This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/543cc6a8-e7aa-4f37-bd08-f2eb57e88736/0/EFBA99D11F5C07B48EC639EB1119AB525D8050AF.mft
File:                     EFBA99D11F5C07B48EC639EB1119AB525D8050AF.mft (raw, json)
Hash identifier:          VPArSHDT0+8m+NPoBb7gNcwNqLcbxf5cR3UNNpjtaDk=
Subject key identifier:   AE:D9:E0:AF:F4:12:8C:02:B7:40:1B:1B:29:91:02:AB:7F:BA:D2:5C
Authority key identifier: EF:BA:99:D1:1F:5C:07:B4:8E:C6:39:EB:11:19:AB:52:5D:80:50:AF
Certificate issuer:       /CN=EFBA99D11F5C07B48EC639EB1119AB525D8050AF
Certificate serial:       219EB475FB4185F17FDD0A50F344F3209D472146
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFBA99D11F5C07B48EC639EB1119AB525D8050AF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/543cc6a8-e7aa-4f37-bd08-f2eb57e88736/0/EFBA99D11F5C07B48EC639EB1119AB525D8050AF.mft
Manifest number:          016D
Signing time:             Mon 02 Feb 2026 04:52:06 +0000
Manifest this update:     Mon 02 Feb 2026 04:47:06 +0000
Manifest next update:     Thu 05 Feb 2026 15:20:06 +0000
Files and hashes:         1: EFBA99D11F5C07B48EC639EB1119AB525D8050AF.crl (hash: XUjh9dWa7laXxBo/1V1BoZEQz5y91TK+P5/CAdkvJNQ=)
                          2: 3130332e3136362e3132322e302f32332d3233203d3e20313431393435.roa (hash: C7+rbLPo0B/cgVSkvwAdhCUpa719Bxq+aRwWMlLdIX8=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/543cc6a8-e7aa-4f37-bd08-f2eb57e88736/0/EFBA99D11F5C07B48EC639EB1119AB525D8050AF.crl
                          rsync://repo-rpki.idnic.net/repo/543cc6a8-e7aa-4f37-bd08-f2eb57e88736/0/EFBA99D11F5C07B48EC639EB1119AB525D8050AF.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFBA99D11F5C07B48EC639EB1119AB525D8050AF.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Feb 2026 05:24:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:9e:b4:75:fb:41:85:f1:7f:dd:0a:50:f3:44:f3:20:9d:47:21:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EFBA99D11F5C07B48EC639EB1119AB525D8050AF
        Validity
            Not Before: Feb  2 04:47:06 2026 GMT
            Not After : Feb  5 15:20:06 2026 GMT
        Subject: CN=AED9E0AFF4128C02B7401B1B299102AB7FBAD25C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:5d:b3:83:37:31:13:7d:10:f4:23:3c:32:09:
                    7a:a5:39:02:5c:d9:7e:b8:58:67:f5:40:6a:a2:ed:
                    ca:b1:ee:d9:57:a7:77:27:47:2e:83:4d:ad:5a:a2:
                    17:e5:36:45:8b:8e:72:8c:87:1c:42:0b:27:bf:30:
                    69:9a:e5:a2:69:a2:4f:ba:83:76:7c:f8:f3:ed:41:
                    f6:8e:ba:72:76:ed:9c:9c:89:58:8f:09:62:19:95:
                    8b:e3:f7:d8:ef:de:69:98:fc:68:a1:62:23:85:8a:
                    67:f4:6f:65:37:86:80:63:1d:31:46:d8:17:ac:01:
                    49:36:ff:94:39:05:b2:0e:85:14:7d:f6:47:7f:d1:
                    c5:de:02:e0:55:18:2a:89:ff:27:c8:f9:33:a9:1f:
                    84:24:7d:16:a4:d2:40:39:ae:83:69:ff:b3:94:ab:
                    9c:3a:94:76:f6:a6:50:4f:fe:c5:e5:8b:63:d7:8f:
                    cc:ff:60:c6:c1:99:b3:5e:9f:c4:74:6c:f8:42:a6:
                    64:5f:3a:c7:6b:ff:a9:ea:41:19:c1:b6:b7:bb:f7:
                    eb:28:bf:93:20:6d:fd:c1:a0:8a:96:57:59:bf:bd:
                    b1:a5:6e:1c:43:38:28:77:45:f3:90:43:ba:6d:eb:
                    66:ad:e6:7f:e6:48:c6:0d:20:1a:2d:1c:6d:ee:69:
                    e5:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:D9:E0:AF:F4:12:8C:02:B7:40:1B:1B:29:91:02:AB:7F:BA:D2:5C
            X509v3 Authority Key Identifier:
                keyid:EF:BA:99:D1:1F:5C:07:B4:8E:C6:39:EB:11:19:AB:52:5D:80:50:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/543cc6a8-e7aa-4f37-bd08-f2eb57e88736/0/EFBA99D11F5C07B48EC639EB1119AB525D8050AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFBA99D11F5C07B48EC639EB1119AB525D8050AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/543cc6a8-e7aa-4f37-bd08-f2eb57e88736/0/EFBA99D11F5C07B48EC639EB1119AB525D8050AF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:1d:1d:e3:c2:6d:0b:e3:9d:25:33:67:2b:67:53:62:99:7f:
         15:48:58:fc:28:05:24:68:92:ab:45:f0:3e:9e:0d:90:b3:f9:
         b5:fc:c1:30:fe:b7:93:e9:aa:8e:7e:15:3f:e7:c5:3b:d4:40:
         9e:48:ac:f4:d0:68:1d:86:15:14:41:c1:f2:00:08:38:cb:d9:
         db:68:4c:90:fa:9d:11:71:9e:b8:60:2c:f3:10:6a:0b:44:60:
         39:36:a8:7c:4d:05:5f:65:28:62:53:16:64:1c:45:6a:2c:09:
         92:da:c0:db:ac:6f:0a:4b:b9:ea:12:37:12:0d:4f:64:b6:74:
         a9:53:4d:28:c2:19:8d:1d:24:5a:c6:2d:75:6b:de:bb:78:01:
         f2:9f:14:9d:75:dc:d5:f6:4f:d9:9c:38:c2:d4:bb:e1:20:e1:
         4b:cc:60:91:2c:ed:c6:f6:b2:15:89:a0:62:75:91:9e:2c:6b:
         67:c2:93:24:88:b4:2a:62:8c:ed:9e:ce:22:59:1d:a2:3b:9c:
         1d:3b:16:38:c1:2a:ea:36:2a:9e:3f:dc:61:88:2f:bb:28:35:
         35:0d:df:99:11:fd:b3:2a:e6:96:19:f6:66:0d:33:7b:1a:c7:
         db:31:bf:97:19:47:f0:7a:dd:21:27:73:de:35:46:cc:dd:55:
         50:91:d2:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 12:48:38 2026 by rpki-client