This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/d5c2c71c-6ae5-4ea9-b850-6300e2e1badf/0/EBB7963402117E803037310CE98B392F968C3A9A.mft
File:                     EBB7963402117E803037310CE98B392F968C3A9A.mft (raw, json)
Hash identifier:          DGRtON5kwjnD4OC/q9F4deHZ5eHH1Cb/Kk70PM3LJRw=
Subject key identifier:   8D:A5:C1:DA:2E:0B:0A:4A:80:C9:C6:2E:F2:7D:E8:99:8C:10:D3:01
Authority key identifier: EB:B7:96:34:02:11:7E:80:30:37:31:0C:E9:8B:39:2F:96:8C:3A:9A
Certificate issuer:       /CN=EBB7963402117E803037310CE98B392F968C3A9A
Certificate serial:       7951DC73E94FD405C0068BC16B43475CAC0BB3CD
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EBB7963402117E803037310CE98B392F968C3A9A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d5c2c71c-6ae5-4ea9-b850-6300e2e1badf/0/EBB7963402117E803037310CE98B392F968C3A9A.mft
Manifest number:          0212
Signing time:             Mon 01 Dec 2025 03:52:10 +0000
Manifest this update:     Mon 01 Dec 2025 03:47:10 +0000
Manifest next update:     Thu 04 Dec 2025 13:43:10 +0000
Files and hashes:         1: EBB7963402117E803037310CE98B392F968C3A9A.crl (hash: cKnrv2EmELzXNsaV2RwMJw0EyfMRQtPFo94HZqbRQ1Y=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d5c2c71c-6ae5-4ea9-b850-6300e2e1badf/0/EBB7963402117E803037310CE98B392F968C3A9A.crl
                          rsync://repo-rpki.idnic.net/repo/d5c2c71c-6ae5-4ea9-b850-6300e2e1badf/0/EBB7963402117E803037310CE98B392F968C3A9A.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EBB7963402117E803037310CE98B392F968C3A9A.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 04 Dec 2025 13:43:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:51:dc:73:e9:4f:d4:05:c0:06:8b:c1:6b:43:47:5c:ac:0b:b3:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EBB7963402117E803037310CE98B392F968C3A9A
        Validity
            Not Before: Dec  1 03:47:10 2025 GMT
            Not After : Dec  4 13:43:10 2025 GMT
        Subject: CN=8DA5C1DA2E0B0A4A80C9C62EF27DE8998C10D301
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ff:b5:6e:92:df:a4:7c:6e:ab:2f:b4:dc:78:
                    ac:b2:b5:eb:df:56:31:dd:8c:ef:5e:46:0a:17:cc:
                    4a:fa:93:21:c3:c9:36:67:bc:74:a8:da:53:34:61:
                    4a:c4:d0:62:a9:a7:f6:fa:0d:1c:34:ab:7f:18:2c:
                    b5:71:6d:9c:53:07:1e:16:cb:ca:4d:6e:4a:58:7b:
                    b0:59:8b:cf:55:b7:3c:81:26:66:ab:9b:31:a3:30:
                    61:78:35:af:c0:ac:85:31:c3:77:76:31:05:02:7a:
                    1f:18:2f:33:4e:14:d8:da:ab:ac:ca:ff:d2:34:01:
                    b7:be:af:3b:44:4a:39:e8:4c:12:ab:f8:a3:10:a2:
                    69:4e:e6:11:c0:2d:e6:75:d3:34:69:3d:18:c0:31:
                    3a:a0:66:8b:98:6a:a5:44:6f:fb:e0:ef:d6:d5:e6:
                    a0:e4:52:e3:5f:1f:2f:49:76:89:1b:f4:6e:e9:1f:
                    14:e6:5e:a5:20:2c:3e:47:af:d4:cf:28:28:7b:c1:
                    11:48:e5:54:3b:6d:0b:7b:47:1a:23:e7:8f:f4:97:
                    70:6d:f9:49:86:b7:1f:d0:75:bf:a2:dc:5d:ad:d2:
                    a6:a4:fb:64:2c:b6:46:89:ce:c1:03:7d:2b:98:9f:
                    9c:bc:30:82:bc:4a:3f:7c:14:a8:05:e9:f9:1e:f4:
                    b4:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:A5:C1:DA:2E:0B:0A:4A:80:C9:C6:2E:F2:7D:E8:99:8C:10:D3:01
            X509v3 Authority Key Identifier:
                keyid:EB:B7:96:34:02:11:7E:80:30:37:31:0C:E9:8B:39:2F:96:8C:3A:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d5c2c71c-6ae5-4ea9-b850-6300e2e1badf/0/EBB7963402117E803037310CE98B392F968C3A9A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EBB7963402117E803037310CE98B392F968C3A9A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d5c2c71c-6ae5-4ea9-b850-6300e2e1badf/0/EBB7963402117E803037310CE98B392F968C3A9A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:63:7e:f5:01:ab:94:af:37:23:77:99:9d:3e:45:1e:6a:2b:
         11:09:e2:da:9a:87:ad:bf:5f:9d:b9:a0:d4:76:60:7e:f7:c1:
         8c:d7:23:c8:7e:2a:72:9e:a1:5e:f1:86:76:86:cb:1a:b3:e3:
         10:7a:fe:8e:d9:d8:4f:4f:48:f6:d5:25:3a:9c:db:49:0b:5b:
         53:5c:a9:fe:5f:e7:83:a6:e8:88:c5:7e:e0:8f:3c:ab:3e:6c:
         f8:99:39:19:fb:62:f9:09:14:4b:55:a4:ec:0e:3a:76:0f:52:
         b3:cd:0b:fe:2b:d3:20:37:b4:5b:4c:d3:fb:bd:6b:23:7b:ec:
         8b:ca:73:1f:ab:db:f4:f5:b3:8c:ee:f6:f2:0e:26:5b:27:d5:
         e0:8c:c5:85:40:13:a8:2e:93:ff:c9:0d:1d:22:8a:1f:30:ff:
         0c:b9:04:71:b1:ac:22:b5:60:2d:d5:14:19:9d:62:96:4c:06:
         f9:9b:70:3c:a7:01:1d:eb:97:4d:82:fa:bd:16:4f:c7:52:66:
         ad:82:cd:68:2c:e1:2a:bf:7b:15:e3:51:e2:59:c1:7b:8a:d1:
         a9:86:09:09:a6:00:07:fe:2d:6f:04:f2:a9:f4:3e:90:2a:f3:
         31:c6:88:b9:4c:d1:3b:83:f9:22:f7:c9:d4:bc:dc:4d:bc:d8:
         c4:b1:47:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 14:14:29 2025 by rpki-client