This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/0/EEC1A7BF2D95D0BAFE37105E4BB1BB23601DD1DB.mft
File:                     EEC1A7BF2D95D0BAFE37105E4BB1BB23601DD1DB.mft (raw, json)
Hash identifier:          7L5MlVONAB873mNVfd07TVCx/xvv3Nf5Qnr/2q/uHDA=
Subject key identifier:   34:75:E3:73:AA:EE:13:CD:88:D6:1F:05:26:B5:FD:C4:4B:28:01:25
Authority key identifier: EE:C1:A7:BF:2D:95:D0:BA:FE:37:10:5E:4B:B1:BB:23:60:1D:D1:DB
Certificate issuer:       /CN=EEC1A7BF2D95D0BAFE37105E4BB1BB23601DD1DB
Certificate serial:       267400333576851D82A823E37B5AAF4F1F54D28A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/EEC1A7BF2D95D0BAFE37105E4BB1BB23601DD1DB.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/0/EEC1A7BF2D95D0BAFE37105E4BB1BB23601DD1DB.mft
Manifest number:          F9
Signing time:             Wed 21 Jan 2026 07:12:19 +0000
Manifest this update:     Wed 21 Jan 2026 07:07:19 +0000
Manifest next update:     Sat 24 Jan 2026 07:17:19 +0000
Files and hashes:         1: EEC1A7BF2D95D0BAFE37105E4BB1BB23601DD1DB.crl (hash: YFaoCT3xwyBQi7KaVSmlRmVNN+Iax++xKdHkbTCz/+0=)
                          2: 3136302e32352e34352e302f32342d3234203d3e20313533303639.roa (hash: pjrXRUj5r2IszWCXojX+FWGkandw2VMiyslpGWMGbUA=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/0/EEC1A7BF2D95D0BAFE37105E4BB1BB23601DD1DB.crl
                          rsync://repo-rpki.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/0/EEC1A7BF2D95D0BAFE37105E4BB1BB23601DD1DB.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/EEC1A7BF2D95D0BAFE37105E4BB1BB23601DD1DB.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 Jan 2026 07:17:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:74:00:33:35:76:85:1d:82:a8:23:e3:7b:5a:af:4f:1f:54:d2:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EEC1A7BF2D95D0BAFE37105E4BB1BB23601DD1DB
        Validity
            Not Before: Jan 21 07:07:19 2026 GMT
            Not After : Jan 24 07:17:19 2026 GMT
        Subject: CN=3475E373AAEE13CD88D61F0526B5FDC44B280125
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:72:00:e3:08:2d:7c:99:9b:3b:ac:c1:7c:f3:
                    28:39:f3:1b:8b:e2:8c:f9:94:d0:9f:1b:df:55:16:
                    41:60:f6:cd:4d:10:3a:f4:c8:d2:53:08:2c:1d:31:
                    8c:e7:e5:b1:ad:0f:9c:5b:e4:02:f7:4d:a8:69:3b:
                    13:75:5e:30:22:bc:1c:36:1e:15:4c:d9:55:9d:04:
                    99:20:bf:a1:7e:0a:66:47:29:2f:39:04:66:41:1f:
                    9d:9d:e1:17:5e:ba:7a:4b:61:a1:0f:79:b9:c9:e0:
                    38:84:9b:f3:bb:30:69:59:7c:f5:ca:51:ab:46:46:
                    b7:4c:3a:70:3e:b3:58:17:c4:4b:a3:75:cc:2a:59:
                    73:ce:af:3a:2f:3d:16:a2:2c:ee:6b:18:f6:0e:66:
                    7b:b3:d6:27:db:21:90:79:45:12:45:19:40:ce:d7:
                    43:d7:d7:3f:d3:8b:ac:45:d8:8c:1e:6a:fa:42:65:
                    ba:1c:a5:cf:fb:e2:e2:7a:15:f5:7a:a4:73:02:58:
                    3a:50:1d:72:81:ee:12:bb:0f:ff:cf:75:a7:69:cf:
                    cc:2e:2a:37:df:52:4c:b9:9a:bb:88:e2:17:12:4b:
                    cc:3f:88:94:84:9e:3c:26:46:82:b9:49:a0:81:90:
                    cd:52:94:cb:13:a5:7a:c9:8e:bb:bd:4f:88:5e:fc:
                    10:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:75:E3:73:AA:EE:13:CD:88:D6:1F:05:26:B5:FD:C4:4B:28:01:25
            X509v3 Authority Key Identifier:
                keyid:EE:C1:A7:BF:2D:95:D0:BA:FE:37:10:5E:4B:B1:BB:23:60:1D:D1:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/0/EEC1A7BF2D95D0BAFE37105E4BB1BB23601DD1DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/EEC1A7BF2D95D0BAFE37105E4BB1BB23601DD1DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/0/EEC1A7BF2D95D0BAFE37105E4BB1BB23601DD1DB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:1a:90:c7:62:99:f8:46:88:e1:6a:bf:f1:a9:52:5d:1e:c2:
         13:11:1f:11:b0:79:18:24:8e:c7:b0:78:c4:f5:c0:16:ae:f3:
         ed:0f:82:45:3e:db:79:e1:36:fd:f5:25:87:ed:8d:fd:9a:ce:
         20:cc:35:37:71:11:f8:4c:fa:95:18:7f:00:97:4d:21:b7:89:
         db:ef:9b:e3:e8:94:db:f2:1d:33:8c:ad:e5:58:d8:40:91:4e:
         5f:08:3f:03:e5:41:4f:a9:0a:31:ea:40:78:1e:9e:93:32:69:
         84:53:b3:f4:dd:e1:5b:c4:8d:a5:15:c4:df:4c:14:c2:d0:a2:
         16:e7:0a:03:07:59:4d:22:15:2b:89:80:81:37:71:6b:c8:d3:
         6e:0a:27:02:a6:96:dd:fc:1b:7c:d8:ef:59:1f:86:23:36:4e:
         bb:78:4f:79:87:76:65:e8:4d:b3:24:94:87:d5:3a:8e:7a:62:
         3f:89:3e:94:4e:ba:82:d1:70:92:e1:a0:9b:34:a2:03:f1:43:
         26:86:cf:a5:c9:07:36:a7:fb:f7:44:7e:d6:ec:b0:98:c4:3d:
         2a:85:f5:a0:d0:a8:14:b9:84:0d:6a:4e:e6:69:e5:45:50:2f:
         19:04:f1:e3:7b:ef:71:19:b3:cb:a3:95:87:9e:be:25:9e:83:
         3a:db:6e:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 12:03:22 2026 by rpki-client