This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/76c00376-3351-4fa3-97ee-52385ba4d903/0/EF979072FBF6DABD2A8EAC08A304509E8DC04C66.mft
File: EF979072FBF6DABD2A8EAC08A304509E8DC04C66.mft (raw, json)
Hash identifier: 5jTeawqcBgmnfGwyn410XAW54A/3gTt2mNnPNFC4/+E=
Subject key identifier: 04:4B:FA:A2:32:A4:EC:F6:EE:52:32:D3:8F:E9:A6:CC:92:78:54:18
Authority key identifier: EF:97:90:72:FB:F6:DA:BD:2A:8E:AC:08:A3:04:50:9E:8D:C0:4C:66
Certificate issuer: /CN=EF979072FBF6DABD2A8EAC08A304509E8DC04C66
Certificate serial: 4BF74B2F546C796608680B839685B781DE957136
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EF979072FBF6DABD2A8EAC08A304509E8DC04C66.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/76c00376-3351-4fa3-97ee-52385ba4d903/0/EF979072FBF6DABD2A8EAC08A304509E8DC04C66.mft
Manifest number: FC
Signing time: Tue 02 Dec 2025 10:11:41 +0000
Manifest this update: Tue 02 Dec 2025 10:06:41 +0000
Manifest next update: Fri 05 Dec 2025 20:46:41 +0000
Files and hashes: 1: EF979072FBF6DABD2A8EAC08A304509E8DC04C66.crl (hash: rTXHWv6KEpGAnKeTuzjIiK1/2ax9yNDqkmjz6E/eEOM=)
2: 3130332e34312e3130392e302f32342d3234203d3e203536323536.roa (hash: 4q/gs/czBNAuO23mv17/FKccDK6uDnn2+DC2kwXpKAc=)
3: 3130332e32382e32312e302f32342d3234203d3e203536323536.roa (hash: lgU3Sd0WykJyELTKj2IglQHmtI2jqlICc7rdQuDN4Fw=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/76c00376-3351-4fa3-97ee-52385ba4d903/0/EF979072FBF6DABD2A8EAC08A304509E8DC04C66.crl
rsync://repo-rpki.idnic.net/repo/76c00376-3351-4fa3-97ee-52385ba4d903/0/EF979072FBF6DABD2A8EAC08A304509E8DC04C66.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EF979072FBF6DABD2A8EAC08A304509E8DC04C66.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 05 Dec 2025 20:46:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:f7:4b:2f:54:6c:79:66:08:68:0b:83:96:85:b7:81:de:95:71:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EF979072FBF6DABD2A8EAC08A304509E8DC04C66
Validity
Not Before: Dec 2 10:06:41 2025 GMT
Not After : Dec 5 20:46:41 2025 GMT
Subject: CN=044BFAA232A4ECF6EE5232D38FE9A6CC92785418
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:1d:e3:6a:36:18:71:8d:75:64:46:bb:8f:11:
95:e2:58:9f:4e:2a:4b:55:d4:85:b5:34:e6:1d:25:
29:bb:e6:81:f8:6f:a7:cd:57:9f:e6:73:9c:56:59:
1b:4a:81:30:ed:7a:f5:fd:3e:38:ab:3d:6b:21:c0:
e7:3c:61:1e:3b:ba:26:c4:27:ec:91:21:c2:bd:e8:
f5:60:56:46:53:06:98:d8:e9:c9:ff:8c:72:fe:f6:
13:12:69:6a:c7:f3:85:84:d0:2f:87:49:2a:b8:22:
65:a1:72:7f:b7:77:3a:a4:26:82:51:8a:74:2f:a2:
30:5f:c9:a4:ca:3f:72:aa:e2:2e:63:78:fa:22:84:
67:75:b4:03:d3:8d:6c:54:af:1a:23:da:a6:9d:1c:
2f:53:06:26:04:e9:71:50:b7:b6:2f:1e:17:22:6d:
2a:9f:38:94:ce:e2:2c:99:a2:90:b2:a9:f4:c4:9e:
bf:a8:39:34:16:96:ad:cf:3b:86:e5:21:c5:da:5f:
a0:eb:f4:79:62:c0:5e:5f:42:f9:d3:23:3e:19:ec:
67:06:03:d1:6f:9c:5c:e2:c4:89:f4:c5:50:c9:45:
27:c1:12:4c:4d:21:a3:c1:a2:ed:20:f0:41:3e:16:
31:64:fc:5d:f0:e0:c9:ed:00:3e:c0:25:1d:0c:88:
e8:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:4B:FA:A2:32:A4:EC:F6:EE:52:32:D3:8F:E9:A6:CC:92:78:54:18
X509v3 Authority Key Identifier:
keyid:EF:97:90:72:FB:F6:DA:BD:2A:8E:AC:08:A3:04:50:9E:8D:C0:4C:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/76c00376-3351-4fa3-97ee-52385ba4d903/0/EF979072FBF6DABD2A8EAC08A304509E8DC04C66.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EF979072FBF6DABD2A8EAC08A304509E8DC04C66.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/76c00376-3351-4fa3-97ee-52385ba4d903/0/EF979072FBF6DABD2A8EAC08A304509E8DC04C66.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:d6:b3:77:ab:9d:3a:8a:62:db:e5:80:b9:f3:17:46:06:2e:
e1:ea:22:7a:75:ef:b5:a3:e2:12:42:29:92:64:24:b9:7e:97:
07:12:a7:9b:d5:c9:93:33:9c:10:2a:08:6d:a2:f6:cb:d1:91:
2e:b3:fd:4d:a5:7a:d6:83:11:da:8c:b5:cf:84:02:9d:88:ba:
b4:53:fc:84:a3:15:be:0a:3b:49:45:fc:5c:c7:04:10:59:86:
22:9d:19:81:14:22:0a:2b:1f:26:b4:0d:7d:a7:bd:2a:e1:43:
a1:db:23:a9:9a:d1:e3:f3:80:4c:e2:46:7e:c6:09:8f:5b:cc:
15:43:60:3e:62:69:53:8c:03:3d:4c:f0:b4:66:58:01:81:e0:
b1:e4:05:43:ac:cf:c5:82:80:1a:94:93:22:6d:16:b3:29:e8:
b6:1d:a0:11:26:91:3c:6c:2f:ca:4d:5c:18:5e:26:e0:52:76:
52:b4:e1:71:d2:4c:28:05:d4:d9:43:e2:15:09:d6:69:46:d9:
42:78:2a:bf:35:c4:3d:7c:a7:98:c5:16:09:06:d6:80:4f:6d:
eb:55:fe:9f:37:8d:5f:72:48:15:bb:55:6a:3a:72:07:48:21:
c8:a1:17:43:46:c5:a3:fd:d7:56:4c:35:0e:bc:57:74:7e:28:
58:34:2d:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 14:45:46 2025 by rpki-client