This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/29fc996f-72ca-4d6b-a0e7-ff5bc42b0589/0/EECC4A44F09594EB711EA1F6F34B958D19A3B4FD.mft
File:                     EECC4A44F09594EB711EA1F6F34B958D19A3B4FD.mft (raw, json)
Hash identifier:          X88wsBrpHpQGJ46rHViwJX81u0eA/YMfOG4pSW35r1U=
Subject key identifier:   E6:76:78:F9:EE:2B:EE:6B:CB:DD:FA:FC:47:7A:8C:73:CE:79:24:8E
Authority key identifier: EE:CC:4A:44:F0:95:94:EB:71:1E:A1:F6:F3:4B:95:8D:19:A3:B4:FD
Certificate issuer:       /CN=EECC4A44F09594EB711EA1F6F34B958D19A3B4FD
Certificate serial:       7A576956D8BC5386743E93F239F07A82B9B4BEC9
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EECC4A44F09594EB711EA1F6F34B958D19A3B4FD.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/29fc996f-72ca-4d6b-a0e7-ff5bc42b0589/0/EECC4A44F09594EB711EA1F6F34B958D19A3B4FD.mft
Manifest number:          01C8
Signing time:             Sun 21 Dec 2025 12:32:01 +0000
Manifest this update:     Sun 21 Dec 2025 12:27:01 +0000
Manifest next update:     Wed 24 Dec 2025 16:05:01 +0000
Files and hashes:         1: EECC4A44F09594EB711EA1F6F34B958D19A3B4FD.crl (hash: AZxV0O7Exkl5Ly4hje/foqpwveCVTjYAqfCOIdpKiho=)
                          2: 3130332e3230342e31352e302f32342d3234203d3e20313530393230.roa (hash: 84mIKFs557T9blcI7/exXdbBapxr7Cu4g0VLqBjO/cg=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/29fc996f-72ca-4d6b-a0e7-ff5bc42b0589/0/EECC4A44F09594EB711EA1F6F34B958D19A3B4FD.crl
                          rsync://repo-rpki.idnic.net/repo/29fc996f-72ca-4d6b-a0e7-ff5bc42b0589/0/EECC4A44F09594EB711EA1F6F34B958D19A3B4FD.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EECC4A44F09594EB711EA1F6F34B958D19A3B4FD.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 24 Dec 2025 16:05:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:57:69:56:d8:bc:53:86:74:3e:93:f2:39:f0:7a:82:b9:b4:be:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EECC4A44F09594EB711EA1F6F34B958D19A3B4FD
        Validity
            Not Before: Dec 21 12:27:01 2025 GMT
            Not After : Dec 24 16:05:01 2025 GMT
        Subject: CN=E67678F9EE2BEE6BCBDDFAFC477A8C73CE79248E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:fe:59:0e:e2:d9:76:3c:2b:2c:68:5e:7b:0a:
                    3e:e0:38:82:9b:3e:7a:c7:1a:3e:42:82:ae:11:74:
                    27:5b:df:ff:cb:53:15:4b:a1:e5:02:57:e7:84:30:
                    74:e3:34:8b:3b:0b:22:6f:c2:f9:ea:2e:17:60:d9:
                    78:2b:9a:07:b5:a5:eb:12:bf:0d:c0:32:cb:84:2d:
                    88:37:ba:91:f4:a9:19:8d:af:40:80:f9:6b:17:7c:
                    6c:86:26:32:f0:f0:e4:c4:38:ef:43:71:1f:dc:08:
                    b4:3b:f7:93:a0:99:fc:f2:e6:ed:ad:e8:3d:b1:a1:
                    6b:e6:96:fe:8a:d6:a3:e3:1b:be:c9:fc:60:04:50:
                    66:16:a3:10:58:14:15:7c:1e:23:39:74:00:0d:a2:
                    a3:e1:2b:62:a1:14:43:1d:15:11:8f:0f:03:8f:dd:
                    d7:30:c0:ef:41:6c:72:7e:89:2b:cf:8d:e5:40:94:
                    62:8a:cc:c1:39:13:08:58:03:18:28:c3:bc:4e:52:
                    bc:f0:92:0a:5a:47:a4:07:fc:ab:54:20:3a:4a:b7:
                    10:74:97:e7:0f:1a:8d:ab:37:ae:64:61:c3:e1:8b:
                    3a:97:1b:43:1b:64:3c:50:d6:d9:85:80:ac:83:e6:
                    52:85:35:06:58:4b:5c:76:d7:d0:e7:cd:81:75:44:
                    ec:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:76:78:F9:EE:2B:EE:6B:CB:DD:FA:FC:47:7A:8C:73:CE:79:24:8E
            X509v3 Authority Key Identifier:
                keyid:EE:CC:4A:44:F0:95:94:EB:71:1E:A1:F6:F3:4B:95:8D:19:A3:B4:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/29fc996f-72ca-4d6b-a0e7-ff5bc42b0589/0/EECC4A44F09594EB711EA1F6F34B958D19A3B4FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EECC4A44F09594EB711EA1F6F34B958D19A3B4FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/29fc996f-72ca-4d6b-a0e7-ff5bc42b0589/0/EECC4A44F09594EB711EA1F6F34B958D19A3B4FD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:7e:dd:33:27:75:af:be:8b:92:01:cd:4e:78:94:02:27:d9:
         c5:ee:47:89:9b:15:e6:93:ac:d6:b3:80:c4:a5:a9:ea:fd:d9:
         c0:d8:57:68:35:84:68:2f:e7:56:08:27:a5:e0:ab:25:8f:39:
         9f:15:f5:c3:0a:a8:35:1f:0b:e0:83:cf:33:47:11:e4:76:1a:
         3d:fc:12:64:a9:06:c1:a6:fc:fd:0d:eb:f6:8e:7f:96:c3:34:
         a3:30:49:49:97:1d:fb:9d:94:9c:3d:67:74:72:6d:9f:38:c6:
         fa:fb:ed:fc:48:ba:cd:85:59:72:8a:57:db:58:68:03:c6:f0:
         57:84:32:40:66:dc:65:e9:33:09:2b:f0:d9:01:b6:be:92:1c:
         61:9c:18:cc:3d:63:d5:27:60:c2:80:5d:bc:1f:95:2a:93:f8:
         5a:39:7c:0f:63:f2:78:52:36:75:5d:0f:50:29:05:90:cf:36:
         11:55:75:e4:1a:09:4c:e9:90:52:b2:52:af:cf:53:02:fb:eb:
         2e:4c:d5:5d:3b:23:9b:c0:09:a4:b8:4d:fd:72:42:d4:d7:f8:
         9c:4d:3d:4e:1e:3f:a8:dd:ca:82:d3:05:a8:4e:40:fa:3b:39:
         7d:f6:07:58:d1:55:38:68:58:66:3b:b1:93:1d:a9:18:c9:ef:
         04:dc:6f:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 10:31:11 2025 by rpki-client