This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/73fe4255-1d91-4fcc-bce4-8a42adfe3c29/0/EC39D766063B56E5EA4DBFB2A502298FB995956A.mft File: EC39D766063B56E5EA4DBFB2A502298FB995956A.mft (raw, json) Hash identifier: IKbgtf9cYcCW7DoyfevW0HmHItd8ceF7g8z8ubi7en4= Subject key identifier: D4:C6:E4:C5:6A:4B:CA:3E:E8:4B:72:03:54:61:1D:9C:5B:15:D1:AC Authority key identifier: EC:39:D7:66:06:3B:56:E5:EA:4D:BF:B2:A5:02:29:8F:B9:95:95:6A Certificate issuer: /CN=EC39D766063B56E5EA4DBFB2A502298FB995956A Certificate serial: 277FFA9AC500E2B22C71D5B69778E2AF81454157 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC39D766063B56E5EA4DBFB2A502298FB995956A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/73fe4255-1d91-4fcc-bce4-8a42adfe3c29/0/EC39D766063B56E5EA4DBFB2A502298FB995956A.mft Manifest number: 052B Signing time: Wed 03 Dec 2025 03:10:39 +0000 Manifest this update: Wed 03 Dec 2025 03:05:39 +0000 Manifest next update: Sat 06 Dec 2025 04:03:39 +0000 Files and hashes: 1: EC39D766063B56E5EA4DBFB2A502298FB995956A.crl (hash: B2E8tKKPjXTp0XbRcQHHvqCZaD0Luq9wDzO3g8CCulU=) 2: 3130332e3133392e32352e302f32342d3234203d3e20313338383738.roa (hash: fXYsqxCjsvIrOq+7nStBZ2/w2ahyZCjmKRe5J8m8wVg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/73fe4255-1d91-4fcc-bce4-8a42adfe3c29/0/EC39D766063B56E5EA4DBFB2A502298FB995956A.crl rsync://repo-rpki.idnic.net/repo/73fe4255-1d91-4fcc-bce4-8a42adfe3c29/0/EC39D766063B56E5EA4DBFB2A502298FB995956A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC39D766063B56E5EA4DBFB2A502298FB995956A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 04:03:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:7f:fa:9a:c5:00:e2:b2:2c:71:d5:b6:97:78:e2:af:81:45:41:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EC39D766063B56E5EA4DBFB2A502298FB995956A Validity Not Before: Dec 3 03:05:39 2025 GMT Not After : Dec 6 04:03:39 2025 GMT Subject: CN=D4C6E4C56A4BCA3EE84B720354611D9C5B15D1AC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:44:7f:24:44:ac:fd:17:0c:24:a2:bc:4b:6c: 48:f5:68:91:42:bb:81:11:13:74:2a:0c:bb:4c:b5: 47:71:4e:2c:d0:5d:eb:26:1f:c0:0a:5e:59:de:58: 16:8e:bf:0a:8e:4f:66:ad:5f:93:c9:bf:c5:75:ab: 95:4f:4d:65:41:4d:63:e3:22:93:b4:ba:df:cf:b3: 41:9c:d9:94:66:10:9c:e8:72:de:66:e8:6e:4b:a0: 67:46:a8:29:c2:e9:34:8e:e9:0f:d8:3a:c3:b0:79: 4f:b8:62:36:f9:fd:c2:a9:3a:27:fc:e0:c8:4c:60: 8e:96:86:a7:d2:c8:ae:fa:4d:89:e9:e5:e0:2a:ff: 95:dd:e6:0a:33:72:ec:1e:20:a6:2b:f7:72:7e:4f: 00:93:9f:a6:da:f4:70:6f:31:2a:10:47:93:3a:c0: 13:2a:dd:6c:4e:85:e2:08:39:f9:5f:35:3b:d5:c1: 56:56:f0:51:2b:ea:0f:bf:e5:a8:be:11:ee:aa:7b: 19:42:65:e2:a1:72:51:ff:1f:e1:91:e2:17:e3:fa: 99:ae:f3:b5:e4:57:69:7c:90:5c:79:8a:6f:f1:47: c8:ca:7b:e4:b5:6b:fc:63:48:54:8e:77:b9:90:fc: 64:64:1b:06:92:cb:17:58:00:c9:4a:9b:7f:eb:39: 9e:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:C6:E4:C5:6A:4B:CA:3E:E8:4B:72:03:54:61:1D:9C:5B:15:D1:AC X509v3 Authority Key Identifier: keyid:EC:39:D7:66:06:3B:56:E5:EA:4D:BF:B2:A5:02:29:8F:B9:95:95:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/73fe4255-1d91-4fcc-bce4-8a42adfe3c29/0/EC39D766063B56E5EA4DBFB2A502298FB995956A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC39D766063B56E5EA4DBFB2A502298FB995956A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73fe4255-1d91-4fcc-bce4-8a42adfe3c29/0/EC39D766063B56E5EA4DBFB2A502298FB995956A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:15:c7:a6:e3:48:ed:c5:32:41:5f:08:a4:85:60:35:bb:68: 1e:c8:db:0f:62:71:38:5f:8c:2d:a8:92:22:25:33:7e:b9:48: 9b:30:a1:bb:cf:d8:80:c0:44:59:6a:e4:6b:ce:5a:eb:01:88: 0c:fc:e5:96:2c:e4:34:e6:08:32:0c:12:72:7c:b1:9f:87:bd: 9b:19:84:99:ae:56:27:a5:6e:fe:0d:d3:b5:8d:16:15:9f:ef: 05:8e:15:a6:cc:23:81:41:2d:9d:04:6e:70:15:a7:e8:8b:2f: cf:8e:e2:2b:2b:7e:15:9b:6c:48:ce:67:ba:f7:c7:7f:4d:7b: a7:ff:06:a1:53:d0:4b:5a:7e:64:cf:de:14:7c:d1:17:af:62: 69:25:c2:f7:20:d5:b5:c3:c0:26:a5:50:96:1a:0c:f0:1f:ad: 2e:c4:84:21:4c:90:f5:75:b4:2f:de:7e:ff:f3:eb:bd:64:6c: fc:54:ff:9e:68:61:cd:d1:3a:97:cb:ab:7c:0b:02:0f:63:07: dc:be:11:3c:36:6f:cc:0e:87:25:cc:f2:3e:30:c5:9c:6a:5e: b4:1d:64:3a:ce:de:22:07:6f:c8:64:2b:ff:67:6e:6a:7c:8c: d8:12:6b:c3:5d:2e:da:59:7b:b7:9e:a9:f2:4c:e8:9f:49:27: fd:90:44:82 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJ3/6msUA4rIscdW2l3jir4FFQVcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUMzOUQ3NjYwNjNCNTZFNUVBNERCRkIyQTUwMjI5OEZC OTk1OTU2QTAeFw0yNTEyMDMwMzA1MzlaFw0yNTEyMDYwNDAzMzlaMDMxMTAvBgNV BAMTKEQ0QzZFNEM1NkE0QkNBM0VFODRCNzIwMzU0NjExRDlDNUIxNUQxQUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeRH8kRKz9FwwkorxLbEj1aJFC u4ERE3QqDLtMtUdxTizQXesmH8AKXlneWBaOvwqOT2atX5PJv8V1q5VPTWVBTWPj IpO0ut/Ps0Gc2ZRmEJzoct5m6G5LoGdGqCnC6TSO6Q/YOsOweU+4Yjb5/cKpOif8 4MhMYI6WhqfSyK76TYnp5eAq/5Xd5gozcuweIKYr93J+TwCTn6ba9HBvMSoQR5M6 wBMq3WxOheIIOflfNTvVwVZW8FEr6g+/5ai+Ee6qexlCZeKhclH/H+GR4hfj+pmu 87XkV2l8kFx5im/xR8jKe+S1a/xjSFSOd7mQ/GRkGwaSyxdYAMlKm3/rOZ5RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1MbkxWpLyj7oS3IDVGEdnFsV0awwHwYDVR0j BBgwFoAU7DnXZgY7VuXqTb+ypQIpj7mVlWowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 M2ZlNDI1NS0xZDkxLTRmY2MtYmNlNC04YTQyYWRmZTNjMjkvMC9FQzM5RDc2NjA2 M0I1NkU1RUE0REJGQjJBNTAyMjk4RkI5OTU5NTZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUMzOUQ3NjYwNjNCNTZFNUVBNERCRkIyQTUwMjI5OEZCOTk1 OTU2QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzNmZTQyNTUtMWQ5MS00ZmNjLWJj ZTQtOGE0MmFkZmUzYzI5LzAvRUMzOUQ3NjYwNjNCNTZFNUVBNERCRkIyQTUwMjI5 OEZCOTk1OTU2QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADUVx6bjSO3FMkFfCKSFYDW7aB7I2w9icThf jC2okiIlM365SJswobvP2IDARFlq5GvOWusBiAz85ZYs5DTmCDIMEnJ8sZ+HvZsZ hJmuVielbv4N07WNFhWf7wWOFabMI4FBLZ0EbnAVp+iLL8+O4isrfhWbbEjOZ7r3 x39Ne6f/BqFT0EtafmTP3hR80RevYmklwvcg1bXDwCalUJYaDPAfrS7EhCFMkPV1 tC/efv/z671kbPxU/55oYc3ROpfLq3wLAg9jB9y+ETw2b8wOhyXM8j4wxZxqXrQd ZDrO3iIHb8hkK/9nbmp8jNgSa8NdLtpZe7eeqfJM6J9JJ/2QRII= -----END CERTIFICATE-----Generated at Wed Dec 3 13:57:59 2025 by rpki-client