This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/fc1e865f-d5a1-4af7-a719-0c26e74fcd61/0/EF805F3F00FD5F5F0991E46020BBCFA4C16B8165.mft
File: EF805F3F00FD5F5F0991E46020BBCFA4C16B8165.mft (raw, json)
Hash identifier: OfGbEmP30j6iMwVer8JqgRn4X6SSdwUzf3zEntbQ8mU=
Subject key identifier: 65:56:F2:9E:CB:CD:EF:8D:25:89:4F:39:B9:E4:D7:C9:C9:2D:E8:A2
Authority key identifier: EF:80:5F:3F:00:FD:5F:5F:09:91:E4:60:20:BB:CF:A4:C1:6B:81:65
Certificate issuer: /CN=EF805F3F00FD5F5F0991E46020BBCFA4C16B8165
Certificate serial: 7BD2F85498E462025463D8F329F566B21E53AC5D
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EF805F3F00FD5F5F0991E46020BBCFA4C16B8165.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/fc1e865f-d5a1-4af7-a719-0c26e74fcd61/0/EF805F3F00FD5F5F0991E46020BBCFA4C16B8165.mft
Manifest number: 024F
Signing time: Mon 01 Dec 2025 19:21:40 +0000
Manifest this update: Mon 01 Dec 2025 19:16:40 +0000
Manifest next update: Fri 05 Dec 2025 00:11:40 +0000
Files and hashes: 1: 3130332e3138362e32362e302f32332d3234203d3e20313439363934.roa (hash: tzus+b1Dyr0i8p6BXNzRg2JRJ5sSDDozsutDjca9Txw=)
2: EF805F3F00FD5F5F0991E46020BBCFA4C16B8165.crl (hash: nbrFIbcx/01Gce2V6H6kIihAf6uxZAFly3xEzojL2XQ=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/fc1e865f-d5a1-4af7-a719-0c26e74fcd61/0/EF805F3F00FD5F5F0991E46020BBCFA4C16B8165.crl
rsync://repo-rpki.idnic.net/repo/fc1e865f-d5a1-4af7-a719-0c26e74fcd61/0/EF805F3F00FD5F5F0991E46020BBCFA4C16B8165.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EF805F3F00FD5F5F0991E46020BBCFA4C16B8165.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 05 Dec 2025 00:11:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:d2:f8:54:98:e4:62:02:54:63:d8:f3:29:f5:66:b2:1e:53:ac:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EF805F3F00FD5F5F0991E46020BBCFA4C16B8165
Validity
Not Before: Dec 1 19:16:40 2025 GMT
Not After : Dec 5 00:11:40 2025 GMT
Subject: CN=6556F29ECBCDEF8D25894F39B9E4D7C9C92DE8A2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:fd:d0:3f:0e:d0:87:9d:0c:3b:56:b6:ba:21:
1e:bf:50:35:e3:25:56:86:3e:a4:31:25:55:13:77:
6c:91:71:56:b5:18:a1:bc:a1:6b:e8:60:21:36:f3:
1e:d0:44:99:0e:e8:a8:39:9e:fb:92:3d:60:c4:52:
f4:d8:38:97:95:dd:63:04:b1:fb:33:05:38:6f:15:
23:75:84:f7:7e:ae:6f:0f:81:aa:83:0b:04:d6:a1:
5e:fc:b9:9f:50:4c:cb:94:db:6f:7b:e8:5c:76:44:
39:f6:df:fb:b8:1c:17:45:7d:55:1d:60:73:55:15:
b0:e0:c1:38:7f:61:c7:ac:dc:07:ce:9a:fb:71:3a:
a9:5f:41:fe:51:f0:9e:20:a7:59:b4:9d:c4:6e:28:
70:71:5f:c4:a2:5f:4c:3a:ee:19:b5:f2:9e:0a:b2:
f6:ec:ef:37:98:56:eb:9b:8e:f5:e0:26:11:e7:bb:
fd:02:51:fe:12:e2:fa:e6:c0:f9:14:f9:23:f1:9f:
6c:ea:ba:e1:45:85:73:b9:cd:77:d0:74:9a:9a:20:
5f:6a:4a:6d:2e:40:5e:30:a8:d9:17:21:b1:4f:82:
49:aa:3d:fc:7f:c5:3d:07:40:cd:fb:83:5e:7f:81:
32:45:91:d7:b2:7c:c2:04:1a:c7:de:e7:2d:42:ed:
ff:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:56:F2:9E:CB:CD:EF:8D:25:89:4F:39:B9:E4:D7:C9:C9:2D:E8:A2
X509v3 Authority Key Identifier:
keyid:EF:80:5F:3F:00:FD:5F:5F:09:91:E4:60:20:BB:CF:A4:C1:6B:81:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/fc1e865f-d5a1-4af7-a719-0c26e74fcd61/0/EF805F3F00FD5F5F0991E46020BBCFA4C16B8165.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EF805F3F00FD5F5F0991E46020BBCFA4C16B8165.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fc1e865f-d5a1-4af7-a719-0c26e74fcd61/0/EF805F3F00FD5F5F0991E46020BBCFA4C16B8165.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:00:38:a0:6f:56:16:1f:a1:59:81:f4:d8:4b:6f:11:e9:0d:
9e:b6:5d:22:ea:65:4b:4a:12:66:0d:11:a3:87:d0:31:66:ac:
26:31:39:33:96:8f:df:fe:31:f4:9c:07:a9:05:39:ad:69:06:
1e:8f:78:14:8a:0b:84:ec:d6:ea:d0:ef:6c:dc:a4:96:29:87:
9d:ac:84:79:9d:85:d4:aa:47:37:fe:94:01:3e:b0:c6:d5:36:
e4:5b:3e:22:b1:c8:29:cf:13:55:e8:9a:73:5b:8e:2c:cd:f8:
0b:93:95:ec:51:0e:8b:5e:71:50:88:bc:94:96:8d:f9:72:63:
8c:98:b4:4b:33:9b:b2:32:45:7b:f2:fe:ac:43:7d:7b:6e:b6:
4d:93:58:e6:22:98:b5:98:b9:c4:9a:65:0b:c5:4d:f0:1c:ed:
55:ab:15:7d:ab:2e:7d:a9:eb:06:df:ee:3a:6f:44:45:76:c2:
85:cc:bc:6e:91:98:37:90:6b:d9:90:16:97:bb:74:b6:14:2b:
53:5d:64:fb:66:a3:e8:80:9c:06:e5:08:67:a9:33:e7:2c:69:
b5:6e:52:de:ca:e0:70:9c:0a:18:77:eb:4b:29:5a:3d:7c:fa:
d0:87:be:48:12:44:91:bc:34:50:f9:cf:36:58:7a:55:43:cb:
67:22:e8:10
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUe9L4VJjkYgJUY9jzKfVmsh5TrF0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUY4MDVGM0YwMEZENUY1RjA5OTFFNDYwMjBCQkNGQTRD
MTZCODE2NTAeFw0yNTEyMDExOTE2NDBaFw0yNTEyMDUwMDExNDBaMDMxMTAvBgNV
BAMTKDY1NTZGMjlFQ0JDREVGOEQyNTg5NEYzOUI5RTREN0M5QzkyREU4QTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCa/dA/DtCHnQw7Vra6IR6/UDXj
JVaGPqQxJVUTd2yRcVa1GKG8oWvoYCE28x7QRJkO6Kg5nvuSPWDEUvTYOJeV3WME
sfszBThvFSN1hPd+rm8PgaqDCwTWoV78uZ9QTMuU22976Fx2RDn23/u4HBdFfVUd
YHNVFbDgwTh/Yces3AfOmvtxOqlfQf5R8J4gp1m0ncRuKHBxX8SiX0w67hm18p4K
svbs7zeYVuubjvXgJhHnu/0CUf4S4vrmwPkU+SPxn2zquuFFhXO5zXfQdJqaIF9q
Sm0uQF4wqNkXIbFPgkmqPfx/xT0HQM37g15/gTJFkdeyfMIEGsfe5y1C7f8hAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUZVbynsvN740liU85ueTXyckt6KIwHwYDVR0j
BBgwFoAU74BfPwD9X18JkeRgILvPpMFrgWUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m
YzFlODY1Zi1kNWExLTRhZjctYTcxOS0wYzI2ZTc0ZmNkNjEvMC9FRjgwNUYzRjAw
RkQ1RjVGMDk5MUU0NjAyMEJCQ0ZBNEMxNkI4MTY1LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRUY4MDVGM0YwMEZENUY1RjA5OTFFNDYwMjBCQkNGQTRDMTZC
ODE2NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmMxZTg2NWYtZDVhMS00YWY3LWE3
MTktMGMyNmU3NGZjZDYxLzAvRUY4MDVGM0YwMEZENUY1RjA5OTFFNDYwMjBCQkNG
QTRDMTZCODE2NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAIkAOKBvVhYfoVmB9NhLbxHpDZ62XSLqZUtK
EmYNEaOH0DFmrCYxOTOWj9/+MfScB6kFOa1pBh6PeBSKC4Ts1urQ72zcpJYph52s
hHmdhdSqRzf+lAE+sMbVNuRbPiKxyCnPE1XomnNbjizN+AuTlexRDotecVCIvJSW
jflyY4yYtEszm7IyRXvy/qxDfXtutk2TWOYimLWYucSaZQvFTfAc7VWrFX2rLn2p
6wbf7jpvREV2woXMvG6RmDeQa9mQFpe7dLYUK1NdZPtmo+iAnAblCGepM+csabVu
Ut7K4HCcChh360spWj18+tCHvkgSRJG8NFD5zzZYelVDy2ci6BA=
-----END CERTIFICATE-----
Generated at Wed Dec 3 14:42:27 2025 by rpki-client