This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/73fe4255-1d91-4fcc-bce4-8a42adfe3c29/0/EC39D766063B56E5EA4DBFB2A502298FB995956A.mft
File: EC39D766063B56E5EA4DBFB2A502298FB995956A.mft (raw, json)
Hash identifier: 4f7L9RVy1Vjj/5zCpjuEbUQYLGs317oZu5fmZ8miIxw=
Subject key identifier: 27:73:7C:20:CC:C8:E4:25:FC:AE:CC:48:CE:BC:FB:2B:D3:20:BB:7D
Authority key identifier: EC:39:D7:66:06:3B:56:E5:EA:4D:BF:B2:A5:02:29:8F:B9:95:95:6A
Certificate issuer: /CN=EC39D766063B56E5EA4DBFB2A502298FB995956A
Certificate serial: 4B0F7CF4B227961EED2A8DF05123D4A9D0F5BB2D
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC39D766063B56E5EA4DBFB2A502298FB995956A.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/73fe4255-1d91-4fcc-bce4-8a42adfe3c29/0/EC39D766063B56E5EA4DBFB2A502298FB995956A.mft
Manifest number: 052C
Signing time: Fri 05 Dec 2025 04:10:41 +0000
Manifest this update: Fri 05 Dec 2025 04:05:41 +0000
Manifest next update: Mon 08 Dec 2025 14:56:41 +0000
Files and hashes: 1: 3130332e3133392e32352e302f32342d3234203d3e20313338383738.roa (hash: fXYsqxCjsvIrOq+7nStBZ2/w2ahyZCjmKRe5J8m8wVg=)
2: EC39D766063B56E5EA4DBFB2A502298FB995956A.crl (hash: jTuqTU6nptV1V09aeVZTcRaq+5+vwv6lwLz107EJSX0=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/73fe4255-1d91-4fcc-bce4-8a42adfe3c29/0/EC39D766063B56E5EA4DBFB2A502298FB995956A.crl
rsync://repo-rpki.idnic.net/repo/73fe4255-1d91-4fcc-bce4-8a42adfe3c29/0/EC39D766063B56E5EA4DBFB2A502298FB995956A.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC39D766063B56E5EA4DBFB2A502298FB995956A.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Dec 2025 14:56:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:0f:7c:f4:b2:27:96:1e:ed:2a:8d:f0:51:23:d4:a9:d0:f5:bb:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EC39D766063B56E5EA4DBFB2A502298FB995956A
Validity
Not Before: Dec 5 04:05:41 2025 GMT
Not After : Dec 8 14:56:41 2025 GMT
Subject: CN=27737C20CCC8E425FCAECC48CEBCFB2BD320BB7D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:6a:8a:27:fe:a4:d4:42:b5:3e:ce:6a:34:54:
2f:d8:ed:75:91:33:89:19:b8:94:4b:e4:6c:59:1c:
8c:0b:0b:ad:a2:3d:72:15:84:ae:46:7a:ab:1d:aa:
e2:9d:c4:25:1c:5e:7e:b7:4a:84:aa:db:d0:6a:2d:
08:84:05:23:05:49:77:ed:e1:1d:c5:1c:c1:f0:48:
33:55:ff:f3:10:fa:9a:22:0b:53:72:27:f8:a4:a7:
0a:0e:75:ef:99:e3:d0:da:29:af:de:f7:12:0c:27:
e3:4b:04:cf:5f:87:f6:c2:47:39:c1:ae:df:c8:b6:
6b:b4:f0:45:23:be:df:6b:21:4e:47:25:fd:86:d5:
6d:66:b6:c3:fa:69:cf:c0:28:5a:e8:0b:bf:74:08:
b9:f5:17:5a:1e:72:31:35:b9:9b:25:44:0f:8c:0e:
4d:55:aa:b2:0d:11:19:20:3d:7c:5b:36:66:03:b9:
f4:c1:ed:0f:a8:8a:1c:cf:0f:f4:9d:8a:08:6b:26:
e5:83:57:86:62:82:ee:69:ed:d9:76:bb:d6:fa:83:
bc:cb:9b:eb:88:e6:51:04:d1:93:ca:5c:3d:be:91:
84:a8:5d:24:4d:93:44:1a:da:68:d5:ce:f6:f5:36:
fb:b5:6e:c6:f4:05:67:76:03:4e:18:13:3f:8e:ce:
84:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:73:7C:20:CC:C8:E4:25:FC:AE:CC:48:CE:BC:FB:2B:D3:20:BB:7D
X509v3 Authority Key Identifier:
keyid:EC:39:D7:66:06:3B:56:E5:EA:4D:BF:B2:A5:02:29:8F:B9:95:95:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/73fe4255-1d91-4fcc-bce4-8a42adfe3c29/0/EC39D766063B56E5EA4DBFB2A502298FB995956A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC39D766063B56E5EA4DBFB2A502298FB995956A.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73fe4255-1d91-4fcc-bce4-8a42adfe3c29/0/EC39D766063B56E5EA4DBFB2A502298FB995956A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:07:eb:87:11:22:63:8c:d6:01:20:24:29:5a:50:54:33:41:
e1:6f:32:2b:92:b4:9d:3e:53:6a:8b:01:2d:e6:92:56:6c:c2:
55:d8:82:a5:de:7a:a3:a2:9b:c1:cb:b5:11:80:f7:02:3b:fd:
7f:bf:94:20:b0:cd:c6:eb:f2:ee:93:f6:90:3b:ae:f6:4b:5d:
2b:73:a1:31:d2:86:e4:60:40:ac:df:f0:94:b6:fd:dd:bd:82:
7d:0d:91:3b:0d:c2:6e:c8:6b:7e:30:33:63:21:f4:c2:81:ad:
ef:90:61:f6:07:a4:f0:a0:8b:e4:4c:e3:f3:6e:24:1b:df:97:
b4:8e:db:b5:d9:b7:32:96:d7:3a:da:fd:71:c7:3e:06:5e:92:
98:a0:da:cf:1e:6f:37:e9:7c:b6:48:ab:1e:fe:6e:9c:c3:49:
82:e6:44:c9:b9:3f:6b:27:bf:64:19:47:e6:fb:56:05:23:8d:
4f:07:ce:bf:9a:18:3a:80:fc:29:3f:73:49:e8:62:c4:e0:c6:
0c:e9:c8:cc:24:c3:1c:a4:59:2a:88:7d:70:ce:7b:1b:74:c2:
ee:dd:2f:e4:eb:8e:db:50:f7:07:ec:a5:0e:f7:79:55:17:4a:
82:7f:48:53:d3:9b:fc:ab:75:47:a0:d8:fd:52:e8:3e:a9:a9:
34:7c:e3:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 05:51:31 2025 by rpki-client