This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/d3e27da9-e6e6-44a5-98f4-590eb5a1bd65/0/EFA4BF9A0D2DD57446126C57F39AF10838E0C675.mft
File: EFA4BF9A0D2DD57446126C57F39AF10838E0C675.mft (raw, json)
Hash identifier: rPwycYZtwI+s1qZj8DFEd5h0HqIny2QzYWIR43V+C4c=
Subject key identifier: 00:92:98:F6:09:2C:8B:39:7D:19:AB:DD:14:94:89:02:45:96:9E:88
Authority key identifier: EF:A4:BF:9A:0D:2D:D5:74:46:12:6C:57:F3:9A:F1:08:38:E0:C6:75
Certificate issuer: /CN=EFA4BF9A0D2DD57446126C57F39AF10838E0C675
Certificate serial: 77215076F30CEF3D623D12BEA9A2A9F09EA465AC
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFA4BF9A0D2DD57446126C57F39AF10838E0C675.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/d3e27da9-e6e6-44a5-98f4-590eb5a1bd65/0/EFA4BF9A0D2DD57446126C57F39AF10838E0C675.mft
Manifest number: 019F
Signing time: Tue 02 Dec 2025 11:23:03 +0000
Manifest this update: Tue 02 Dec 2025 11:18:03 +0000
Manifest next update: Fri 05 Dec 2025 14:24:03 +0000
Files and hashes: 1: EFA4BF9A0D2DD57446126C57F39AF10838E0C675.crl (hash: ek8xmPyjpboZIha6mln8xWWiLLGYScf+H/0lPHes9YM=)
2: 3130332e3235332e3132372e302f32342d3234203d3e20313530393839.roa (hash: tiskF97htgFGOxcUjLLoNbBwjgTxxSKvgdsrNkZUkUk=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/d3e27da9-e6e6-44a5-98f4-590eb5a1bd65/0/EFA4BF9A0D2DD57446126C57F39AF10838E0C675.crl
rsync://repo-rpki.idnic.net/repo/d3e27da9-e6e6-44a5-98f4-590eb5a1bd65/0/EFA4BF9A0D2DD57446126C57F39AF10838E0C675.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFA4BF9A0D2DD57446126C57F39AF10838E0C675.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 05 Dec 2025 14:24:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:21:50:76:f3:0c:ef:3d:62:3d:12:be:a9:a2:a9:f0:9e:a4:65:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFA4BF9A0D2DD57446126C57F39AF10838E0C675
Validity
Not Before: Dec 2 11:18:03 2025 GMT
Not After : Dec 5 14:24:03 2025 GMT
Subject: CN=009298F6092C8B397D19ABDD1494890245969E88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:83:ba:cc:e2:9d:39:34:5f:98:fc:1f:6f:d7:
e5:8a:06:16:7a:d9:73:15:ec:3e:51:53:c3:f9:48:
a0:7d:79:68:39:55:6d:f7:05:e7:09:bb:1e:42:d2:
71:b8:b7:14:27:a2:ba:89:9b:e5:23:f6:9b:ef:09:
02:2e:92:e2:fb:12:f9:e4:2c:8e:86:bf:25:f2:d8:
07:09:a8:9b:ca:bb:c6:ba:c7:a7:61:63:b9:b0:0f:
96:bb:46:10:31:8f:05:64:05:50:cf:d8:56:74:eb:
11:4b:d4:3f:9a:17:36:b1:3a:d2:32:72:bc:71:31:
e3:49:3e:a0:12:4b:61:f0:ce:0c:b7:6c:1a:96:84:
7c:14:b4:8a:33:79:98:07:23:fc:8f:04:68:c7:25:
ac:98:9b:dc:3b:bc:71:38:3d:b1:22:99:08:ad:00:
c8:64:b8:be:29:e4:20:75:e8:fe:91:37:f2:87:23:
e3:76:8d:a5:ea:3b:e3:c9:7e:a5:65:68:4f:dc:70:
7b:52:4a:6b:38:de:8f:e8:9e:2e:a4:5b:67:1f:eb:
c3:02:4a:34:fd:50:fd:c7:74:44:c6:24:76:4b:2d:
87:37:ed:8c:7a:17:e8:0e:fc:03:7d:48:94:b2:c2:
e8:ff:ce:8b:22:3e:07:e1:25:8e:73:5b:62:b9:ed:
7d:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:92:98:F6:09:2C:8B:39:7D:19:AB:DD:14:94:89:02:45:96:9E:88
X509v3 Authority Key Identifier:
keyid:EF:A4:BF:9A:0D:2D:D5:74:46:12:6C:57:F3:9A:F1:08:38:E0:C6:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/d3e27da9-e6e6-44a5-98f4-590eb5a1bd65/0/EFA4BF9A0D2DD57446126C57F39AF10838E0C675.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFA4BF9A0D2DD57446126C57F39AF10838E0C675.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d3e27da9-e6e6-44a5-98f4-590eb5a1bd65/0/EFA4BF9A0D2DD57446126C57F39AF10838E0C675.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:b9:e2:4e:22:d9:78:8f:ab:a1:ef:57:a2:66:28:8f:83:b0:
7d:2d:47:82:09:e5:84:4a:aa:4a:80:60:ea:e3:8a:f5:3f:1f:
93:40:e9:96:0e:4b:a6:ce:9f:e4:20:b3:6c:95:d1:7d:3e:f5:
61:6d:f2:a3:db:f5:e4:7d:fd:e9:8c:1f:a6:01:03:34:1b:9c:
c0:32:72:cc:ce:34:fd:e6:2d:d1:76:98:be:7f:a2:5b:61:23:
8a:0c:dd:d0:6a:21:17:cf:74:81:e8:8a:13:7e:a5:1a:bf:67:
56:b7:54:ce:d0:dc:11:f1:88:09:bf:66:81:07:c4:dc:47:81:
4d:24:2c:ef:ce:7b:69:b0:db:ae:89:8a:5f:47:f6:4d:99:2c:
27:51:59:41:1d:28:3e:04:6f:2f:23:b7:b3:00:01:f7:51:bc:
41:45:a9:04:15:97:3c:ef:c5:28:5d:59:8b:e0:76:d5:ad:bd:
96:00:b7:36:6e:b4:d8:b7:d9:7e:97:02:bf:0f:26:b4:45:6e:
07:91:81:84:00:e3:2f:96:b9:a2:58:1b:06:14:33:59:e9:d5:
48:73:22:51:40:d3:88:cf:87:30:b2:19:9e:fd:52:4b:35:c4:
c1:1e:bc:ae:83:0c:a2:9b:30:47:8f:47:2f:4d:ba:ca:a6:91:
5d:03:51:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 14:55:44 2025 by rpki-client