This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/0dd078fe-0930-45dc-b403-3ce4e863f8b5/0/EFCC7BEA840185763FF7624CF3DDE00563137A27.mft File: EFCC7BEA840185763FF7624CF3DDE00563137A27.mft (raw, json) Hash identifier: wMWoVt0JHl6aR9mGzi1KUTzasfQXkD9EDXt7fn+mqnk= Subject key identifier: 84:95:B9:3D:DD:E9:1E:A6:99:5B:B0:EB:59:FC:C1:01:4C:82:0B:AA Authority key identifier: EF:CC:7B:EA:84:01:85:76:3F:F7:62:4C:F3:DD:E0:05:63:13:7A:27 Certificate issuer: /CN=EFCC7BEA840185763FF7624CF3DDE00563137A27 Certificate serial: 5D1D39E98D8A484B81C976B867AEE7C7A4B8EDA7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFCC7BEA840185763FF7624CF3DDE00563137A27.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0dd078fe-0930-45dc-b403-3ce4e863f8b5/0/EFCC7BEA840185763FF7624CF3DDE00563137A27.mft Manifest number: 03C0 Signing time: Mon 15 Dec 2025 19:01:12 +0000 Manifest this update: Mon 15 Dec 2025 18:56:12 +0000 Manifest next update: Fri 19 Dec 2025 02:09:12 +0000 Files and hashes: 1: 323430373a613163303a3a2f33322d3332203d3e20313432333135.roa (hash: t9Dk6yRyxGtnxo9p6R4EHJZwYzMqbQXmpijhebxT1Co=) 2: 3130332e3136382e3134392e302f32342d3234203d3e20313432333135.roa (hash: HlXbf2sqo1wPRmjyAMq3IzqSfph/qeQjUmYJ52xMgz8=) 3: EFCC7BEA840185763FF7624CF3DDE00563137A27.crl (hash: TGraxY9rx+GXWrSKfwqOd8G8cpl9BjQ9eV/Id3yWzGw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0dd078fe-0930-45dc-b403-3ce4e863f8b5/0/EFCC7BEA840185763FF7624CF3DDE00563137A27.crl rsync://repo-rpki.idnic.net/repo/0dd078fe-0930-45dc-b403-3ce4e863f8b5/0/EFCC7BEA840185763FF7624CF3DDE00563137A27.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFCC7BEA840185763FF7624CF3DDE00563137A27.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Dec 2025 02:09:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:1d:39:e9:8d:8a:48:4b:81:c9:76:b8:67:ae:e7:c7:a4:b8:ed:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EFCC7BEA840185763FF7624CF3DDE00563137A27 Validity Not Before: Dec 15 18:56:12 2025 GMT Not After : Dec 19 02:09:12 2025 GMT Subject: CN=8495B93DDDE91EA6995BB0EB59FCC1014C820BAA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:e3:c9:c9:05:4f:3b:bf:7f:53:5d:52:e1:58: 51:4c:f2:0b:95:27:98:5a:97:d9:35:a4:b0:39:3a: da:b5:05:93:5e:a1:04:b1:03:93:74:3f:bc:7a:4e: 08:a4:ae:22:88:73:d1:f8:fb:4d:b4:76:93:84:a2: b4:b7:a4:15:cd:12:03:09:64:40:dc:02:a9:15:b7: 36:52:0f:95:8d:2c:ca:7a:77:38:53:27:55:8b:67: d2:ec:12:03:5d:55:92:5d:60:eb:9b:82:d4:3c:cc: a4:06:a2:4d:7d:c6:a2:cf:62:a9:10:01:0f:30:14: 77:97:79:f9:5b:2c:1e:49:ed:fb:a9:46:f6:04:ca: da:8c:6d:7c:77:cc:22:f5:99:e9:2e:7b:83:dd:83: ae:98:f3:60:df:1e:bc:ae:eb:b3:be:61:61:3a:93: 83:4f:81:c7:57:5a:49:50:81:fe:45:aa:50:a7:be: 82:1c:bf:db:62:2f:90:e3:d3:08:23:10:72:65:1f: e8:89:4a:14:ee:11:a0:28:39:5b:94:75:00:6e:c3: a1:e0:c0:1d:db:03:fb:36:be:8f:7b:ed:1f:f9:ba: 55:4b:fd:b1:e6:0d:86:11:e1:25:50:9a:92:16:6e: 36:5d:03:51:1e:13:bb:da:60:c4:bf:92:c1:da:a4: 36:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:95:B9:3D:DD:E9:1E:A6:99:5B:B0:EB:59:FC:C1:01:4C:82:0B:AA X509v3 Authority Key Identifier: keyid:EF:CC:7B:EA:84:01:85:76:3F:F7:62:4C:F3:DD:E0:05:63:13:7A:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0dd078fe-0930-45dc-b403-3ce4e863f8b5/0/EFCC7BEA840185763FF7624CF3DDE00563137A27.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFCC7BEA840185763FF7624CF3DDE00563137A27.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0dd078fe-0930-45dc-b403-3ce4e863f8b5/0/EFCC7BEA840185763FF7624CF3DDE00563137A27.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:d6:ae:89:6e:8f:2b:fe:e0:df:93:b8:12:52:6b:5c:07:19: 5e:d6:6f:ce:be:51:58:27:47:d8:53:7f:bc:c0:3a:ab:01:c6: 3e:18:a4:a2:0d:02:e5:02:91:4a:55:85:29:3f:9c:2a:ca:16: f5:c1:6a:cc:c0:25:64:55:e4:df:67:a3:b6:10:db:be:2a:ee: 64:ec:c4:67:ed:d8:88:da:69:75:8f:d7:ae:a1:8f:7d:aa:4e: fc:db:96:7b:98:36:60:ee:67:d6:20:d8:29:8e:ac:cd:f4:f7: 7f:80:e6:10:80:52:68:00:64:a7:88:6c:73:d5:51:d0:69:4e: d7:76:7f:2a:f6:00:2a:52:5d:6e:2a:45:1f:c6:96:6b:73:93: 0e:c8:c8:38:fe:69:62:60:3b:23:1d:87:6e:0b:c7:71:cf:d9: be:e5:14:03:ce:73:84:fb:e2:b5:fe:a1:ae:8f:5b:4b:50:ca: 35:1f:16:cb:d4:af:21:19:8e:b1:cd:75:4b:f6:9a:63:b7:57: 3a:70:86:d2:db:8a:f0:72:42:b7:65:9c:fc:c0:53:20:6f:85: f9:20:01:35:84:c3:8a:e0:92:e2:f4:e3:59:33:0d:74:6d:4e: db:e4:87:3c:18:4b:65:2c:48:5d:7e:67:4c:ec:47:0b:92:22: 31:93:ee:1f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXR056Y2KSEuByXa4Z67nx6S47acwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUZDQzdCRUE4NDAxODU3NjNGRjc2MjRDRjNEREUwMDU2 MzEzN0EyNzAeFw0yNTEyMTUxODU2MTJaFw0yNTEyMTkwMjA5MTJaMDMxMTAvBgNV BAMTKDg0OTVCOTNERERFOTFFQTY5OTVCQjBFQjU5RkNDMTAxNEM4MjBCQUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN48nJBU87v39TXVLhWFFM8guV J5hal9k1pLA5Otq1BZNeoQSxA5N0P7x6TgikriKIc9H4+020dpOEorS3pBXNEgMJ ZEDcAqkVtzZSD5WNLMp6dzhTJ1WLZ9LsEgNdVZJdYOubgtQ8zKQGok19xqLPYqkQ AQ8wFHeXeflbLB5J7fupRvYEytqMbXx3zCL1mekue4Pdg66Y82DfHryu67O+YWE6 k4NPgcdXWklQgf5FqlCnvoIcv9tiL5Dj0wgjEHJlH+iJShTuEaAoOVuUdQBuw6Hg wB3bA/s2vo977R/5ulVL/bHmDYYR4SVQmpIWbjZdA1EeE7vaYMS/ksHapDZtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhJW5Pd3pHqaZW7DrWfzBAUyCC6owHwYDVR0j BBgwFoAU78x76oQBhXY/92JM893gBWMTeicwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZGQwNzhmZS0wOTMwLTQ1ZGMtYjQwMy0zY2U0ZTg2M2Y4YjUvMC9FRkNDN0JFQTg0 MDE4NTc2M0ZGNzYyNENGM0RERTAwNTYzMTM3QTI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUZDQzdCRUE4NDAxODU3NjNGRjc2MjRDRjNEREUwMDU2MzEz N0EyNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGRkMDc4ZmUtMDkzMC00NWRjLWI0 MDMtM2NlNGU4NjNmOGI1LzAvRUZDQzdCRUE4NDAxODU3NjNGRjc2MjRDRjNEREUw MDU2MzEzN0EyNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD7Wrolujyv+4N+TuBJSa1wHGV7Wb86+UVgn R9hTf7zAOqsBxj4YpKINAuUCkUpVhSk/nCrKFvXBaszAJWRV5N9no7YQ274q7mTs xGft2IjaaXWP166hj32qTvzblnuYNmDuZ9Yg2CmOrM3093+A5hCAUmgAZKeIbHPV UdBpTtd2fyr2ACpSXW4qRR/Glmtzkw7IyDj+aWJgOyMdh24Lx3HP2b7lFAPOc4T7 4rX+oa6PW0tQyjUfFsvUryEZjrHNdUv2mmO3VzpwhtLbivByQrdlnPzAUyBvhfkg ATWEw4rgkuL041kzDXRtTtvkhzwYS2UsSF1+Z0zsRwuSIjGT7h8= -----END CERTIFICATE-----Generated at Tue Dec 16 20:57:05 2025 by rpki-client