This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/0/2EC721F6FC616A1BE2D938F21EAF2E82E805981E.mft File: 2EC721F6FC616A1BE2D938F21EAF2E82E805981E.mft (raw, json) Hash identifier: AerLE3vfFTI4zgQxZmRBpNy4+tTmC/6uAOZ/WM5v3nQ= Subject key identifier: F7:97:13:27:71:31:FF:74:03:DA:CE:62:57:DE:58:DF:6E:A3:74:77 Authority key identifier: 2E:C7:21:F6:FC:61:6A:1B:E2:D9:38:F2:1E:AF:2E:82:E8:05:98:1E Certificate issuer: /CN=2EC721F6FC616A1BE2D938F21EAF2E82E805981E Certificate serial: 15C0ABE0C725E73563E25475C14E6D740215936D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2EC721F6FC616A1BE2D938F21EAF2E82E805981E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/0/2EC721F6FC616A1BE2D938F21EAF2E82E805981E.mft Manifest number: B1 Signing time: Fri 05 Dec 2025 19:43:07 +0000 Manifest this update: Fri 05 Dec 2025 19:38:07 +0000 Manifest next update: Mon 08 Dec 2025 19:55:07 +0000 Files and hashes: 1: 3136302e3138372e3137342e302f32342d3234203d3e20313533313335.roa (hash: XfY4we6jzKf244te76Sh5o4SXguYwnH8MGIYft8mlas=) 2: 2EC721F6FC616A1BE2D938F21EAF2E82E805981E.crl (hash: k6Q6tRwpBXpoRhei0hONG+hpRsa4k8oQkUS/fEDKUNU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/0/2EC721F6FC616A1BE2D938F21EAF2E82E805981E.crl rsync://repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/0/2EC721F6FC616A1BE2D938F21EAF2E82E805981E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2EC721F6FC616A1BE2D938F21EAF2E82E805981E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 19:55:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:c0:ab:e0:c7:25:e7:35:63:e2:54:75:c1:4e:6d:74:02:15:93:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2EC721F6FC616A1BE2D938F21EAF2E82E805981E Validity Not Before: Dec 5 19:38:07 2025 GMT Not After : Dec 8 19:55:07 2025 GMT Subject: CN=F79713277131FF7403DACE6257DE58DF6EA37477 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:57:8e:b0:8e:d1:3d:aa:fa:77:1a:f8:d3:8d: a4:28:12:3d:a9:65:f8:b5:f2:00:cf:2a:05:26:58: 02:7d:86:23:78:49:53:65:20:11:2d:69:89:f8:08: 37:6d:70:36:bc:f2:d7:00:a0:f9:89:62:ca:a1:11: 14:82:c0:d1:13:4b:db:18:85:95:27:f3:54:ea:8c: 95:54:56:62:2b:49:a1:a1:83:02:f2:12:bc:54:ce: 9a:ea:1c:cb:fb:21:ef:19:65:e5:10:08:a0:64:e7: 4b:85:1c:35:e1:00:00:12:24:68:11:3a:39:0e:7a: a1:33:08:81:b9:5a:17:b9:f5:d8:13:51:fa:62:20: 1c:87:06:a6:ae:ac:3e:99:cc:34:d1:92:1b:55:e7: b8:a7:99:08:c4:a6:23:b9:8e:e1:69:d4:df:9c:2f: e1:f4:70:6e:73:6d:77:7a:7f:67:36:8f:ad:8f:5f: 9d:e8:d4:ea:8a:0c:b9:76:98:2b:b6:69:59:88:b8: 78:a7:56:aa:9b:7f:bb:b0:20:32:d3:0c:bf:80:8b: 4f:e3:fd:ba:b9:42:2e:cf:c9:4c:19:7e:86:43:7b: 12:8f:91:7d:65:f2:28:b8:61:22:54:93:eb:56:cc: 76:43:d8:2a:69:24:c8:9c:c7:07:ed:90:b2:fd:4b: 6b:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:97:13:27:71:31:FF:74:03:DA:CE:62:57:DE:58:DF:6E:A3:74:77 X509v3 Authority Key Identifier: keyid:2E:C7:21:F6:FC:61:6A:1B:E2:D9:38:F2:1E:AF:2E:82:E8:05:98:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/0/2EC721F6FC616A1BE2D938F21EAF2E82E805981E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2EC721F6FC616A1BE2D938F21EAF2E82E805981E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/0/2EC721F6FC616A1BE2D938F21EAF2E82E805981E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:a6:8b:9d:89:6e:22:21:3c:fc:c4:79:73:67:20:72:9f:de: 74:c9:2c:d8:55:32:a3:28:8c:2a:d2:0e:68:63:d5:12:28:c2: 01:36:a6:9d:cd:b2:18:94:ca:a7:24:aa:fb:25:b9:0c:55:23: c3:ea:57:d5:52:19:51:84:e2:77:31:e2:33:7c:05:1b:56:e8: 62:98:bd:c5:65:9d:58:87:11:b6:39:42:f7:d9:f5:16:9a:d4: ec:00:52:a5:af:c1:c8:1a:09:88:e9:cb:6c:f3:fd:bf:b0:00: 2e:4d:f4:22:d1:4f:ea:51:b9:06:63:c7:3b:8f:78:9d:58:6f: b9:5f:ae:37:0f:b5:7a:76:99:eb:b9:5a:50:a8:a3:dc:0f:d9: 45:d6:34:8e:02:4d:05:1f:e1:10:44:3f:7d:a4:a4:a7:54:8c: 76:e5:d9:9b:26:10:6b:56:57:9e:d1:0c:28:e5:10:ff:60:f2: 0e:20:6c:ea:ce:8b:3a:57:db:55:1c:35:d4:51:7a:87:b0:4a: 5a:b0:45:d1:48:11:a5:d8:0f:57:73:42:97:98:47:2d:b9:7b: 83:ab:36:ef:f5:37:0e:3f:44:29:cc:99:6e:67:f8:99:a4:ff: e7:f1:4d:41:75:ce:38:45:7a:7e:8d:ae:7b:88:76:f4:7a:c2: 34:8e:77:60 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFcCr4Mcl5zVj4lR1wU5tdAIVk20wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkVDNzIxRjZGQzYxNkExQkUyRDkzOEYyMUVBRjJFODJF ODA1OTgxRTAeFw0yNTEyMDUxOTM4MDdaFw0yNTEyMDgxOTU1MDdaMDMxMTAvBgNV BAMTKEY3OTcxMzI3NzEzMUZGNzQwM0RBQ0U2MjU3REU1OERGNkVBMzc0NzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQV46wjtE9qvp3GvjTjaQoEj2p Zfi18gDPKgUmWAJ9hiN4SVNlIBEtaYn4CDdtcDa88tcAoPmJYsqhERSCwNETS9sY hZUn81TqjJVUVmIrSaGhgwLyErxUzprqHMv7Ie8ZZeUQCKBk50uFHDXhAAASJGgR OjkOeqEzCIG5Whe59dgTUfpiIByHBqaurD6ZzDTRkhtV57inmQjEpiO5juFp1N+c L+H0cG5zbXd6f2c2j62PX53o1OqKDLl2mCu2aVmIuHinVqqbf7uwIDLTDL+Ai0/j /bq5Qi7PyUwZfoZDexKPkX1l8ii4YSJUk+tWzHZD2CppJMicxwftkLL9S2u1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU95cTJ3Ex/3QD2s5iV95Y326jdHcwHwYDVR0j BBgwFoAULsch9vxhahvi2TjyHq8ugugFmB4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ODg1M2FhYi04ZDZjLTQ1N2YtOWQ1Ny00ODRhY2FjZWE5ZDgvMC8yRUM3MjFGNkZD NjE2QTFCRTJEOTM4RjIxRUFGMkU4MkU4MDU5ODFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMkVDNzIxRjZGQzYxNkExQkUyRDkzOEYyMUVBRjJFODJFODA1 OTgxRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTg4NTNhYWItOGQ2Yy00NTdmLTlk NTctNDg0YWNhY2VhOWQ4LzAvMkVDNzIxRjZGQzYxNkExQkUyRDkzOEYyMUVBRjJF ODJFODA1OTgxRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABOmi52JbiIhPPzEeXNnIHKf3nTJLNhVMqMo jCrSDmhj1RIowgE2pp3NshiUyqckqvsluQxVI8PqV9VSGVGE4ncx4jN8BRtW6GKY vcVlnViHEbY5QvfZ9Raa1OwAUqWvwcgaCYjpy2zz/b+wAC5N9CLRT+pRuQZjxzuP eJ1Yb7lfrjcPtXp2meu5WlCoo9wP2UXWNI4CTQUf4RBEP32kpKdUjHbl2ZsmEGtW V57RDCjlEP9g8g4gbOrOizpX21UcNdRReoewSlqwRdFIEaXYD1dzQpeYRy25e4Or Nu/1Nw4/RCnMmW5n+Jmk/+fxTUF1zjhFen6NrnuIdvR6wjSOd2A= -----END CERTIFICATE-----Generated at Sun Dec 7 18:49:39 2025 by rpki-client