This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/0dd078fe-0930-45dc-b403-3ce4e863f8b5/0/EFCC7BEA840185763FF7624CF3DDE00563137A27.mft
File:                     EFCC7BEA840185763FF7624CF3DDE00563137A27.mft (raw, json)
Hash identifier:          Iq/kusHFbut8LdY3G21z62MK4NlQZ9mXqgx6K3c9ksY=
Subject key identifier:   01:F7:9E:64:83:D4:CA:91:50:CD:C2:72:1D:FC:B6:82:2F:C3:EC:B5
Authority key identifier: EF:CC:7B:EA:84:01:85:76:3F:F7:62:4C:F3:DD:E0:05:63:13:7A:27
Certificate issuer:       /CN=EFCC7BEA840185763FF7624CF3DDE00563137A27
Certificate serial:       3054DAC905D0EAB8DA32D487AFBE459C7146F8EE
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFCC7BEA840185763FF7624CF3DDE00563137A27.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/0dd078fe-0930-45dc-b403-3ce4e863f8b5/0/EFCC7BEA840185763FF7624CF3DDE00563137A27.mft
Manifest number:          03D5
Signing time:             Sun 01 Feb 2026 12:31:10 +0000
Manifest this update:     Sun 01 Feb 2026 12:26:10 +0000
Manifest next update:     Wed 04 Feb 2026 20:45:10 +0000
Files and hashes:         1: 323430373a613163303a3a2f33322d3332203d3e20313432333135.roa (hash: t9Dk6yRyxGtnxo9p6R4EHJZwYzMqbQXmpijhebxT1Co=)
                          2: EFCC7BEA840185763FF7624CF3DDE00563137A27.crl (hash: 68zZeJMpoxreLHYUaa9Qse70hcGAHaswM2ZO49IOUs8=)
                          3: 3130332e3136382e3134392e302f32342d3234203d3e20313432333135.roa (hash: HlXbf2sqo1wPRmjyAMq3IzqSfph/qeQjUmYJ52xMgz8=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/0dd078fe-0930-45dc-b403-3ce4e863f8b5/0/EFCC7BEA840185763FF7624CF3DDE00563137A27.crl
                          rsync://repo-rpki.idnic.net/repo/0dd078fe-0930-45dc-b403-3ce4e863f8b5/0/EFCC7BEA840185763FF7624CF3DDE00563137A27.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFCC7BEA840185763FF7624CF3DDE00563137A27.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Feb 2026 20:45:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:54:da:c9:05:d0:ea:b8:da:32:d4:87:af:be:45:9c:71:46:f8:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EFCC7BEA840185763FF7624CF3DDE00563137A27
        Validity
            Not Before: Feb  1 12:26:10 2026 GMT
            Not After : Feb  4 20:45:10 2026 GMT
        Subject: CN=01F79E6483D4CA9150CDC2721DFCB6822FC3ECB5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:ee:df:cf:13:11:9f:9d:f6:eb:77:3c:98:91:
                    22:34:3b:7c:0a:ac:ff:f7:3e:d5:d0:18:f9:16:9d:
                    38:52:a2:5d:13:09:ef:61:d0:73:04:bd:75:46:02:
                    57:50:26:d6:1a:5d:da:36:a3:9b:3c:bf:09:dd:e3:
                    70:db:89:8d:d1:91:9f:cc:ac:a7:d0:17:fa:da:c9:
                    f7:0d:75:16:b1:ab:18:77:e1:05:ca:72:65:c6:03:
                    d9:9f:e0:04:eb:a9:ba:13:74:ba:86:7a:af:52:3b:
                    b4:a6:6b:03:29:f9:3a:d7:27:e2:96:63:37:f8:d0:
                    ad:a8:f4:9b:4f:83:22:9b:cc:02:d2:e4:e5:bd:d4:
                    8a:65:8b:0b:03:f3:91:cd:1b:cb:61:a2:3d:a0:8c:
                    4d:19:0e:6e:a3:84:2f:1a:a9:ef:8b:88:28:e6:41:
                    56:f9:2e:19:1d:63:e4:47:d7:b9:fb:37:bd:ca:3a:
                    fd:c4:e5:41:a0:e2:c2:b8:ce:25:8e:87:39:63:bd:
                    b5:a5:fd:8c:b4:7a:c1:70:eb:80:78:d3:2d:7b:9e:
                    b1:02:d8:7e:f7:96:eb:1d:87:10:a9:e8:c4:0d:22:
                    0a:67:7b:2d:05:7f:2d:46:4a:2d:ce:6a:cc:8a:60:
                    11:7a:11:cc:eb:c7:cd:e4:1b:1b:96:9f:15:63:39:
                    e3:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:F7:9E:64:83:D4:CA:91:50:CD:C2:72:1D:FC:B6:82:2F:C3:EC:B5
            X509v3 Authority Key Identifier:
                keyid:EF:CC:7B:EA:84:01:85:76:3F:F7:62:4C:F3:DD:E0:05:63:13:7A:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/0dd078fe-0930-45dc-b403-3ce4e863f8b5/0/EFCC7BEA840185763FF7624CF3DDE00563137A27.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFCC7BEA840185763FF7624CF3DDE00563137A27.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0dd078fe-0930-45dc-b403-3ce4e863f8b5/0/EFCC7BEA840185763FF7624CF3DDE00563137A27.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:ea:66:ba:f4:e7:2e:5e:f1:e5:e1:b4:c9:b0:fe:ff:42:13:
         69:72:cf:0d:6c:cb:e3:7f:4a:1f:0a:87:ea:a5:0d:07:7f:83:
         3e:dd:d5:d6:87:a5:3c:4d:dc:05:cc:25:33:bd:a6:d5:df:3d:
         0a:e3:e3:e4:ae:c8:de:ad:ee:e8:b5:74:91:ed:74:f5:1d:03:
         7e:07:24:ad:42:0e:ef:5a:4a:75:42:bb:b0:35:91:61:7d:ae:
         d9:fb:ef:0c:41:b3:74:e1:6c:05:15:52:63:5d:2a:e7:3c:94:
         5e:83:49:01:42:8b:8b:9e:2f:e2:d4:b4:92:78:fa:0e:9e:b2:
         9b:35:e6:db:2a:d7:50:4b:52:17:23:03:7c:72:3b:96:56:b0:
         9f:49:14:e8:e7:53:1b:55:fc:2a:5e:e6:9b:73:40:77:36:31:
         08:56:05:6f:3c:97:f7:d0:44:fe:97:6d:0f:cc:bf:02:de:e0:
         c2:52:14:16:f7:f2:ab:f1:06:fa:b0:3d:ae:57:ab:7a:f9:51:
         e0:8e:d9:b2:ad:25:dc:e5:23:f6:b8:8a:16:70:63:5c:53:52:
         f6:3f:1a:0a:8e:7f:fa:54:1c:37:31:46:06:60:1b:53:82:9b:
         d8:f7:b1:c1:2b:2f:a4:c1:52:0c:c0:23:e1:cf:ce:2f:21:b8:
         69:d8:b1:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:43:37 2026 by rpki-client