This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/5bb43ec8-f582-4025-8f36-3cea539d0b09/0/EC9AAB91007053E63CE17F98D74FFD8945F29EDE.mft File: EC9AAB91007053E63CE17F98D74FFD8945F29EDE.mft (raw, json) Hash identifier: X6DaAAtSe1VOx+uJ4fdYVE7xxEJaX2o2e4ZxpVkbzis= Subject key identifier: 00:1D:A6:EF:C1:A4:69:F6:67:25:CF:C5:87:D0:F1:D2:26:4F:9F:55 Authority key identifier: EC:9A:AB:91:00:70:53:E6:3C:E1:7F:98:D7:4F:FD:89:45:F2:9E:DE Certificate issuer: /CN=EC9AAB91007053E63CE17F98D74FFD8945F29EDE Certificate serial: 2FBF003EFBA12F8C71FC967918CD74F23C06523A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC9AAB91007053E63CE17F98D74FFD8945F29EDE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5bb43ec8-f582-4025-8f36-3cea539d0b09/0/EC9AAB91007053E63CE17F98D74FFD8945F29EDE.mft Manifest number: 0150 Signing time: Mon 01 Dec 2025 13:51:41 +0000 Manifest this update: Mon 01 Dec 2025 13:46:41 +0000 Manifest next update: Thu 04 Dec 2025 20:29:41 +0000 Files and hashes: 1: EC9AAB91007053E63CE17F98D74FFD8945F29EDE.crl (hash: U86QcE5/LUg6g0UpZjmujYs+LcuXFD/VM8uVk1LlZTs=) 2: 3130332e35332e32382e302f32332d3234203d3e20313339393535.roa (hash: XmUhlDLdTlUEJxqMyV5d8izbXv0SLIMUNSTUR2SbfXQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5bb43ec8-f582-4025-8f36-3cea539d0b09/0/EC9AAB91007053E63CE17F98D74FFD8945F29EDE.crl rsync://repo-rpki.idnic.net/repo/5bb43ec8-f582-4025-8f36-3cea539d0b09/0/EC9AAB91007053E63CE17F98D74FFD8945F29EDE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC9AAB91007053E63CE17F98D74FFD8945F29EDE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Dec 2025 20:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:bf:00:3e:fb:a1:2f:8c:71:fc:96:79:18:cd:74:f2:3c:06:52:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EC9AAB91007053E63CE17F98D74FFD8945F29EDE Validity Not Before: Dec 1 13:46:41 2025 GMT Not After : Dec 4 20:29:41 2025 GMT Subject: CN=001DA6EFC1A469F66725CFC587D0F1D2264F9F55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:bc:21:ff:27:b4:de:da:2e:83:1b:c3:ca:ad: 08:40:1f:f9:98:54:af:d9:fe:bc:8a:da:76:ce:a3: 9d:45:3f:8d:5b:00:3b:6b:10:1c:ba:45:a5:14:42: fb:55:2a:41:ab:49:32:35:3c:74:29:88:a4:ce:17: 73:17:6f:09:d0:02:79:20:07:cc:ad:ca:f3:c3:95: f8:fd:fd:20:64:45:b0:42:b6:0e:97:ce:68:51:46: ad:03:18:d4:c4:b9:2b:52:0b:16:c9:e3:0e:dd:c3: a9:af:5c:34:c4:f4:79:9c:d4:2a:d5:9b:50:89:56: e9:7c:44:92:14:6d:5e:32:0d:5f:75:7c:fc:48:8d: fc:0a:9d:25:f5:c7:90:bd:51:55:fb:38:f5:e5:a5: 17:94:60:f5:4c:2e:a7:44:93:0b:1a:fa:58:48:c3: 00:3f:e0:18:7e:fd:a3:93:c6:3b:b4:73:81:bc:e5: 25:63:de:20:14:70:ba:cb:60:ab:4a:23:3a:f4:2b: 96:a8:49:16:72:4d:95:10:e0:ca:6d:5e:a3:ed:d4: 7d:4a:0c:a1:08:a8:88:79:56:6d:55:c7:da:72:26: 7c:3f:12:f1:43:cb:00:26:20:2b:53:5c:62:d5:8a: e7:a4:83:de:a4:37:49:55:32:f2:8d:eb:cc:50:da: 3e:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:1D:A6:EF:C1:A4:69:F6:67:25:CF:C5:87:D0:F1:D2:26:4F:9F:55 X509v3 Authority Key Identifier: keyid:EC:9A:AB:91:00:70:53:E6:3C:E1:7F:98:D7:4F:FD:89:45:F2:9E:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5bb43ec8-f582-4025-8f36-3cea539d0b09/0/EC9AAB91007053E63CE17F98D74FFD8945F29EDE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC9AAB91007053E63CE17F98D74FFD8945F29EDE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5bb43ec8-f582-4025-8f36-3cea539d0b09/0/EC9AAB91007053E63CE17F98D74FFD8945F29EDE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:94:01:9c:e3:19:3d:c4:83:7f:72:f5:87:47:9e:5d:4b:af: 28:c7:d8:ac:c2:17:d9:a6:02:7f:e7:b1:ec:d4:52:b8:99:7a: a3:64:98:42:c0:f7:04:04:c7:02:e2:3d:f9:45:25:80:41:aa: 31:02:f7:68:d6:fb:29:ba:4d:87:b8:b6:03:d3:e2:d8:ca:84: 7d:68:43:e2:87:3b:45:d6:54:94:62:51:f5:69:f8:69:3c:73: 66:f9:5e:c2:ce:9f:a4:0c:cb:60:cd:7b:ff:99:99:5e:50:eb: 58:0e:23:88:32:53:78:0e:16:8d:af:de:2c:22:d3:28:1b:07: f3:ba:d9:73:63:34:1d:94:6b:ee:b9:ff:06:bc:b2:5c:4f:ed: 28:91:0d:e6:d2:0b:7d:65:2c:23:7a:4d:fe:02:d9:c8:5d:5d: bd:23:d0:4d:d6:66:a1:0a:78:41:ef:76:ac:23:2e:65:4a:b4: 12:27:7a:ef:d0:29:37:53:0e:15:63:7a:54:b3:36:d5:13:1b: 5d:c0:a3:9a:15:ea:f2:8d:10:1d:e0:8b:81:0b:2f:77:ba:8c: 3c:ed:34:49:55:b5:f6:df:b4:46:05:a4:2e:20:69:af:7a:79: 49:79:42:c0:63:d0:d6:37:79:d3:d3:32:2f:c9:b9:1b:1b:94: 19:02:61:48 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL78APvuhL4xx/JZ5GM108jwGUjowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUM5QUFCOTEwMDcwNTNFNjNDRTE3Rjk4RDc0RkZEODk0 NUYyOUVERTAeFw0yNTEyMDExMzQ2NDFaFw0yNTEyMDQyMDI5NDFaMDMxMTAvBgNV BAMTKDAwMURBNkVGQzFBNDY5RjY2NzI1Q0ZDNTg3RDBGMUQyMjY0RjlGNTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrvCH/J7Te2i6DG8PKrQhAH/mY VK/Z/ryK2nbOo51FP41bADtrEBy6RaUUQvtVKkGrSTI1PHQpiKTOF3MXbwnQAnkg B8ytyvPDlfj9/SBkRbBCtg6XzmhRRq0DGNTEuStSCxbJ4w7dw6mvXDTE9Hmc1CrV m1CJVul8RJIUbV4yDV91fPxIjfwKnSX1x5C9UVX7OPXlpReUYPVMLqdEkwsa+lhI wwA/4Bh+/aOTxju0c4G85SVj3iAUcLrLYKtKIzr0K5aoSRZyTZUQ4MptXqPt1H1K DKEIqIh5Vm1Vx9pyJnw/EvFDywAmICtTXGLViuekg96kN0lVMvKN68xQ2j5rAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAB2m78GkafZnJc/Fh9Dx0iZPn1UwHwYDVR0j BBgwFoAU7JqrkQBwU+Y84X+Y10/9iUXynt4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YmI0M2VjOC1mNTgyLTQwMjUtOGYzNi0zY2VhNTM5ZDBiMDkvMC9FQzlBQUI5MTAw NzA1M0U2M0NFMTdGOThENzRGRkQ4OTQ1RjI5RURFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUM5QUFCOTEwMDcwNTNFNjNDRTE3Rjk4RDc0RkZEODk0NUYy OUVERS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWJiNDNlYzgtZjU4Mi00MDI1LThm MzYtM2NlYTUzOWQwYjA5LzAvRUM5QUFCOTEwMDcwNTNFNjNDRTE3Rjk4RDc0RkZE ODk0NUYyOUVERS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGiUAZzjGT3Eg39y9YdHnl1LryjH2KzCF9mm An/nsezUUriZeqNkmELA9wQExwLiPflFJYBBqjEC92jW+ym6TYe4tgPT4tjKhH1o Q+KHO0XWVJRiUfVp+Gk8c2b5XsLOn6QMy2DNe/+ZmV5Q61gOI4gyU3gOFo2v3iwi 0ygbB/O62XNjNB2Ua+65/wa8slxP7SiRDebSC31lLCN6Tf4C2chdXb0j0E3WZqEK eEHvdqwjLmVKtBIneu/QKTdTDhVjelSzNtUTG13Ao5oV6vKNEB3gi4ELL3e6jDzt NElVtfbftEYFpC4gaa96eUl5QsBj0NY3edPTMi/JuRsblBkCYUg= -----END CERTIFICATE-----Generated at Wed Dec 3 14:44:11 2025 by rpki-client