This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/fc1e865f-d5a1-4af7-a719-0c26e74fcd61/0/EF805F3F00FD5F5F0991E46020BBCFA4C16B8165.mft
File: EF805F3F00FD5F5F0991E46020BBCFA4C16B8165.mft (raw, json)
Hash identifier: uB2pv8E3fV8rR+vN5YbY/jAJSoLsy3k+uGHyhML+lf0=
Subject key identifier: 9A:28:9D:C9:A7:2A:23:6A:35:B5:0D:73:B3:25:CE:C8:EE:AF:91:7E
Authority key identifier: EF:80:5F:3F:00:FD:5F:5F:09:91:E4:60:20:BB:CF:A4:C1:6B:81:65
Certificate issuer: /CN=EF805F3F00FD5F5F0991E46020BBCFA4C16B8165
Certificate serial: 18A7FFDA13274617BC6B817C5B4EECF1E17F7903
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EF805F3F00FD5F5F0991E46020BBCFA4C16B8165.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/fc1e865f-d5a1-4af7-a719-0c26e74fcd61/0/EF805F3F00FD5F5F0991E46020BBCFA4C16B8165.mft
Manifest number: 0255
Signing time: Mon 15 Dec 2025 02:31:42 +0000
Manifest this update: Mon 15 Dec 2025 02:26:42 +0000
Manifest next update: Thu 18 Dec 2025 09:12:42 +0000
Files and hashes: 1: EF805F3F00FD5F5F0991E46020BBCFA4C16B8165.crl (hash: RpQuQNtupZ+RWrF0sZb+zOl+uxPdscXXa4RMCaZwkVE=)
2: 3130332e3138362e32362e302f32332d3234203d3e20313439363934.roa (hash: tzus+b1Dyr0i8p6BXNzRg2JRJ5sSDDozsutDjca9Txw=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/fc1e865f-d5a1-4af7-a719-0c26e74fcd61/0/EF805F3F00FD5F5F0991E46020BBCFA4C16B8165.crl
rsync://repo-rpki.idnic.net/repo/fc1e865f-d5a1-4af7-a719-0c26e74fcd61/0/EF805F3F00FD5F5F0991E46020BBCFA4C16B8165.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EF805F3F00FD5F5F0991E46020BBCFA4C16B8165.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Dec 2025 09:12:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:a7:ff:da:13:27:46:17:bc:6b:81:7c:5b:4e:ec:f1:e1:7f:79:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EF805F3F00FD5F5F0991E46020BBCFA4C16B8165
Validity
Not Before: Dec 15 02:26:42 2025 GMT
Not After : Dec 18 09:12:42 2025 GMT
Subject: CN=9A289DC9A72A236A35B50D73B325CEC8EEAF917E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:fb:5d:e9:63:ad:be:c6:55:8d:dd:2d:c4:43:
2d:78:80:33:c8:df:ad:fc:21:52:a0:28:7e:98:8e:
a2:a9:c4:6e:40:f3:00:03:d0:8b:98:09:ae:3a:63:
83:04:cb:bd:42:7a:cd:00:19:fd:6a:5c:5e:92:fa:
b0:67:d3:a0:17:f8:9e:83:db:1e:0e:a0:88:bc:96:
91:9e:e9:90:61:a0:dc:bb:57:ca:61:f6:02:70:93:
02:4a:c2:36:d7:1e:1b:1f:ca:e3:dd:80:3f:0b:26:
50:30:49:ab:2e:c5:5f:7f:ed:c4:66:a5:3f:83:56:
00:45:16:d1:8b:2c:c2:3a:5d:e4:d4:ab:c2:af:50:
ef:c5:a3:53:36:ec:62:7b:97:9f:db:d2:5f:09:e3:
45:7f:3f:50:32:ae:3a:0f:65:85:93:03:86:2c:11:
62:6a:86:90:3f:a3:10:60:bf:e9:5a:6f:2a:fe:cc:
c4:dd:f6:a1:92:6f:66:46:da:54:97:48:33:85:5b:
62:9f:32:73:77:cd:89:60:32:f2:d1:6c:8d:ef:bc:
0c:3f:9e:90:d6:14:93:f7:a2:69:1a:dd:f1:1e:5a:
63:81:89:a9:2e:bf:a2:77:24:5b:23:34:49:85:75:
16:15:a9:ed:32:df:23:70:2a:d6:eb:02:7a:51:81:
d2:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:28:9D:C9:A7:2A:23:6A:35:B5:0D:73:B3:25:CE:C8:EE:AF:91:7E
X509v3 Authority Key Identifier:
keyid:EF:80:5F:3F:00:FD:5F:5F:09:91:E4:60:20:BB:CF:A4:C1:6B:81:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/fc1e865f-d5a1-4af7-a719-0c26e74fcd61/0/EF805F3F00FD5F5F0991E46020BBCFA4C16B8165.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EF805F3F00FD5F5F0991E46020BBCFA4C16B8165.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fc1e865f-d5a1-4af7-a719-0c26e74fcd61/0/EF805F3F00FD5F5F0991E46020BBCFA4C16B8165.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:11:cd:4a:5d:e7:b9:a7:b0:1d:f2:13:5f:6c:89:02:7e:76:
41:f1:0e:25:02:f1:9f:72:43:2d:c5:11:1e:ed:96:c6:73:6f:
61:1c:28:54:56:67:ab:85:d5:42:24:76:c8:8c:af:3a:49:de:
25:4f:98:3e:85:c4:af:14:3e:92:d9:c4:4c:ce:00:d0:e7:ca:
b5:df:1b:d2:88:6d:01:7d:80:d0:7b:b6:f6:c9:3a:c5:16:8a:
3c:47:a1:ca:fd:91:11:04:77:40:c2:68:18:9c:03:cd:5a:32:
c6:16:f7:e8:4c:07:c7:bf:b7:28:59:00:ad:5a:3c:21:86:93:
96:d2:64:5b:22:09:54:63:14:40:51:89:1c:41:34:5c:f0:1a:
c8:41:6f:8c:0c:4d:0d:46:aa:a4:4d:11:84:20:73:60:aa:2f:
2f:ff:e5:8b:8c:e4:eb:0a:7d:a2:58:9a:44:7d:e2:3a:6d:e2:
d0:e0:47:18:2a:29:f0:86:51:7b:ad:b7:dc:8c:ea:53:b1:77:
4c:cd:96:ec:15:8f:5a:1e:2c:95:31:49:fb:c6:68:40:45:58:
f0:46:31:45:a3:86:6b:b2:8f:19:22:04:ab:67:6e:56:50:7b:
d8:1c:12:f4:9a:3b:eb:3b:01:84:a8:d1:0f:f2:0e:1c:32:f3:
f6:20:ff:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 21:01:19 2025 by rpki-client