This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/0/EF7CA82C5B45FD412DE892CB6DA7A8CA15C85B17.mft File: EF7CA82C5B45FD412DE892CB6DA7A8CA15C85B17.mft (raw, json) Hash identifier: 1QSHBqVVFe0QFR9LTifow5DQ4hKBcizwzyup2cGYA+Q= Subject key identifier: CD:5E:1F:AE:15:1F:67:12:8B:DA:CA:92:A5:C4:6C:68:87:9D:8C:89 Authority key identifier: EF:7C:A8:2C:5B:45:FD:41:2D:E8:92:CB:6D:A7:A8:CA:15:C8:5B:17 Certificate issuer: /CN=EF7CA82C5B45FD412DE892CB6DA7A8CA15C85B17 Certificate serial: 205D21178ECEDF32883B33B26A00F981D35AC5B7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/EF7CA82C5B45FD412DE892CB6DA7A8CA15C85B17.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/0/EF7CA82C5B45FD412DE892CB6DA7A8CA15C85B17.mft Manifest number: F1 Signing time: Tue 02 Dec 2025 09:51:26 +0000 Manifest this update: Tue 02 Dec 2025 09:46:26 +0000 Manifest next update: Fri 05 Dec 2025 16:04:26 +0000 Files and hashes: 1: EF7CA82C5B45FD412DE892CB6DA7A8CA15C85B17.crl (hash: hUnUICzb4OA/XxAkxOirJi7MZWCAhKZ08EBrheX+qdU=) 2: 3135372e36362e38362e302f32332d3234203d3e20313532343432.roa (hash: yvjq0+mX9UVVGH4hrgAy0kHkjD5STbq2ZndxXPg4Qok=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/0/EF7CA82C5B45FD412DE892CB6DA7A8CA15C85B17.crl rsync://repo-rpki.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/0/EF7CA82C5B45FD412DE892CB6DA7A8CA15C85B17.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/EF7CA82C5B45FD412DE892CB6DA7A8CA15C85B17.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 16:04:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:5d:21:17:8e:ce:df:32:88:3b:33:b2:6a:00:f9:81:d3:5a:c5:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EF7CA82C5B45FD412DE892CB6DA7A8CA15C85B17 Validity Not Before: Dec 2 09:46:26 2025 GMT Not After : Dec 5 16:04:26 2025 GMT Subject: CN=CD5E1FAE151F67128BDACA92A5C46C68879D8C89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:9d:19:8c:ca:fe:3d:eb:e1:95:a7:e9:c2:96: 2c:16:8b:3a:53:87:b5:13:1e:0a:a3:bb:8a:7b:25: 2d:e7:e7:c7:32:f3:d6:ca:b7:d9:eb:6b:35:01:99: 20:59:dd:53:1f:9d:80:d4:53:58:30:8c:73:38:b0: 0b:d1:e3:0d:25:e6:eb:d9:bd:66:8c:ce:55:1a:78: 1a:68:b5:6a:dd:1e:08:58:95:2b:b7:60:78:72:6a: ba:a9:7a:45:70:2e:19:e1:33:2b:9c:da:e6:71:9d: 8b:4e:bc:7f:84:be:00:15:60:1a:1a:51:d9:9d:82: c7:21:4f:3d:7d:fa:d4:d2:d2:ee:52:96:9f:7b:30: 7e:5c:e7:dc:16:75:1c:f4:55:f0:1a:5c:f5:3e:bc: fa:2b:98:fc:3c:11:d9:5c:79:fc:6e:78:68:fc:ff: 17:06:a0:9b:6b:5b:d0:e4:9f:57:28:8c:43:1e:7e: a2:10:99:7c:30:4d:ad:9d:83:aa:98:d6:c6:3c:f7: 8d:ad:84:81:79:67:07:4f:2d:90:33:f2:f6:d7:8b: 10:51:aa:e6:a8:b2:23:07:bd:62:6d:98:43:e9:b3: bd:84:ba:75:0e:88:3a:5c:86:67:e0:f3:9b:34:bf: 46:2d:53:44:95:7c:0b:02:10:b0:5e:34:3a:02:f0: 38:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:5E:1F:AE:15:1F:67:12:8B:DA:CA:92:A5:C4:6C:68:87:9D:8C:89 X509v3 Authority Key Identifier: keyid:EF:7C:A8:2C:5B:45:FD:41:2D:E8:92:CB:6D:A7:A8:CA:15:C8:5B:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/0/EF7CA82C5B45FD412DE892CB6DA7A8CA15C85B17.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/EF7CA82C5B45FD412DE892CB6DA7A8CA15C85B17.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/0/EF7CA82C5B45FD412DE892CB6DA7A8CA15C85B17.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:9e:0b:58:4b:e9:f2:b9:ce:45:3b:90:62:da:28:a2:79:79: 41:29:bb:23:1d:7b:9b:a3:34:f5:0a:d3:f7:fe:ef:17:31:f2: c0:79:c4:63:ef:37:64:55:16:72:12:50:19:6e:1e:54:ed:16: ef:cb:7a:7e:6e:02:03:1d:3e:d2:9c:17:2d:bc:d7:65:d3:91: 91:cd:20:42:c2:e4:14:c9:f7:b7:36:28:d9:90:de:c2:56:5d: b8:8d:df:60:e2:a6:f8:f4:3d:03:fe:b0:0d:68:49:0e:a9:42: 08:8a:0e:24:ae:1e:db:2c:a0:43:bb:a3:4c:1b:53:89:cd:19: 95:a5:34:3b:9b:f6:19:51:e4:8b:4c:7a:04:e7:ae:5b:e4:5e: dd:aa:0d:4a:91:ee:c6:a5:d1:cd:7f:af:0d:d8:e4:84:eb:91: 11:22:4f:22:dc:a9:de:fc:c7:52:47:7b:f9:dd:52:cb:38:97: 36:de:9c:ae:1d:b5:fd:75:ee:3d:fe:06:d4:92:90:51:41:6c: 8e:91:b0:82:e7:f9:e8:11:28:5f:24:db:49:47:a7:61:55:a6: cb:01:d0:f1:2d:aa:69:71:51:b4:21:59:b7:ed:bc:b3:ea:3f: 6c:96:e9:9c:d5:a8:15:03:14:d8:75:24:76:f5:61:30:7b:9f: a2:65:5a:f1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIF0hF47O3zKIOzOyagD5gdNaxbcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUY3Q0E4MkM1QjQ1RkQ0MTJERTg5MkNCNkRBN0E4Q0Ex NUM4NUIxNzAeFw0yNTEyMDIwOTQ2MjZaFw0yNTEyMDUxNjA0MjZaMDMxMTAvBgNV BAMTKENENUUxRkFFMTUxRjY3MTI4QkRBQ0E5MkE1QzQ2QzY4ODc5RDhDODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvnRmMyv496+GVp+nCliwWizpT h7UTHgqju4p7JS3n58cy89bKt9nrazUBmSBZ3VMfnYDUU1gwjHM4sAvR4w0l5uvZ vWaMzlUaeBpotWrdHghYlSu3YHhyarqpekVwLhnhMyuc2uZxnYtOvH+EvgAVYBoa UdmdgschTz19+tTS0u5Slp97MH5c59wWdRz0VfAaXPU+vPormPw8EdlcefxueGj8 /xcGoJtrW9Dkn1cojEMefqIQmXwwTa2dg6qY1sY8942thIF5ZwdPLZAz8vbXixBR quaosiMHvWJtmEPps72EunUOiDpchmfg85s0v0YtU0SVfAsCELBeNDoC8DixAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzV4frhUfZxKL2sqSpcRsaIedjIkwHwYDVR0j BBgwFoAU73yoLFtF/UEt6JLLbaeoyhXIWxcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ODdkZDU5Ny00MGNkLTQwOWItYjNjNS0yODUyY2UwMTQ4ODkvMC9FRjdDQTgyQzVC NDVGRDQxMkRFODkyQ0I2REE3QThDQTE1Qzg1QjE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRUY3Q0E4MkM1QjQ1RkQ0MTJERTg5MkNCNkRBN0E4Q0ExNUM4 NUIxNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjg3ZGQ1OTctNDBjZC00MDliLWIz YzUtMjg1MmNlMDE0ODg5LzAvRUY3Q0E4MkM1QjQ1RkQ0MTJERTg5MkNCNkRBN0E4 Q0ExNUM4NUIxNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFueC1hL6fK5zkU7kGLaKKJ5eUEpuyMde5uj NPUK0/f+7xcx8sB5xGPvN2RVFnISUBluHlTtFu/Len5uAgMdPtKcFy2812XTkZHN IELC5BTJ97c2KNmQ3sJWXbiN32Dipvj0PQP+sA1oSQ6pQgiKDiSuHtssoEO7o0wb U4nNGZWlNDub9hlR5ItMegTnrlvkXt2qDUqR7sal0c1/rw3Y5ITrkREiTyLcqd78 x1JHe/ndUss4lzbenK4dtf117j3+BtSSkFFBbI6RsILn+egRKF8k20lHp2FVpssB 0PEtqmlxUbQhWbftvLPqP2yW6ZzVqBUDFNh1JHb1YTB7n6JlWvE= -----END CERTIFICATE-----Generated at Wed Dec 3 18:47:09 2025 by rpki-client