This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/fe1cbd79-8f26-4b0e-8b3b-ab9e9938fcae/0/EC973BE13EF324E7D59046CF7690A12F9DF12932.mft File: EC973BE13EF324E7D59046CF7690A12F9DF12932.mft (raw, json) Hash identifier: 2bDdD7/tzWO/rke35VNqePnXSNlG71yHcW4PaBupSnw= Subject key identifier: 50:19:92:6B:AD:CD:0C:4C:7C:F3:DF:4F:86:16:0E:B9:C1:97:3F:67 Authority key identifier: EC:97:3B:E1:3E:F3:24:E7:D5:90:46:CF:76:90:A1:2F:9D:F1:29:32 Certificate issuer: /CN=EC973BE13EF324E7D59046CF7690A12F9DF12932 Certificate serial: 1A029DCAD4454CFE8E0982F5CCACCABDA7535D3C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC973BE13EF324E7D59046CF7690A12F9DF12932.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fe1cbd79-8f26-4b0e-8b3b-ab9e9938fcae/0/EC973BE13EF324E7D59046CF7690A12F9DF12932.mft Manifest number: 026D Signing time: Wed 03 Dec 2025 04:51:24 +0000 Manifest this update: Wed 03 Dec 2025 04:46:24 +0000 Manifest next update: Sat 06 Dec 2025 09:30:24 +0000 Files and hashes: 1: EC973BE13EF324E7D59046CF7690A12F9DF12932.crl (hash: t8ed3e9A2oMzYQEc3KwzClPXhRxqgASMqR4Wm3O9XN4=) 2: 3130332e3138312e37362e302f32342d3234203d3e20313439333739.roa (hash: Fd7yVNtVPCM6piUfSXh9X3JKHqUDZdjbopzWmm3ObMk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fe1cbd79-8f26-4b0e-8b3b-ab9e9938fcae/0/EC973BE13EF324E7D59046CF7690A12F9DF12932.crl rsync://repo-rpki.idnic.net/repo/fe1cbd79-8f26-4b0e-8b3b-ab9e9938fcae/0/EC973BE13EF324E7D59046CF7690A12F9DF12932.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC973BE13EF324E7D59046CF7690A12F9DF12932.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 09:30:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:02:9d:ca:d4:45:4c:fe:8e:09:82:f5:cc:ac:ca:bd:a7:53:5d:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EC973BE13EF324E7D59046CF7690A12F9DF12932 Validity Not Before: Dec 3 04:46:24 2025 GMT Not After : Dec 6 09:30:24 2025 GMT Subject: CN=5019926BADCD0C4C7CF3DF4F86160EB9C1973F67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:a4:c0:83:54:7b:54:25:44:de:59:ac:81:97: 91:ba:9c:a6:69:ed:48:48:b3:f7:88:07:eb:e3:a7: c6:e1:5e:55:aa:67:c6:f5:ea:cc:17:9d:34:00:8d: 26:7a:3b:22:b4:c7:99:60:ae:30:ee:96:51:ab:53: c6:85:f7:d4:d4:51:8f:67:6f:79:13:22:a1:46:db: 23:37:c8:ed:92:b9:10:3e:4d:57:dd:19:27:b7:53: d0:38:c1:12:e9:67:80:5a:b1:d0:96:44:d9:59:fb: 02:ee:2a:92:16:b7:e5:10:29:c7:0a:ef:6e:79:74: 8f:8a:b0:b8:78:71:59:d2:a3:7e:fc:e0:7e:9b:24: 5c:4c:ee:a2:43:0d:6c:bc:78:68:07:65:b3:d1:28: 9a:60:82:66:e5:8d:69:a2:09:78:a0:fd:61:23:a3: ae:ef:ef:72:f4:18:42:f4:b4:2a:ee:51:8b:44:15: 8b:56:f3:0c:01:b1:91:d4:a7:0c:3c:6d:ea:e9:5e: 61:56:c5:7d:06:aa:f1:b7:ec:87:08:13:6f:37:93: bf:96:bf:04:2c:36:d7:b4:6d:f1:8c:6b:6d:28:b2: 89:ca:9b:27:a8:f6:da:02:26:a2:2c:e7:2b:cc:d7: 57:a0:67:48:f8:e5:7d:6d:18:3a:3a:eb:90:71:37: cb:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:19:92:6B:AD:CD:0C:4C:7C:F3:DF:4F:86:16:0E:B9:C1:97:3F:67 X509v3 Authority Key Identifier: keyid:EC:97:3B:E1:3E:F3:24:E7:D5:90:46:CF:76:90:A1:2F:9D:F1:29:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fe1cbd79-8f26-4b0e-8b3b-ab9e9938fcae/0/EC973BE13EF324E7D59046CF7690A12F9DF12932.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC973BE13EF324E7D59046CF7690A12F9DF12932.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fe1cbd79-8f26-4b0e-8b3b-ab9e9938fcae/0/EC973BE13EF324E7D59046CF7690A12F9DF12932.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:33:85:8d:59:d5:40:5d:05:9d:18:fe:ca:7e:6b:1c:cb:a7: 2c:38:3d:f0:41:dc:c9:56:17:95:4f:5f:1c:cf:cf:69:3b:ec: f4:a4:73:c9:ae:9c:ec:2d:d0:8c:a1:f6:8d:2f:83:9b:a0:4e: d8:d4:48:7e:f4:86:65:55:5b:61:6e:3b:94:3f:a7:b7:2b:d5: 76:12:bd:26:5d:23:86:28:4d:0b:85:e3:0d:44:8a:d0:da:f8: 9e:fd:90:06:77:6a:f7:2f:f3:af:02:f2:92:28:5a:99:00:fe: 1b:0f:ce:f6:35:23:d8:73:0a:a2:cf:88:c6:cb:2a:4f:59:2e: 50:55:68:03:3c:e8:9f:1a:6f:5b:fc:51:db:49:f0:83:44:b3: 7a:f6:61:d2:11:be:c2:3e:d9:7e:f4:91:42:de:43:e0:83:53: 73:51:7d:d1:22:bb:71:ab:f8:5e:6b:64:a3:b2:2a:2a:54:fc: a2:b0:8e:c9:af:cb:6a:7d:10:15:19:fc:4a:be:db:ff:b9:e0: 48:0a:64:88:e1:49:c8:3b:00:4c:3e:38:75:9e:f2:c2:4a:eb: e6:bc:6e:90:81:12:ad:10:29:82:e1:9b:0a:8b:ed:1d:a8:66: 17:85:b0:df:b6:0e:77:c7:c5:26:21:0f:00:35:04:47:86:5d: 65:ba:cd:9f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGgKdytRFTP6OCYL1zKzKvadTXTwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUM5NzNCRTEzRUYzMjRFN0Q1OTA0NkNGNzY5MEExMkY5 REYxMjkzMjAeFw0yNTEyMDMwNDQ2MjRaFw0yNTEyMDYwOTMwMjRaMDMxMTAvBgNV BAMTKDUwMTk5MjZCQURDRDBDNEM3Q0YzREY0Rjg2MTYwRUI5QzE5NzNGNjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUpMCDVHtUJUTeWayBl5G6nKZp 7UhIs/eIB+vjp8bhXlWqZ8b16swXnTQAjSZ6OyK0x5lgrjDullGrU8aF99TUUY9n b3kTIqFG2yM3yO2SuRA+TVfdGSe3U9A4wRLpZ4BasdCWRNlZ+wLuKpIWt+UQKccK 7255dI+KsLh4cVnSo3784H6bJFxM7qJDDWy8eGgHZbPRKJpggmbljWmiCXig/WEj o67v73L0GEL0tCruUYtEFYtW8wwBsZHUpww8berpXmFWxX0GqvG37IcIE283k7+W vwQsNte0bfGMa20osonKmyeo9toCJqIs5yvM11egZ0j45X1tGDo665BxN8tvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUBmSa63NDEx8899PhhYOucGXP2cwHwYDVR0j BBgwFoAU7Jc74T7zJOfVkEbPdpChL53xKTIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ZTFjYmQ3OS04ZjI2LTRiMGUtOGIzYi1hYjllOTkzOGZjYWUvMC9FQzk3M0JFMTNF RjMyNEU3RDU5MDQ2Q0Y3NjkwQTEyRjlERjEyOTMyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUM5NzNCRTEzRUYzMjRFN0Q1OTA0NkNGNzY5MEExMkY5REYx MjkzMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmUxY2JkNzktOGYyNi00YjBlLThi M2ItYWI5ZTk5MzhmY2FlLzAvRUM5NzNCRTEzRUYzMjRFN0Q1OTA0NkNGNzY5MEEx MkY5REYxMjkzMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIQzhY1Z1UBdBZ0Y/sp+axzLpyw4PfBB3MlW F5VPXxzPz2k77PSkc8munOwt0Iyh9o0vg5ugTtjUSH70hmVVW2FuO5Q/p7cr1XYS vSZdI4YoTQuF4w1EitDa+J79kAZ3avcv868C8pIoWpkA/hsPzvY1I9hzCqLPiMbL Kk9ZLlBVaAM86J8ab1v8UdtJ8INEs3r2YdIRvsI+2X70kULeQ+CDU3NRfdEiu3Gr +F5rZKOyKipU/KKwjsmvy2p9EBUZ/Eq+2/+54EgKZIjhScg7AEw+OHWe8sJK6+a8 bpCBEq0QKYLhmwqL7R2oZheFsN+2DnfHxSYhDwA1BEeGXWW6zZ8= -----END CERTIFICATE-----Generated at Wed Dec 3 14:42:40 2025 by rpki-client