This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/543cc6a8-e7aa-4f37-bd08-f2eb57e88736/0/EFBA99D11F5C07B48EC639EB1119AB525D8050AF.mft File: EFBA99D11F5C07B48EC639EB1119AB525D8050AF.mft (raw, json) Hash identifier: FGnTS3BzOBUYhrFgzWBxmfQiZdnM0aYEYTFDsSVXhbI= Subject key identifier: A9:EA:E1:E9:D8:07:55:3E:3D:C5:1E:CC:84:00:0E:DF:EC:81:11:CC Authority key identifier: EF:BA:99:D1:1F:5C:07:B4:8E:C6:39:EB:11:19:AB:52:5D:80:50:AF Certificate issuer: /CN=EFBA99D11F5C07B48EC639EB1119AB525D8050AF Certificate serial: 1C7F782FD6AAA9DA17E1248CE57964124861B858 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFBA99D11F5C07B48EC639EB1119AB525D8050AF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/543cc6a8-e7aa-4f37-bd08-f2eb57e88736/0/EFBA99D11F5C07B48EC639EB1119AB525D8050AF.mft Manifest number: 0153 Signing time: Thu 04 Dec 2025 17:52:06 +0000 Manifest this update: Thu 04 Dec 2025 17:47:06 +0000 Manifest next update: Mon 08 Dec 2025 02:17:06 +0000 Files and hashes: 1: 3130332e3136362e3132322e302f32332d3233203d3e20313431393435.roa (hash: C7+rbLPo0B/cgVSkvwAdhCUpa719Bxq+aRwWMlLdIX8=) 2: EFBA99D11F5C07B48EC639EB1119AB525D8050AF.crl (hash: HP/Jv78zndPTfnk6JyeCOQEcj3oEOW4Z8z7dzGtDG6Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/543cc6a8-e7aa-4f37-bd08-f2eb57e88736/0/EFBA99D11F5C07B48EC639EB1119AB525D8050AF.crl rsync://repo-rpki.idnic.net/repo/543cc6a8-e7aa-4f37-bd08-f2eb57e88736/0/EFBA99D11F5C07B48EC639EB1119AB525D8050AF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFBA99D11F5C07B48EC639EB1119AB525D8050AF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 02:17:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:7f:78:2f:d6:aa:a9:da:17:e1:24:8c:e5:79:64:12:48:61:b8:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EFBA99D11F5C07B48EC639EB1119AB525D8050AF Validity Not Before: Dec 4 17:47:06 2025 GMT Not After : Dec 8 02:17:06 2025 GMT Subject: CN=A9EAE1E9D807553E3DC51ECC84000EDFEC8111CC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:44:62:2e:93:c9:45:6b:55:80:16:e2:2a:c2: c4:05:a1:95:0d:81:6f:ea:1c:84:6e:92:69:fb:7b: 36:15:00:0f:08:3a:66:36:c0:d0:f0:05:19:6d:52: c3:b7:db:14:35:c2:9e:d5:da:a0:d0:b1:c9:00:aa: 65:1d:85:f7:83:62:22:31:13:aa:ca:74:1d:71:1d: 9f:09:d7:81:a2:2e:12:69:f8:6e:d7:71:dd:9c:2d: 8a:4e:4c:41:b2:11:e0:cf:59:10:71:09:15:c8:d6: 9d:db:b2:5b:af:a4:de:b6:56:a2:13:38:5d:3d:25: ec:1a:90:c3:e6:a9:1c:e5:9c:d8:76:3e:ca:94:ac: 35:37:91:cc:f6:3b:66:f7:11:20:df:68:87:16:00: af:81:50:1f:12:89:dc:73:0d:8f:83:74:12:2b:21: 7d:27:3f:55:46:a7:e9:60:4d:8b:18:b1:fc:20:ad: 77:54:9f:f8:3c:68:6f:f3:87:36:5d:e8:39:d9:e0: 25:fb:28:6d:21:43:cf:e6:5d:76:ae:10:f3:68:1a: bc:18:ff:08:c3:15:c2:06:e4:f9:4d:d2:9e:54:00: f0:93:35:b0:1c:78:1b:5d:23:c9:56:1d:ff:e3:d1: 51:7b:69:8b:d4:1e:e7:69:0d:a0:3f:42:91:64:2c: 79:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:EA:E1:E9:D8:07:55:3E:3D:C5:1E:CC:84:00:0E:DF:EC:81:11:CC X509v3 Authority Key Identifier: keyid:EF:BA:99:D1:1F:5C:07:B4:8E:C6:39:EB:11:19:AB:52:5D:80:50:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/543cc6a8-e7aa-4f37-bd08-f2eb57e88736/0/EFBA99D11F5C07B48EC639EB1119AB525D8050AF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFBA99D11F5C07B48EC639EB1119AB525D8050AF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/543cc6a8-e7aa-4f37-bd08-f2eb57e88736/0/EFBA99D11F5C07B48EC639EB1119AB525D8050AF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:81:7f:5b:65:2b:3c:af:39:20:62:b0:a6:e2:c0:3c:34:a5: be:2b:16:40:ea:67:d4:77:4d:a0:ec:fc:f2:b9:65:9a:20:b1: b1:b2:99:d6:72:cc:c0:e7:d3:6d:ff:97:1b:54:07:0c:9e:3b: e6:0b:22:15:cf:d0:ec:33:d4:96:5b:d6:c9:46:70:a9:1b:6b: 13:ff:2a:49:07:3a:e1:6d:b1:32:78:25:5e:34:5f:dc:85:80: 39:b7:12:d9:57:32:9b:68:fc:f8:ea:03:53:50:f8:e1:81:95: 9f:de:aa:ad:25:76:23:60:47:73:ec:c0:3c:af:fd:3f:77:87: 6e:15:e0:ff:c4:93:2f:b1:05:2b:dd:48:4e:2a:39:d8:33:36: 22:75:2e:67:a1:3e:3b:c2:6b:bd:b9:6a:79:2d:fc:07:e3:4b: 55:cd:89:8f:63:85:41:5e:97:21:d6:3d:bb:5c:9d:c4:59:ac: 75:7d:ef:15:51:7c:61:a6:67:81:56:14:3a:7a:c2:2d:fd:f5: 77:a9:6e:39:e2:a8:c2:01:cc:3c:ac:75:f5:cc:5a:3a:4c:b6: 95:15:5a:c0:45:f5:b4:dd:4c:11:e6:07:f1:c4:df:30:1d:4e: 72:66:f2:aa:d1:60:e4:86:69:d5:71:7b:63:04:5a:11:0a:14: 0f:28:5f:5e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHH94L9aqqdoX4SSM5XlkEkhhuFgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUZCQTk5RDExRjVDMDdCNDhFQzYzOUVCMTExOUFCNTI1 RDgwNTBBRjAeFw0yNTEyMDQxNzQ3MDZaFw0yNTEyMDgwMjE3MDZaMDMxMTAvBgNV BAMTKEE5RUFFMUU5RDgwNzU1M0UzREM1MUVDQzg0MDAwRURGRUM4MTExQ0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfRGIuk8lFa1WAFuIqwsQFoZUN gW/qHIRukmn7ezYVAA8IOmY2wNDwBRltUsO32xQ1wp7V2qDQsckAqmUdhfeDYiIx E6rKdB1xHZ8J14GiLhJp+G7Xcd2cLYpOTEGyEeDPWRBxCRXI1p3bsluvpN62VqIT OF09JewakMPmqRzlnNh2PsqUrDU3kcz2O2b3ESDfaIcWAK+BUB8SidxzDY+DdBIr IX0nP1VGp+lgTYsYsfwgrXdUn/g8aG/zhzZd6DnZ4CX7KG0hQ8/mXXauEPNoGrwY /wjDFcIG5PlN0p5UAPCTNbAceBtdI8lWHf/j0VF7aYvUHudpDaA/QpFkLHlpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqerh6dgHVT49xR7MhAAO3+yBEcwwHwYDVR0j BBgwFoAU77qZ0R9cB7SOxjnrERmrUl2AUK8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NDNjYzZhOC1lN2FhLTRmMzctYmQwOC1mMmViNTdlODg3MzYvMC9FRkJBOTlEMTFG NUMwN0I0OEVDNjM5RUIxMTE5QUI1MjVEODA1MEFGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUZCQTk5RDExRjVDMDdCNDhFQzYzOUVCMTExOUFCNTI1RDgw NTBBRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTQzY2M2YTgtZTdhYS00ZjM3LWJk MDgtZjJlYjU3ZTg4NzM2LzAvRUZCQTk5RDExRjVDMDdCNDhFQzYzOUVCMTExOUFC NTI1RDgwNTBBRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJyBf1tlKzyvOSBisKbiwDw0pb4rFkDqZ9R3 TaDs/PK5ZZogsbGymdZyzMDn023/lxtUBwyeO+YLIhXP0Owz1JZb1slGcKkbaxP/ KkkHOuFtsTJ4JV40X9yFgDm3EtlXMpto/PjqA1NQ+OGBlZ/eqq0ldiNgR3PswDyv /T93h24V4P/Eky+xBSvdSE4qOdgzNiJ1LmehPjvCa725ankt/AfjS1XNiY9jhUFe lyHWPbtcncRZrHV97xVRfGGmZ4FWFDp6wi399XepbjniqMIBzDysdfXMWjpMtpUV WsBF9bTdTBHmB/HE3zAdTnJm8qrRYOSGadVxe2MEWhEKFA8oX14= -----END CERTIFICATE-----Generated at Sat Dec 6 23:51:10 2025 by rpki-client