This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/76c00376-3351-4fa3-97ee-52385ba4d903/0/EF979072FBF6DABD2A8EAC08A304509E8DC04C66.mft
File:                     EF979072FBF6DABD2A8EAC08A304509E8DC04C66.mft (raw, json)
Hash identifier:          5jTeawqcBgmnfGwyn410XAW54A/3gTt2mNnPNFC4/+E=
Subject key identifier:   04:4B:FA:A2:32:A4:EC:F6:EE:52:32:D3:8F:E9:A6:CC:92:78:54:18
Authority key identifier: EF:97:90:72:FB:F6:DA:BD:2A:8E:AC:08:A3:04:50:9E:8D:C0:4C:66
Certificate issuer:       /CN=EF979072FBF6DABD2A8EAC08A304509E8DC04C66
Certificate serial:       4BF74B2F546C796608680B839685B781DE957136
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EF979072FBF6DABD2A8EAC08A304509E8DC04C66.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/76c00376-3351-4fa3-97ee-52385ba4d903/0/EF979072FBF6DABD2A8EAC08A304509E8DC04C66.mft
Manifest number:          FC
Signing time:             Tue 02 Dec 2025 10:11:41 +0000
Manifest this update:     Tue 02 Dec 2025 10:06:41 +0000
Manifest next update:     Fri 05 Dec 2025 20:46:41 +0000
Files and hashes:         1: EF979072FBF6DABD2A8EAC08A304509E8DC04C66.crl (hash: rTXHWv6KEpGAnKeTuzjIiK1/2ax9yNDqkmjz6E/eEOM=)
                          2: 3130332e34312e3130392e302f32342d3234203d3e203536323536.roa (hash: 4q/gs/czBNAuO23mv17/FKccDK6uDnn2+DC2kwXpKAc=)
                          3: 3130332e32382e32312e302f32342d3234203d3e203536323536.roa (hash: lgU3Sd0WykJyELTKj2IglQHmtI2jqlICc7rdQuDN4Fw=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/76c00376-3351-4fa3-97ee-52385ba4d903/0/EF979072FBF6DABD2A8EAC08A304509E8DC04C66.crl
                          rsync://repo-rpki.idnic.net/repo/76c00376-3351-4fa3-97ee-52385ba4d903/0/EF979072FBF6DABD2A8EAC08A304509E8DC04C66.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EF979072FBF6DABD2A8EAC08A304509E8DC04C66.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 05 Dec 2025 20:46:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:f7:4b:2f:54:6c:79:66:08:68:0b:83:96:85:b7:81:de:95:71:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF979072FBF6DABD2A8EAC08A304509E8DC04C66
        Validity
            Not Before: Dec  2 10:06:41 2025 GMT
            Not After : Dec  5 20:46:41 2025 GMT
        Subject: CN=044BFAA232A4ECF6EE5232D38FE9A6CC92785418
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:1d:e3:6a:36:18:71:8d:75:64:46:bb:8f:11:
                    95:e2:58:9f:4e:2a:4b:55:d4:85:b5:34:e6:1d:25:
                    29:bb:e6:81:f8:6f:a7:cd:57:9f:e6:73:9c:56:59:
                    1b:4a:81:30:ed:7a:f5:fd:3e:38:ab:3d:6b:21:c0:
                    e7:3c:61:1e:3b:ba:26:c4:27:ec:91:21:c2:bd:e8:
                    f5:60:56:46:53:06:98:d8:e9:c9:ff:8c:72:fe:f6:
                    13:12:69:6a:c7:f3:85:84:d0:2f:87:49:2a:b8:22:
                    65:a1:72:7f:b7:77:3a:a4:26:82:51:8a:74:2f:a2:
                    30:5f:c9:a4:ca:3f:72:aa:e2:2e:63:78:fa:22:84:
                    67:75:b4:03:d3:8d:6c:54:af:1a:23:da:a6:9d:1c:
                    2f:53:06:26:04:e9:71:50:b7:b6:2f:1e:17:22:6d:
                    2a:9f:38:94:ce:e2:2c:99:a2:90:b2:a9:f4:c4:9e:
                    bf:a8:39:34:16:96:ad:cf:3b:86:e5:21:c5:da:5f:
                    a0:eb:f4:79:62:c0:5e:5f:42:f9:d3:23:3e:19:ec:
                    67:06:03:d1:6f:9c:5c:e2:c4:89:f4:c5:50:c9:45:
                    27:c1:12:4c:4d:21:a3:c1:a2:ed:20:f0:41:3e:16:
                    31:64:fc:5d:f0:e0:c9:ed:00:3e:c0:25:1d:0c:88:
                    e8:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:4B:FA:A2:32:A4:EC:F6:EE:52:32:D3:8F:E9:A6:CC:92:78:54:18
            X509v3 Authority Key Identifier:
                keyid:EF:97:90:72:FB:F6:DA:BD:2A:8E:AC:08:A3:04:50:9E:8D:C0:4C:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/76c00376-3351-4fa3-97ee-52385ba4d903/0/EF979072FBF6DABD2A8EAC08A304509E8DC04C66.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EF979072FBF6DABD2A8EAC08A304509E8DC04C66.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/76c00376-3351-4fa3-97ee-52385ba4d903/0/EF979072FBF6DABD2A8EAC08A304509E8DC04C66.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:d6:b3:77:ab:9d:3a:8a:62:db:e5:80:b9:f3:17:46:06:2e:
         e1:ea:22:7a:75:ef:b5:a3:e2:12:42:29:92:64:24:b9:7e:97:
         07:12:a7:9b:d5:c9:93:33:9c:10:2a:08:6d:a2:f6:cb:d1:91:
         2e:b3:fd:4d:a5:7a:d6:83:11:da:8c:b5:cf:84:02:9d:88:ba:
         b4:53:fc:84:a3:15:be:0a:3b:49:45:fc:5c:c7:04:10:59:86:
         22:9d:19:81:14:22:0a:2b:1f:26:b4:0d:7d:a7:bd:2a:e1:43:
         a1:db:23:a9:9a:d1:e3:f3:80:4c:e2:46:7e:c6:09:8f:5b:cc:
         15:43:60:3e:62:69:53:8c:03:3d:4c:f0:b4:66:58:01:81:e0:
         b1:e4:05:43:ac:cf:c5:82:80:1a:94:93:22:6d:16:b3:29:e8:
         b6:1d:a0:11:26:91:3c:6c:2f:ca:4d:5c:18:5e:26:e0:52:76:
         52:b4:e1:71:d2:4c:28:05:d4:d9:43:e2:15:09:d6:69:46:d9:
         42:78:2a:bf:35:c4:3d:7c:a7:98:c5:16:09:06:d6:80:4f:6d:
         eb:55:fe:9f:37:8d:5f:72:48:15:bb:55:6a:3a:72:07:48:21:
         c8:a1:17:43:46:c5:a3:fd:d7:56:4c:35:0e:bc:57:74:7e:28:
         58:34:2d:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 14:45:46 2025 by rpki-client