This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/3e8fdeb0-3513-4f3d-9259-82b9d19a3556/0/EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02.mft File: EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02.mft (raw, json) Hash identifier: IFsShRylSpzR2ulRUI98DLABmqn6cYxYe/esreZUG/A= Subject key identifier: CD:44:DE:9A:61:88:61:11:62:49:87:7D:D0:A8:DD:B8:E5:6C:AE:B5 Authority key identifier: EF:C4:76:AB:80:A5:D0:AD:9F:CC:AA:14:41:C1:F6:41:83:8E:2E:02 Certificate issuer: /CN=EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02 Certificate serial: 1B5A5755120D42B3CC364AFF7EB1DF87BB9F6DE3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3e8fdeb0-3513-4f3d-9259-82b9d19a3556/0/EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02.mft Manifest number: 052B Signing time: Tue 02 Dec 2025 12:12:30 +0000 Manifest this update: Tue 02 Dec 2025 12:07:30 +0000 Manifest next update: Fri 05 Dec 2025 18:14:30 +0000 Files and hashes: 1: EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02.crl (hash: RqkUvhMsTzgISAgSeBsmDwi8y7O4KuK5q9z7hfglUvw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3e8fdeb0-3513-4f3d-9259-82b9d19a3556/0/EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02.crl rsync://repo-rpki.idnic.net/repo/3e8fdeb0-3513-4f3d-9259-82b9d19a3556/0/EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 18:14:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:5a:57:55:12:0d:42:b3:cc:36:4a:ff:7e:b1:df:87:bb:9f:6d:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02 Validity Not Before: Dec 2 12:07:30 2025 GMT Not After : Dec 5 18:14:30 2025 GMT Subject: CN=CD44DE9A618861116249877DD0A8DDB8E56CAEB5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:a3:38:ac:bb:1f:ac:08:56:47:1e:ba:0e:44: 09:35:ef:29:5e:2d:c1:95:5c:48:43:c5:1d:a5:34: 6b:15:69:e4:c9:c2:98:8a:8e:7d:43:b9:f4:76:24: f8:c0:20:d9:77:eb:cb:ce:6c:fc:bd:f5:ef:20:3e: 54:c7:ee:65:36:7e:78:56:bb:55:f3:1e:48:46:95: 61:b7:1d:cb:ae:38:e4:a1:0f:1f:75:16:23:f4:da: 69:bb:eb:32:84:7d:16:64:6a:65:db:7f:ba:76:5d: fa:4d:05:48:fa:ce:47:98:a5:9a:03:06:03:49:75: 28:ce:b4:b3:fd:45:a6:35:9a:12:92:31:b2:41:8d: bd:f0:a8:c1:bd:cb:ac:36:07:25:2c:81:82:b9:4c: e8:f9:a0:33:28:12:ca:19:57:2d:d7:7d:52:36:42: 00:e7:7a:a1:38:5e:b8:8f:9b:b1:12:28:fc:3f:84: 1c:8b:98:b7:f7:6d:02:b3:f0:e1:c6:d2:4e:bb:d1: be:6e:23:9f:e6:c3:5e:ce:b6:c1:e7:0c:21:cd:fc: c7:28:33:5b:f1:2e:9a:ef:c8:4b:aa:6a:a0:4d:31: a8:cf:53:17:1f:fc:2b:2e:52:df:b0:78:c1:9b:40: cd:c8:7b:bf:e4:d9:45:cf:68:09:72:45:49:c5:45: ca:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:44:DE:9A:61:88:61:11:62:49:87:7D:D0:A8:DD:B8:E5:6C:AE:B5 X509v3 Authority Key Identifier: keyid:EF:C4:76:AB:80:A5:D0:AD:9F:CC:AA:14:41:C1:F6:41:83:8E:2E:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3e8fdeb0-3513-4f3d-9259-82b9d19a3556/0/EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3e8fdeb0-3513-4f3d-9259-82b9d19a3556/0/EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:0e:f3:24:1c:aa:80:fa:c0:d9:07:76:0d:37:78:f3:b4:4a: c7:1d:16:d9:65:26:b9:36:00:56:22:8d:ae:19:b8:09:9a:6e: 38:01:ea:18:34:89:0e:60:90:8a:95:37:22:4e:87:cc:8b:c4: a0:cd:59:eb:af:00:af:e6:e2:97:9d:2c:cc:b2:de:5d:c6:5c: 57:71:68:2f:7f:da:e4:aa:8a:59:94:8e:2f:34:dd:ed:41:54: 38:c4:ef:6f:62:98:1d:94:58:02:1b:ea:b8:4f:2f:19:3d:c8: 5a:a3:c2:ff:c9:69:ae:3b:e3:f3:04:91:ea:08:b2:7f:be:97: 9c:69:60:fe:b3:52:f8:be:e0:e8:fb:72:d1:53:d0:dd:27:07: 8a:78:1d:65:cd:e0:d6:59:5d:d5:d0:a6:08:4b:41:fa:63:3f: 6f:a0:ee:f8:d2:83:2c:11:8d:89:ac:5a:02:2d:1d:cf:35:2b: 5b:69:c7:cd:5e:41:d6:53:cc:fd:ac:68:8e:2e:49:5a:8e:49: 6a:84:28:16:dc:55:7e:1a:9d:90:1f:c3:4c:dd:78:d3:44:d8: 8c:a3:f6:f8:85:06:24:4a:52:36:ba:7a:4b:47:ac:95:6a:99: 8b:5b:74:e0:07:46:7e:f0:26:42:e7:6d:26:3f:89:8f:09:c8: b3:e0:ae:8e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG1pXVRINQrPMNkr/frHfh7ufbeMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUZDNDc2QUI4MEE1RDBBRDlGQ0NBQTE0NDFDMUY2NDE4 MzhFMkUwMjAeFw0yNTEyMDIxMjA3MzBaFw0yNTEyMDUxODE0MzBaMDMxMTAvBgNV BAMTKENENDRERTlBNjE4ODYxMTE2MjQ5ODc3REQwQThEREI4RTU2Q0FFQjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrozisux+sCFZHHroORAk17yle LcGVXEhDxR2lNGsVaeTJwpiKjn1DufR2JPjAINl368vObPy99e8gPlTH7mU2fnhW u1XzHkhGlWG3HcuuOOShDx91FiP02mm76zKEfRZkamXbf7p2XfpNBUj6zkeYpZoD BgNJdSjOtLP9RaY1mhKSMbJBjb3wqMG9y6w2ByUsgYK5TOj5oDMoEsoZVy3XfVI2 QgDneqE4XriPm7ESKPw/hByLmLf3bQKz8OHG0k670b5uI5/mw17OtsHnDCHN/Mco M1vxLprvyEuqaqBNMajPUxcf/CsuUt+weMGbQM3Ie7/k2UXPaAlyRUnFRcqhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzUTemmGIYRFiSYd90KjduOVsrrUwHwYDVR0j BBgwFoAU78R2q4Cl0K2fzKoUQcH2QYOOLgIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZThmZGViMC0zNTEzLTRmM2QtOTI1OS04MmI5ZDE5YTM1NTYvMC9FRkM0NzZBQjgw QTVEMEFEOUZDQ0FBMTQ0MUMxRjY0MTgzOEUyRTAyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUZDNDc2QUI4MEE1RDBBRDlGQ0NBQTE0NDFDMUY2NDE4MzhF MkUwMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2U4ZmRlYjAtMzUxMy00ZjNkLTky NTktODJiOWQxOWEzNTU2LzAvRUZDNDc2QUI4MEE1RDBBRDlGQ0NBQTE0NDFDMUY2 NDE4MzhFMkUwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALoO8yQcqoD6wNkHdg03ePO0SscdFtllJrk2 AFYija4ZuAmabjgB6hg0iQ5gkIqVNyJOh8yLxKDNWeuvAK/m4pedLMyy3l3GXFdx aC9/2uSqilmUji803e1BVDjE729imB2UWAIb6rhPLxk9yFqjwv/Jaa474/MEkeoI sn++l5xpYP6zUvi+4Oj7ctFT0N0nB4p4HWXN4NZZXdXQpghLQfpjP2+g7vjSgywR jYmsWgItHc81K1tpx81eQdZTzP2saI4uSVqOSWqEKBbcVX4anZAfw0zdeNNE2Iyj 9viFBiRKUja6ektHrJVqmYtbdOAHRn7wJkLnbSY/iY8JyLPgro4= -----END CERTIFICATE-----Generated at Wed Dec 3 14:44:39 2025 by rpki-client