This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/fe1cbd79-8f26-4b0e-8b3b-ab9e9938fcae/0/EC973BE13EF324E7D59046CF7690A12F9DF12932.mft
File:                     EC973BE13EF324E7D59046CF7690A12F9DF12932.mft (raw, json)
Hash identifier:          jc8sEEDy8RrXHXc3chbyTSLegy3/VEKQbm/K7EPefag=
Subject key identifier:   68:29:F7:4E:1A:97:31:FF:13:A1:8E:34:84:3E:97:1E:40:5E:5A:DB
Authority key identifier: EC:97:3B:E1:3E:F3:24:E7:D5:90:46:CF:76:90:A1:2F:9D:F1:29:32
Certificate issuer:       /CN=EC973BE13EF324E7D59046CF7690A12F9DF12932
Certificate serial:       0E33206327A9724608A858BAAC4248D3ADC723B6
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC973BE13EF324E7D59046CF7690A12F9DF12932.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/fe1cbd79-8f26-4b0e-8b3b-ab9e9938fcae/0/EC973BE13EF324E7D59046CF7690A12F9DF12932.mft
Manifest number:          0285
Signing time:             Sun 25 Jan 2026 02:31:23 +0000
Manifest this update:     Sun 25 Jan 2026 02:26:23 +0000
Manifest next update:     Wed 28 Jan 2026 07:58:23 +0000
Files and hashes:         1: 3130332e3138312e37362e302f32342d3234203d3e20313439333739.roa (hash: Fd7yVNtVPCM6piUfSXh9X3JKHqUDZdjbopzWmm3ObMk=)
                          2: EC973BE13EF324E7D59046CF7690A12F9DF12932.crl (hash: A9KHv6f+++ycSoZ9o3uKFiPLxxOsopM5DKmPIhyjFT0=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/fe1cbd79-8f26-4b0e-8b3b-ab9e9938fcae/0/EC973BE13EF324E7D59046CF7690A12F9DF12932.crl
                          rsync://repo-rpki.idnic.net/repo/fe1cbd79-8f26-4b0e-8b3b-ab9e9938fcae/0/EC973BE13EF324E7D59046CF7690A12F9DF12932.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC973BE13EF324E7D59046CF7690A12F9DF12932.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Jan 2026 07:58:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:33:20:63:27:a9:72:46:08:a8:58:ba:ac:42:48:d3:ad:c7:23:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC973BE13EF324E7D59046CF7690A12F9DF12932
        Validity
            Not Before: Jan 25 02:26:23 2026 GMT
            Not After : Jan 28 07:58:23 2026 GMT
        Subject: CN=6829F74E1A9731FF13A18E34843E971E405E5ADB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:26:55:07:81:55:ba:80:11:02:75:0a:29:38:
                    b0:56:97:4c:f3:7f:d4:5d:16:f5:b0:e9:67:23:9f:
                    ef:89:45:f2:83:8d:5a:07:67:91:b0:ba:60:ed:40:
                    e8:b3:eb:75:74:23:49:62:a4:f3:93:be:88:38:01:
                    df:85:8a:70:7a:c3:31:f3:56:30:58:c4:46:dd:0f:
                    5e:9d:19:96:c2:a2:8e:35:1c:21:26:56:36:58:90:
                    47:af:91:35:8c:c0:c4:93:46:49:45:2c:4c:d6:f2:
                    61:31:7d:9d:5d:95:f1:1b:4c:77:0d:3b:f8:72:9e:
                    10:4a:b3:aa:05:c2:0f:d6:fe:aa:d6:1c:03:a3:22:
                    44:52:37:d2:ed:e4:d8:5b:47:ac:f7:d5:9c:cf:1d:
                    67:53:71:12:a9:7f:b0:90:05:2c:dd:92:b3:f7:1a:
                    9c:7d:8a:ec:ae:04:59:18:f7:fb:dc:db:7c:d9:74:
                    93:67:b0:95:68:7c:c7:a9:ed:ec:44:89:88:9e:3b:
                    a2:48:f4:e5:e9:e9:c5:cd:91:8b:97:4d:cc:f9:4f:
                    2b:d3:4b:83:1a:5f:50:9c:b7:54:9e:ec:3a:a6:5f:
                    74:aa:57:d5:58:d6:71:06:5a:49:20:9e:ed:5f:cc:
                    0c:3f:3a:e3:56:02:10:6c:8f:fa:fe:46:9b:16:db:
                    f8:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:29:F7:4E:1A:97:31:FF:13:A1:8E:34:84:3E:97:1E:40:5E:5A:DB
            X509v3 Authority Key Identifier:
                keyid:EC:97:3B:E1:3E:F3:24:E7:D5:90:46:CF:76:90:A1:2F:9D:F1:29:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/fe1cbd79-8f26-4b0e-8b3b-ab9e9938fcae/0/EC973BE13EF324E7D59046CF7690A12F9DF12932.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC973BE13EF324E7D59046CF7690A12F9DF12932.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fe1cbd79-8f26-4b0e-8b3b-ab9e9938fcae/0/EC973BE13EF324E7D59046CF7690A12F9DF12932.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:5a:85:a2:7c:e8:1c:73:f3:78:85:49:38:47:18:62:b1:d0:
         51:65:dd:19:79:1c:44:13:a7:55:5a:81:9b:52:4f:33:4a:8f:
         f5:32:a8:ff:9d:69:2c:df:25:12:97:85:ab:e5:ad:1a:78:1a:
         e5:39:fe:6a:cc:60:12:b3:11:33:a4:1a:77:33:fa:92:55:f2:
         62:78:07:03:77:a2:95:05:71:90:53:06:33:e2:9f:67:03:01:
         0e:f0:81:6d:07:20:ee:a9:91:2c:ff:1b:e1:b0:24:74:0c:23:
         57:b4:d5:d0:ba:83:cd:d3:0f:57:99:82:65:cc:3b:9a:c0:c7:
         96:b5:b0:ba:dd:df:ab:e9:a9:76:ec:55:4f:1d:f9:7b:79:63:
         0a:e3:25:1b:44:a4:08:2c:aa:ea:5e:59:0a:f2:8e:b0:c0:03:
         9d:99:d4:43:c0:8a:ee:ac:7a:a7:31:8e:47:1d:41:a2:4c:24:
         58:83:14:23:15:77:36:e2:d2:b3:60:45:65:df:f5:d6:2e:99:
         3a:80:33:57:c5:c9:1f:a6:f3:82:71:39:cc:4a:4d:98:f1:d8:
         68:fb:7f:b4:94:d7:2a:7b:94:ef:72:fd:46:04:78:d1:cc:7e:
         d4:00:59:89:35:d3:3e:26:6d:32:c6:02:ec:d5:58:2a:73:0e:
         7b:39:3e:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:32:35 2026 by rpki-client