This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/0/EEC1A7BF2D95D0BAFE37105E4BB1BB23601DD1DB.mft File: EEC1A7BF2D95D0BAFE37105E4BB1BB23601DD1DB.mft (raw, json) Hash identifier: +lxWGi8r4q4RqjkPhnrkKpecctLs9MAtlaUx8aMEcGw= Subject key identifier: 3D:FD:C5:47:8E:45:EF:A5:9C:8E:33:5C:87:4B:21:FD:DF:10:DE:61 Authority key identifier: EE:C1:A7:BF:2D:95:D0:BA:FE:37:10:5E:4B:B1:BB:23:60:1D:D1:DB Certificate issuer: /CN=EEC1A7BF2D95D0BAFE37105E4BB1BB23601DD1DB Certificate serial: 78297A0091546F4664CE21EE72789546F01AACAA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/EEC1A7BF2D95D0BAFE37105E4BB1BB23601DD1DB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/0/EEC1A7BF2D95D0BAFE37105E4BB1BB23601DD1DB.mft Manifest number: E3 Signing time: Tue 02 Dec 2025 17:32:17 +0000 Manifest this update: Tue 02 Dec 2025 17:27:17 +0000 Manifest next update: Sat 06 Dec 2025 05:16:17 +0000 Files and hashes: 1: 3136302e32352e34352e302f32342d3234203d3e20313533303639.roa (hash: pjrXRUj5r2IszWCXojX+FWGkandw2VMiyslpGWMGbUA=) 2: EEC1A7BF2D95D0BAFE37105E4BB1BB23601DD1DB.crl (hash: IPtQ2tzX6JftHB/T8HYVhS+jzAeeLLGpiIFNpYuCAFc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/0/EEC1A7BF2D95D0BAFE37105E4BB1BB23601DD1DB.crl rsync://repo-rpki.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/0/EEC1A7BF2D95D0BAFE37105E4BB1BB23601DD1DB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/EEC1A7BF2D95D0BAFE37105E4BB1BB23601DD1DB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 05:16:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:29:7a:00:91:54:6f:46:64:ce:21:ee:72:78:95:46:f0:1a:ac:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EEC1A7BF2D95D0BAFE37105E4BB1BB23601DD1DB Validity Not Before: Dec 2 17:27:17 2025 GMT Not After : Dec 6 05:16:17 2025 GMT Subject: CN=3DFDC5478E45EFA59C8E335C874B21FDDF10DE61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:38:77:9d:bc:c7:a2:8b:33:0c:3a:73:b2:4f: fd:cc:84:9f:25:2e:6a:75:78:2c:bd:12:71:27:82: 90:cb:dd:97:43:c9:1f:e4:9f:20:db:88:ba:a7:43: cf:78:cb:de:6c:e6:60:3e:05:79:0c:20:dc:90:f7: 49:06:f4:67:5f:86:a6:00:f7:6f:d4:12:11:2a:e1: d2:30:7d:9a:2b:47:8f:07:03:48:40:41:02:90:9e: 1a:c1:aa:17:2d:fe:ce:3e:cd:c1:62:90:b2:66:bb: df:29:85:e9:33:7e:12:4a:51:ca:2f:b7:c1:83:5c: eb:5d:1d:90:d4:51:a8:94:b1:eb:83:52:be:ff:6e: a9:a7:c8:2c:86:88:01:dd:8d:c0:7c:41:29:a5:2b: bd:4a:e8:38:45:b3:51:24:d1:67:75:d3:bf:0e:e5: 6c:52:fe:c6:5b:a5:ec:3c:03:52:02:41:0d:a6:e3: 9f:c0:cc:80:e5:5c:fa:40:a7:6b:b2:cc:5c:33:75: 83:8a:fc:4d:24:56:8c:34:b0:1a:60:09:b9:f4:98: 5e:ec:5a:34:4e:d9:e8:ea:37:e0:e7:e7:f5:df:4d: 44:e8:40:12:3c:5f:68:18:9d:1b:5e:51:c4:0f:9c: a1:02:ff:d8:af:0a:c3:1b:d4:ed:eb:80:01:06:fd: f3:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:FD:C5:47:8E:45:EF:A5:9C:8E:33:5C:87:4B:21:FD:DF:10:DE:61 X509v3 Authority Key Identifier: keyid:EE:C1:A7:BF:2D:95:D0:BA:FE:37:10:5E:4B:B1:BB:23:60:1D:D1:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/0/EEC1A7BF2D95D0BAFE37105E4BB1BB23601DD1DB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/EEC1A7BF2D95D0BAFE37105E4BB1BB23601DD1DB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/0/EEC1A7BF2D95D0BAFE37105E4BB1BB23601DD1DB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:de:be:e1:ed:b3:8a:5f:90:34:cc:16:51:ce:3b:0a:75:95: b2:4f:36:aa:19:ce:b1:89:2d:c9:13:4d:6d:c1:5a:95:c0:e7: 64:e3:dd:be:71:fb:af:27:48:60:7d:35:cc:a6:67:61:a1:40: 9a:53:6e:de:a2:aa:81:9d:d7:e6:02:96:6d:02:c3:ac:a3:10: db:16:25:20:1a:2d:a1:d6:2d:29:9e:ea:c7:9d:00:2b:a3:68: e8:70:97:e1:a7:04:38:3f:5a:b5:ee:6a:ca:37:5e:6d:86:3b: 57:ca:89:25:7e:89:b4:d5:b9:95:87:1b:1b:39:fc:f1:49:b2: 74:3b:fa:a9:38:f3:e3:ac:b1:ca:bb:54:2e:38:f8:ac:cb:d6: 9b:a8:a6:88:50:81:8b:d5:ed:0f:96:0d:98:b4:c2:a8:98:de: e5:39:73:2c:29:03:3c:51:be:b4:28:19:2b:31:21:e1:e2:c7: fa:db:37:25:c4:e6:79:7d:68:97:5f:3f:af:70:7f:ea:a9:a0: 97:87:22:81:66:18:31:ce:38:39:2a:28:87:f1:2e:b9:62:c2: 3f:57:e3:07:6c:42:2f:01:a9:08:14:04:cb:75:02:01:6a:c8: fd:63:89:5c:8a:67:dd:cc:a1:c9:16:d8:10:66:48:33:38:cd: b1:b0:c6:5e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeCl6AJFUb0ZkziHucniVRvAarKowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUVDMUE3QkYyRDk1RDBCQUZFMzcxMDVFNEJCMUJCMjM2 MDFERDFEQjAeFw0yNTEyMDIxNzI3MTdaFw0yNTEyMDYwNTE2MTdaMDMxMTAvBgNV BAMTKDNERkRDNTQ3OEU0NUVGQTU5QzhFMzM1Qzg3NEIyMUZEREYxMERFNjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6OHedvMeiizMMOnOyT/3MhJ8l Lmp1eCy9EnEngpDL3ZdDyR/knyDbiLqnQ894y95s5mA+BXkMINyQ90kG9GdfhqYA 92/UEhEq4dIwfZorR48HA0hAQQKQnhrBqhct/s4+zcFikLJmu98phekzfhJKUcov t8GDXOtdHZDUUaiUseuDUr7/bqmnyCyGiAHdjcB8QSmlK71K6DhFs1Ek0Wd1078O 5WxS/sZbpew8A1ICQQ2m45/AzIDlXPpAp2uyzFwzdYOK/E0kVow0sBpgCbn0mF7s WjRO2ejqN+Dn5/XfTUToQBI8X2gYnRteUcQPnKEC/9ivCsMb1O3rgAEG/fOPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPf3FR45F76WcjjNch0sh/d8Q3mEwHwYDVR0j BBgwFoAU7sGnvy2V0Lr+NxBeS7G7I2Ad0dswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MzY1NjFkNC0yM2M4LTRjOWItODkwZS00ZjI2MzJlNTJjOTcvMC9FRUMxQTdCRjJE OTVEMEJBRkUzNzEwNUU0QkIxQkIyMzYwMUREMURCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRUVDMUE3QkYyRDk1RDBCQUZFMzcxMDVFNEJCMUJCMjM2MDFE RDFEQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjM2NTYxZDQtMjNjOC00YzliLTg5 MGUtNGYyNjMyZTUyYzk3LzAvRUVDMUE3QkYyRDk1RDBCQUZFMzcxMDVFNEJCMUJC MjM2MDFERDFEQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACzevuHts4pfkDTMFlHOOwp1lbJPNqoZzrGJ LckTTW3BWpXA52Tj3b5x+68nSGB9NcymZ2GhQJpTbt6iqoGd1+YClm0Cw6yjENsW JSAaLaHWLSme6sedACujaOhwl+GnBDg/WrXuaso3Xm2GO1fKiSV+ibTVuZWHGxs5 /PFJsnQ7+qk48+Osscq7VC44+KzL1puopohQgYvV7Q+WDZi0wqiY3uU5cywpAzxR vrQoGSsxIeHix/rbNyXE5nl9aJdfP69wf+qpoJeHIoFmGDHOODkqKIfxLrliwj9X 4wdsQi8BqQgUBMt1AgFqyP1jiVyKZ93MockW2BBmSDM4zbGwxl4= -----END CERTIFICATE-----Generated at Wed Dec 3 18:52:39 2025 by rpki-client