This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/d3e27da9-e6e6-44a5-98f4-590eb5a1bd65/0/EFA4BF9A0D2DD57446126C57F39AF10838E0C675.mft
File: EFA4BF9A0D2DD57446126C57F39AF10838E0C675.mft (raw, json)
Hash identifier: syg7/wUuDvAd/LlCWp6tGRxCfPE6WGFyV9FlK8xfavI=
Subject key identifier: EF:61:65:1B:6F:77:A3:76:03:F5:F6:6D:81:38:9D:EB:87:C5:12:9D
Authority key identifier: EF:A4:BF:9A:0D:2D:D5:74:46:12:6C:57:F3:9A:F1:08:38:E0:C6:75
Certificate issuer: /CN=EFA4BF9A0D2DD57446126C57F39AF10838E0C675
Certificate serial: 66998E9772E5F34DA708A339D7164297D671F278
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFA4BF9A0D2DD57446126C57F39AF10838E0C675.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/d3e27da9-e6e6-44a5-98f4-590eb5a1bd65/0/EFA4BF9A0D2DD57446126C57F39AF10838E0C675.mft
Manifest number: 01BA
Signing time: Sun 01 Feb 2026 11:31:15 +0000
Manifest this update: Sun 01 Feb 2026 11:26:15 +0000
Manifest next update: Wed 04 Feb 2026 15:35:15 +0000
Files and hashes: 1: EFA4BF9A0D2DD57446126C57F39AF10838E0C675.crl (hash: NyFPgrksV0ds9EO+yf7Epa4kTCYJYodowNjBYdpy3do=)
2: 3130332e3235332e3132372e302f32342d3234203d3e20313530393839.roa (hash: tiskF97htgFGOxcUjLLoNbBwjgTxxSKvgdsrNkZUkUk=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/d3e27da9-e6e6-44a5-98f4-590eb5a1bd65/0/EFA4BF9A0D2DD57446126C57F39AF10838E0C675.crl
rsync://repo-rpki.idnic.net/repo/d3e27da9-e6e6-44a5-98f4-590eb5a1bd65/0/EFA4BF9A0D2DD57446126C57F39AF10838E0C675.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFA4BF9A0D2DD57446126C57F39AF10838E0C675.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Feb 2026 15:35:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:99:8e:97:72:e5:f3:4d:a7:08:a3:39:d7:16:42:97:d6:71:f2:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFA4BF9A0D2DD57446126C57F39AF10838E0C675
Validity
Not Before: Feb 1 11:26:15 2026 GMT
Not After : Feb 4 15:35:15 2026 GMT
Subject: CN=EF61651B6F77A37603F5F66D81389DEB87C5129D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:48:23:fd:2e:6c:05:1d:a1:da:31:08:74:b5:
30:a4:d9:36:d9:6f:e0:dd:e2:44:22:09:c1:b2:fa:
e0:e3:6b:70:7e:68:02:6b:47:2b:6f:e1:e5:64:8f:
70:f1:1e:6b:b8:d1:1b:96:90:54:2a:49:54:8d:2f:
27:2d:63:0d:47:bd:9c:2c:9e:1f:96:88:86:4f:01:
53:56:69:8e:89:42:89:53:13:06:a4:81:48:b1:7c:
02:0f:5c:b3:af:83:8a:cb:5d:c6:0c:1e:32:58:3b:
86:30:77:f2:bc:0d:b0:81:3c:06:60:f2:ab:e0:91:
13:2c:b3:02:08:cf:02:d4:60:e9:37:4c:2d:71:f6:
2c:c0:6b:87:c2:b6:ac:4b:17:db:cb:3f:16:c8:cf:
07:e8:ed:26:72:ea:b9:97:22:d9:95:54:f1:e6:77:
0a:5b:3b:94:01:87:a6:12:3a:aa:e1:a5:08:f6:48:
8f:e3:53:5e:51:cd:f1:33:ea:03:20:f6:b2:f1:86:
48:60:8a:e2:3f:49:7c:f7:60:6f:82:98:d9:eb:31:
2a:b3:1d:3f:b7:0e:dc:35:14:25:44:6f:4a:db:bc:
c7:f4:25:c6:98:df:81:58:92:0e:2c:89:e2:f6:f9:
af:37:cd:cf:ec:d9:74:34:bb:0f:b0:4c:27:c0:94:
b9:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:61:65:1B:6F:77:A3:76:03:F5:F6:6D:81:38:9D:EB:87:C5:12:9D
X509v3 Authority Key Identifier:
keyid:EF:A4:BF:9A:0D:2D:D5:74:46:12:6C:57:F3:9A:F1:08:38:E0:C6:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/d3e27da9-e6e6-44a5-98f4-590eb5a1bd65/0/EFA4BF9A0D2DD57446126C57F39AF10838E0C675.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFA4BF9A0D2DD57446126C57F39AF10838E0C675.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d3e27da9-e6e6-44a5-98f4-590eb5a1bd65/0/EFA4BF9A0D2DD57446126C57F39AF10838E0C675.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:85:cd:b0:6e:66:fc:b1:24:7f:53:a4:07:64:01:2c:06:e2:
df:3e:74:dd:e2:22:a8:32:86:35:64:0d:6e:b0:63:c8:c3:7b:
f3:90:fd:3a:18:1c:61:4c:ed:d8:42:fb:98:9b:39:b2:d6:4a:
c3:96:f4:43:63:d3:97:9c:34:fa:2c:93:c2:21:5b:93:df:5e:
bd:e4:06:de:0b:c5:be:f9:0e:63:92:04:97:5f:5b:fd:06:68:
41:37:fc:99:cb:06:ae:e9:c6:68:9e:85:95:21:7f:10:5d:44:
59:dc:c8:98:ce:bf:a9:77:2e:aa:07:b0:90:c8:8a:2e:23:36:
6f:34:5a:9b:58:ef:0a:12:b6:2a:03:3a:ec:46:61:23:04:92:
cd:fb:da:15:78:6e:d4:82:9f:df:9b:07:02:73:63:19:9e:64:
8d:66:7d:e7:11:00:8a:e3:0b:8a:62:e6:c1:39:63:96:ed:c5:
c3:68:bb:db:69:68:0c:d6:1b:07:0b:28:05:ac:e5:50:0e:97:
22:36:f8:0d:e5:47:45:c7:e2:71:9b:3e:fb:23:7e:00:d9:9c:
c3:74:6d:63:80:40:6f:94:eb:f2:4e:f2:fc:8c:2a:24:92:ef:
0b:f4:91:e8:31:b2:e9:a5:73:3f:9a:de:d0:3b:68:ee:21:21:
2f:f5:a8:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 10:03:39 2026 by rpki-client