This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/383ed7ab-1ac9-4f42-acdd-53557ac7b3f3/0/EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.mft File: EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.mft (raw, json) Hash identifier: 0RvKC+NLq2pGgRG8xDJfbueXtR3P7PgI3G1aZnwUJIw= Subject key identifier: F2:11:46:5D:C5:F6:7A:FC:77:51:74:E4:1B:AD:85:D7:04:E7:04:C0 Authority key identifier: EF:C0:FE:32:8F:7B:86:F9:C6:82:F4:FE:37:36:0C:4E:3A:D9:94:2C Certificate issuer: /CN=EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C Certificate serial: 1883AA08A7DE22D57325841021C8AB3A247E064E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/383ed7ab-1ac9-4f42-acdd-53557ac7b3f3/0/EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.mft Manifest number: 04C2 Signing time: Sat 20 Dec 2025 19:51:16 +0000 Manifest this update: Sat 20 Dec 2025 19:46:16 +0000 Manifest next update: Tue 23 Dec 2025 21:21:16 +0000 Files and hashes: 1: 3130332e3135332e3132372e302f32342d3234203d3e20313338303839.roa (hash: KdIUSWjYk6G6khIi44dRxNIcc82FtwrOj3DoMvqmaNE=) 2: 323430363a343463303a3a2f33322d3438203d3e20313430343632.roa (hash: LyQVOVVD0SyWAzKbbigEAOPOxnvDfTq86SNZAm/SmRY=) 3: EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.crl (hash: BL+FsITo4XsuMFoY0MLhyr2ak2FNcJRE3Ru0J3gUABU=) 4: 3130332e3135332e3132362e302f32342d3234203d3e20313430343632.roa (hash: T6Hicz2H8CuNDpKjhaA17WaIW/oy1qNlEePPsSxqMqI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/383ed7ab-1ac9-4f42-acdd-53557ac7b3f3/0/EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.crl rsync://repo-rpki.idnic.net/repo/383ed7ab-1ac9-4f42-acdd-53557ac7b3f3/0/EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Dec 2025 21:21:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:83:aa:08:a7:de:22:d5:73:25:84:10:21:c8:ab:3a:24:7e:06:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C Validity Not Before: Dec 20 19:46:16 2025 GMT Not After : Dec 23 21:21:16 2025 GMT Subject: CN=F211465DC5F67AFC775174E41BAD85D704E704C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:21:ea:8a:de:21:9c:73:47:95:c3:ff:ab:42: 28:e8:c1:02:2e:41:82:b0:4f:a4:2e:aa:26:6d:f8: 72:c6:08:5e:50:a1:7f:cf:4c:84:7f:34:94:fc:8f: 3b:42:4e:b2:5d:7f:91:0b:37:ae:26:2f:40:72:b4: cc:72:99:2b:7f:a2:0d:fd:e8:5d:66:c9:26:27:56: 73:2a:a4:93:ea:b6:e4:f7:c8:59:91:6a:e8:b5:c1: be:db:8b:eb:3d:0a:03:e7:5d:4b:2c:4f:8c:4b:dd: eb:6a:f1:b6:cd:88:a1:2b:88:2f:d6:9d:bd:d5:e2: c5:16:d8:d7:ea:84:d9:33:1a:cc:7c:71:99:32:8c: 05:a9:9d:17:dc:72:f3:30:81:45:be:3c:3c:a7:64: 40:b2:3f:8a:61:53:13:63:ba:0d:99:be:7d:18:a4: 47:3d:28:19:1e:41:ba:ec:cc:62:fa:4d:44:c1:ea: d8:69:34:0b:cd:8c:f3:a4:03:43:0f:c9:a3:3b:91: 3f:5d:93:6e:ed:f7:0b:70:26:8a:a2:00:7a:fc:22: f5:7f:6d:2a:63:bb:05:75:81:20:94:35:6b:6f:d4: da:fa:63:04:31:ef:bc:bd:fe:f6:07:4a:35:23:fe: b2:c4:8a:30:9a:f0:57:44:3b:e9:c7:a1:b0:fd:1e: c3:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:11:46:5D:C5:F6:7A:FC:77:51:74:E4:1B:AD:85:D7:04:E7:04:C0 X509v3 Authority Key Identifier: keyid:EF:C0:FE:32:8F:7B:86:F9:C6:82:F4:FE:37:36:0C:4E:3A:D9:94:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/383ed7ab-1ac9-4f42-acdd-53557ac7b3f3/0/EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/383ed7ab-1ac9-4f42-acdd-53557ac7b3f3/0/EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:2c:40:ea:b0:3b:06:20:98:62:6d:5f:b4:ee:af:44:8b:01: d9:bd:5c:0a:0b:62:1e:07:a8:13:39:f9:29:af:75:be:7e:1b: b7:56:36:fc:25:36:0c:19:0e:dd:e5:1f:7a:cd:3f:21:89:c1: 1a:6c:9c:c4:04:29:7c:a2:cf:30:31:22:dd:9f:b3:8b:1f:e9: d4:79:be:06:21:04:3c:0e:07:2a:83:88:e2:cc:0b:ed:b7:a5: e0:7d:93:8a:cb:a3:5d:7e:4e:a4:c6:7e:d1:8f:6c:91:15:12: 02:66:41:de:4f:e6:f5:ac:e8:b2:48:f0:14:bf:db:59:48:2a: fc:e5:55:31:67:89:4b:10:4e:4a:2c:7f:c3:38:b6:fa:07:83: 1e:b2:19:93:e8:0d:f3:21:2b:f1:a4:af:81:51:e3:df:29:ae: 3e:f7:10:7e:97:3f:4d:30:18:d9:f0:11:05:f0:f6:b5:e3:df: 6f:67:cd:93:6c:36:f3:0d:7f:b3:54:fe:63:f8:d9:ae:c4:c9: d7:0e:2d:f8:89:73:d4:e6:cb:77:6d:b4:b4:68:db:34:45:16: 88:6e:fa:21:22:b5:3d:4f:7f:92:26:2b:36:04:4a:95:2e:fc: e8:96:0a:c6:6e:0d:14:44:a8:eb:b9:67:09:a4:0a:ce:8f:68: f8:3c:65:be -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGIOqCKfeItVzJYQQIcirOiR+Bk4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUZDMEZFMzI4RjdCODZGOUM2ODJGNEZFMzczNjBDNEUz QUQ5OTQyQzAeFw0yNTEyMjAxOTQ2MTZaFw0yNTEyMjMyMTIxMTZaMDMxMTAvBgNV BAMTKEYyMTE0NjVEQzVGNjdBRkM3NzUxNzRFNDFCQUQ4NUQ3MDRFNzA0QzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2IeqK3iGcc0eVw/+rQijowQIu QYKwT6QuqiZt+HLGCF5QoX/PTIR/NJT8jztCTrJdf5ELN64mL0BytMxymSt/og39 6F1mySYnVnMqpJPqtuT3yFmRaui1wb7bi+s9CgPnXUssT4xL3etq8bbNiKEriC/W nb3V4sUW2NfqhNkzGsx8cZkyjAWpnRfccvMwgUW+PDynZECyP4phUxNjug2Zvn0Y pEc9KBkeQbrszGL6TUTB6thpNAvNjPOkA0MPyaM7kT9dk27t9wtwJoqiAHr8IvV/ bSpjuwV1gSCUNWtv1Nr6YwQx77y9/vYHSjUj/rLEijCa8FdEO+nHobD9HsPVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8hFGXcX2evx3UXTkG62F1wTnBMAwHwYDVR0j BBgwFoAU78D+Mo97hvnGgvT+NzYMTjrZlCwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ODNlZDdhYi0xYWM5LTRmNDItYWNkZC01MzU1N2FjN2IzZjMvMC9FRkMwRkUzMjhG N0I4NkY5QzY4MkY0RkUzNzM2MEM0RTNBRDk5NDJDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUZDMEZFMzI4RjdCODZGOUM2ODJGNEZFMzczNjBDNEUzQUQ5 OTQyQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzgzZWQ3YWItMWFjOS00ZjQyLWFj ZGQtNTM1NTdhYzdiM2YzLzAvRUZDMEZFMzI4RjdCODZGOUM2ODJGNEZFMzczNjBD NEUzQUQ5OTQyQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC4sQOqwOwYgmGJtX7Tur0SLAdm9XAoLYh4H qBM5+Smvdb5+G7dWNvwlNgwZDt3lH3rNPyGJwRpsnMQEKXyizzAxIt2fs4sf6dR5 vgYhBDwOByqDiOLMC+23peB9k4rLo11+TqTGftGPbJEVEgJmQd5P5vWs6LJI8BS/ 21lIKvzlVTFniUsQTkosf8M4tvoHgx6yGZPoDfMhK/Gkr4FR498prj73EH6XP00w GNnwEQXw9rXj329nzZNsNvMNf7NU/mP42a7EydcOLfiJc9Tmy3dttLRo2zRFFohu +iEitT1Pf5ImKzYESpUu/OiWCsZuDRREqOu5ZwmkCs6PaPg8Zb4= -----END CERTIFICATE-----Generated at Sun Dec 21 11:13:05 2025 by rpki-client