This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/fe1cbd79-8f26-4b0e-8b3b-ab9e9938fcae/0/EC973BE13EF324E7D59046CF7690A12F9DF12932.mft File: EC973BE13EF324E7D59046CF7690A12F9DF12932.mft (raw, json) Hash identifier: xhJLDrrXKmGVMXz2wjQC31ViOOjItxiaDG3pN3R6hyo= Subject key identifier: CD:67:F9:52:F2:77:D5:94:33:34:2E:9D:31:29:2F:CD:96:99:04:41 Authority key identifier: EC:97:3B:E1:3E:F3:24:E7:D5:90:46:CF:76:90:A1:2F:9D:F1:29:32 Certificate issuer: /CN=EC973BE13EF324E7D59046CF7690A12F9DF12932 Certificate serial: 63C66B5F1A25958BE7BBBA1D584A0F6EC9817B29 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC973BE13EF324E7D59046CF7690A12F9DF12932.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fe1cbd79-8f26-4b0e-8b3b-ab9e9938fcae/0/EC973BE13EF324E7D59046CF7690A12F9DF12932.mft Manifest number: 026E Signing time: Fri 05 Dec 2025 09:31:23 +0000 Manifest this update: Fri 05 Dec 2025 09:26:23 +0000 Manifest next update: Mon 08 Dec 2025 10:07:23 +0000 Files and hashes: 1: 3130332e3138312e37362e302f32342d3234203d3e20313439333739.roa (hash: Fd7yVNtVPCM6piUfSXh9X3JKHqUDZdjbopzWmm3ObMk=) 2: EC973BE13EF324E7D59046CF7690A12F9DF12932.crl (hash: ee/ic0WCBChmwjYXxLP+E72wtaRq7dJf4151E/nEIAA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fe1cbd79-8f26-4b0e-8b3b-ab9e9938fcae/0/EC973BE13EF324E7D59046CF7690A12F9DF12932.crl rsync://repo-rpki.idnic.net/repo/fe1cbd79-8f26-4b0e-8b3b-ab9e9938fcae/0/EC973BE13EF324E7D59046CF7690A12F9DF12932.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC973BE13EF324E7D59046CF7690A12F9DF12932.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 10:07:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:c6:6b:5f:1a:25:95:8b:e7:bb:ba:1d:58:4a:0f:6e:c9:81:7b:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EC973BE13EF324E7D59046CF7690A12F9DF12932 Validity Not Before: Dec 5 09:26:23 2025 GMT Not After : Dec 8 10:07:23 2025 GMT Subject: CN=CD67F952F277D59433342E9D31292FCD96990441 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:28:70:54:99:ee:43:4c:44:5e:94:53:98:01: 7b:f3:ca:7f:15:0f:8d:ab:98:74:37:9f:c1:89:3c: 58:e9:33:91:b2:b3:1a:6b:97:c5:28:0c:3a:ef:b1: 8d:f1:fe:d6:d4:88:2e:20:f4:c5:bb:10:89:77:22: c3:c9:b6:ea:0d:91:dc:f9:bc:7b:bf:01:39:09:dc: 51:1f:58:59:9b:ab:36:f5:0e:c0:a2:d6:2d:38:56: af:f0:58:5f:22:fd:21:67:e3:26:18:b5:79:ff:06: 40:bf:3f:8d:dd:d1:e9:ac:cf:3f:b6:93:ef:f2:87: 3a:e5:60:40:52:b7:72:e3:c3:fd:f8:3b:dd:4b:ae: cc:60:da:51:48:d7:fa:a2:54:e2:69:70:15:7e:46: 8a:c7:70:76:46:17:0f:5d:cd:bc:05:8a:3e:a3:d4: 9f:da:39:12:e9:c6:17:19:74:84:3b:e8:a1:db:cf: a6:44:e2:de:03:6e:54:99:c2:19:ef:fe:24:80:f2: 11:6c:46:29:d2:4a:a0:aa:f1:11:49:02:6d:3a:49: 02:de:09:04:95:b4:65:34:e1:50:8d:ad:b6:f9:0b: 48:af:b2:eb:00:a4:5d:3a:db:b5:af:2d:d2:33:42: f4:c8:99:72:e7:51:6d:5c:5f:4d:5c:4c:61:8c:a3: 61:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:67:F9:52:F2:77:D5:94:33:34:2E:9D:31:29:2F:CD:96:99:04:41 X509v3 Authority Key Identifier: keyid:EC:97:3B:E1:3E:F3:24:E7:D5:90:46:CF:76:90:A1:2F:9D:F1:29:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fe1cbd79-8f26-4b0e-8b3b-ab9e9938fcae/0/EC973BE13EF324E7D59046CF7690A12F9DF12932.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC973BE13EF324E7D59046CF7690A12F9DF12932.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fe1cbd79-8f26-4b0e-8b3b-ab9e9938fcae/0/EC973BE13EF324E7D59046CF7690A12F9DF12932.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:31:15:e6:54:a5:05:6c:96:8e:45:b1:9a:cf:f0:17:4a:da: eb:c7:e1:e0:cc:7c:c2:54:a3:e7:4d:de:95:34:a0:36:f7:7e: d0:7e:be:0b:1a:f3:87:bb:0f:78:75:03:a6:ee:b8:24:e9:df: 07:9f:0b:14:36:80:19:42:d1:b0:85:aa:59:f1:81:f1:0b:a1: fa:b8:e7:6f:16:71:69:a6:ed:d0:02:d7:8e:b4:70:84:99:6c: e2:74:2c:f4:0c:d3:a6:6d:7f:89:66:fc:cf:35:32:b2:6d:e3: 2e:18:75:2d:59:6c:86:89:cb:b9:50:3b:2b:45:ba:2b:d2:a6: e5:46:7d:81:ef:c3:17:92:b7:f0:c8:11:8d:0b:b8:2f:83:5b: b7:f5:6a:20:13:dc:62:bf:67:d9:9d:11:e6:8a:f8:de:3d:9f: ad:3c:d9:01:20:f9:f0:eb:c7:79:ca:52:84:4b:53:af:2e:07: 2b:30:de:44:f1:06:ae:c2:97:64:02:1b:46:ca:1c:db:05:f2: e6:ba:93:4c:59:e5:cb:ab:26:10:71:e7:47:58:ba:73:63:b9: 0e:c3:43:e1:ce:a8:30:27:ff:95:2d:9c:9b:0d:33:e2:17:36: 03:e4:c5:3d:fd:a1:93:39:15:34:72:fd:e2:a8:18:ef:88:1f: 35:be:c9:44 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUY8ZrXxollYvnu7odWEoPbsmBeykwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUM5NzNCRTEzRUYzMjRFN0Q1OTA0NkNGNzY5MEExMkY5 REYxMjkzMjAeFw0yNTEyMDUwOTI2MjNaFw0yNTEyMDgxMDA3MjNaMDMxMTAvBgNV BAMTKENENjdGOTUyRjI3N0Q1OTQzMzM0MkU5RDMxMjkyRkNEOTY5OTA0NDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7KHBUme5DTERelFOYAXvzyn8V D42rmHQ3n8GJPFjpM5Gysxprl8UoDDrvsY3x/tbUiC4g9MW7EIl3IsPJtuoNkdz5 vHu/ATkJ3FEfWFmbqzb1DsCi1i04Vq/wWF8i/SFn4yYYtXn/BkC/P43d0emszz+2 k+/yhzrlYEBSt3Ljw/34O91Lrsxg2lFI1/qiVOJpcBV+RorHcHZGFw9dzbwFij6j 1J/aORLpxhcZdIQ76KHbz6ZE4t4DblSZwhnv/iSA8hFsRinSSqCq8RFJAm06SQLe CQSVtGU04VCNrbb5C0ivsusApF0627WvLdIzQvTImXLnUW1cX01cTGGMo2E/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzWf5UvJ31ZQzNC6dMSkvzZaZBEEwHwYDVR0j BBgwFoAU7Jc74T7zJOfVkEbPdpChL53xKTIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ZTFjYmQ3OS04ZjI2LTRiMGUtOGIzYi1hYjllOTkzOGZjYWUvMC9FQzk3M0JFMTNF RjMyNEU3RDU5MDQ2Q0Y3NjkwQTEyRjlERjEyOTMyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUM5NzNCRTEzRUYzMjRFN0Q1OTA0NkNGNzY5MEExMkY5REYx MjkzMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmUxY2JkNzktOGYyNi00YjBlLThi M2ItYWI5ZTk5MzhmY2FlLzAvRUM5NzNCRTEzRUYzMjRFN0Q1OTA0NkNGNzY5MEEx MkY5REYxMjkzMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAYxFeZUpQVslo5FsZrP8BdK2uvH4eDMfMJU o+dN3pU0oDb3ftB+vgsa84e7D3h1A6buuCTp3wefCxQ2gBlC0bCFqlnxgfELofq4 528WcWmm7dAC1460cISZbOJ0LPQM06Ztf4lm/M81MrJt4y4YdS1ZbIaJy7lQOytF uivSpuVGfYHvwxeSt/DIEY0LuC+DW7f1aiAT3GK/Z9mdEeaK+N49n6082QEg+fDr x3nKUoRLU68uBysw3kTxBq7Cl2QCG0bKHNsF8ua6k0xZ5curJhBx50dYunNjuQ7D Q+HOqDAn/5UtnJsNM+IXNgPkxT39oZM5FTRy/eKoGO+IHzW+yUQ= -----END CERTIFICATE-----Generated at Sat Dec 6 19:40:03 2025 by rpki-client