This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/fc1e865f-d5a1-4af7-a719-0c26e74fcd61/0/EF805F3F00FD5F5F0991E46020BBCFA4C16B8165.mft File: EF805F3F00FD5F5F0991E46020BBCFA4C16B8165.mft (raw, json) Hash identifier: 6qEvD4nYj9DWMBn1kmhmhFw7WT0lo9u6ZKRvtieX8qY= Subject key identifier: B2:34:1B:5E:5C:A4:28:D3:22:30:54:3C:62:CD:49:15:72:70:DE:18 Authority key identifier: EF:80:5F:3F:00:FD:5F:5F:09:91:E4:60:20:BB:CF:A4:C1:6B:81:65 Certificate issuer: /CN=EF805F3F00FD5F5F0991E46020BBCFA4C16B8165 Certificate serial: 321A98D36ED120CDCB373C3426D7F8CEEC5BBFD7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EF805F3F00FD5F5F0991E46020BBCFA4C16B8165.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fc1e865f-d5a1-4af7-a719-0c26e74fcd61/0/EF805F3F00FD5F5F0991E46020BBCFA4C16B8165.mft Manifest number: 0251 Signing time: Sat 06 Dec 2025 07:01:39 +0000 Manifest this update: Sat 06 Dec 2025 06:56:39 +0000 Manifest next update: Tue 09 Dec 2025 07:12:39 +0000 Files and hashes: 1: EF805F3F00FD5F5F0991E46020BBCFA4C16B8165.crl (hash: Ttif78COHXDoT296mocu4Gk8NhOLlWwv2RqbdT8b+zY=) 2: 3130332e3138362e32362e302f32332d3234203d3e20313439363934.roa (hash: tzus+b1Dyr0i8p6BXNzRg2JRJ5sSDDozsutDjca9Txw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fc1e865f-d5a1-4af7-a719-0c26e74fcd61/0/EF805F3F00FD5F5F0991E46020BBCFA4C16B8165.crl rsync://repo-rpki.idnic.net/repo/fc1e865f-d5a1-4af7-a719-0c26e74fcd61/0/EF805F3F00FD5F5F0991E46020BBCFA4C16B8165.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EF805F3F00FD5F5F0991E46020BBCFA4C16B8165.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 07:12:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:1a:98:d3:6e:d1:20:cd:cb:37:3c:34:26:d7:f8:ce:ec:5b:bf:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EF805F3F00FD5F5F0991E46020BBCFA4C16B8165 Validity Not Before: Dec 6 06:56:39 2025 GMT Not After : Dec 9 07:12:39 2025 GMT Subject: CN=B2341B5E5CA428D32230543C62CD49157270DE18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:6e:45:41:5f:2d:1f:be:9e:43:21:83:9e:9d: eb:a3:b8:02:63:e8:65:ad:02:fc:6d:1b:1e:ce:76: b6:2d:9c:4a:3f:97:fc:03:f3:f4:4c:4e:bf:0c:bb: 22:8c:7a:eb:14:9f:f4:57:6f:18:0d:62:77:f1:a3: 9e:fb:c8:d0:da:f0:b5:4f:90:e4:c6:42:13:f7:0e: f3:20:61:a1:57:d5:73:1b:07:6a:cc:2b:08:56:4a: 1f:6d:ed:df:a8:77:4f:8b:75:b7:01:06:22:a5:80: e4:95:a0:08:75:37:6c:64:3f:58:ae:e0:3b:02:2b: 39:dc:82:04:6a:8f:1a:26:89:5c:b1:62:f8:e0:31: 22:bb:26:07:63:33:35:20:b8:f6:5a:87:0c:c9:80: 9e:46:c4:69:e4:0c:66:33:2f:da:71:fa:08:2c:e1: b9:bc:b0:cd:f5:19:f1:dd:e4:b2:df:e7:9d:79:68: bd:2f:ff:b0:24:7f:ad:b5:22:3d:46:fa:43:7c:e1: ee:0e:ba:b6:7d:24:14:e4:73:1b:cd:ed:d3:9b:7d: 11:be:51:63:4c:6d:40:a4:74:5c:27:2e:fb:6c:9e: 2a:53:cb:60:7a:57:ea:d1:12:8b:8f:be:2c:22:6e: 9d:bb:13:84:6d:ba:a6:72:56:6d:ba:c8:d0:1d:90: 72:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:34:1B:5E:5C:A4:28:D3:22:30:54:3C:62:CD:49:15:72:70:DE:18 X509v3 Authority Key Identifier: keyid:EF:80:5F:3F:00:FD:5F:5F:09:91:E4:60:20:BB:CF:A4:C1:6B:81:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fc1e865f-d5a1-4af7-a719-0c26e74fcd61/0/EF805F3F00FD5F5F0991E46020BBCFA4C16B8165.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EF805F3F00FD5F5F0991E46020BBCFA4C16B8165.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fc1e865f-d5a1-4af7-a719-0c26e74fcd61/0/EF805F3F00FD5F5F0991E46020BBCFA4C16B8165.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:8c:bb:2d:27:9d:e3:f5:28:85:db:f6:25:34:67:a0:c1:cc: b4:ca:b7:37:c7:91:cc:34:23:81:88:b3:c2:dc:6d:24:7c:64: 38:a6:03:2a:28:02:57:39:88:8f:07:83:e1:83:b4:b0:4b:c7: 1d:9b:95:df:40:51:ac:11:53:81:19:70:39:f4:a5:fd:3d:0b: c2:fb:14:48:4e:b6:b4:36:e3:4b:4a:be:9d:92:7d:6e:50:f9: e0:4f:85:0c:ec:b3:51:d4:56:88:eb:9a:14:a2:c4:51:80:12: 05:0b:a6:f3:6a:44:52:7a:9b:3c:df:3c:07:7f:10:10:e7:19: 44:b5:01:32:e2:3c:9b:04:44:4a:33:2e:0b:bb:39:f8:1f:ce: 6e:b3:d3:cf:80:9d:e2:98:04:52:0b:96:d2:1d:5b:85:3e:23: 27:f8:0f:50:3b:54:c0:bc:9e:87:f6:dc:54:89:36:b0:db:65: 56:ed:97:29:5f:b6:7f:87:ff:42:a8:52:16:1a:07:74:f8:2e: 4f:00:14:37:02:a6:52:66:d5:5e:d5:b2:cd:52:36:34:c9:f6: fa:32:ae:a3:5b:43:33:9c:b9:2a:11:92:3a:31:0a:29:98:44: 4f:ce:6d:b3:e8:38:04:cd:eb:06:d1:c7:76:a7:49:4d:b1:04: 73:8d:e9:45 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMhqY027RIM3LNzw0Jtf4zuxbv9cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUY4MDVGM0YwMEZENUY1RjA5OTFFNDYwMjBCQkNGQTRD MTZCODE2NTAeFw0yNTEyMDYwNjU2MzlaFw0yNTEyMDkwNzEyMzlaMDMxMTAvBgNV BAMTKEIyMzQxQjVFNUNBNDI4RDMyMjMwNTQzQzYyQ0Q0OTE1NzI3MERFMTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKbkVBXy0fvp5DIYOeneujuAJj 6GWtAvxtGx7OdrYtnEo/l/wD8/RMTr8MuyKMeusUn/RXbxgNYnfxo577yNDa8LVP kOTGQhP3DvMgYaFX1XMbB2rMKwhWSh9t7d+od0+LdbcBBiKlgOSVoAh1N2xkP1iu 4DsCKzncggRqjxomiVyxYvjgMSK7JgdjMzUguPZahwzJgJ5GxGnkDGYzL9px+ggs 4bm8sM31GfHd5LLf5515aL0v/7Akf621Ij1G+kN84e4OurZ9JBTkcxvN7dObfRG+ UWNMbUCkdFwnLvtsnipTy2B6V+rREouPviwibp27E4RtuqZyVm26yNAdkHJ1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsjQbXlykKNMiMFQ8Ys1JFXJw3hgwHwYDVR0j BBgwFoAU74BfPwD9X18JkeRgILvPpMFrgWUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YzFlODY1Zi1kNWExLTRhZjctYTcxOS0wYzI2ZTc0ZmNkNjEvMC9FRjgwNUYzRjAw RkQ1RjVGMDk5MUU0NjAyMEJCQ0ZBNEMxNkI4MTY1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUY4MDVGM0YwMEZENUY1RjA5OTFFNDYwMjBCQkNGQTRDMTZC ODE2NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmMxZTg2NWYtZDVhMS00YWY3LWE3 MTktMGMyNmU3NGZjZDYxLzAvRUY4MDVGM0YwMEZENUY1RjA5OTFFNDYwMjBCQkNG QTRDMTZCODE2NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEuMuy0nneP1KIXb9iU0Z6DBzLTKtzfHkcw0 I4GIs8LcbSR8ZDimAyooAlc5iI8Hg+GDtLBLxx2bld9AUawRU4EZcDn0pf09C8L7 FEhOtrQ240tKvp2SfW5Q+eBPhQzss1HUVojrmhSixFGAEgULpvNqRFJ6mzzfPAd/ EBDnGUS1ATLiPJsEREozLgu7Ofgfzm6z08+AneKYBFILltIdW4U+Iyf4D1A7VMC8 nof23FSJNrDbZVbtlylftn+H/0KoUhYaB3T4Lk8AFDcCplJm1V7Vss1SNjTJ9voy rqNbQzOcuSoRkjoxCimYRE/ObbPoOATN6wbRx3anSU2xBHON6UU= -----END CERTIFICATE-----Generated at Sat Dec 6 21:35:39 2025 by rpki-client