This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/c70282ef-2500-4ffb-8d7d-1f505435227d/0/EF4C4D45351DBB35C40C58769D718931B1AAD47D.mft
File: EF4C4D45351DBB35C40C58769D718931B1AAD47D.mft (raw, json)
Hash identifier: R0d0b5DJFLgJSSJ6keWVHzlhTKzZDMCmrkC0krHEBvM=
Subject key identifier: 55:96:01:09:3A:4E:00:49:91:DE:E8:43:D9:4B:4B:BC:77:A8:F0:37
Authority key identifier: EF:4C:4D:45:35:1D:BB:35:C4:0C:58:76:9D:71:89:31:B1:AA:D4:7D
Certificate issuer: /CN=EF4C4D45351DBB35C40C58769D718931B1AAD47D
Certificate serial: 0B366C0ADC1D43E5A3C685618A48BAB82EB784B9
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EF4C4D45351DBB35C40C58769D718931B1AAD47D.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/c70282ef-2500-4ffb-8d7d-1f505435227d/0/EF4C4D45351DBB35C40C58769D718931B1AAD47D.mft
Manifest number: 052F
Signing time: Thu 04 Dec 2025 22:41:44 +0000
Manifest this update: Thu 04 Dec 2025 22:36:44 +0000
Manifest next update: Mon 08 Dec 2025 05:42:44 +0000
Files and hashes: 1: 3130332e35342e3133342e302f32342d3234203d3e203633383736.roa (hash: rvPyF4pzz+NGPBxHBZxBP55s7GX0enQK9yL4BnvRk1A=)
2: EF4C4D45351DBB35C40C58769D718931B1AAD47D.crl (hash: dzKNu/wgoqHgBq1twMQhHGvZbqnnY8Tco0541gBASmM=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/c70282ef-2500-4ffb-8d7d-1f505435227d/0/EF4C4D45351DBB35C40C58769D718931B1AAD47D.crl
rsync://repo-rpki.idnic.net/repo/c70282ef-2500-4ffb-8d7d-1f505435227d/0/EF4C4D45351DBB35C40C58769D718931B1AAD47D.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EF4C4D45351DBB35C40C58769D718931B1AAD47D.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Dec 2025 05:42:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:36:6c:0a:dc:1d:43:e5:a3:c6:85:61:8a:48:ba:b8:2e:b7:84:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EF4C4D45351DBB35C40C58769D718931B1AAD47D
Validity
Not Before: Dec 4 22:36:44 2025 GMT
Not After : Dec 8 05:42:44 2025 GMT
Subject: CN=559601093A4E004991DEE843D94B4BBC77A8F037
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:95:30:36:33:1f:5b:e4:d5:ec:1f:6a:94:02:
82:e0:77:2f:c2:5f:04:90:1b:eb:9e:25:83:a0:54:
7b:a8:45:cd:c3:7c:3e:2f:37:4a:32:d2:b8:44:66:
60:a5:91:f7:2e:63:b0:78:f5:a7:47:26:1a:e5:a3:
e9:9b:cd:7a:fb:57:36:cd:9a:84:b3:2e:72:f0:06:
1e:17:65:84:13:09:83:ba:83:66:b9:59:76:d6:77:
83:35:9e:62:16:66:e8:03:b3:24:3c:e6:f8:7e:c7:
8d:73:75:3e:15:a4:0c:59:9b:7c:32:e3:2c:2d:9d:
85:27:c2:ea:6f:f4:f1:17:11:31:96:bb:d2:96:b9:
6c:a1:61:63:de:2c:17:1a:1a:93:36:a6:aa:82:ad:
0b:fc:d8:24:9b:a7:f4:01:99:47:2d:ce:37:ac:89:
2b:23:b8:36:5d:8c:a4:69:71:aa:35:01:be:57:81:
c8:40:28:8f:5a:d5:b4:47:84:a5:5b:f5:59:ee:71:
23:37:38:8f:7e:30:bd:ef:4e:a3:56:5b:24:17:bf:
9c:0a:76:60:f2:74:01:e0:17:da:66:12:75:e1:e2:
08:ec:a0:44:1a:63:d6:8d:32:53:65:90:b2:18:d3:
c4:a6:60:fb:f1:24:b4:ff:2b:80:9f:ed:ab:be:76:
ce:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:96:01:09:3A:4E:00:49:91:DE:E8:43:D9:4B:4B:BC:77:A8:F0:37
X509v3 Authority Key Identifier:
keyid:EF:4C:4D:45:35:1D:BB:35:C4:0C:58:76:9D:71:89:31:B1:AA:D4:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/c70282ef-2500-4ffb-8d7d-1f505435227d/0/EF4C4D45351DBB35C40C58769D718931B1AAD47D.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EF4C4D45351DBB35C40C58769D718931B1AAD47D.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c70282ef-2500-4ffb-8d7d-1f505435227d/0/EF4C4D45351DBB35C40C58769D718931B1AAD47D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:da:ab:fb:21:bd:a8:6c:b5:0a:6e:b3:cb:7c:48:03:f7:4d:
c1:69:91:e6:49:b0:7e:93:22:97:89:fa:a0:e5:2d:e8:ae:c6:
ba:65:8c:8c:0f:60:c6:7c:0c:2d:cc:70:a5:e7:94:8e:19:de:
a9:75:2d:dc:46:c0:36:3c:13:ad:4a:de:59:43:d7:3a:d6:4b:
88:1d:a3:85:d8:16:fa:97:14:d8:17:7c:7a:f1:c2:c0:8b:7d:
f8:66:2f:76:56:58:94:06:3a:f7:05:b6:93:9e:3f:c3:ec:fb:
48:23:96:6f:46:7b:a5:60:b4:b6:6f:fa:e7:14:f0:99:88:4d:
41:53:20:b2:71:51:41:93:a5:8a:c6:fe:33:ac:f7:05:9b:19:
b5:6d:50:09:b7:b0:8a:4c:aa:54:37:fa:9b:da:80:d3:5c:69:
62:26:a3:39:86:bd:33:01:23:c9:4d:09:34:85:84:46:57:4d:
43:6b:96:8e:b2:a3:30:23:72:10:06:1f:21:79:c2:67:68:fa:
27:d4:2d:24:4b:72:09:d1:fb:42:2d:ff:68:88:30:50:0f:83:
fd:75:c8:e1:07:97:87:02:6d:af:bb:0a:7b:be:a3:50:02:d6:
d1:f7:d4:0a:36:54:c4:0c:9f:e7:8f:39:20:b0:ec:8a:c0:c7:
f8:3a:d3:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 04:51:54 2025 by rpki-client