9:74:
                    8a:90:bb:ab:1e:68:2f:6f:48:c3:d8:3e:01:a2:d0:
                    95:a0:aa:ce:9f:e7:99:d6:30:22:5c:4a:ac:29:6b:
                    af:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:5C:F8:D1:4C:E5:BE:7A:EE:21:FA:16:6F:03:29:65:E7:F3:E6:B9
            X509v3 Authority Key Identifier:
                keyid:EE:72:DE:38:4F:9A:B7:FA:D6:C3:B2:86:3A:5D:B1:28:1E:5E:DC:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/757e6878-6cb2-4a5f-b553-bceb2c95c76c/0/EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/757e6878-6cb2-4a5f-b553-bceb2c95c76c/0/EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:40:80:0e:90:ea:d8:5d:97:62:c5:46:1a:72:d6:cd:08:e3:
         e1:b8:22:dd:19:2e:f1:f7:af:6e:67:7c:21:ce:10:d9:d8:9c:
         07:66:cc:4d:fe:1f:39:a8:c8:5d:8d:52:25:44:c7:8d:e0:39:
         1a:03:40:19:19:e4:23:20:09:8b:12:68:b0:d4:7d:e2:aa:cd:
         7a:24:ef:e7:ea:18:5c:4a:79:7f:14:87:ee:b0:95:bd:6b:90:
         2a:62:ec:f2:85:a0:c8:89:f8:cb:ce:ed:52:0c:5b:a4:91:f9:
         44:e7:01:85:b2:8b:d6:ed:dc:b4:db:1f:d4:42:c9:df:c9:0f:
         56:ee:c8:52:27:61:58:2b:b1:ec:ec:47:ca:10:e3:07:db:16:
         85:72:dd:d2:a9:64:ac:a0:4b:df:a1:47:ae:a8:e4:16:37:d0:
         51:b7:af:10:91:29:c3:a5:2d:88:ae:aa:8d:fe:36:98:bf:26:
         4b:a2:68:97:58:3b:71:b1:b3:7e:7a:a0:ba:4d:b6:19:bd:10:
         2d:2c:08:61:6c:a2:e7:4b:c3:c9:18:00:69:f0:a4:5f:af:51:
         09:c8:db:8d:76:e4:3e:a9:ce:af:ef:e2:2a:d0:ea:da:cd:ab:
         ef:b3:3e:a1:24:32:c5:d8:c5:27:35:29:b7:76:fd:c8:5b:72:
         7f:6d:d3:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:12:43 2026 by rpki-client