This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/757e6878-6cb2-4a5f-b553-bceb2c95c76c/0/EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1.mft
File:                     EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1.mft (raw, json)
Hash identifier:          6eIW9WSzwfKnecEYrxMK2bdsCOa0ehQbjMVh3cS+uBA=
Subject key identifier:   AD:F5:3D:59:3D:75:6B:1C:50:99:47:E7:4B:4E:30:35:25:6C:C2:36
Authority key identifier: EE:72:DE:38:4F:9A:B7:FA:D6:C3:B2:86:3A:5D:B1:28:1E:5E:DC:A1
Certificate issuer:       /CN=EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1
Certificate serial:       15B04BC7F9229CE92D6AB55C39C7A2D77B3EC566
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/757e6878-6cb2-4a5f-b553-bceb2c95c76c/0/EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1.mft
Manifest number:          0156
Signing time:             Tue 23 Dec 2025 06:51:14 +0000
Manifest this update:     Tue 23 Dec 2025 06:46:14 +0000
Manifest next update:     Fri 26 Dec 2025 17:01:14 +0000
Files and hashes:         1: EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1.crl (hash: qQOSWTUW3q6Y1TJvwwk2ObhrzpwgBbs8dlLVmZMAwdM=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/757e6878-6cb2-4a5f-b553-bceb2c95c76c/0/EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1.crl
                          rsync://repo-rpki.idnic.net/repo/757e6878-6cb2-4a5f-b553-bceb2c95c76c/0/EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 17:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:b0:4b:c7:f9:22:9c:e9:2d:6a:b5:5c:39:c7:a2:d7:7b:3e:c5:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1
        Validity
            Not Before: Dec 23 06:46:14 2025 GMT
            Not After : Dec 26 17:01:14 2025 GMT
        Subject: CN=ADF53D593D756B1C509947E74B4E3035256CC236
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:25:45:ae:03:80:52:df:da:c3:c8:18:24:a7:
                    28:00:b4:26:33:6f:6b:22:59:f3:51:1d:98:5d:bb:
                    d2:a2:2a:61:80:f1:67:58:6b:c8:1c:9a:f9:e7:75:
                    1d:96:94:1e:14:2c:2e:5d:57:91:30:37:0c:ae:3c:
                    17:05:f6:10:a2:51:2b:3c:c4:48:b2:66:86:ec:da:
                    24:05:24:00:60:d1:d3:a0:45:49:af:ed:13:57:0b:
                    57:10:52:41:99:72:0e:a1:4d:0d:17:d4:1e:22:bd:
                    db:92:a4:db:a9:2a:98:d8:d9:18:2a:cd:b1:4d:21:
                    31:1c:73:f5:1b:f7:fb:ec:6d:f5:ca:d4:bc:15:3b:
                    9c:64:33:89:1f:e0:1b:6c:a7:ad:6f:2b:1c:83:60:
                    aa:9a:f1:78:69:69:76:ea:76:d7:ad:e5:67:be:7b:
                    2d:9d:0c:a1:84:28:be:60:eb:89:91:4a:6b:ce:3c:
                    92:2d:4d:65:0b:9d:47:a0:ff:68:a9:3d:1c:7a:74:
                    31:7f:0d:ef:44:a8:cb:95:7e:25:96:4e:bd:72:10:
                    d7:48:6c:83:a3:6c:6e:c0:5d:ae:5b:bf:c1:48:78:
                    66:d3:25:65:fb:35:09:19:6d:24:d6:98:6e:b1:72:
                    04:de:51:13:48:3f:55:59:e9:03:01:28:ba:45:37:
                    33:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:F5:3D:59:3D:75:6B:1C:50:99:47:E7:4B:4E:30:35:25:6C:C2:36
            X509v3 Authority Key Identifier:
                keyid:EE:72:DE:38:4F:9A:B7:FA:D6:C3:B2:86:3A:5D:B1:28:1E:5E:DC:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/757e6878-6cb2-4a5f-b553-bceb2c95c76c/0/EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/757e6878-6cb2-4a5f-b553-bceb2c95c76c/0/EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:94:d7:36:f2:16:50:83:43:4f:c8:19:d4:ae:be:30:1a:19:
         c8:06:66:eb:4d:87:a3:54:56:62:d3:1f:6d:10:00:46:60:f3:
         88:25:e0:0c:5e:50:6a:93:6b:42:5f:75:2c:86:78:98:9c:31:
         81:d1:4e:6c:ad:5a:64:e2:5e:67:0b:2c:16:99:06:cb:88:96:
         05:0c:b6:24:85:13:6f:e1:0f:d2:e1:0d:49:5a:d6:ac:3e:23:
         a7:b8:2b:21:50:45:43:1a:18:3e:81:c9:71:62:df:52:7e:92:
         18:78:ab:5b:de:54:a9:fb:a7:20:ce:75:32:a3:ea:07:9d:51:
         cd:5c:33:fd:2b:95:f8:c9:6a:3c:7c:23:3d:55:73:46:07:9e:
         bb:b3:c9:70:f1:86:f8:32:21:94:ee:ca:3d:68:4c:9c:a1:7a:
         37:d0:3e:91:52:f8:45:9b:eb:52:e5:b0:8c:68:54:b5:36:87:
         f7:f2:54:47:81:c7:67:6e:53:be:47:ea:df:1b:7e:a0:71:9d:
         ee:64:af:93:6d:9d:32:3b:cd:9e:bf:ea:14:8c:a5:94:2e:f1:
         aa:d5:c3:40:2e:71:07:01:a5:a3:ba:7c:7a:4a:12:1f:5f:0a:
         cf:c8:f3:04:09:ff:80:e3:23:a2:de:bf:25:86:24:dd:85:89:
         1f:2d:25:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 25 13:05:47 2025 by rpki-client