This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/287f8f82-37bb-4983-93ca-5e0670ab02e3/0/EC62A94970E56AC9FE8B828A542B7EDBA3D116D5.mft
File:                     EC62A94970E56AC9FE8B828A542B7EDBA3D116D5.mft (raw, json)
Hash identifier:          bOC232uk8oTZpG2w6TeN9qV4KEWuEbi8+dXBNQi2ioo=
Subject key identifier:   0B:23:56:08:B1:EE:4A:A8:3A:A0:14:31:ED:C9:E8:EE:02:BD:97:42
Authority key identifier: EC:62:A9:49:70:E5:6A:C9:FE:8B:82:8A:54:2B:7E:DB:A3:D1:16:D5
Certificate issuer:       /CN=EC62A94970E56AC9FE8B828A542B7EDBA3D116D5
Certificate serial:       25453747D054143CDCFD3D05975FD49C51D90CC5
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC62A94970E56AC9FE8B828A542B7EDBA3D116D5.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/287f8f82-37bb-4983-93ca-5e0670ab02e3/0/EC62A94970E56AC9FE8B828A542B7EDBA3D116D5.mft
Manifest number:          053C
Signing time:             Sun 04 Jan 2026 14:31:44 +0000
Manifest this update:     Sun 04 Jan 2026 14:26:44 +0000
Manifest next update:     Thu 08 Jan 2026 01:20:44 +0000
Files and hashes:         1: EC62A94970E56AC9FE8B828A542B7EDBA3D116D5.crl (hash: Z6pGI/xnwwvmcAdUK2TOBA8tLi8ibucoPY5xpXc/rQc=)
                          2: 3130332e362e3231342e302f32342d3234203d3e20313331313132.roa (hash: F0a3JFzr6TEGFg4XROWEIEBL9cNyd2bfiVU6lzFtCLY=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/287f8f82-37bb-4983-93ca-5e0670ab02e3/0/EC62A94970E56AC9FE8B828A542B7EDBA3D116D5.crl
                          rsync://repo-rpki.idnic.net/repo/287f8f82-37bb-4983-93ca-5e0670ab02e3/0/EC62A94970E56AC9FE8B828A542B7EDBA3D116D5.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC62A94970E56AC9FE8B828A542B7EDBA3D116D5.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 08 Jan 2026 01:20:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:45:37:47:d0:54:14:3c:dc:fd:3d:05:97:5f:d4:9c:51:d9:0c:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC62A94970E56AC9FE8B828A542B7EDBA3D116D5
        Validity
            Not Before: Jan  4 14:26:44 2026 GMT
            Not After : Jan  8 01:20:44 2026 GMT
        Subject: CN=0B235608B1EE4AA83AA01431EDC9E8EE02BD9742
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:dc:16:16:52:63:9d:90:8b:2e:d4:50:38:0f:
                    65:dc:de:bf:97:d8:2e:68:4c:31:56:1e:cd:59:b3:
                    f3:b1:9c:c7:53:ec:5c:d2:7e:3e:14:be:9a:a1:df:
                    16:55:4f:a0:aa:0e:e5:2c:27:10:17:69:49:b7:e8:
                    69:39:bc:ba:2e:8c:51:ec:e1:e1:09:1b:41:18:d0:
                    a8:7c:bf:4e:85:4a:9c:08:a3:7f:47:ec:6f:72:bb:
                    bf:89:d0:13:b6:e6:6b:eb:04:fc:37:71:be:c0:b5:
                    3d:7d:d2:6c:7b:a7:50:31:35:f3:e3:ae:60:12:a0:
                    33:14:63:f2:ae:b2:25:ed:f6:9b:65:b4:8c:65:55:
                    2d:ae:16:d4:60:72:b7:b9:eb:89:05:ee:1b:31:c2:
                    63:9d:04:59:d8:8f:6c:97:06:09:33:8c:e1:d4:8a:
                    fe:96:a6:9e:16:ff:a1:32:0e:d5:b3:9a:8a:c2:bf:
                    da:0b:47:d0:52:43:16:01:25:07:ce:37:f2:02:14:
                    dd:b0:50:c0:a8:21:14:c6:b4:c2:22:ec:f0:a0:2f:
                    4d:61:bf:d4:37:27:91:92:b0:f9:1d:af:d8:8c:81:
                    8b:ee:40:ab:0f:8a:a9:4d:71:77:50:11:ce:8a:6c:
                    b6:1d:40:95:36:e1:95:7a:c0:84:5c:b5:90:98:85:
                    73:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:23:56:08:B1:EE:4A:A8:3A:A0:14:31:ED:C9:E8:EE:02:BD:97:42
            X509v3 Authority Key Identifier:
                keyid:EC:62:A9:49:70:E5:6A:C9:FE:8B:82:8A:54:2B:7E:DB:A3:D1:16:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/287f8f82-37bb-4983-93ca-5e0670ab02e3/0/EC62A94970E56AC9FE8B828A542B7EDBA3D116D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC62A94970E56AC9FE8B828A542B7EDBA3D116D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/287f8f82-37bb-4983-93ca-5e0670ab02e3/0/EC62A94970E56AC9FE8B828A542B7EDBA3D116D5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:4f:87:53:48:83:52:74:bb:f9:f4:e2:12:44:63:42:ad:2c:
         6e:0b:fb:55:3e:d4:18:94:9e:66:4b:72:72:0d:10:5e:37:42:
         7e:98:35:95:08:ff:e0:a7:c7:df:5f:37:23:fd:c9:b8:59:c5:
         4b:5d:2a:4d:ad:b7:04:d0:3a:5b:ef:45:be:73:35:85:45:de:
         a1:41:29:1d:bb:ba:42:ca:3e:19:1a:4c:ba:11:f4:f3:7c:95:
         b3:a6:4c:32:19:e6:7a:26:08:ff:65:91:41:f9:d0:df:50:64:
         b2:ed:c3:04:f4:25:9c:4d:08:00:81:07:f0:1f:87:cf:b3:3c:
         d4:ac:a5:27:b8:93:d6:8d:88:c4:2c:cb:c1:3a:a8:80:80:49:
         03:63:da:95:0f:c3:c8:ab:15:26:3e:49:0a:2d:e1:2e:b4:7d:
         9d:ce:41:30:97:78:ae:fb:8e:85:65:15:18:5d:1c:d3:d5:6e:
         a6:23:7e:0c:a0:5f:e0:08:2a:b9:a7:24:1c:88:1f:03:87:b0:
         eb:12:c0:67:9a:16:1b:be:50:96:89:7c:b8:63:0a:5a:03:5a:
         a6:af:42:69:7a:38:2b:39:e7:dc:d1:5a:98:c6:99:45:72:6e:
         74:88:73:8e:47:cd:98:8e:c2:50:23:13:15:41:98:e7:5f:93:
         9e:41:60:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 6 06:13:13 2026 by rpki-client