This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/76c00376-3351-4fa3-97ee-52385ba4d903/0/EF979072FBF6DABD2A8EAC08A304509E8DC04C66.mft
File: EF979072FBF6DABD2A8EAC08A304509E8DC04C66.mft (raw, json)
Hash identifier: mVZJ/We8UeCC1mF5KcWSyZVcfnLFMhdaw4LIc9FndFs=
Subject key identifier: BD:10:02:C4:EA:03:AF:B7:69:DD:89:B0:9F:F7:3C:95:68:70:37:DC
Authority key identifier: EF:97:90:72:FB:F6:DA:BD:2A:8E:AC:08:A3:04:50:9E:8D:C0:4C:66
Certificate issuer: /CN=EF979072FBF6DABD2A8EAC08A304509E8DC04C66
Certificate serial: 02DBC506FE80EDE373EB798A5F663666407A7B50
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EF979072FBF6DABD2A8EAC08A304509E8DC04C66.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/76c00376-3351-4fa3-97ee-52385ba4d903/0/EF979072FBF6DABD2A8EAC08A304509E8DC04C66.mft
Manifest number: FE
Signing time: Sat 06 Dec 2025 21:11:41 +0000
Manifest this update: Sat 06 Dec 2025 21:06:41 +0000
Manifest next update: Wed 10 Dec 2025 03:19:41 +0000
Files and hashes: 1: 3130332e34312e3130392e302f32342d3234203d3e203536323536.roa (hash: 4q/gs/czBNAuO23mv17/FKccDK6uDnn2+DC2kwXpKAc=)
2: EF979072FBF6DABD2A8EAC08A304509E8DC04C66.crl (hash: kzIYTc7og8NfWkIMZGxdXuG/Wkok11UxZ6YFoNbt9Gw=)
3: 3130332e32382e32312e302f32342d3234203d3e203536323536.roa (hash: lgU3Sd0WykJyELTKj2IglQHmtI2jqlICc7rdQuDN4Fw=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/76c00376-3351-4fa3-97ee-52385ba4d903/0/EF979072FBF6DABD2A8EAC08A304509E8DC04C66.crl
rsync://repo-rpki.idnic.net/repo/76c00376-3351-4fa3-97ee-52385ba4d903/0/EF979072FBF6DABD2A8EAC08A304509E8DC04C66.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EF979072FBF6DABD2A8EAC08A304509E8DC04C66.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 09 Dec 2025 15:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:db:c5:06:fe:80:ed:e3:73:eb:79:8a:5f:66:36:66:40:7a:7b:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EF979072FBF6DABD2A8EAC08A304509E8DC04C66
Validity
Not Before: Dec 6 21:06:41 2025 GMT
Not After : Dec 10 03:19:41 2025 GMT
Subject: CN=BD1002C4EA03AFB769DD89B09FF73C95687037DC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:41:9c:26:f5:63:06:5a:6c:e7:f3:00:e3:aa:
bb:0e:de:d8:e9:00:10:05:f9:55:de:63:f7:a1:c5:
69:3a:ad:f3:ae:e5:ec:f3:2d:3d:b9:09:76:8c:46:
dd:be:69:70:6b:af:42:a9:8d:ea:8c:fb:7e:94:cf:
0e:cb:63:3a:ab:d8:40:d7:6b:c7:49:31:68:46:66:
3b:e6:4d:c9:4a:68:46:12:64:bb:af:55:73:70:7d:
50:5c:04:20:1a:d0:a4:e0:ed:00:b2:d0:83:19:4c:
71:2d:78:2c:4a:45:ea:c8:9a:bd:2d:57:7e:43:7e:
46:23:46:06:32:5f:e4:df:7b:8b:15:51:75:ef:94:
35:77:4a:52:24:09:17:0f:36:57:f1:9d:42:37:9a:
a8:30:d5:17:7e:07:75:c9:a8:95:54:d4:db:c6:71:
8e:de:60:e3:de:3b:44:af:2b:10:96:2b:2e:d4:ee:
79:c5:0c:d9:e6:66:16:79:d7:75:70:04:91:07:7b:
ca:b7:05:db:72:8b:5a:ba:2f:37:38:98:78:56:a6:
e6:fd:86:8c:25:4e:44:06:fd:3d:b7:f4:c1:f3:80:
9f:08:69:34:cb:ac:da:22:a9:af:5e:26:a6:76:6a:
05:4c:0d:0d:33:0f:41:2d:b5:f1:c3:2d:b6:ef:5c:
1d:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:10:02:C4:EA:03:AF:B7:69:DD:89:B0:9F:F7:3C:95:68:70:37:DC
X509v3 Authority Key Identifier:
keyid:EF:97:90:72:FB:F6:DA:BD:2A:8E:AC:08:A3:04:50:9E:8D:C0:4C:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/76c00376-3351-4fa3-97ee-52385ba4d903/0/EF979072FBF6DABD2A8EAC08A304509E8DC04C66.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EF979072FBF6DABD2A8EAC08A304509E8DC04C66.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/76c00376-3351-4fa3-97ee-52385ba4d903/0/EF979072FBF6DABD2A8EAC08A304509E8DC04C66.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:8e:e7:7b:1b:a4:75:94:01:73:bb:2b:a2:2e:10:51:d4:a3:
ba:0b:29:7f:f5:ef:64:02:4a:cd:56:7f:b9:89:87:2f:12:4e:
21:c8:05:d6:28:50:31:46:76:d2:d4:77:e6:bd:60:a3:53:e5:
d4:a1:73:c8:16:a2:b3:a0:d1:ba:19:a5:08:6d:8c:08:ae:88:
61:43:8f:e3:4d:01:11:ce:be:f8:49:e3:f2:4b:47:d7:0b:44:
9f:e5:63:a1:c4:53:1a:1d:57:42:33:7f:4f:14:6d:70:0d:52:
da:43:f2:19:f6:79:0e:0b:0e:9d:cf:4c:59:11:14:76:17:7d:
24:ed:aa:1d:53:41:76:1d:38:2f:9a:a9:fa:e6:d0:31:d7:92:
e2:5f:9e:2d:6a:dd:be:d7:1c:8f:fb:bc:ed:10:79:28:f3:27:
83:29:ed:2d:7f:9b:ae:57:67:8e:9a:57:28:71:46:8d:66:06:
f4:56:d4:8c:aa:e1:5c:6e:2c:47:4b:53:5f:a1:9e:1f:6f:ce:
e0:3c:d6:3d:c8:ea:89:4e:e3:39:24:6c:a6:34:68:68:37:14:
4b:17:da:95:81:96:86:86:bc:6a:2b:23:44:9a:63:18:01:70:
e3:27:84:20:90:f3:e0:39:71:fb:4f:40:ae:b5:f0:d9:42:f6:
35:80:42:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 01:40:20 2025 by rpki-client