This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/5f9e1a8a-39f1-4fe2-832a-bb2f2092fbf6/0/EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.mft File: EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.mft (raw, json) Hash identifier: Ssx+Hrc50G0xFUVEa3CrYY6pPs37U/YycY3I0rlYVGs= Subject key identifier: C8:C6:7C:E9:90:36:6A:1E:F1:C8:F3:C7:C1:3F:42:2A:E3:38:1C:C7 Authority key identifier: EF:AF:3D:BC:84:57:8E:58:6E:A4:A0:4F:C3:5E:6A:46:FA:0E:28:EA Certificate issuer: /CN=EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA Certificate serial: 6D37AF10DD9349D3FD6C166EA5FDA9DA9F61162E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5f9e1a8a-39f1-4fe2-832a-bb2f2092fbf6/0/EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.mft Manifest number: FC Signing time: Fri 21 Nov 2025 20:01:29 +0000 Manifest this update: Fri 21 Nov 2025 19:56:29 +0000 Manifest next update: Tue 25 Nov 2025 06:52:29 +0000 Files and hashes: 1: EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.crl (hash: nGFjEp0fU5YjAXaGZy6QNutNMkP9d+1H37sWljCAkME=) 2: 3135372e36362e33362e302f32342d3234203d3e20313430303136.roa (hash: zDfqmAp3VO5lL/pBx5N4cR8KEoRuNAmls9zWuktjlvE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5f9e1a8a-39f1-4fe2-832a-bb2f2092fbf6/0/EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.crl rsync://repo-rpki.idnic.net/repo/5f9e1a8a-39f1-4fe2-832a-bb2f2092fbf6/0/EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 24 Nov 2025 16:16:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:37:af:10:dd:93:49:d3:fd:6c:16:6e:a5:fd:a9:da:9f:61:16:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA Validity Not Before: Nov 21 19:56:29 2025 GMT Not After : Nov 25 06:52:29 2025 GMT Subject: CN=C8C67CE990366A1EF1C8F3C7C13F422AE3381CC7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:3e:59:74:6c:ea:33:42:a3:d7:63:a0:c6:6a: 97:6d:96:3f:a5:8e:a0:8d:88:c0:ae:96:33:36:f2: 09:8e:9b:ae:72:54:1d:2d:d7:2a:c0:16:cf:c1:da: c7:26:d4:8e:3b:9f:4d:01:64:7a:98:64:6f:e3:3b: 7f:31:45:18:a9:66:34:d6:d4:86:a6:62:de:3d:9e: 91:9f:fc:0e:eb:c0:b9:3a:05:54:c2:65:6c:19:cb: 88:e0:0b:12:16:b4:41:6e:fc:74:13:f3:88:d4:e8: d6:70:87:3e:96:0d:ff:9e:6c:29:af:2f:3f:f5:f8: 7d:2c:ae:a3:23:df:ee:9b:58:a8:3c:de:2e:83:e5: 00:33:98:1a:a8:4b:1a:e5:10:ac:02:23:c1:f5:56: 0d:eb:8d:08:b8:2e:9d:2b:64:98:bf:6d:e2:e7:7b: 0c:6d:9a:b9:a9:5d:40:20:e1:55:8c:6e:de:6f:13: 1f:cc:aa:9f:e1:18:dc:64:48:b2:fa:a8:ff:7f:1b: 9b:76:59:f1:f6:f1:62:a6:89:72:74:d4:f7:fe:37: f2:b1:51:f5:bc:1b:06:20:cd:77:0d:e8:1f:9a:27: bd:f3:0b:1c:e3:a2:5c:d6:a0:bc:89:f1:2b:1f:ca: f9:1c:08:d7:e1:91:d0:4d:6e:d4:83:0b:30:1a:bc: 98:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:C6:7C:E9:90:36:6A:1E:F1:C8:F3:C7:C1:3F:42:2A:E3:38:1C:C7 X509v3 Authority Key Identifier: keyid:EF:AF:3D:BC:84:57:8E:58:6E:A4:A0:4F:C3:5E:6A:46:FA:0E:28:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5f9e1a8a-39f1-4fe2-832a-bb2f2092fbf6/0/EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5f9e1a8a-39f1-4fe2-832a-bb2f2092fbf6/0/EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:6a:64:f6:4d:80:5d:7e:c4:c6:2d:d5:3e:9c:46:08:34:2f: 97:93:2b:95:f8:ff:08:fd:39:cc:c7:85:7d:c6:f4:e7:4c:db: 04:16:5b:1f:ca:31:cf:b0:4a:32:78:11:c5:d4:3e:2a:ec:5a: b1:33:92:99:67:06:b1:42:f7:9c:37:a4:e8:48:f1:97:5c:6a: 9e:29:38:41:6b:b5:5e:1d:be:9a:de:33:81:4e:22:96:d0:fe: d6:bf:80:d5:fb:1d:00:28:e5:62:1e:60:11:78:6f:6b:a1:4e: a1:f6:0c:9c:d7:f2:24:53:e1:f5:53:21:67:42:31:68:2b:b5: 37:83:68:b6:2c:b3:3f:34:f3:dc:9e:72:1b:4f:9b:29:2d:9f: 1f:d7:42:96:8d:c8:22:85:ad:77:39:02:20:59:4c:7c:b7:99: 3e:f1:bd:53:f3:17:0b:70:b1:99:85:a3:e4:a3:9e:a3:d1:ce: ba:31:c4:35:e5:62:ea:a5:b2:8f:e3:79:af:1c:6e:df:45:c5: 52:78:7f:70:d1:97:41:3d:d0:97:36:e0:d7:f5:02:a3:9a:94: b4:bf:a4:ae:ed:db:74:69:ec:e0:32:12:90:d9:ca:20:26:5a: 5f:90:02:63:77:aa:c5:8b:bd:06:40:36:e0:3c:0c:03:3d:c3: 41:40:d4:8d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbTevEN2TSdP9bBZupf2p2p9hFi4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUZBRjNEQkM4NDU3OEU1ODZFQTRBMDRGQzM1RTZBNDZG QTBFMjhFQTAeFw0yNTExMjExOTU2MjlaFw0yNTExMjUwNjUyMjlaMDMxMTAvBgNV BAMTKEM4QzY3Q0U5OTAzNjZBMUVGMUM4RjNDN0MxM0Y0MjJBRTMzODFDQzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBPll0bOozQqPXY6DGapdtlj+l jqCNiMCuljM28gmOm65yVB0t1yrAFs/B2scm1I47n00BZHqYZG/jO38xRRipZjTW 1IamYt49npGf/A7rwLk6BVTCZWwZy4jgCxIWtEFu/HQT84jU6NZwhz6WDf+ebCmv Lz/1+H0srqMj3+6bWKg83i6D5QAzmBqoSxrlEKwCI8H1Vg3rjQi4Lp0rZJi/beLn ewxtmrmpXUAg4VWMbt5vEx/Mqp/hGNxkSLL6qP9/G5t2WfH28WKmiXJ01Pf+N/Kx UfW8GwYgzXcN6B+aJ73zCxzjolzWoLyJ8SsfyvkcCNfhkdBNbtSDCzAavJgNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyMZ86ZA2ah7xyPPHwT9CKuM4HMcwHwYDVR0j BBgwFoAU7689vIRXjlhupKBPw15qRvoOKOowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZjllMWE4YS0zOWYxLTRmZTItODMyYS1iYjJmMjA5MmZiZjYvMC9FRkFGM0RCQzg0 NTc4RTU4NkVBNEEwNEZDMzVFNkE0NkZBMEUyOEVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRUZBRjNEQkM4NDU3OEU1ODZFQTRBMDRGQzM1RTZBNDZGQTBF MjhFQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWY5ZTFhOGEtMzlmMS00ZmUyLTgz MmEtYmIyZjIwOTJmYmY2LzAvRUZBRjNEQkM4NDU3OEU1ODZFQTRBMDRGQzM1RTZB NDZGQTBFMjhFQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABhqZPZNgF1+xMYt1T6cRgg0L5eTK5X4/wj9 OczHhX3G9OdM2wQWWx/KMc+wSjJ4EcXUPirsWrEzkplnBrFC95w3pOhI8Zdcap4p OEFrtV4dvpreM4FOIpbQ/ta/gNX7HQAo5WIeYBF4b2uhTqH2DJzX8iRT4fVTIWdC MWgrtTeDaLYssz8089yechtPmyktnx/XQpaNyCKFrXc5AiBZTHy3mT7xvVPzFwtw sZmFo+SjnqPRzroxxDXlYuqlso/jea8cbt9FxVJ4f3DRl0E90Jc24Nf1AqOalLS/ pK7t23Rp7OAyEpDZyiAmWl+QAmN3qsWLvQZANuA8DAM9w0FA1I0= -----END CERTIFICATE-----Generated at Sat Nov 22 22:13:05 2025 by rpki-client