This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/ce4e103e-3d78-4ae0-9ba4-d1792ffa04ac/0/EB6A398D686553919657E094022E843191F4573E.mft
File:                     EB6A398D686553919657E094022E843191F4573E.mft (raw, json)
Hash identifier:          /kfxxatj/rnirJx8aAi9VWFjtwR6U60fAi8wGop3mCQ=
Subject key identifier:   B7:94:35:AC:69:33:31:D3:A4:D9:54:F4:DC:C2:E1:6E:66:FB:51:0E
Authority key identifier: EB:6A:39:8D:68:65:53:91:96:57:E0:94:02:2E:84:31:91:F4:57:3E
Certificate issuer:       /CN=EB6A398D686553919657E094022E843191F4573E
Certificate serial:       76E8224F822080566BC0EE5AB2A9318F4F9E00C7
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EB6A398D686553919657E094022E843191F4573E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ce4e103e-3d78-4ae0-9ba4-d1792ffa04ac/0/EB6A398D686553919657E094022E843191F4573E.mft
Manifest number:          026A
Signing time:             Mon 15 Dec 2025 14:41:55 +0000
Manifest this update:     Mon 15 Dec 2025 14:36:55 +0000
Manifest next update:     Fri 19 Dec 2025 00:39:55 +0000
Files and hashes:         1: EB6A398D686553919657E094022E843191F4573E.crl (hash: GsG8cqrlLXvnLz3KtO/gsANbwIOmccqNzdYHdIyyXnw=)
                          2: 3130332e3138312e3234382e302f32332d3234203d3e20313439343030.roa (hash: sKkJQmxuHQRpbOu7tarZjRh6SYZHx7wMO0xOOxar2Ro=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ce4e103e-3d78-4ae0-9ba4-d1792ffa04ac/0/EB6A398D686553919657E094022E843191F4573E.crl
                          rsync://repo-rpki.idnic.net/repo/ce4e103e-3d78-4ae0-9ba4-d1792ffa04ac/0/EB6A398D686553919657E094022E843191F4573E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EB6A398D686553919657E094022E843191F4573E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Dec 2025 00:39:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:e8:22:4f:82:20:80:56:6b:c0:ee:5a:b2:a9:31:8f:4f:9e:00:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB6A398D686553919657E094022E843191F4573E
        Validity
            Not Before: Dec 15 14:36:55 2025 GMT
            Not After : Dec 19 00:39:55 2025 GMT
        Subject: CN=B79435AC693331D3A4D954F4DCC2E16E66FB510E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:18:21:30:bb:c7:a2:e7:60:38:7f:72:c6:b7:
                    ea:00:e7:6f:6e:25:a8:50:1b:7b:93:77:2f:f3:a6:
                    e9:0b:b3:ee:a2:19:b7:58:e4:a9:34:25:ca:e8:31:
                    d4:e6:bd:c7:ae:96:6c:f3:67:99:19:10:9a:dc:e3:
                    7d:91:2a:7b:66:00:40:6f:14:af:ca:21:46:b7:8d:
                    01:9b:ec:13:dc:58:7e:a4:5d:66:20:67:d0:1d:a5:
                    c0:b9:d2:e1:89:81:df:c3:21:45:90:fe:f0:c7:7f:
                    17:30:6e:d6:f6:29:66:e8:37:bc:58:e9:32:1d:2d:
                    ce:5f:27:cf:ee:0f:4a:18:1d:96:d1:a4:91:49:7e:
                    91:b4:31:c2:be:aa:ed:79:c3:a2:8b:e5:04:e7:42:
                    c3:11:9a:09:e4:ac:17:f2:b9:1b:74:49:ac:54:b6:
                    b3:cd:76:96:9c:18:ed:69:44:04:d0:48:1b:0e:8a:
                    45:5d:dc:db:49:2f:1a:c8:8e:e0:ac:6d:e1:4b:e0:
                    59:77:57:f4:b8:c4:a4:a6:d7:92:45:0d:a7:e0:80:
                    03:1f:ea:36:0c:72:0b:07:cd:22:e2:da:86:b7:22:
                    55:9b:41:4a:02:bc:59:10:4a:1d:a8:ff:af:ca:54:
                    1d:eb:12:93:38:85:66:0c:f6:c7:46:a9:de:43:ad:
                    72:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:94:35:AC:69:33:31:D3:A4:D9:54:F4:DC:C2:E1:6E:66:FB:51:0E
            X509v3 Authority Key Identifier:
                keyid:EB:6A:39:8D:68:65:53:91:96:57:E0:94:02:2E:84:31:91:F4:57:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ce4e103e-3d78-4ae0-9ba4-d1792ffa04ac/0/EB6A398D686553919657E094022E843191F4573E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EB6A398D686553919657E094022E843191F4573E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ce4e103e-3d78-4ae0-9ba4-d1792ffa04ac/0/EB6A398D686553919657E094022E843191F4573E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:9a:cc:d6:be:5d:28:9b:8c:94:82:5e:52:50:a8:72:53:5f:
         1a:d8:d5:e1:d7:8f:12:ce:84:93:33:bb:1e:1d:4a:2a:0d:4d:
         24:ce:cd:25:ca:79:9d:c7:35:7e:17:bf:41:f9:1a:e5:b4:f4:
         9b:74:86:1e:80:6f:f4:6e:19:a8:00:0d:d9:d5:cf:c7:ff:bc:
         d3:df:13:a9:2f:bd:02:01:20:31:61:eb:fd:ad:46:39:a8:68:
         17:15:4f:8d:c1:73:c6:ed:2f:51:4f:4d:01:79:d5:72:47:f6:
         0e:76:15:16:1e:8a:fa:51:f4:13:63:79:66:d8:a2:96:63:8f:
         e4:eb:fb:96:74:f8:5a:dd:59:ed:08:28:f7:6e:a5:2b:43:16:
         44:0c:13:86:d7:51:47:c8:94:1b:82:03:3e:3f:41:67:71:d5:
         fe:12:e5:d6:6e:41:f1:fa:59:4d:ff:dc:23:34:65:db:5c:f3:
         da:86:f8:c0:e2:c7:91:43:5b:92:8a:1c:db:d0:56:56:1a:44:
         1a:7a:89:33:6f:b6:fd:0e:49:77:fc:d1:f0:13:cf:62:42:de:
         22:c8:0b:e8:45:59:05:94:89:9c:08:21:a3:ff:69:3d:e1:52:
         f9:9e:10:26:14:8d:62:42:b1:f6:6b:ea:66:d7:1a:8d:28:c6:
         21:dc:ec:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 19:15:41 2025 by rpki-client