This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/fe1cbd79-8f26-4b0e-8b3b-ab9e9938fcae/0/EC973BE13EF324E7D59046CF7690A12F9DF12932.mft
File:                     EC973BE13EF324E7D59046CF7690A12F9DF12932.mft (raw, json)
Hash identifier:          U/6gJpthGHE6C9fImk9bVsiBI/ZIG61itysKpb2cE20=
Subject key identifier:   48:2B:1B:B3:D4:08:74:E9:A3:57:6B:85:A5:DC:06:68:83:4E:FC:D0
Authority key identifier: EC:97:3B:E1:3E:F3:24:E7:D5:90:46:CF:76:90:A1:2F:9D:F1:29:32
Certificate issuer:       /CN=EC973BE13EF324E7D59046CF7690A12F9DF12932
Certificate serial:       74F00847015AAAFCAF1D23E0778FE819EA825D42
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC973BE13EF324E7D59046CF7690A12F9DF12932.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/fe1cbd79-8f26-4b0e-8b3b-ab9e9938fcae/0/EC973BE13EF324E7D59046CF7690A12F9DF12932.mft
Manifest number:          0274
Signing time:             Thu 18 Dec 2025 03:51:23 +0000
Manifest this update:     Thu 18 Dec 2025 03:46:23 +0000
Manifest next update:     Sun 21 Dec 2025 08:59:23 +0000
Files and hashes:         1: 3130332e3138312e37362e302f32342d3234203d3e20313439333739.roa (hash: Fd7yVNtVPCM6piUfSXh9X3JKHqUDZdjbopzWmm3ObMk=)
                          2: EC973BE13EF324E7D59046CF7690A12F9DF12932.crl (hash: G+E9QKl9ObdXhJyg4epPtQ/q6sJac3NzxiiTJ1ZsL/g=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/fe1cbd79-8f26-4b0e-8b3b-ab9e9938fcae/0/EC973BE13EF324E7D59046CF7690A12F9DF12932.crl
                          rsync://repo-rpki.idnic.net/repo/fe1cbd79-8f26-4b0e-8b3b-ab9e9938fcae/0/EC973BE13EF324E7D59046CF7690A12F9DF12932.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC973BE13EF324E7D59046CF7690A12F9DF12932.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 21 Dec 2025 08:59:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:f0:08:47:01:5a:aa:fc:af:1d:23:e0:77:8f:e8:19:ea:82:5d:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC973BE13EF324E7D59046CF7690A12F9DF12932
        Validity
            Not Before: Dec 18 03:46:23 2025 GMT
            Not After : Dec 21 08:59:23 2025 GMT
        Subject: CN=482B1BB3D40874E9A3576B85A5DC0668834EFCD0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:8f:c6:42:ad:80:3d:b5:af:e6:75:5e:02:c2:
                    cd:d3:f1:a0:15:12:3f:b3:62:03:7a:0c:cb:ba:a0:
                    2c:6c:34:e1:61:cc:47:8e:3f:00:99:6c:69:46:05:
                    40:00:3c:b6:a4:18:da:8c:d4:48:0c:0c:6b:64:72:
                    b6:96:b0:5c:17:78:00:f0:e9:1b:af:40:b1:67:8d:
                    63:03:93:31:eb:77:6d:d5:00:e9:34:b6:c6:9c:7b:
                    87:d9:a8:ac:ff:5e:a2:52:78:56:3a:66:a8:68:1a:
                    c5:23:8e:e1:c4:7a:c6:39:b8:e4:11:f9:6c:e5:a3:
                    ae:be:f6:a3:17:95:1b:e0:56:d3:c8:cb:0c:3c:6e:
                    42:99:1a:5f:c6:6d:58:ce:06:91:95:70:85:78:ae:
                    fe:e0:58:fa:12:01:06:5b:c8:e2:e6:e2:81:22:2c:
                    c6:e3:b1:9a:de:57:ec:4a:d1:a1:fd:53:de:74:b3:
                    4e:fc:03:8c:bf:f5:92:d0:68:d2:fa:b5:cb:d9:6c:
                    e9:a9:1a:58:28:74:09:c3:2a:b1:78:cc:42:fc:c1:
                    1f:d1:71:08:15:5f:d6:1b:f3:d4:e5:d6:b8:6a:34:
                    b6:f5:66:de:97:c1:b4:50:00:47:a4:74:57:fd:aa:
                    77:03:7a:ba:b2:65:eb:bb:90:f5:7d:7e:df:de:e9:
                    5c:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:2B:1B:B3:D4:08:74:E9:A3:57:6B:85:A5:DC:06:68:83:4E:FC:D0
            X509v3 Authority Key Identifier:
                keyid:EC:97:3B:E1:3E:F3:24:E7:D5:90:46:CF:76:90:A1:2F:9D:F1:29:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/fe1cbd79-8f26-4b0e-8b3b-ab9e9938fcae/0/EC973BE13EF324E7D59046CF7690A12F9DF12932.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC973BE13EF324E7D59046CF7690A12F9DF12932.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fe1cbd79-8f26-4b0e-8b3b-ab9e9938fcae/0/EC973BE13EF324E7D59046CF7690A12F9DF12932.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:07:6c:8e:f5:0a:c9:7f:c7:82:3f:ed:8a:ca:03:72:b6:ce:
         e9:09:34:d9:37:42:36:78:c4:4f:0a:f4:56:85:ce:18:ed:de:
         a5:c8:c4:e8:9e:60:0d:82:bb:db:19:9a:2e:b9:e3:52:c5:66:
         3b:af:1a:2d:5d:ca:c7:34:6c:5c:ac:13:c1:78:26:e9:91:00:
         e9:83:1d:1c:4f:44:2c:7a:3f:6b:d0:90:dd:64:9a:31:f1:ab:
         a9:70:1b:b0:fa:c7:ae:71:f2:ad:84:06:07:8d:83:19:c1:a1:
         ac:39:82:a4:21:7e:fb:16:76:8d:4d:89:ce:9c:29:6d:e2:5f:
         1d:37:17:b2:f5:3a:26:24:17:33:89:3d:99:7c:7b:b0:c1:42:
         77:5b:59:6d:7e:d4:fe:2b:08:bc:ef:19:b4:6e:20:b8:43:67:
         c6:0f:6b:22:fc:92:cd:ac:5d:3b:26:57:90:d5:e7:ba:97:cb:
         eb:26:7a:97:72:98:d5:04:2c:55:0e:b9:22:89:2c:a3:b4:62:
         c0:fe:1f:1e:16:21:01:bd:03:51:1e:35:76:62:e1:4d:87:10:
         b8:1b:2d:21:4e:9b:31:44:f3:38:35:ab:d6:55:c9:87:44:91:
         11:26:b9:2c:8e:5f:9e:0e:b0:d3:72:9f:0a:77:2f:bf:cd:16:
         11:3f:9f:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 17:30:10 2025 by rpki-client