This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/0dd078fe-0930-45dc-b403-3ce4e863f8b5/0/EFCC7BEA840185763FF7624CF3DDE00563137A27.mft
File: EFCC7BEA840185763FF7624CF3DDE00563137A27.mft (raw, json)
Hash identifier: Iq/kusHFbut8LdY3G21z62MK4NlQZ9mXqgx6K3c9ksY=
Subject key identifier: 01:F7:9E:64:83:D4:CA:91:50:CD:C2:72:1D:FC:B6:82:2F:C3:EC:B5
Authority key identifier: EF:CC:7B:EA:84:01:85:76:3F:F7:62:4C:F3:DD:E0:05:63:13:7A:27
Certificate issuer: /CN=EFCC7BEA840185763FF7624CF3DDE00563137A27
Certificate serial: 3054DAC905D0EAB8DA32D487AFBE459C7146F8EE
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFCC7BEA840185763FF7624CF3DDE00563137A27.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/0dd078fe-0930-45dc-b403-3ce4e863f8b5/0/EFCC7BEA840185763FF7624CF3DDE00563137A27.mft
Manifest number: 03D5
Signing time: Sun 01 Feb 2026 12:31:10 +0000
Manifest this update: Sun 01 Feb 2026 12:26:10 +0000
Manifest next update: Wed 04 Feb 2026 20:45:10 +0000
Files and hashes: 1: 323430373a613163303a3a2f33322d3332203d3e20313432333135.roa (hash: t9Dk6yRyxGtnxo9p6R4EHJZwYzMqbQXmpijhebxT1Co=)
2: EFCC7BEA840185763FF7624CF3DDE00563137A27.crl (hash: 68zZeJMpoxreLHYUaa9Qse70hcGAHaswM2ZO49IOUs8=)
3: 3130332e3136382e3134392e302f32342d3234203d3e20313432333135.roa (hash: HlXbf2sqo1wPRmjyAMq3IzqSfph/qeQjUmYJ52xMgz8=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/0dd078fe-0930-45dc-b403-3ce4e863f8b5/0/EFCC7BEA840185763FF7624CF3DDE00563137A27.crl
rsync://repo-rpki.idnic.net/repo/0dd078fe-0930-45dc-b403-3ce4e863f8b5/0/EFCC7BEA840185763FF7624CF3DDE00563137A27.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFCC7BEA840185763FF7624CF3DDE00563137A27.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Feb 2026 20:45:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:54:da:c9:05:d0:ea:b8:da:32:d4:87:af:be:45:9c:71:46:f8:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCC7BEA840185763FF7624CF3DDE00563137A27
Validity
Not Before: Feb 1 12:26:10 2026 GMT
Not After : Feb 4 20:45:10 2026 GMT
Subject: CN=01F79E6483D4CA9150CDC2721DFCB6822FC3ECB5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:ee:df:cf:13:11:9f:9d:f6:eb:77:3c:98:91:
22:34:3b:7c:0a:ac:ff:f7:3e:d5:d0:18:f9:16:9d:
38:52:a2:5d:13:09:ef:61:d0:73:04:bd:75:46:02:
57:50:26:d6:1a:5d:da:36:a3:9b:3c:bf:09:dd:e3:
70:db:89:8d:d1:91:9f:cc:ac:a7:d0:17:fa:da:c9:
f7:0d:75:16:b1:ab:18:77:e1:05:ca:72:65:c6:03:
d9:9f:e0:04:eb:a9:ba:13:74:ba:86:7a:af:52:3b:
b4:a6:6b:03:29:f9:3a:d7:27:e2:96:63:37:f8:d0:
ad:a8:f4:9b:4f:83:22:9b:cc:02:d2:e4:e5:bd:d4:
8a:65:8b:0b:03:f3:91:cd:1b:cb:61:a2:3d:a0:8c:
4d:19:0e:6e:a3:84:2f:1a:a9:ef:8b:88:28:e6:41:
56:f9:2e:19:1d:63:e4:47:d7:b9:fb:37:bd:ca:3a:
fd:c4:e5:41:a0:e2:c2:b8:ce:25:8e:87:39:63:bd:
b5:a5:fd:8c:b4:7a:c1:70:eb:80:78:d3:2d:7b:9e:
b1:02:d8:7e:f7:96:eb:1d:87:10:a9:e8:c4:0d:22:
0a:67:7b:2d:05:7f:2d:46:4a:2d:ce:6a:cc:8a:60:
11:7a:11:cc:eb:c7:cd:e4:1b:1b:96:9f:15:63:39:
e3:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:F7:9E:64:83:D4:CA:91:50:CD:C2:72:1D:FC:B6:82:2F:C3:EC:B5
X509v3 Authority Key Identifier:
keyid:EF:CC:7B:EA:84:01:85:76:3F:F7:62:4C:F3:DD:E0:05:63:13:7A:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/0dd078fe-0930-45dc-b403-3ce4e863f8b5/0/EFCC7BEA840185763FF7624CF3DDE00563137A27.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFCC7BEA840185763FF7624CF3DDE00563137A27.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0dd078fe-0930-45dc-b403-3ce4e863f8b5/0/EFCC7BEA840185763FF7624CF3DDE00563137A27.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:ea:66:ba:f4:e7:2e:5e:f1:e5:e1:b4:c9:b0:fe:ff:42:13:
69:72:cf:0d:6c:cb:e3:7f:4a:1f:0a:87:ea:a5:0d:07:7f:83:
3e:dd:d5:d6:87:a5:3c:4d:dc:05:cc:25:33:bd:a6:d5:df:3d:
0a:e3:e3:e4:ae:c8:de:ad:ee:e8:b5:74:91:ed:74:f5:1d:03:
7e:07:24:ad:42:0e:ef:5a:4a:75:42:bb:b0:35:91:61:7d:ae:
d9:fb:ef:0c:41:b3:74:e1:6c:05:15:52:63:5d:2a:e7:3c:94:
5e:83:49:01:42:8b:8b:9e:2f:e2:d4:b4:92:78:fa:0e:9e:b2:
9b:35:e6:db:2a:d7:50:4b:52:17:23:03:7c:72:3b:96:56:b0:
9f:49:14:e8:e7:53:1b:55:fc:2a:5e:e6:9b:73:40:77:36:31:
08:56:05:6f:3c:97:f7:d0:44:fe:97:6d:0f:cc:bf:02:de:e0:
c2:52:14:16:f7:f2:ab:f1:06:fa:b0:3d:ae:57:ab:7a:f9:51:
e0:8e:d9:b2:ad:25:dc:e5:23:f6:b8:8a:16:70:63:5c:53:52:
f6:3f:1a:0a:8e:7f:fa:54:1c:37:31:46:06:60:1b:53:82:9b:
d8:f7:b1:c1:2b:2f:a4:c1:52:0c:c0:23:e1:cf:ce:2f:21:b8:
69:d8:b1:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:43:37 2026 by rpki-client