This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/0/2EC721F6FC616A1BE2D938F21EAF2E82E805981E.mft File: 2EC721F6FC616A1BE2D938F21EAF2E82E805981E.mft (raw, json) Hash identifier: AE8SN6D/W3mQJKrCQAQFmQmeT5uYhJxZZT57y+YTwpg= Subject key identifier: 5F:76:DC:A1:B7:47:B9:3B:A6:D8:99:99:A5:9D:B8:29:87:71:EB:93 Authority key identifier: 2E:C7:21:F6:FC:61:6A:1B:E2:D9:38:F2:1E:AF:2E:82:E8:05:98:1E Certificate issuer: /CN=2EC721F6FC616A1BE2D938F21EAF2E82E805981E Certificate serial: 677EAAE9781561942D9853EE64E176CFB56BAA15 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2EC721F6FC616A1BE2D938F21EAF2E82E805981E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/0/2EC721F6FC616A1BE2D938F21EAF2E82E805981E.mft Manifest number: B6 Signing time: Wed 17 Dec 2025 04:12:00 +0000 Manifest this update: Wed 17 Dec 2025 04:07:00 +0000 Manifest next update: Sat 20 Dec 2025 10:12:00 +0000 Files and hashes: 1: 3136302e3138372e3137342e302f32342d3234203d3e20313533313335.roa (hash: XfY4we6jzKf244te76Sh5o4SXguYwnH8MGIYft8mlas=) 2: 2EC721F6FC616A1BE2D938F21EAF2E82E805981E.crl (hash: dT6SyXzgx1R2geZ+lwQSmOTzaEP9ZyIB4sC4+u9mKhA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/0/2EC721F6FC616A1BE2D938F21EAF2E82E805981E.crl rsync://repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/0/2EC721F6FC616A1BE2D938F21EAF2E82E805981E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2EC721F6FC616A1BE2D938F21EAF2E82E805981E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 09:41:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:7e:aa:e9:78:15:61:94:2d:98:53:ee:64:e1:76:cf:b5:6b:aa:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2EC721F6FC616A1BE2D938F21EAF2E82E805981E Validity Not Before: Dec 17 04:07:00 2025 GMT Not After : Dec 20 10:12:00 2025 GMT Subject: CN=5F76DCA1B747B93BA6D89999A59DB8298771EB93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:a9:7c:4c:92:10:4d:2a:1e:dd:58:b2:75:e7: c2:8c:f2:37:28:eb:c7:67:ad:0f:06:8d:db:85:13: 82:28:4d:1a:cf:13:94:09:09:76:69:19:d6:c7:93: b0:5d:49:03:4b:ac:c1:5b:ff:32:a7:f2:3b:4b:56: 47:13:4c:72:ea:b7:0e:eb:50:9a:eb:c0:d4:a2:86: 18:a9:ab:ba:e2:9c:63:b9:44:7f:79:d2:c5:0c:5a: f1:67:a1:a7:04:d9:5f:22:7c:9f:52:9a:36:2d:10: 86:c1:d7:24:93:50:fe:03:41:c7:fb:68:fa:0b:e8: c4:47:80:c0:1e:84:f4:ea:60:57:b3:c0:ed:19:a2: 78:74:4c:8d:fc:a0:34:e5:a9:00:a3:a7:fd:be:60: 73:32:90:74:cd:78:5e:e5:15:59:3f:ab:2c:0f:d7: 63:b5:cc:e7:91:55:1f:31:0f:5d:7c:8a:6a:5f:7b: 68:15:e1:2e:14:b4:19:35:56:d1:42:be:de:60:30: a0:e4:a8:62:c8:6b:0a:c6:c6:52:d5:c5:6d:6a:8a: 69:7b:60:45:62:93:c3:75:e0:9e:e3:d3:5e:21:52: 6d:f1:0f:c9:47:7d:b4:d4:3f:29:08:fd:eb:95:5d: 9e:e2:a6:8f:f0:d8:ee:a8:45:2b:4a:03:c5:55:75: 33:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:76:DC:A1:B7:47:B9:3B:A6:D8:99:99:A5:9D:B8:29:87:71:EB:93 X509v3 Authority Key Identifier: keyid:2E:C7:21:F6:FC:61:6A:1B:E2:D9:38:F2:1E:AF:2E:82:E8:05:98:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/0/2EC721F6FC616A1BE2D938F21EAF2E82E805981E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2EC721F6FC616A1BE2D938F21EAF2E82E805981E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/0/2EC721F6FC616A1BE2D938F21EAF2E82E805981E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:76:88:0d:71:d7:70:fa:b2:6d:3a:d7:83:ef:95:11:15:4b: bd:e2:55:e0:f1:40:05:45:d0:a7:ce:79:a0:a7:3c:03:c7:56: 16:b5:39:33:03:c6:9c:d4:c7:fb:f7:cb:9b:1f:e0:29:18:a3: d8:76:74:97:ab:8d:e3:61:3d:dd:30:ac:c2:91:08:91:db:f5: 3f:80:07:b9:44:61:68:a3:db:6f:db:a1:a4:22:53:6e:20:e0: 01:45:5b:c6:43:7e:c4:6c:a9:1f:c9:a2:a9:05:28:83:e4:f8: 53:a2:01:e9:7d:64:cf:d3:54:46:c8:17:8c:21:89:d1:85:f8: d9:54:1c:26:b2:ea:69:2f:d4:cd:d1:55:81:35:2e:f0:49:6d: 63:07:51:30:b3:5b:22:97:4b:ab:04:e4:d7:e3:5d:17:8f:e9: 5b:cd:9b:19:da:20:53:92:bb:0b:5c:40:d8:59:d6:b9:5d:a1: 35:8b:b2:02:a9:0a:90:0b:f5:8f:c4:2b:58:1b:57:59:47:47: 3c:50:5b:56:32:02:e3:ee:88:d7:fa:1e:91:3d:2d:3f:a9:1a: b3:4c:ac:01:85:09:5a:15:bc:3e:e8:97:39:06:a1:36:8f:ec: 69:df:75:6b:8f:62:fc:87:41:ad:ce:3f:60:a8:b5:75:92:68: cb:c4:86:db -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZ36q6XgVYZQtmFPuZOF2z7VrqhUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkVDNzIxRjZGQzYxNkExQkUyRDkzOEYyMUVBRjJFODJF ODA1OTgxRTAeFw0yNTEyMTcwNDA3MDBaFw0yNTEyMjAxMDEyMDBaMDMxMTAvBgNV BAMTKDVGNzZEQ0ExQjc0N0I5M0JBNkQ4OTk5OUE1OURCODI5ODc3MUVCOTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbqXxMkhBNKh7dWLJ158KM8jco 68dnrQ8GjduFE4IoTRrPE5QJCXZpGdbHk7BdSQNLrMFb/zKn8jtLVkcTTHLqtw7r UJrrwNSihhipq7rinGO5RH950sUMWvFnoacE2V8ifJ9SmjYtEIbB1ySTUP4DQcf7 aPoL6MRHgMAehPTqYFezwO0Zonh0TI38oDTlqQCjp/2+YHMykHTNeF7lFVk/qywP 12O1zOeRVR8xD118impfe2gV4S4UtBk1VtFCvt5gMKDkqGLIawrGxlLVxW1qiml7 YEVik8N14J7j014hUm3xD8lHfbTUPykI/euVXZ7ipo/w2O6oRStKA8VVdTM3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUX3bcobdHuTum2JmZpZ24KYdx65MwHwYDVR0j BBgwFoAULsch9vxhahvi2TjyHq8ugugFmB4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ODg1M2FhYi04ZDZjLTQ1N2YtOWQ1Ny00ODRhY2FjZWE5ZDgvMC8yRUM3MjFGNkZD NjE2QTFCRTJEOTM4RjIxRUFGMkU4MkU4MDU5ODFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMkVDNzIxRjZGQzYxNkExQkUyRDkzOEYyMUVBRjJFODJFODA1 OTgxRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTg4NTNhYWItOGQ2Yy00NTdmLTlk NTctNDg0YWNhY2VhOWQ4LzAvMkVDNzIxRjZGQzYxNkExQkUyRDkzOEYyMUVBRjJF ODJFODA1OTgxRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAh2iA1x13D6sm0614PvlREVS73iVeDxQAVF 0KfOeaCnPAPHVha1OTMDxpzUx/v3y5sf4CkYo9h2dJerjeNhPd0wrMKRCJHb9T+A B7lEYWij22/boaQiU24g4AFFW8ZDfsRsqR/JoqkFKIPk+FOiAel9ZM/TVEbIF4wh idGF+NlUHCay6mkv1M3RVYE1LvBJbWMHUTCzWyKXS6sE5NfjXReP6VvNmxnaIFOS uwtcQNhZ1rldoTWLsgKpCpAL9Y/EK1gbV1lHRzxQW1YyAuPuiNf6HpE9LT+pGrNM rAGFCVoVvD7olzkGoTaP7GnfdWuPYvyHQa3OP2CotXWSaMvEhts= -----END CERTIFICATE-----Generated at Thu Dec 18 07:58:37 2025 by rpki-client