This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/a0d1f4ce-169b-431a-8286-c5f3a07bbbe3/0/EE12F179A5D1F52EC033677282AE7E2E72E0F2C3.mft
File:                     EE12F179A5D1F52EC033677282AE7E2E72E0F2C3.mft (raw, json)
Hash identifier:          N3xdxG3imCWI24tDjVNdw47J83c14szI/N8yYFJIta0=
Subject key identifier:   E7:78:6D:25:5C:48:FC:2A:FB:9A:37:3F:91:41:BC:4F:18:F7:78:0F
Authority key identifier: EE:12:F1:79:A5:D1:F5:2E:C0:33:67:72:82:AE:7E:2E:72:E0:F2:C3
Certificate issuer:       /CN=EE12F179A5D1F52EC033677282AE7E2E72E0F2C3
Certificate serial:       337E04369E17E40FF45BC2AFDF81D8FA0B02BAB0
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EE12F179A5D1F52EC033677282AE7E2E72E0F2C3.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a0d1f4ce-169b-431a-8286-c5f3a07bbbe3/0/EE12F179A5D1F52EC033677282AE7E2E72E0F2C3.mft
Manifest number:          01AE
Signing time:             Sun 25 Jan 2026 11:41:24 +0000
Manifest this update:     Sun 25 Jan 2026 11:36:24 +0000
Manifest next update:     Wed 28 Jan 2026 21:11:24 +0000
Files and hashes:         1: 3130332e38352e35322e302f32342d3234203d3e20313530353535.roa (hash: kUp7KI2fPhlmcspldsUBOsyjkjUvmMSaheteN59dWW0=)
                          2: 3130332e38352e35322e302f32332d3233203d3e20313530353535.roa (hash: +9CDenNH43oJ9XkYbEWMdjfmnpMvrt7QWdKjYHPJebM=)
                          3: EE12F179A5D1F52EC033677282AE7E2E72E0F2C3.crl (hash: OJRspJW+Oc9EJ3j5wsIMljJ2MsJPtnrZFC+E8T+4hfA=)
                          4: 3130332e38352e35332e302f32342d3234203d3e20313530353535.roa (hash: mZAxTr3skSw5Z8e7tPmU/OrFl4lSut1UK4pgkxrw8Us=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a0d1f4ce-169b-431a-8286-c5f3a07bbbe3/0/EE12F179A5D1F52EC033677282AE7E2E72E0F2C3.crl
                          rsync://repo-rpki.idnic.net/repo/a0d1f4ce-169b-431a-8286-c5f3a07bbbe3/0/EE12F179A5D1F52EC033677282AE7E2E72E0F2C3.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EE12F179A5D1F52EC033677282AE7E2E72E0F2C3.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Jan 2026 14:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:7e:04:36:9e:17:e4:0f:f4:5b:c2:af:df:81:d8:fa:0b:02:ba:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE12F179A5D1F52EC033677282AE7E2E72E0F2C3
        Validity
            Not Before: Jan 25 11:36:24 2026 GMT
            Not After : Jan 28 21:11:24 2026 GMT
        Subject: CN=E7786D255C48FC2AFB9A373F9141BC4F18F7780F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:0d:11:5c:27:b7:7c:b9:de:0b:84:ec:1e:18:
                    6f:44:f1:ff:4c:90:e5:00:66:9a:e0:5b:fc:e3:69:
                    62:c4:c3:bd:98:7c:81:f1:41:99:31:8c:50:22:ca:
                    00:17:ae:11:02:8e:5b:0c:db:fa:4e:0f:8c:b7:90:
                    e6:80:0c:70:de:41:a2:d9:96:f1:23:4b:be:b6:be:
                    32:73:4f:f8:15:66:74:db:49:ce:19:46:26:03:36:
                    99:44:48:78:d0:2b:fc:a9:46:88:8b:39:ff:5d:f6:
                    ff:39:f5:ae:b9:d3:d0:7b:1b:08:02:0a:8d:cd:3d:
                    a6:5a:ec:d6:95:6f:2b:d2:c7:97:db:98:84:51:85:
                    ac:89:77:84:05:78:dc:da:3e:d2:e4:03:85:b4:55:
                    e7:1f:fe:dd:00:c2:31:0e:8f:a3:42:60:6b:8c:0c:
                    f3:7f:e0:39:cf:64:b2:59:ad:f6:44:43:67:da:fe:
                    66:90:eb:34:c5:9f:58:8f:4b:05:bb:74:2a:e8:54:
                    d3:e1:92:10:64:28:1b:3f:e8:05:b1:a8:fc:6e:35:
                    4c:45:f5:ba:60:fb:64:02:8e:f8:17:09:6a:46:f2:
                    dd:ba:7c:58:b4:83:29:eb:46:52:ea:82:37:0b:07:
                    2b:ee:e3:23:0d:77:3c:f1:99:f5:36:d7:92:24:5c:
                    e5:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:78:6D:25:5C:48:FC:2A:FB:9A:37:3F:91:41:BC:4F:18:F7:78:0F
            X509v3 Authority Key Identifier:
                keyid:EE:12:F1:79:A5:D1:F5:2E:C0:33:67:72:82:AE:7E:2E:72:E0:F2:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a0d1f4ce-169b-431a-8286-c5f3a07bbbe3/0/EE12F179A5D1F52EC033677282AE7E2E72E0F2C3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EE12F179A5D1F52EC033677282AE7E2E72E0F2C3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a0d1f4ce-169b-431a-8286-c5f3a07bbbe3/0/EE12F179A5D1F52EC033677282AE7E2E72E0F2C3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:1e:8a:fe:a7:80:86:71:70:62:ae:4b:b1:ec:9e:f3:5c:bd:
         d4:9e:6c:f0:5b:51:e9:85:31:bc:86:0a:b1:f4:e9:cf:99:fd:
         10:81:eb:ea:52:28:34:d7:0d:52:1d:26:fc:39:30:3b:82:90:
         41:d0:c4:37:0b:72:a7:40:b9:85:ec:ee:1b:f2:62:53:c7:83:
         33:db:d6:a1:a0:8d:76:52:5a:91:9b:68:06:07:66:1e:ce:c2:
         6a:c3:51:dd:d5:1c:bc:05:51:16:f6:8c:d1:ef:f2:7c:29:d1:
         47:58:41:c8:0e:90:f9:d2:2f:5a:95:3d:51:00:a2:b0:07:f6:
         3f:72:8c:1f:8e:4a:24:ad:2f:03:e9:bc:65:1f:a9:12:f6:02:
         2c:cb:49:1c:98:d9:5c:7e:07:10:b3:1d:0c:91:6b:dd:84:dc:
         a7:75:78:55:b1:17:df:cf:f1:f1:30:26:8b:ef:05:13:b5:94:
         7d:be:ec:6e:14:50:40:c4:33:5f:ba:ea:18:84:d2:12:70:ff:
         61:41:90:f9:c9:b7:86:62:ac:95:c2:ab:5c:d4:4a:3c:30:42:
         06:2b:e8:8f:bf:62:d8:31:48:aa:da:68:37:5f:c8:09:8f:bc:
         e7:67:e3:cf:53:ac:63:73:02:b2:3a:d4:b4:d7:6b:c8:99:f3:
         fb:71:e0:c4
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUM34ENp4X5A/0W8Kv34HY+gsCurAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUUxMkYxNzlBNUQxRjUyRUMwMzM2NzcyODJBRTdFMkU3
MkUwRjJDMzAeFw0yNjAxMjUxMTM2MjRaFw0yNjAxMjgyMTExMjRaMDMxMTAvBgNV
BAMTKEU3Nzg2RDI1NUM0OEZDMkFGQjlBMzczRjkxNDFCQzRGMThGNzc4MEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkDRFcJ7d8ud4LhOweGG9E8f9M
kOUAZprgW/zjaWLEw72YfIHxQZkxjFAiygAXrhECjlsM2/pOD4y3kOaADHDeQaLZ
lvEjS762vjJzT/gVZnTbSc4ZRiYDNplESHjQK/ypRoiLOf9d9v859a6509B7GwgC
Co3NPaZa7NaVbyvSx5fbmIRRhayJd4QFeNzaPtLkA4W0Vecf/t0AwjEOj6NCYGuM
DPN/4DnPZLJZrfZEQ2fa/maQ6zTFn1iPSwW7dCroVNPhkhBkKBs/6AWxqPxuNUxF
9bpg+2QCjvgXCWpG8t26fFi0gynrRlLqgjcLByvu4yMNdzzxmfU215IkXOWZAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU53htJVxI/Cr7mjc/kUG8Txj3eA8wHwYDVR0j
BBgwFoAU7hLxeaXR9S7AM2dygq5+LnLg8sMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
MGQxZjRjZS0xNjliLTQzMWEtODI4Ni1jNWYzYTA3YmJiZTMvMC9FRTEyRjE3OUE1
RDFGNTJFQzAzMzY3NzI4MkFFN0UyRTcyRTBGMkMzLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRUUxMkYxNzlBNUQxRjUyRUMwMzM2NzcyODJBRTdFMkU3MkUw
RjJDMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTBkMWY0Y2UtMTY5Yi00MzFhLTgy
ODYtYzVmM2EwN2JiYmUzLzAvRUUxMkYxNzlBNUQxRjUyRUMwMzM2NzcyODJBRTdF
MkU3MkUwRjJDMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAFEeiv6ngIZxcGKuS7HsnvNcvdSebPBbUemF
MbyGCrH06c+Z/RCB6+pSKDTXDVIdJvw5MDuCkEHQxDcLcqdAuYXs7hvyYlPHgzPb
1qGgjXZSWpGbaAYHZh7OwmrDUd3VHLwFURb2jNHv8nwp0UdYQcgOkPnSL1qVPVEA
orAH9j9yjB+OSiStLwPpvGUfqRL2AizLSRyY2Vx+BxCzHQyRa92E3Kd1eFWxF9/P
8fEwJovvBRO1lH2+7G4UUEDEM1+66hiE0hJw/2FBkPnJt4ZirJXCq1zUSjwwQgYr
6I+/YtgxSKraaDdfyAmPvOdn489TrGNzArI61LTXa8iZ8/tx4MQ=
-----END CERTIFICATE-----
Generated at Mon Jan 26 01:11:28 2026 by rpki-client