This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/0/EF7CA82C5B45FD412DE892CB6DA7A8CA15C85B17.mft File: EF7CA82C5B45FD412DE892CB6DA7A8CA15C85B17.mft (raw, json) Hash identifier: UhZbvpeHy8xaotobGNGT0SNAYHzgn/Bav8KnA8oKjBs= Subject key identifier: D5:C0:92:89:E3:2C:85:5D:E5:06:FD:87:E7:F5:EE:61:03:12:76:AA Authority key identifier: EF:7C:A8:2C:5B:45:FD:41:2D:E8:92:CB:6D:A7:A8:CA:15:C8:5B:17 Certificate issuer: /CN=EF7CA82C5B45FD412DE892CB6DA7A8CA15C85B17 Certificate serial: 6EADA0F52EE18577685E3DE88ABCA6E375D6A688 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/EF7CA82C5B45FD412DE892CB6DA7A8CA15C85B17.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/0/EF7CA82C5B45FD412DE892CB6DA7A8CA15C85B17.mft Manifest number: F7 Signing time: Mon 15 Dec 2025 23:01:25 +0000 Manifest this update: Mon 15 Dec 2025 22:56:25 +0000 Manifest next update: Fri 19 Dec 2025 10:12:25 +0000 Files and hashes: 1: 3135372e36362e38362e302f32332d3234203d3e20313532343432.roa (hash: yvjq0+mX9UVVGH4hrgAy0kHkjD5STbq2ZndxXPg4Qok=) 2: EF7CA82C5B45FD412DE892CB6DA7A8CA15C85B17.crl (hash: QTH5E1ETfmLyAstv5/D5hckQWHjjTDIBXiAddz3wdRY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/0/EF7CA82C5B45FD412DE892CB6DA7A8CA15C85B17.crl rsync://repo-rpki.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/0/EF7CA82C5B45FD412DE892CB6DA7A8CA15C85B17.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/EF7CA82C5B45FD412DE892CB6DA7A8CA15C85B17.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Dec 2025 10:12:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:ad:a0:f5:2e:e1:85:77:68:5e:3d:e8:8a:bc:a6:e3:75:d6:a6:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EF7CA82C5B45FD412DE892CB6DA7A8CA15C85B17 Validity Not Before: Dec 15 22:56:25 2025 GMT Not After : Dec 19 10:12:25 2025 GMT Subject: CN=D5C09289E32C855DE506FD87E7F5EE61031276AA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:42:40:26:2a:6b:31:c3:4c:ce:89:bc:24:48: d9:20:d1:fa:08:a8:4a:0c:20:77:3f:28:aa:b2:57: 98:da:e4:6c:77:f8:61:34:58:32:89:70:99:a3:af: fe:00:f4:2e:11:0d:7b:fd:5e:93:34:2d:86:c7:23: 91:c0:ea:be:2c:ee:ef:c2:d1:85:98:8e:a0:4b:fd: cd:e4:44:18:fd:3e:d9:e3:07:59:26:bb:d4:da:66: 8f:b6:40:6d:4d:a2:d6:ca:cf:e8:26:93:6a:f7:49: 86:ad:73:9b:dc:5f:82:72:76:ae:ba:c8:23:e8:82: ae:ae:45:6c:f9:0b:74:bf:0f:36:bb:4b:47:56:dc: 97:7a:91:1b:bc:eb:c7:5b:78:37:15:34:85:22:cf: fe:8f:00:f1:e7:28:29:ea:35:36:16:ab:7a:2d:dc: ce:1b:e8:fa:d0:54:86:d6:4b:ec:81:5f:5d:d9:9f: 2a:92:73:14:0b:43:1f:48:62:3e:63:4c:f5:47:ec: 16:57:57:c4:a1:24:99:1e:43:a0:95:d2:2f:97:4f: 0e:7f:e7:74:fe:ed:f5:d5:61:8b:45:84:c7:70:21: 4f:9b:89:81:7f:cc:1b:7b:b2:ea:b6:08:99:76:a9: 91:b3:e6:8a:91:cd:0d:9a:17:03:28:eb:ca:05:80: cb:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:C0:92:89:E3:2C:85:5D:E5:06:FD:87:E7:F5:EE:61:03:12:76:AA X509v3 Authority Key Identifier: keyid:EF:7C:A8:2C:5B:45:FD:41:2D:E8:92:CB:6D:A7:A8:CA:15:C8:5B:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/0/EF7CA82C5B45FD412DE892CB6DA7A8CA15C85B17.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/EF7CA82C5B45FD412DE892CB6DA7A8CA15C85B17.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/0/EF7CA82C5B45FD412DE892CB6DA7A8CA15C85B17.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:f8:f4:15:c4:20:24:d3:a2:82:f0:c5:3b:18:2c:7a:bf:15: 6b:c5:6f:c3:51:da:57:80:e5:f8:0e:93:bb:b4:58:37:9e:d0: a1:c5:60:e0:68:0e:a3:b5:14:65:07:1a:3e:6f:b4:de:e9:16: b2:b1:13:d9:35:2d:47:dd:5f:6f:0d:0f:0c:02:56:83:7a:20: 34:ea:d2:e6:41:c0:dd:ba:76:e4:0b:9a:13:11:d0:e6:81:1d: 9a:22:c5:b3:c3:ad:f5:30:2c:68:e2:34:f4:03:fc:db:b5:b9: 1a:da:9b:06:75:a5:ad:4e:97:79:2f:f3:7a:a8:73:00:b1:ba: 75:b5:94:c6:01:fd:ca:9b:70:1d:34:a0:a4:a8:59:8b:c2:f3: 55:9d:b3:ce:83:02:4e:ae:1f:4f:88:be:9f:94:ec:c1:31:33: ea:b9:3e:41:17:8b:84:4f:18:36:9e:7a:a3:35:cd:bf:24:4a: 21:ff:46:a5:a2:9f:75:be:6a:63:1e:cb:11:5f:8d:e5:86:8c: fa:f8:6e:15:66:63:85:c0:94:38:44:d0:ff:4e:a2:db:0d:45: a9:3e:79:21:4c:f8:fc:55:12:09:a4:82:df:26:ff:63:e7:67: 36:cd:93:8d:c4:2b:2d:4e:67:f5:61:f2:5f:14:7f:c8:c7:63: f5:59:13:09 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbq2g9S7hhXdoXj3oirym43XWpogwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUY3Q0E4MkM1QjQ1RkQ0MTJERTg5MkNCNkRBN0E4Q0Ex NUM4NUIxNzAeFw0yNTEyMTUyMjU2MjVaFw0yNTEyMTkxMDEyMjVaMDMxMTAvBgNV BAMTKEQ1QzA5Mjg5RTMyQzg1NURFNTA2RkQ4N0U3RjVFRTYxMDMxMjc2QUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdQkAmKmsxw0zOibwkSNkg0foI qEoMIHc/KKqyV5ja5Gx3+GE0WDKJcJmjr/4A9C4RDXv9XpM0LYbHI5HA6r4s7u/C 0YWYjqBL/c3kRBj9PtnjB1kmu9TaZo+2QG1NotbKz+gmk2r3SYatc5vcX4Jydq66 yCPogq6uRWz5C3S/Dza7S0dW3Jd6kRu868dbeDcVNIUiz/6PAPHnKCnqNTYWq3ot 3M4b6PrQVIbWS+yBX13ZnyqScxQLQx9IYj5jTPVH7BZXV8ShJJkeQ6CV0i+XTw5/ 53T+7fXVYYtFhMdwIU+biYF/zBt7suq2CJl2qZGz5oqRzQ2aFwMo68oFgMsnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1cCSieMshV3lBv2H5/XuYQMSdqowHwYDVR0j BBgwFoAU73yoLFtF/UEt6JLLbaeoyhXIWxcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ODdkZDU5Ny00MGNkLTQwOWItYjNjNS0yODUyY2UwMTQ4ODkvMC9FRjdDQTgyQzVC NDVGRDQxMkRFODkyQ0I2REE3QThDQTE1Qzg1QjE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRUY3Q0E4MkM1QjQ1RkQ0MTJERTg5MkNCNkRBN0E4Q0ExNUM4 NUIxNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjg3ZGQ1OTctNDBjZC00MDliLWIz YzUtMjg1MmNlMDE0ODg5LzAvRUY3Q0E4MkM1QjQ1RkQ0MTJERTg5MkNCNkRBN0E4 Q0ExNUM4NUIxNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAH49BXEICTTooLwxTsYLHq/FWvFb8NR2leA 5fgOk7u0WDee0KHFYOBoDqO1FGUHGj5vtN7pFrKxE9k1LUfdX28NDwwCVoN6IDTq 0uZBwN26duQLmhMR0OaBHZoixbPDrfUwLGjiNPQD/Nu1uRramwZ1pa1Ol3kv83qo cwCxunW1lMYB/cqbcB00oKSoWYvC81Wds86DAk6uH0+Ivp+U7MExM+q5PkEXi4RP GDaeeqM1zb8kSiH/RqWin3W+amMeyxFfjeWGjPr4bhVmY4XAlDhE0P9OotsNRak+ eSFM+PxVEgmkgt8m/2PnZzbNk43EKy1OZ/Vh8l8Uf8jHY/VZEwk= -----END CERTIFICATE-----Generated at Thu Dec 18 07:08:58 2025 by rpki-client