This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/0/EEC1A7BF2D95D0BAFE37105E4BB1BB23601DD1DB.mft
File: EEC1A7BF2D95D0BAFE37105E4BB1BB23601DD1DB.mft (raw, json)
Hash identifier: vbGcIAInjxOjoaHt/OIvYcrmINHIf61phRj4W8qWhHk=
Subject key identifier: 74:31:68:72:BF:F6:13:20:89:D4:FE:AC:D9:FD:B1:24:1F:C4:10:0B
Authority key identifier: EE:C1:A7:BF:2D:95:D0:BA:FE:37:10:5E:4B:B1:BB:23:60:1D:D1:DB
Certificate issuer: /CN=EEC1A7BF2D95D0BAFE37105E4BB1BB23601DD1DB
Certificate serial: 418C538421786B4FC03EAEC8DB1B371363B44EF7
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/EEC1A7BF2D95D0BAFE37105E4BB1BB23601DD1DB.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/0/EEC1A7BF2D95D0BAFE37105E4BB1BB23601DD1DB.mft
Manifest number: E5
Signing time: Sun 07 Dec 2025 11:22:15 +0000
Manifest this update: Sun 07 Dec 2025 11:17:15 +0000
Manifest next update: Wed 10 Dec 2025 20:36:15 +0000
Files and hashes: 1: 3136302e32352e34352e302f32342d3234203d3e20313533303639.roa (hash: pjrXRUj5r2IszWCXojX+FWGkandw2VMiyslpGWMGbUA=)
2: EEC1A7BF2D95D0BAFE37105E4BB1BB23601DD1DB.crl (hash: 0GVqQu0M0wcKlsJj7/gmzlwo6RMqjAbvt46V7D1XwaM=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/0/EEC1A7BF2D95D0BAFE37105E4BB1BB23601DD1DB.crl
rsync://repo-rpki.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/0/EEC1A7BF2D95D0BAFE37105E4BB1BB23601DD1DB.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/EEC1A7BF2D95D0BAFE37105E4BB1BB23601DD1DB.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 10 Dec 2025 20:36:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:8c:53:84:21:78:6b:4f:c0:3e:ae:c8:db:1b:37:13:63:b4:4e:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EEC1A7BF2D95D0BAFE37105E4BB1BB23601DD1DB
Validity
Not Before: Dec 7 11:17:15 2025 GMT
Not After : Dec 10 20:36:15 2025 GMT
Subject: CN=74316872BFF6132089D4FEACD9FDB1241FC4100B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:9b:f4:ee:c1:44:93:74:ca:d0:47:11:9b:1a:
04:34:b0:f4:76:4b:df:09:91:0b:99:80:cb:2f:32:
de:14:87:c2:92:d6:04:fe:9e:69:42:7f:3d:8d:01:
77:b6:c6:5a:92:a7:c2:22:aa:1c:e6:77:67:75:d8:
75:ec:6f:1b:42:8c:7a:10:23:3d:a4:83:7a:e1:19:
4d:01:25:33:82:0e:e1:b3:79:57:c5:37:56:ab:a2:
4b:70:07:31:12:52:e8:17:46:13:5d:a5:15:e5:a8:
71:90:8a:58:fb:9b:56:7b:97:eb:78:bd:81:6b:59:
f2:91:63:f7:61:b4:97:1e:cb:ae:e6:2f:1d:cb:40:
f4:2f:a1:92:15:66:d9:4c:7a:c1:9b:09:d8:ae:38:
06:09:72:25:4b:d4:69:eb:fd:c7:29:0c:da:24:bc:
61:0d:8e:48:22:31:bf:85:69:e9:30:46:c6:6a:57:
24:4f:81:89:a6:94:80:4f:79:c9:7f:f5:fd:84:0b:
4c:35:1e:8a:39:9b:74:cc:13:88:cb:1f:08:cf:ff:
4e:df:13:0a:01:88:aa:7c:db:30:e2:05:28:a2:5e:
8c:23:bc:8e:d2:8d:bf:4a:0d:41:c3:01:c5:9e:4b:
5e:cd:f3:11:53:39:60:67:76:41:7c:a0:44:03:a8:
2b:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:31:68:72:BF:F6:13:20:89:D4:FE:AC:D9:FD:B1:24:1F:C4:10:0B
X509v3 Authority Key Identifier:
keyid:EE:C1:A7:BF:2D:95:D0:BA:FE:37:10:5E:4B:B1:BB:23:60:1D:D1:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/0/EEC1A7BF2D95D0BAFE37105E4BB1BB23601DD1DB.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/EEC1A7BF2D95D0BAFE37105E4BB1BB23601DD1DB.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/0/EEC1A7BF2D95D0BAFE37105E4BB1BB23601DD1DB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
db:c5:95:4d:8a:91:29:0c:36:8a:77:14:24:ae:e6:24:0f:e4:
24:73:7d:a7:d8:30:a2:29:60:74:21:aa:1a:28:05:a4:2e:24:
9b:7a:d9:b2:27:40:19:74:99:5e:c4:cf:75:2f:de:2e:30:e3:
74:99:f7:9c:86:87:a6:6f:f6:78:c0:0e:1e:af:90:a5:39:e6:
0e:63:46:33:5c:b8:0a:45:90:61:7c:49:d3:82:6c:6e:25:db:
be:95:47:fe:a5:48:41:4f:17:d5:05:66:94:1c:1b:b4:a8:0e:
bc:02:d2:fc:18:a4:72:30:5f:6b:b3:b0:42:dc:bc:e2:9d:17:
28:55:82:40:a0:55:1b:4e:51:fc:2b:2c:c2:fa:15:55:99:f7:
03:cf:03:8d:46:76:b8:0e:12:16:a6:15:4f:c3:44:1c:59:e5:
8c:0d:7f:f2:33:58:d9:08:4a:53:f9:c7:20:9c:f1:ee:b8:57:
54:a8:8d:84:4f:d4:5b:a0:dd:88:65:d0:67:1e:fe:8a:3b:ef:
47:b8:f3:b3:57:2b:91:44:fe:dd:da:7c:4e:11:33:61:ba:5f:
53:9c:ed:b0:34:99:99:69:38:a7:9c:bd:5f:45:30:08:76:7d:
f8:bd:70:9c:6a:79:c2:03:7b:d6:95:37:7f:52:60:2d:05:9e:
de:dc:cd:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 9 01:39:24 2025 by rpki-client