This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/453ac667-4d9e-48d7-afd6-82e98fa76c1e/0/EC1B9BE63137230F6756E222019318C640EBE42E.mft File: EC1B9BE63137230F6756E222019318C640EBE42E.mft (raw, json) Hash identifier: CQKp0YDqFp8ePQa7mzRKh3JRpQXtA9FeuE1Yy9hwUMQ= Subject key identifier: 44:87:81:CD:B3:53:71:F3:4C:01:EA:1A:E2:36:45:2B:77:E4:45:8F Authority key identifier: EC:1B:9B:E6:31:37:23:0F:67:56:E2:22:01:93:18:C6:40:EB:E4:2E Certificate issuer: /CN=EC1B9BE63137230F6756E222019318C640EBE42E Certificate serial: 1A13FF246956FAC054BF629E0F79137A0B139E2C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/EC1B9BE63137230F6756E222019318C640EBE42E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/453ac667-4d9e-48d7-afd6-82e98fa76c1e/0/EC1B9BE63137230F6756E222019318C640EBE42E.mft Manifest number: 0125 Signing time: Sun 07 Dec 2025 16:11:47 +0000 Manifest this update: Sun 07 Dec 2025 16:06:47 +0000 Manifest next update: Wed 10 Dec 2025 20:57:47 +0000 Files and hashes: 1: EC1B9BE63137230F6756E222019318C640EBE42E.crl (hash: 35ci+byKcTRAmUHQ7/+bxSC8MqkqgEyc9GUgLSg/W1w=) 2: 3135372e31352e3136362e302f32342d3234203d3e20313532333832.roa (hash: 5wOzKGDtK4zeM+14oVf5CebWsbPEoKuI00n5y47Z804=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/453ac667-4d9e-48d7-afd6-82e98fa76c1e/0/EC1B9BE63137230F6756E222019318C640EBE42E.crl rsync://repo-rpki.idnic.net/repo/453ac667-4d9e-48d7-afd6-82e98fa76c1e/0/EC1B9BE63137230F6756E222019318C640EBE42E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/EC1B9BE63137230F6756E222019318C640EBE42E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 06:55:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:13:ff:24:69:56:fa:c0:54:bf:62:9e:0f:79:13:7a:0b:13:9e:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EC1B9BE63137230F6756E222019318C640EBE42E Validity Not Before: Dec 7 16:06:47 2025 GMT Not After : Dec 10 20:57:47 2025 GMT Subject: CN=448781CDB35371F34C01EA1AE236452B77E4458F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:68:77:f3:a9:52:05:5c:b5:bf:3a:7f:f1:38: 08:b3:8c:70:0b:df:b5:c3:99:25:c6:17:0d:7b:a2: 77:c3:34:ed:47:ec:e0:1a:fb:a7:b6:53:12:9b:d5: 51:af:a6:0f:df:4e:1f:5d:d1:65:c4:ad:d4:04:b8: 30:16:4d:a7:0b:11:29:80:38:be:bb:fc:23:90:40: 86:b7:8a:f1:f4:96:83:63:b0:1e:20:cd:21:65:82: e1:c0:99:8c:ef:47:86:e6:b8:6d:18:c2:40:ba:bb: b8:7d:c1:c9:f5:c6:2a:6f:e9:b3:c3:d0:7d:ab:47: 91:50:6f:e9:e9:9a:6c:72:33:32:39:8e:dd:79:a7: 46:32:33:61:d6:13:e2:32:ac:f6:fd:e2:67:1a:b2: 88:9f:bc:44:28:a2:19:9b:45:9b:5f:f3:c5:df:1a: 16:5c:1c:64:0b:ed:35:62:42:19:bd:65:81:bf:52: af:d4:f4:ec:38:6f:ae:14:6c:3e:da:28:0e:76:59: 5d:9d:a5:35:b2:fe:5f:73:81:20:ab:41:21:a7:08: 11:07:88:3a:7d:0d:42:5d:ae:1b:5b:3b:ef:96:da: 74:11:af:be:43:5d:bb:bc:8e:c0:9c:69:1e:4b:7b: 86:69:59:94:5f:e9:02:1d:35:62:22:0a:30:22:e1: 34:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:87:81:CD:B3:53:71:F3:4C:01:EA:1A:E2:36:45:2B:77:E4:45:8F X509v3 Authority Key Identifier: keyid:EC:1B:9B:E6:31:37:23:0F:67:56:E2:22:01:93:18:C6:40:EB:E4:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/453ac667-4d9e-48d7-afd6-82e98fa76c1e/0/EC1B9BE63137230F6756E222019318C640EBE42E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/EC1B9BE63137230F6756E222019318C640EBE42E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/453ac667-4d9e-48d7-afd6-82e98fa76c1e/0/EC1B9BE63137230F6756E222019318C640EBE42E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:0a:ad:30:28:13:9f:ea:d3:39:8c:84:4d:a8:2f:69:0d:ba: d2:ad:b5:bf:6a:99:f8:c9:0c:f9:14:a7:d9:54:61:08:3e:b0: 45:d3:20:a6:87:b7:9d:29:98:c1:ad:f7:4c:29:7d:43:e1:98: d9:63:b9:7c:3e:0a:8b:93:fb:b0:24:49:1d:45:23:92:e2:a5: c3:3c:0d:85:5a:bd:b6:9a:17:83:8f:8b:74:8e:41:4c:1d:fb: 16:a2:3a:c8:47:bb:72:a8:d5:50:57:d5:23:ea:1f:9b:2a:e5: 9a:7e:c8:cf:5e:a6:0f:8d:59:48:1c:a8:36:86:ed:d6:c8:38: 8c:2d:8c:4e:03:d5:83:bc:76:a5:5d:cf:25:15:ed:a9:51:79: bc:ac:2c:0e:ac:fc:c5:7d:b0:e2:da:31:23:eb:60:46:66:b0: 02:f4:3b:24:57:a3:86:e5:d5:40:6f:38:fe:9a:ca:ef:db:25: 01:7a:69:86:4d:39:09:32:b5:b3:7b:94:f6:35:f3:b6:14:d8: e8:11:3a:fd:32:fc:62:b2:71:54:7c:d4:4e:ad:e6:b6:b3:8f: f9:ed:1c:e8:96:ab:1a:42:91:78:79:7e:97:7c:d9:c7:af:1b: c7:3a:e7:59:68:e4:e6:c1:e3:59:95:02:5b:1e:62:20:3c:e1: 97:f6:5a:20 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGhP/JGlW+sBUv2KeD3kTegsTniwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUMxQjlCRTYzMTM3MjMwRjY3NTZFMjIyMDE5MzE4QzY0 MEVCRTQyRTAeFw0yNTEyMDcxNjA2NDdaFw0yNTEyMTAyMDU3NDdaMDMxMTAvBgNV BAMTKDQ0ODc4MUNEQjM1MzcxRjM0QzAxRUExQUUyMzY0NTJCNzdFNDQ1OEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEaHfzqVIFXLW/On/xOAizjHAL 37XDmSXGFw17onfDNO1H7OAa+6e2UxKb1VGvpg/fTh9d0WXErdQEuDAWTacLESmA OL67/COQQIa3ivH0loNjsB4gzSFlguHAmYzvR4bmuG0YwkC6u7h9wcn1xipv6bPD 0H2rR5FQb+npmmxyMzI5jt15p0YyM2HWE+IyrPb94mcasoifvEQoohmbRZtf88Xf GhZcHGQL7TViQhm9ZYG/Uq/U9Ow4b64UbD7aKA52WV2dpTWy/l9zgSCrQSGnCBEH iDp9DUJdrhtbO++W2nQRr75DXbu8jsCcaR5Le4ZpWZRf6QIdNWIiCjAi4TR7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQURIeBzbNTcfNMAeoa4jZFK3fkRY8wHwYDVR0j BBgwFoAU7Bub5jE3Iw9nVuIiAZMYxkDr5C4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NTNhYzY2Ny00ZDllLTQ4ZDctYWZkNi04MmU5OGZhNzZjMWUvMC9FQzFCOUJFNjMx MzcyMzBGNjc1NkUyMjIwMTkzMThDNjQwRUJFNDJFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRUMxQjlCRTYzMTM3MjMwRjY3NTZFMjIyMDE5MzE4QzY0MEVC RTQyRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDUzYWM2NjctNGQ5ZS00OGQ3LWFm ZDYtODJlOThmYTc2YzFlLzAvRUMxQjlCRTYzMTM3MjMwRjY3NTZFMjIyMDE5MzE4 QzY0MEVCRTQyRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEQKrTAoE5/q0zmMhE2oL2kNutKttb9qmfjJ DPkUp9lUYQg+sEXTIKaHt50pmMGt90wpfUPhmNljuXw+CouT+7AkSR1FI5LipcM8 DYVavbaaF4OPi3SOQUwd+xaiOshHu3Ko1VBX1SPqH5sq5Zp+yM9epg+NWUgcqDaG 7dbIOIwtjE4D1YO8dqVdzyUV7alRebysLA6s/MV9sOLaMSPrYEZmsAL0OyRXo4bl 1UBvOP6ayu/bJQF6aYZNOQkytbN7lPY187YU2OgROv0y/GKycVR81E6t5razj/nt HOiWqxpCkXh5fpd82cevG8c651lo5ObB41mVAlseYiA84Zf2WiA= -----END CERTIFICATE-----Generated at Sun Dec 7 18:53:05 2025 by rpki-client