This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/a0d1f4ce-169b-431a-8286-c5f3a07bbbe3/0/EE12F179A5D1F52EC033677282AE7E2E72E0F2C3.mft
File: EE12F179A5D1F52EC033677282AE7E2E72E0F2C3.mft (raw, json)
Hash identifier: mvdPCDhxJDhbPWvWCLTlEv5z6X8U8U+kuVEcf+Q0/nk=
Subject key identifier: 27:AB:AF:DD:77:68:59:05:6E:4A:8B:1F:E8:8B:65:CB:A0:4C:B2:3C
Authority key identifier: EE:12:F1:79:A5:D1:F5:2E:C0:33:67:72:82:AE:7E:2E:72:E0:F2:C3
Certificate issuer: /CN=EE12F179A5D1F52EC033677282AE7E2E72E0F2C3
Certificate serial: 4CBFCF439A0038FB4E78DD52C1475E354580F7FD
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EE12F179A5D1F52EC033677282AE7E2E72E0F2C3.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a0d1f4ce-169b-431a-8286-c5f3a07bbbe3/0/EE12F179A5D1F52EC033677282AE7E2E72E0F2C3.mft
Manifest number: 0198
Signing time: Fri 05 Dec 2025 19:21:24 +0000
Manifest this update: Fri 05 Dec 2025 19:16:24 +0000
Manifest next update: Tue 09 Dec 2025 05:20:24 +0000
Files and hashes: 1: EE12F179A5D1F52EC033677282AE7E2E72E0F2C3.crl (hash: 6GZ4wwRIWL1N1f9YaZxhznlrSzGQsj7uYfSgi4H4ssg=)
2: 3130332e38352e35332e302f32342d3234203d3e20313530353535.roa (hash: mZAxTr3skSw5Z8e7tPmU/OrFl4lSut1UK4pgkxrw8Us=)
3: 3130332e38352e35322e302f32332d3233203d3e20313530353535.roa (hash: +9CDenNH43oJ9XkYbEWMdjfmnpMvrt7QWdKjYHPJebM=)
4: 3130332e38352e35322e302f32342d3234203d3e20313530353535.roa (hash: kUp7KI2fPhlmcspldsUBOsyjkjUvmMSaheteN59dWW0=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/a0d1f4ce-169b-431a-8286-c5f3a07bbbe3/0/EE12F179A5D1F52EC033677282AE7E2E72E0F2C3.crl
rsync://repo-rpki.idnic.net/repo/a0d1f4ce-169b-431a-8286-c5f3a07bbbe3/0/EE12F179A5D1F52EC033677282AE7E2E72E0F2C3.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EE12F179A5D1F52EC033677282AE7E2E72E0F2C3.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 09 Dec 2025 05:20:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:bf:cf:43:9a:00:38:fb:4e:78:dd:52:c1:47:5e:35:45:80:f7:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EE12F179A5D1F52EC033677282AE7E2E72E0F2C3
Validity
Not Before: Dec 5 19:16:24 2025 GMT
Not After : Dec 9 05:20:24 2025 GMT
Subject: CN=27ABAFDD776859056E4A8B1FE88B65CBA04CB23C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:6c:f4:c0:85:e6:40:6a:c6:bc:c7:a2:49:09:
f7:86:c1:4e:0e:7f:da:af:c4:07:55:fa:6d:37:4f:
1b:83:31:71:a0:2a:f8:9c:22:a1:22:a1:ad:5f:4b:
c6:13:2d:12:31:2e:81:a7:fa:b5:06:6e:ef:2f:3b:
a4:9a:4a:75:a1:8e:92:d0:73:12:10:18:17:cb:0d:
12:ec:93:96:70:a3:fb:d4:ef:94:9d:d8:71:7a:a1:
e0:76:96:22:0c:9b:5d:57:2f:8d:93:49:b4:b7:79:
26:66:24:6f:a1:ff:fb:64:df:f5:e5:37:4e:67:01:
e5:17:ac:5c:17:93:ff:a7:a7:d6:47:45:4f:39:84:
ac:1a:7a:94:70:a8:51:12:cc:1d:bf:18:e2:0e:7b:
81:b2:dd:fc:96:33:0b:6c:88:0e:fc:5f:8a:df:bc:
6d:6b:d9:66:31:23:77:4f:c4:b0:5c:8b:c0:90:00:
22:38:bc:05:0e:79:f4:a0:97:3f:df:fb:c8:80:df:
de:85:ec:f5:d0:0c:15:66:69:d2:20:00:65:b1:8d:
bb:8f:ec:fc:84:f2:63:74:cd:7c:4f:4e:69:97:a0:
38:bc:37:83:60:4a:c2:fa:36:9c:5a:3c:e3:83:7e:
7b:5f:5d:43:d8:48:c2:c8:96:eb:14:9f:73:01:38:
54:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:AB:AF:DD:77:68:59:05:6E:4A:8B:1F:E8:8B:65:CB:A0:4C:B2:3C
X509v3 Authority Key Identifier:
keyid:EE:12:F1:79:A5:D1:F5:2E:C0:33:67:72:82:AE:7E:2E:72:E0:F2:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a0d1f4ce-169b-431a-8286-c5f3a07bbbe3/0/EE12F179A5D1F52EC033677282AE7E2E72E0F2C3.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EE12F179A5D1F52EC033677282AE7E2E72E0F2C3.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a0d1f4ce-169b-431a-8286-c5f3a07bbbe3/0/EE12F179A5D1F52EC033677282AE7E2E72E0F2C3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:4e:0f:6b:08:9e:2c:97:fc:71:a1:4e:92:7c:d7:2b:0c:6c:
d6:dc:4a:6f:1f:96:89:b4:fd:d2:7c:eb:6d:42:f0:5a:e1:1a:
4f:b9:e8:59:66:02:45:d6:70:8d:47:91:b6:0e:62:ea:ad:51:
86:18:14:79:76:84:8b:4f:ff:10:6a:4f:38:76:63:d2:1d:cd:
f3:5c:2f:24:77:73:89:f8:50:07:71:d5:2a:63:a1:7d:50:e1:
0b:34:5b:b2:15:30:ce:8f:d8:87:4b:ca:6b:93:13:5c:ff:2d:
20:25:ed:fb:1e:c3:d2:c4:79:9f:55:8c:43:b6:f8:ba:42:f7:
87:e3:46:21:a9:28:02:27:e0:05:71:12:e6:67:58:03:e0:25:
00:43:0d:7c:5f:b9:c7:bf:6b:93:d7:00:5d:f8:38:e8:08:bc:
36:25:da:06:9d:a2:77:94:ab:37:3a:bf:1d:65:a1:5b:68:cd:
c3:6f:40:c2:08:c9:2c:cb:c8:b4:28:f4:2c:e7:e1:92:15:de:
ac:d7:72:3a:bb:1d:e7:f5:4c:69:a6:d7:f9:d8:f5:6e:31:6c:
bf:58:fa:4d:4e:8e:7a:b3:e9:59:c3:71:ac:dd:07:14:1d:8b:
b1:4d:10:1a:8a:52:24:3b:8d:a0:29:b5:dd:e6:e6:1b:7f:25:
ca:72:a9:27
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUTL/PQ5oAOPtOeN1SwUdeNUWA9/0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUUxMkYxNzlBNUQxRjUyRUMwMzM2NzcyODJBRTdFMkU3
MkUwRjJDMzAeFw0yNTEyMDUxOTE2MjRaFw0yNTEyMDkwNTIwMjRaMDMxMTAvBgNV
BAMTKDI3QUJBRkRENzc2ODU5MDU2RTRBOEIxRkU4OEI2NUNCQTA0Q0IyM0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD9bPTAheZAasa8x6JJCfeGwU4O
f9qvxAdV+m03TxuDMXGgKvicIqEioa1fS8YTLRIxLoGn+rUGbu8vO6SaSnWhjpLQ
cxIQGBfLDRLsk5Zwo/vU75Sd2HF6oeB2liIMm11XL42TSbS3eSZmJG+h//tk3/Xl
N05nAeUXrFwXk/+np9ZHRU85hKwaepRwqFESzB2/GOIOe4Gy3fyWMwtsiA78X4rf
vG1r2WYxI3dPxLBci8CQACI4vAUOefSglz/f+8iA396F7PXQDBVmadIgAGWxjbuP
7PyE8mN0zXxPTmmXoDi8N4NgSsL6NpxaPOODfntfXUPYSMLIlusUn3MBOFSpAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUJ6uv3XdoWQVuSosf6Itly6BMsjwwHwYDVR0j
BBgwFoAU7hLxeaXR9S7AM2dygq5+LnLg8sMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
MGQxZjRjZS0xNjliLTQzMWEtODI4Ni1jNWYzYTA3YmJiZTMvMC9FRTEyRjE3OUE1
RDFGNTJFQzAzMzY3NzI4MkFFN0UyRTcyRTBGMkMzLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRUUxMkYxNzlBNUQxRjUyRUMwMzM2NzcyODJBRTdFMkU3MkUw
RjJDMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTBkMWY0Y2UtMTY5Yi00MzFhLTgy
ODYtYzVmM2EwN2JiYmUzLzAvRUUxMkYxNzlBNUQxRjUyRUMwMzM2NzcyODJBRTdF
MkU3MkUwRjJDMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBACtOD2sIniyX/HGhTpJ81ysMbNbcSm8flom0
/dJ8621C8FrhGk+56FlmAkXWcI1HkbYOYuqtUYYYFHl2hItP/xBqTzh2Y9IdzfNc
LyR3c4n4UAdx1SpjoX1Q4Qs0W7IVMM6P2IdLymuTE1z/LSAl7fsew9LEeZ9VjEO2
+LpC94fjRiGpKAIn4AVxEuZnWAPgJQBDDXxfuce/a5PXAF34OOgIvDYl2gadoneU
qzc6vx1loVtozcNvQMIIySzLyLQo9Czn4ZIV3qzXcjq7Hef1TGmm1/nY9W4xbL9Y
+k1Ojnqz6VnDcazdBxQdi7FNEBqKUiQ7jaAptd3m5ht/JcpyqSc=
-----END CERTIFICATE-----
Generated at Sun Dec 7 01:10:38 2025 by rpki-client