This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d3e27da9-e6e6-44a5-98f4-590eb5a1bd65/0/EFA4BF9A0D2DD57446126C57F39AF10838E0C675.mft File: EFA4BF9A0D2DD57446126C57F39AF10838E0C675.mft (raw, json) Hash identifier: lIn5K0oMS5PRpH0pDWvFR3MWnxxAIPQsIo2pvgut+Gg= Subject key identifier: 81:A6:38:6D:D0:D4:8D:A8:E5:3E:FD:83:90:D1:71:41:14:7B:E5:8F Authority key identifier: EF:A4:BF:9A:0D:2D:D5:74:46:12:6C:57:F3:9A:F1:08:38:E0:C6:75 Certificate issuer: /CN=EFA4BF9A0D2DD57446126C57F39AF10838E0C675 Certificate serial: 2D8F57EDFEC748A6905A6B5A3F9C45DCC4C3B4D1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFA4BF9A0D2DD57446126C57F39AF10838E0C675.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d3e27da9-e6e6-44a5-98f4-590eb5a1bd65/0/EFA4BF9A0D2DD57446126C57F39AF10838E0C675.mft Manifest number: 01A1 Signing time: Sat 06 Dec 2025 16:51:16 +0000 Manifest this update: Sat 06 Dec 2025 16:46:16 +0000 Manifest next update: Wed 10 Dec 2025 04:36:16 +0000 Files and hashes: 1: 3130332e3235332e3132372e302f32342d3234203d3e20313530393839.roa (hash: tiskF97htgFGOxcUjLLoNbBwjgTxxSKvgdsrNkZUkUk=) 2: EFA4BF9A0D2DD57446126C57F39AF10838E0C675.crl (hash: XHieoCrp5sUEqmLuayBPsqgXx2IdUEXywWc0CdTyc6U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d3e27da9-e6e6-44a5-98f4-590eb5a1bd65/0/EFA4BF9A0D2DD57446126C57F39AF10838E0C675.crl rsync://repo-rpki.idnic.net/repo/d3e27da9-e6e6-44a5-98f4-590eb5a1bd65/0/EFA4BF9A0D2DD57446126C57F39AF10838E0C675.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFA4BF9A0D2DD57446126C57F39AF10838E0C675.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:8f:57:ed:fe:c7:48:a6:90:5a:6b:5a:3f:9c:45:dc:c4:c3:b4:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EFA4BF9A0D2DD57446126C57F39AF10838E0C675 Validity Not Before: Dec 6 16:46:16 2025 GMT Not After : Dec 10 04:36:16 2025 GMT Subject: CN=81A6386DD0D48DA8E53EFD8390D17141147BE58F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:8a:fa:7f:f2:52:1e:68:26:25:06:19:52:34: c2:9b:d5:9b:0b:79:ac:0c:94:3d:90:6a:55:25:28: 54:0b:3e:88:f6:a8:52:70:1e:3b:bb:01:c0:75:f4: 88:c6:fd:f6:f6:4c:1d:c8:57:1a:98:9c:91:8a:fd: 43:50:56:7e:54:51:95:02:ae:83:7e:66:d3:58:d2: 00:09:5c:d7:34:dc:2a:97:bf:fb:bb:aa:08:9f:df: ef:4d:93:fc:65:71:e1:dd:1a:60:e5:1c:ba:62:2a: ad:f3:33:d7:c9:b6:d9:35:35:43:ac:0b:bc:bd:9f: c5:79:8c:92:2d:46:79:ef:72:8d:67:c5:89:91:3e: 90:cb:bb:47:5d:3f:6d:09:77:98:1c:69:21:3e:71: b9:8d:0d:e1:eb:04:a9:88:72:f6:64:62:b8:c5:a6: a0:e5:f8:d9:1b:e3:48:42:d9:ab:2a:23:0f:63:14: 8e:3f:52:8a:0e:a9:81:e9:b0:ad:73:f7:92:ed:45: d0:48:83:c7:9f:69:90:d4:5d:8f:90:c5:bf:ff:2a: 96:a8:5c:ee:22:53:a6:82:04:6a:f8:7c:93:f7:a9: f4:c6:88:39:d2:da:03:c0:3b:2b:78:7d:e0:60:8d: 7b:49:5b:fc:8d:c7:5b:ef:d3:a8:c0:66:5a:ec:dc: a0:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:A6:38:6D:D0:D4:8D:A8:E5:3E:FD:83:90:D1:71:41:14:7B:E5:8F X509v3 Authority Key Identifier: keyid:EF:A4:BF:9A:0D:2D:D5:74:46:12:6C:57:F3:9A:F1:08:38:E0:C6:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d3e27da9-e6e6-44a5-98f4-590eb5a1bd65/0/EFA4BF9A0D2DD57446126C57F39AF10838E0C675.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFA4BF9A0D2DD57446126C57F39AF10838E0C675.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d3e27da9-e6e6-44a5-98f4-590eb5a1bd65/0/EFA4BF9A0D2DD57446126C57F39AF10838E0C675.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:97:3d:cb:95:5a:24:73:95:67:61:68:02:60:d1:58:67:dc: 43:46:6a:76:b9:3a:02:13:ad:9b:21:06:af:d5:09:43:10:00: 37:6d:c1:2f:ef:53:05:5c:7f:e8:98:9f:4f:01:f7:13:78:c2: 29:42:ba:75:98:59:d5:44:ea:7d:fe:f4:23:8c:4c:0b:31:f6: 67:12:8e:f9:fa:87:8b:b9:6f:be:62:29:db:3f:65:7d:86:cc: 2c:5a:fd:1a:ad:c8:b4:01:9d:72:9e:54:82:32:73:37:3e:83: 1d:f0:9f:f3:a3:e1:09:a9:30:45:02:0f:df:ea:76:41:cd:fb: 26:65:12:33:67:11:70:25:08:8b:25:28:fc:fc:62:4d:7d:aa: c1:b3:c7:85:b8:0a:6c:c8:9b:bb:87:57:62:b5:1d:81:6e:66: f7:f4:21:a9:d6:54:64:83:48:cd:c5:fb:09:c3:cf:43:6e:d2: f3:e9:e9:4f:69:80:cf:71:55:fb:cd:8b:ef:fe:f5:81:79:44: 3b:22:38:0b:09:4d:b7:e7:80:64:5c:f3:1a:fb:c7:de:de:fc: ee:06:74:74:4b:f2:73:27:64:30:e0:44:02:27:68:99:f0:8c: b1:ec:ce:85:e4:f3:e7:db:53:91:e8:f3:31:4f:f2:9d:b8:d2: 67:d7:b4:e8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULY9X7f7HSKaQWmtaP5xF3MTDtNEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUZBNEJGOUEwRDJERDU3NDQ2MTI2QzU3RjM5QUYxMDgz OEUwQzY3NTAeFw0yNTEyMDYxNjQ2MTZaFw0yNTEyMTAwNDM2MTZaMDMxMTAvBgNV BAMTKDgxQTYzODZERDBENDhEQThFNTNFRkQ4MzkwRDE3MTQxMTQ3QkU1OEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKivp/8lIeaCYlBhlSNMKb1ZsL eawMlD2QalUlKFQLPoj2qFJwHju7AcB19IjG/fb2TB3IVxqYnJGK/UNQVn5UUZUC roN+ZtNY0gAJXNc03CqXv/u7qgif3+9Nk/xlceHdGmDlHLpiKq3zM9fJttk1NUOs C7y9n8V5jJItRnnvco1nxYmRPpDLu0ddP20Jd5gcaSE+cbmNDeHrBKmIcvZkYrjF pqDl+Nkb40hC2asqIw9jFI4/UooOqYHpsK1z95LtRdBIg8efaZDUXY+Qxb//Kpao XO4iU6aCBGr4fJP3qfTGiDnS2gPAOyt4feBgjXtJW/yNx1vv06jAZlrs3KA7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgaY4bdDUjajlPv2DkNFxQRR75Y8wHwYDVR0j BBgwFoAU76S/mg0t1XRGEmxX85rxCDjgxnUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k M2UyN2RhOS1lNmU2LTQ0YTUtOThmNC01OTBlYjVhMWJkNjUvMC9FRkE0QkY5QTBE MkRENTc0NDYxMjZDNTdGMzlBRjEwODM4RTBDNjc1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUZBNEJGOUEwRDJERDU3NDQ2MTI2QzU3RjM5QUYxMDgzOEUw QzY3NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDNlMjdkYTktZTZlNi00NGE1LTk4 ZjQtNTkwZWI1YTFiZDY1LzAvRUZBNEJGOUEwRDJERDU3NDQ2MTI2QzU3RjM5QUYx MDgzOEUwQzY3NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEOXPcuVWiRzlWdhaAJg0Vhn3ENGana5OgIT rZshBq/VCUMQADdtwS/vUwVcf+iYn08B9xN4wilCunWYWdVE6n3+9COMTAsx9mcS jvn6h4u5b75iKds/ZX2GzCxa/RqtyLQBnXKeVIIyczc+gx3wn/Oj4QmpMEUCD9/q dkHN+yZlEjNnEXAlCIslKPz8Yk19qsGzx4W4CmzIm7uHV2K1HYFuZvf0IanWVGSD SM3F+wnDz0Nu0vPp6U9pgM9xVfvNi+/+9YF5RDsiOAsJTbfngGRc8xr7x97e/O4G dHRL8nMnZDDgRAInaJnwjLHszoXk8+fbU5Ho8zFP8p240mfXtOg= -----END CERTIFICATE-----Generated at Sun Dec 7 00:14:17 2025 by rpki-client