This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/5bb43ec8-f582-4025-8f36-3cea539d0b09/0/EC9AAB91007053E63CE17F98D74FFD8945F29EDE.mft File: EC9AAB91007053E63CE17F98D74FFD8945F29EDE.mft (raw, json) Hash identifier: q5g5QolBDrCwmWGXRcq1g2NqaBvWbAACZD3UPCF4fcg= Subject key identifier: E2:AC:00:F1:82:FB:D1:83:0D:16:42:F9:37:4D:63:8E:CC:8B:CB:AA Authority key identifier: EC:9A:AB:91:00:70:53:E6:3C:E1:7F:98:D7:4F:FD:89:45:F2:9E:DE Certificate issuer: /CN=EC9AAB91007053E63CE17F98D74FFD8945F29EDE Certificate serial: 1CDCDD1D1F3ADDD13EAFC9E68999B07E788894D4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC9AAB91007053E63CE17F98D74FFD8945F29EDE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5bb43ec8-f582-4025-8f36-3cea539d0b09/0/EC9AAB91007053E63CE17F98D74FFD8945F29EDE.mft Manifest number: 0152 Signing time: Sat 06 Dec 2025 02:41:43 +0000 Manifest this update: Sat 06 Dec 2025 02:36:43 +0000 Manifest next update: Tue 09 Dec 2025 08:35:43 +0000 Files and hashes: 1: EC9AAB91007053E63CE17F98D74FFD8945F29EDE.crl (hash: Nen8fc2TraWiSACClbwAJxNdhgb9jvFO4PSTOlDiy7M=) 2: 3130332e35332e32382e302f32332d3234203d3e20313339393535.roa (hash: XmUhlDLdTlUEJxqMyV5d8izbXv0SLIMUNSTUR2SbfXQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5bb43ec8-f582-4025-8f36-3cea539d0b09/0/EC9AAB91007053E63CE17F98D74FFD8945F29EDE.crl rsync://repo-rpki.idnic.net/repo/5bb43ec8-f582-4025-8f36-3cea539d0b09/0/EC9AAB91007053E63CE17F98D74FFD8945F29EDE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC9AAB91007053E63CE17F98D74FFD8945F29EDE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 08:35:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:dc:dd:1d:1f:3a:dd:d1:3e:af:c9:e6:89:99:b0:7e:78:88:94:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EC9AAB91007053E63CE17F98D74FFD8945F29EDE Validity Not Before: Dec 6 02:36:43 2025 GMT Not After : Dec 9 08:35:43 2025 GMT Subject: CN=E2AC00F182FBD1830D1642F9374D638ECC8BCBAA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:a1:87:61:34:9c:cd:18:40:b9:e0:65:e0:30: cb:93:6c:37:e3:8e:a4:e0:04:3a:77:4a:96:7c:18: c1:cd:74:e3:15:5e:1d:e1:bd:6f:aa:5e:1b:25:13: c9:ed:14:5d:0c:2e:e3:98:0a:cd:c9:9f:5c:fe:b3: 8e:40:b7:d6:fe:09:a3:ad:26:b8:cd:11:c5:85:ce: 28:d4:80:29:9a:1b:51:74:59:96:34:aa:75:18:8c: ef:b9:a4:aa:7e:33:b6:0a:97:e5:a4:ab:6d:d5:e8: 23:7f:67:3f:f7:a2:16:c1:7e:13:58:1d:97:1d:eb: 52:ef:df:e7:39:cf:be:c2:87:ea:f4:84:9e:63:83: 7f:17:43:b6:08:77:02:51:88:d5:f5:a9:63:98:ab: 29:98:65:b3:c3:ff:3b:5b:ca:d9:89:29:b8:3e:88: 71:b0:9e:c7:a5:af:7e:85:d0:e5:23:b1:57:b4:c1: 11:62:40:47:24:4c:09:cc:62:83:65:af:67:46:94: 87:96:f6:41:88:d0:a0:1a:af:4f:04:3b:38:e8:3e: fd:f2:f9:09:95:da:d8:68:38:91:6e:15:95:d6:67: 4c:54:60:11:ba:e4:eb:27:ca:36:ca:b2:78:4f:d2: 00:0f:4a:d5:1d:bc:17:77:23:0e:e0:aa:b5:dc:36: 59:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:AC:00:F1:82:FB:D1:83:0D:16:42:F9:37:4D:63:8E:CC:8B:CB:AA X509v3 Authority Key Identifier: keyid:EC:9A:AB:91:00:70:53:E6:3C:E1:7F:98:D7:4F:FD:89:45:F2:9E:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5bb43ec8-f582-4025-8f36-3cea539d0b09/0/EC9AAB91007053E63CE17F98D74FFD8945F29EDE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC9AAB91007053E63CE17F98D74FFD8945F29EDE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5bb43ec8-f582-4025-8f36-3cea539d0b09/0/EC9AAB91007053E63CE17F98D74FFD8945F29EDE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:78:42:dd:d0:12:43:4b:f8:04:25:91:fb:43:24:52:50:dc: 6c:49:36:0b:fc:30:de:a4:be:aa:58:1c:31:0d:33:72:5e:d1: 28:74:80:bf:03:d8:f1:bb:14:77:63:71:33:57:c1:d5:cc:61: 1e:42:c1:6c:4f:e0:57:8e:71:86:6d:3c:e6:da:2a:70:4a:0a: 22:4e:68:73:23:b0:db:44:5e:c8:cd:b5:1e:fd:30:78:69:fa: 33:8f:84:51:db:62:b6:08:2a:dd:3f:33:80:81:7a:e6:41:dc: a6:ce:72:61:07:e1:72:09:55:e2:58:0a:04:e5:eb:7a:bb:d3: 26:ae:ec:c9:7a:69:66:ff:b8:01:bb:67:a2:04:30:66:e3:a3: 28:c7:db:10:fe:66:33:1c:40:85:67:16:5c:37:2c:dc:fb:4b: 85:5f:44:8e:8f:6a:72:47:af:de:5a:57:2f:d5:b2:1f:95:1e: 11:48:f0:0d:a6:5f:eb:1f:3a:7a:f3:12:6d:b9:0b:47:f2:a9: f0:ec:72:39:78:2d:eb:9f:94:7e:5b:6e:dc:9c:3f:69:a8:96: 91:cd:7c:c7:41:41:c8:8a:0b:fb:0f:5c:3f:47:a2:62:52:bc: b4:65:4f:d2:51:1b:d2:bf:d9:d3:3a:41:73:fa:e3:9b:26:5e: 51:82:64:f9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHNzdHR863dE+r8nmiZmwfniIlNQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUM5QUFCOTEwMDcwNTNFNjNDRTE3Rjk4RDc0RkZEODk0 NUYyOUVERTAeFw0yNTEyMDYwMjM2NDNaFw0yNTEyMDkwODM1NDNaMDMxMTAvBgNV BAMTKEUyQUMwMEYxODJGQkQxODMwRDE2NDJGOTM3NEQ2MzhFQ0M4QkNCQUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkoYdhNJzNGEC54GXgMMuTbDfj jqTgBDp3SpZ8GMHNdOMVXh3hvW+qXhslE8ntFF0MLuOYCs3Jn1z+s45At9b+CaOt JrjNEcWFzijUgCmaG1F0WZY0qnUYjO+5pKp+M7YKl+Wkq23V6CN/Zz/3ohbBfhNY HZcd61Lv3+c5z77Ch+r0hJ5jg38XQ7YIdwJRiNX1qWOYqymYZbPD/ztbytmJKbg+ iHGwnselr36F0OUjsVe0wRFiQEckTAnMYoNlr2dGlIeW9kGI0KAar08EOzjoPv3y +QmV2thoOJFuFZXWZ0xUYBG65OsnyjbKsnhP0gAPStUdvBd3Iw7gqrXcNllHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4qwA8YL70YMNFkL5N01jjsyLy6owHwYDVR0j BBgwFoAU7JqrkQBwU+Y84X+Y10/9iUXynt4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YmI0M2VjOC1mNTgyLTQwMjUtOGYzNi0zY2VhNTM5ZDBiMDkvMC9FQzlBQUI5MTAw NzA1M0U2M0NFMTdGOThENzRGRkQ4OTQ1RjI5RURFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUM5QUFCOTEwMDcwNTNFNjNDRTE3Rjk4RDc0RkZEODk0NUYy OUVERS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWJiNDNlYzgtZjU4Mi00MDI1LThm MzYtM2NlYTUzOWQwYjA5LzAvRUM5QUFCOTEwMDcwNTNFNjNDRTE3Rjk4RDc0RkZE ODk0NUYyOUVERS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALB4Qt3QEkNL+AQlkftDJFJQ3GxJNgv8MN6k vqpYHDENM3Je0Sh0gL8D2PG7FHdjcTNXwdXMYR5CwWxP4FeOcYZtPObaKnBKCiJO aHMjsNtEXsjNtR79MHhp+jOPhFHbYrYIKt0/M4CBeuZB3KbOcmEH4XIJVeJYCgTl 63q70yau7Ml6aWb/uAG7Z6IEMGbjoyjH2xD+ZjMcQIVnFlw3LNz7S4VfRI6PanJH r95aVy/Vsh+VHhFI8A2mX+sfOnrzEm25C0fyqfDscjl4LeuflH5bbtycP2molpHN fMdBQciKC/sPXD9HomJSvLRlT9JRG9K/2dM6QXP645smXlGCZPk= -----END CERTIFICATE-----Generated at Sun Dec 7 02:07:51 2025 by rpki-client