This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/a0d1f4ce-169b-431a-8286-c5f3a07bbbe3/0/EE12F179A5D1F52EC033677282AE7E2E72E0F2C3.mft
File:                     EE12F179A5D1F52EC033677282AE7E2E72E0F2C3.mft (raw, json)
Hash identifier:          zQOgamtMjwlmzeisXz/vUtquq6lq3UnX7bSNNh0YYak=
Subject key identifier:   3B:E2:C0:E1:5B:C4:0C:53:FB:0B:AF:08:80:7E:92:20:7B:2C:05:16
Authority key identifier: EE:12:F1:79:A5:D1:F5:2E:C0:33:67:72:82:AE:7E:2E:72:E0:F2:C3
Certificate issuer:       /CN=EE12F179A5D1F52EC033677282AE7E2E72E0F2C3
Certificate serial:       2C0F8DD48C370014328081FC7E6DE957D639C060
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EE12F179A5D1F52EC033677282AE7E2E72E0F2C3.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a0d1f4ce-169b-431a-8286-c5f3a07bbbe3/0/EE12F179A5D1F52EC033677282AE7E2E72E0F2C3.mft
Manifest number:          0197
Signing time:             Wed 03 Dec 2025 11:21:28 +0000
Manifest this update:     Wed 03 Dec 2025 11:16:28 +0000
Manifest next update:     Sat 06 Dec 2025 19:15:28 +0000
Files and hashes:         1: EE12F179A5D1F52EC033677282AE7E2E72E0F2C3.crl (hash: akVDrZS/GeG7CLiuYeGqZSeQXMjXDHUThMTlZIo4PIQ=)
                          2: 3130332e38352e35332e302f32342d3234203d3e20313530353535.roa (hash: mZAxTr3skSw5Z8e7tPmU/OrFl4lSut1UK4pgkxrw8Us=)
                          3: 3130332e38352e35322e302f32342d3234203d3e20313530353535.roa (hash: kUp7KI2fPhlmcspldsUBOsyjkjUvmMSaheteN59dWW0=)
                          4: 3130332e38352e35322e302f32332d3233203d3e20313530353535.roa (hash: +9CDenNH43oJ9XkYbEWMdjfmnpMvrt7QWdKjYHPJebM=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a0d1f4ce-169b-431a-8286-c5f3a07bbbe3/0/EE12F179A5D1F52EC033677282AE7E2E72E0F2C3.crl
                          rsync://repo-rpki.idnic.net/repo/a0d1f4ce-169b-431a-8286-c5f3a07bbbe3/0/EE12F179A5D1F52EC033677282AE7E2E72E0F2C3.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EE12F179A5D1F52EC033677282AE7E2E72E0F2C3.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 06 Dec 2025 12:07:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:0f:8d:d4:8c:37:00:14:32:80:81:fc:7e:6d:e9:57:d6:39:c0:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE12F179A5D1F52EC033677282AE7E2E72E0F2C3
        Validity
            Not Before: Dec  3 11:16:28 2025 GMT
            Not After : Dec  6 19:15:28 2025 GMT
        Subject: CN=3BE2C0E15BC40C53FB0BAF08807E92207B2C0516
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:9b:45:2f:37:fd:65:7f:8f:6c:8a:f7:3c:0d:
                    7e:ca:cd:55:42:15:f2:96:86:9c:d1:85:33:7f:eb:
                    e6:da:3d:bb:97:c4:77:b5:7d:d4:e9:62:87:20:20:
                    93:ae:4b:b3:2a:c0:02:5a:d6:d5:a5:eb:63:9c:47:
                    d5:83:97:09:35:9d:d8:52:e8:86:62:13:03:ab:73:
                    7b:31:1e:2d:1e:da:0c:56:4a:51:61:67:02:f8:00:
                    0b:05:48:dd:e8:b6:56:d0:d6:d5:57:ba:4e:c1:e1:
                    75:5f:4b:20:9b:08:bc:11:af:a5:90:ca:2c:0b:1b:
                    6f:38:4d:83:91:1d:fc:95:32:d3:da:b1:39:38:32:
                    65:48:63:85:a9:ba:23:78:14:fc:f2:cd:fc:9f:b1:
                    08:9a:de:33:5c:8b:a7:bb:9a:40:26:12:02:c5:df:
                    e5:83:0a:d8:15:73:e1:96:74:27:e0:a7:53:68:36:
                    02:78:f2:02:ba:cb:d1:99:39:08:d7:ae:fe:9e:f4:
                    e5:02:1c:6f:38:f9:cb:4a:64:70:7a:0b:37:51:38:
                    f0:15:8d:00:f7:75:58:16:a6:0e:7f:50:d5:66:53:
                    12:92:b2:ab:09:f3:f9:52:c6:96:85:d4:fd:b5:2a:
                    bc:44:a8:55:8d:c3:6a:21:14:6f:71:58:e6:ba:48:
                    69:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:E2:C0:E1:5B:C4:0C:53:FB:0B:AF:08:80:7E:92:20:7B:2C:05:16
            X509v3 Authority Key Identifier:
                keyid:EE:12:F1:79:A5:D1:F5:2E:C0:33:67:72:82:AE:7E:2E:72:E0:F2:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a0d1f4ce-169b-431a-8286-c5f3a07bbbe3/0/EE12F179A5D1F52EC033677282AE7E2E72E0F2C3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EE12F179A5D1F52EC033677282AE7E2E72E0F2C3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a0d1f4ce-169b-431a-8286-c5f3a07bbbe3/0/EE12F179A5D1F52EC033677282AE7E2E72E0F2C3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:84:d7:a9:e5:21:58:ca:c5:a8:ed:9f:59:5d:1c:90:25:9a:
         cf:08:9a:7e:05:e0:29:d5:a0:ac:fe:fa:a4:50:a0:ff:51:85:
         43:3f:62:53:ca:c1:8f:40:4a:0e:f8:7c:b0:42:2a:29:58:b6:
         cd:29:38:2e:15:8a:c0:41:c0:95:9f:92:c6:b7:0d:73:de:f2:
         a1:d5:a3:0a:6a:b2:82:18:c0:30:1f:d9:4f:fe:ba:a6:c9:b4:
         cd:27:bd:2e:55:f6:cd:bf:2f:17:1e:92:97:4d:76:db:76:ed:
         e4:ea:dd:7c:d9:90:49:ab:68:22:26:e2:85:2a:04:61:72:fc:
         fd:6b:71:49:22:a3:fa:ac:3d:de:cd:75:4e:2c:6f:9f:4e:dc:
         2d:79:73:a1:fd:59:9d:8e:95:78:40:90:92:9d:b4:94:f4:af:
         9d:ca:75:e0:dd:c7:45:5d:ec:0d:fb:69:59:9f:f8:58:b9:5f:
         73:b7:5b:66:80:dd:6b:05:c7:e8:e9:9e:b1:34:6c:cf:85:bc:
         c2:ae:b0:a9:88:97:60:1c:59:ea:dd:ed:71:4a:1e:f8:b2:c6:
         90:55:51:eb:3b:1d:24:cf:e7:cd:c9:92:0e:91:b8:2c:09:a7:
         30:26:62:69:46:76:2f:31:5e:2c:56:0a:e3:e4:3e:c0:01:23:
         52:65:df:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 13:57:56 2025 by rpki-client