This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/453ac667-4d9e-48d7-afd6-82e98fa76c1e/0/EC1B9BE63137230F6756E222019318C640EBE42E.mft File: EC1B9BE63137230F6756E222019318C640EBE42E.mft (raw, json) Hash identifier: /BrRRb3qwNXM5MJFNNF3ZMOuRfne/zqRE7k3ZcF1spE= Subject key identifier: 95:07:10:9C:75:60:CC:85:DA:C4:DE:2F:CB:93:42:F7:7B:E0:CD:ED Authority key identifier: EC:1B:9B:E6:31:37:23:0F:67:56:E2:22:01:93:18:C6:40:EB:E4:2E Certificate issuer: /CN=EC1B9BE63137230F6756E222019318C640EBE42E Certificate serial: 5820A933CB993E22C507F1F41CCF2B701F21CFDD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/EC1B9BE63137230F6756E222019318C640EBE42E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/453ac667-4d9e-48d7-afd6-82e98fa76c1e/0/EC1B9BE63137230F6756E222019318C640EBE42E.mft Manifest number: 0124 Signing time: Fri 05 Dec 2025 14:41:45 +0000 Manifest this update: Fri 05 Dec 2025 14:36:45 +0000 Manifest next update: Mon 08 Dec 2025 16:02:45 +0000 Files and hashes: 1: EC1B9BE63137230F6756E222019318C640EBE42E.crl (hash: Ej4cQ5/nAF19C+cvt1RwjhAvccTDV0AVd8PsbQ4CGRE=) 2: 3135372e31352e3136362e302f32342d3234203d3e20313532333832.roa (hash: 5wOzKGDtK4zeM+14oVf5CebWsbPEoKuI00n5y47Z804=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/453ac667-4d9e-48d7-afd6-82e98fa76c1e/0/EC1B9BE63137230F6756E222019318C640EBE42E.crl rsync://repo-rpki.idnic.net/repo/453ac667-4d9e-48d7-afd6-82e98fa76c1e/0/EC1B9BE63137230F6756E222019318C640EBE42E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/EC1B9BE63137230F6756E222019318C640EBE42E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 16:02:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:20:a9:33:cb:99:3e:22:c5:07:f1:f4:1c:cf:2b:70:1f:21:cf:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EC1B9BE63137230F6756E222019318C640EBE42E Validity Not Before: Dec 5 14:36:45 2025 GMT Not After : Dec 8 16:02:45 2025 GMT Subject: CN=9507109C7560CC85DAC4DE2FCB9342F77BE0CDED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:6d:a7:56:6f:e8:af:19:7a:3c:ec:89:ff:63: 18:98:f8:1a:36:1c:38:29:e9:ea:f6:51:bc:a6:d3: 70:0c:19:4c:83:c0:9b:c2:1b:3f:6b:69:7f:ea:30: 70:38:20:3d:d3:9f:4c:44:7a:16:3a:9d:f5:dd:39: 04:cb:0e:2f:46:0f:26:2f:6d:96:b7:77:c7:43:8f: f6:cb:d0:e1:f6:2f:fc:d5:3c:46:ee:fe:79:72:40: 85:cb:fa:e8:9b:89:63:c2:f0:9f:21:b9:dd:97:bd: c5:96:7b:18:58:34:90:f5:1b:59:3b:57:dd:ef:1d: 7c:12:1c:f7:cc:d3:dd:04:3f:46:0b:d2:dd:93:6e: d5:4c:80:ac:37:5c:06:f5:41:de:f1:61:a0:09:c2: 97:11:a9:2c:4a:10:be:0f:e5:bd:7d:da:42:95:3d: 00:07:e7:37:a2:e6:c3:3a:df:ce:85:55:41:bc:67: 10:22:e1:43:9a:1e:96:9a:53:4d:53:50:02:d8:c1: 8e:c1:fb:73:c9:ea:81:1f:fc:41:d6:6e:34:89:92: 8c:ab:3f:14:17:41:40:de:ec:f8:f6:d7:55:6d:72: 53:d1:54:88:68:98:b6:8c:ea:48:ae:36:8e:67:99: e5:0e:f4:94:41:d1:8e:06:4a:de:f9:ec:4a:7c:df: 50:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:07:10:9C:75:60:CC:85:DA:C4:DE:2F:CB:93:42:F7:7B:E0:CD:ED X509v3 Authority Key Identifier: keyid:EC:1B:9B:E6:31:37:23:0F:67:56:E2:22:01:93:18:C6:40:EB:E4:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/453ac667-4d9e-48d7-afd6-82e98fa76c1e/0/EC1B9BE63137230F6756E222019318C640EBE42E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/EC1B9BE63137230F6756E222019318C640EBE42E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/453ac667-4d9e-48d7-afd6-82e98fa76c1e/0/EC1B9BE63137230F6756E222019318C640EBE42E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:2a:60:5e:1a:92:03:99:ad:48:76:54:f1:4a:74:6e:98:f7: c7:e8:47:4b:b1:10:f5:b9:16:20:fa:ad:6e:4e:40:6a:65:3b: 63:87:2f:21:d7:a7:11:9c:91:9b:6a:c8:cd:b5:82:9a:ea:c3: 7f:ea:1f:81:c5:fa:8d:07:e7:22:f9:05:67:12:e7:45:a7:f0: 6d:da:15:dc:d6:0a:36:99:70:0e:65:96:7f:17:1e:05:56:a2: df:75:a5:6d:2d:36:cc:c6:08:8f:eb:27:2b:7a:14:f1:c5:14: 6d:27:60:37:2e:e5:92:34:e1:51:e4:3f:b5:d5:72:ff:6f:7c: 89:c5:1b:83:91:ca:38:3e:49:28:05:ed:09:5e:2c:b6:b5:76: 56:6e:8b:77:4a:f3:49:81:44:13:41:f8:9f:73:0b:7b:e3:b6: 5d:4a:a0:c0:fc:c7:dd:14:5f:b6:be:dd:a5:a1:23:87:ca:40: 43:c0:68:4f:70:88:b0:1b:d5:53:c4:7e:a1:1c:7c:17:42:4c: b1:bc:e5:14:c2:f3:cf:62:02:b9:66:24:2f:fb:38:72:d0:65: eb:68:7b:f1:b8:98:bc:91:16:fc:ea:ef:f3:c3:ec:64:90:ac: 44:d8:78:f6:c9:1d:13:80:78:f3:b1:74:e8:59:f8:dc:1f:b7: 13:ea:e1:da -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWCCpM8uZPiLFB/H0HM8rcB8hz90wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUMxQjlCRTYzMTM3MjMwRjY3NTZFMjIyMDE5MzE4QzY0 MEVCRTQyRTAeFw0yNTEyMDUxNDM2NDVaFw0yNTEyMDgxNjAyNDVaMDMxMTAvBgNV BAMTKDk1MDcxMDlDNzU2MENDODVEQUM0REUyRkNCOTM0MkY3N0JFMENERUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFbadWb+ivGXo87In/YxiY+Bo2 HDgp6er2Ubym03AMGUyDwJvCGz9raX/qMHA4ID3Tn0xEehY6nfXdOQTLDi9GDyYv bZa3d8dDj/bL0OH2L/zVPEbu/nlyQIXL+uibiWPC8J8hud2XvcWWexhYNJD1G1k7 V93vHXwSHPfM090EP0YL0t2TbtVMgKw3XAb1Qd7xYaAJwpcRqSxKEL4P5b192kKV PQAH5zei5sM6386FVUG8ZxAi4UOaHpaaU01TUALYwY7B+3PJ6oEf/EHWbjSJkoyr PxQXQUDe7Pj211VtclPRVIhomLaM6kiuNo5nmeUO9JRB0Y4GSt757Ep831BDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlQcQnHVgzIXaxN4vy5NC93vgze0wHwYDVR0j BBgwFoAU7Bub5jE3Iw9nVuIiAZMYxkDr5C4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NTNhYzY2Ny00ZDllLTQ4ZDctYWZkNi04MmU5OGZhNzZjMWUvMC9FQzFCOUJFNjMx MzcyMzBGNjc1NkUyMjIwMTkzMThDNjQwRUJFNDJFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRUMxQjlCRTYzMTM3MjMwRjY3NTZFMjIyMDE5MzE4QzY0MEVC RTQyRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDUzYWM2NjctNGQ5ZS00OGQ3LWFm ZDYtODJlOThmYTc2YzFlLzAvRUMxQjlCRTYzMTM3MjMwRjY3NTZFMjIyMDE5MzE4 QzY0MEVCRTQyRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABoqYF4akgOZrUh2VPFKdG6Y98foR0uxEPW5 FiD6rW5OQGplO2OHLyHXpxGckZtqyM21gprqw3/qH4HF+o0H5yL5BWcS50Wn8G3a FdzWCjaZcA5lln8XHgVWot91pW0tNszGCI/rJyt6FPHFFG0nYDcu5ZI04VHkP7XV cv9vfInFG4ORyjg+SSgF7QleLLa1dlZui3dK80mBRBNB+J9zC3vjtl1KoMD8x90U X7a+3aWhI4fKQEPAaE9wiLAb1VPEfqEcfBdCTLG85RTC889iArlmJC/7OHLQZeto e/G4mLyRFvzq7/PD7GSQrETYePbJHROAePOxdOhZ+NwftxPq4do= -----END CERTIFICATE-----Generated at Sun Dec 7 00:34:01 2025 by rpki-client