This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/287f8f82-37bb-4983-93ca-5e0670ab02e3/0/EC62A94970E56AC9FE8B828A542B7EDBA3D116D5.mft
File: EC62A94970E56AC9FE8B828A542B7EDBA3D116D5.mft (raw, json)
Hash identifier: bOC232uk8oTZpG2w6TeN9qV4KEWuEbi8+dXBNQi2ioo=
Subject key identifier: 0B:23:56:08:B1:EE:4A:A8:3A:A0:14:31:ED:C9:E8:EE:02:BD:97:42
Authority key identifier: EC:62:A9:49:70:E5:6A:C9:FE:8B:82:8A:54:2B:7E:DB:A3:D1:16:D5
Certificate issuer: /CN=EC62A94970E56AC9FE8B828A542B7EDBA3D116D5
Certificate serial: 25453747D054143CDCFD3D05975FD49C51D90CC5
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC62A94970E56AC9FE8B828A542B7EDBA3D116D5.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/287f8f82-37bb-4983-93ca-5e0670ab02e3/0/EC62A94970E56AC9FE8B828A542B7EDBA3D116D5.mft
Manifest number: 053C
Signing time: Sun 04 Jan 2026 14:31:44 +0000
Manifest this update: Sun 04 Jan 2026 14:26:44 +0000
Manifest next update: Thu 08 Jan 2026 01:20:44 +0000
Files and hashes: 1: EC62A94970E56AC9FE8B828A542B7EDBA3D116D5.crl (hash: Z6pGI/xnwwvmcAdUK2TOBA8tLi8ibucoPY5xpXc/rQc=)
2: 3130332e362e3231342e302f32342d3234203d3e20313331313132.roa (hash: F0a3JFzr6TEGFg4XROWEIEBL9cNyd2bfiVU6lzFtCLY=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/287f8f82-37bb-4983-93ca-5e0670ab02e3/0/EC62A94970E56AC9FE8B828A542B7EDBA3D116D5.crl
rsync://repo-rpki.idnic.net/repo/287f8f82-37bb-4983-93ca-5e0670ab02e3/0/EC62A94970E56AC9FE8B828A542B7EDBA3D116D5.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC62A94970E56AC9FE8B828A542B7EDBA3D116D5.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 08 Jan 2026 01:20:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:45:37:47:d0:54:14:3c:dc:fd:3d:05:97:5f:d4:9c:51:d9:0c:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EC62A94970E56AC9FE8B828A542B7EDBA3D116D5
Validity
Not Before: Jan 4 14:26:44 2026 GMT
Not After : Jan 8 01:20:44 2026 GMT
Subject: CN=0B235608B1EE4AA83AA01431EDC9E8EE02BD9742
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:dc:16:16:52:63:9d:90:8b:2e:d4:50:38:0f:
65:dc:de:bf:97:d8:2e:68:4c:31:56:1e:cd:59:b3:
f3:b1:9c:c7:53:ec:5c:d2:7e:3e:14:be:9a:a1:df:
16:55:4f:a0:aa:0e:e5:2c:27:10:17:69:49:b7:e8:
69:39:bc:ba:2e:8c:51:ec:e1:e1:09:1b:41:18:d0:
a8:7c:bf:4e:85:4a:9c:08:a3:7f:47:ec:6f:72:bb:
bf:89:d0:13:b6:e6:6b:eb:04:fc:37:71:be:c0:b5:
3d:7d:d2:6c:7b:a7:50:31:35:f3:e3:ae:60:12:a0:
33:14:63:f2:ae:b2:25:ed:f6:9b:65:b4:8c:65:55:
2d:ae:16:d4:60:72:b7:b9:eb:89:05:ee:1b:31:c2:
63:9d:04:59:d8:8f:6c:97:06:09:33:8c:e1:d4:8a:
fe:96:a6:9e:16:ff:a1:32:0e:d5:b3:9a:8a:c2:bf:
da:0b:47:d0:52:43:16:01:25:07:ce:37:f2:02:14:
dd:b0:50:c0:a8:21:14:c6:b4:c2:22:ec:f0:a0:2f:
4d:61:bf:d4:37:27:91:92:b0:f9:1d:af:d8:8c:81:
8b:ee:40:ab:0f:8a:a9:4d:71:77:50:11:ce:8a:6c:
b6:1d:40:95:36:e1:95:7a:c0:84:5c:b5:90:98:85:
73:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:23:56:08:B1:EE:4A:A8:3A:A0:14:31:ED:C9:E8:EE:02:BD:97:42
X509v3 Authority Key Identifier:
keyid:EC:62:A9:49:70:E5:6A:C9:FE:8B:82:8A:54:2B:7E:DB:A3:D1:16:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/287f8f82-37bb-4983-93ca-5e0670ab02e3/0/EC62A94970E56AC9FE8B828A542B7EDBA3D116D5.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC62A94970E56AC9FE8B828A542B7EDBA3D116D5.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/287f8f82-37bb-4983-93ca-5e0670ab02e3/0/EC62A94970E56AC9FE8B828A542B7EDBA3D116D5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:4f:87:53:48:83:52:74:bb:f9:f4:e2:12:44:63:42:ad:2c:
6e:0b:fb:55:3e:d4:18:94:9e:66:4b:72:72:0d:10:5e:37:42:
7e:98:35:95:08:ff:e0:a7:c7:df:5f:37:23:fd:c9:b8:59:c5:
4b:5d:2a:4d:ad:b7:04:d0:3a:5b:ef:45:be:73:35:85:45:de:
a1:41:29:1d:bb:ba:42:ca:3e:19:1a:4c:ba:11:f4:f3:7c:95:
b3:a6:4c:32:19:e6:7a:26:08:ff:65:91:41:f9:d0:df:50:64:
b2:ed:c3:04:f4:25:9c:4d:08:00:81:07:f0:1f:87:cf:b3:3c:
d4:ac:a5:27:b8:93:d6:8d:88:c4:2c:cb:c1:3a:a8:80:80:49:
03:63:da:95:0f:c3:c8:ab:15:26:3e:49:0a:2d:e1:2e:b4:7d:
9d:ce:41:30:97:78:ae:fb:8e:85:65:15:18:5d:1c:d3:d5:6e:
a6:23:7e:0c:a0:5f:e0:08:2a:b9:a7:24:1c:88:1f:03:87:b0:
eb:12:c0:67:9a:16:1b:be:50:96:89:7c:b8:63:0a:5a:03:5a:
a6:af:42:69:7a:38:2b:39:e7:dc:d1:5a:98:c6:99:45:72:6e:
74:88:73:8e:47:cd:98:8e:c2:50:23:13:15:41:98:e7:5f:93:
9e:41:60:d7
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUJUU3R9BUFDzc/T0Fl1/UnFHZDMUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUM2MkE5NDk3MEU1NkFDOUZFOEI4MjhBNTQyQjdFREJB
M0QxMTZENTAeFw0yNjAxMDQxNDI2NDRaFw0yNjAxMDgwMTIwNDRaMDMxMTAvBgNV
BAMTKDBCMjM1NjA4QjFFRTRBQTgzQUEwMTQzMUVEQzlFOEVFMDJCRDk3NDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC73BYWUmOdkIsu1FA4D2Xc3r+X
2C5oTDFWHs1Zs/OxnMdT7FzSfj4Uvpqh3xZVT6CqDuUsJxAXaUm36Gk5vLoujFHs
4eEJG0EY0Kh8v06FSpwIo39H7G9yu7+J0BO25mvrBPw3cb7AtT190mx7p1AxNfPj
rmASoDMUY/KusiXt9ptltIxlVS2uFtRgcre564kF7hsxwmOdBFnYj2yXBgkzjOHU
iv6Wpp4W/6EyDtWzmorCv9oLR9BSQxYBJQfON/ICFN2wUMCoIRTGtMIi7PCgL01h
v9Q3J5GSsPkdr9iMgYvuQKsPiqlNcXdQEc6KbLYdQJU24ZV6wIRctZCYhXNPAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUCyNWCLHuSqg6oBQx7cno7gK9l0IwHwYDVR0j
BBgwFoAU7GKpSXDlasn+i4KKVCt+26PRFtUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y
ODdmOGY4Mi0zN2JiLTQ5ODMtOTNjYS01ZTA2NzBhYjAyZTMvMC9FQzYyQTk0OTcw
RTU2QUM5RkU4QjgyOEE1NDJCN0VEQkEzRDExNkQ1LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRUM2MkE5NDk3MEU1NkFDOUZFOEI4MjhBNTQyQjdFREJBM0Qx
MTZENS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjg3ZjhmODItMzdiYi00OTgzLTkz
Y2EtNWUwNjcwYWIwMmUzLzAvRUM2MkE5NDk3MEU1NkFDOUZFOEI4MjhBNTQyQjdF
REJBM0QxMTZENS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBACdPh1NIg1J0u/n04hJEY0KtLG4L+1U+1BiU
nmZLcnINEF43Qn6YNZUI/+Cnx99fNyP9ybhZxUtdKk2ttwTQOlvvRb5zNYVF3qFB
KR27ukLKPhkaTLoR9PN8lbOmTDIZ5nomCP9lkUH50N9QZLLtwwT0JZxNCACBB/Af
h8+zPNSspSe4k9aNiMQsy8E6qICASQNj2pUPw8irFSY+SQot4S60fZ3OQTCXeK77
joVlFRhdHNPVbqYjfgygX+AIKrmnJByIHwOHsOsSwGeaFhu+UJaJfLhjCloDWqav
Qml6OCs559zRWpjGmUVybnSIc45HzZiOwlAjExVBmOdfk55BYNc=
-----END CERTIFICATE-----
Generated at Tue Jan 6 06:13:13 2026 by rpki-client