This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/fe1cbd79-8f26-4b0e-8b3b-ab9e9938fcae/0/EC973BE13EF324E7D59046CF7690A12F9DF12932.mft File: EC973BE13EF324E7D59046CF7690A12F9DF12932.mft (raw, json) Hash identifier: XJUyX8uE7gd1pK03H9NtM5UsiM27O3hUp2cBTJ8tNl4= Subject key identifier: 05:D8:07:E4:88:3B:2B:62:04:DD:DB:C1:7B:70:5C:F7:46:69:2E:D7 Authority key identifier: EC:97:3B:E1:3E:F3:24:E7:D5:90:46:CF:76:90:A1:2F:9D:F1:29:32 Certificate issuer: /CN=EC973BE13EF324E7D59046CF7690A12F9DF12932 Certificate serial: 3D6CE76B67C6AE0DA7DA05BBE898C4F4843C513B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC973BE13EF324E7D59046CF7690A12F9DF12932.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fe1cbd79-8f26-4b0e-8b3b-ab9e9938fcae/0/EC973BE13EF324E7D59046CF7690A12F9DF12932.mft Manifest number: 0271 Signing time: Fri 12 Dec 2025 01:01:23 +0000 Manifest this update: Fri 12 Dec 2025 00:56:23 +0000 Manifest next update: Mon 15 Dec 2025 01:40:23 +0000 Files and hashes: 1: 3130332e3138312e37362e302f32342d3234203d3e20313439333739.roa (hash: Fd7yVNtVPCM6piUfSXh9X3JKHqUDZdjbopzWmm3ObMk=) 2: EC973BE13EF324E7D59046CF7690A12F9DF12932.crl (hash: z/VoM7Ze7n8IAS5mejm3yU0MIz5RD8phlSfWLV1eSkI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fe1cbd79-8f26-4b0e-8b3b-ab9e9938fcae/0/EC973BE13EF324E7D59046CF7690A12F9DF12932.crl rsync://repo-rpki.idnic.net/repo/fe1cbd79-8f26-4b0e-8b3b-ab9e9938fcae/0/EC973BE13EF324E7D59046CF7690A12F9DF12932.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC973BE13EF324E7D59046CF7690A12F9DF12932.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Dec 2025 01:40:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:6c:e7:6b:67:c6:ae:0d:a7:da:05:bb:e8:98:c4:f4:84:3c:51:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EC973BE13EF324E7D59046CF7690A12F9DF12932 Validity Not Before: Dec 12 00:56:23 2025 GMT Not After : Dec 15 01:40:23 2025 GMT Subject: CN=05D807E4883B2B6204DDDBC17B705CF746692ED7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:32:74:b1:dd:de:85:9c:3f:29:5e:d4:13:93: ee:4e:0b:15:62:6c:13:1b:28:1f:f3:38:e3:59:ad: dc:c2:4c:12:ce:a1:5a:05:e4:d2:b7:8d:77:90:16: 69:36:5a:62:64:60:4e:d7:f2:26:19:11:28:ad:33: 62:93:af:b5:c7:c6:5e:0d:55:27:92:4d:2d:41:92: 94:96:27:6c:d9:b2:f6:70:64:cd:0c:4b:f5:ea:35: de:54:7d:11:4b:c7:0a:94:df:40:e2:e7:de:72:f2: 6c:02:68:f3:f3:ab:6b:46:6a:61:e9:39:42:a0:3c: 3c:74:f0:fc:e3:5b:d0:bf:c4:c7:02:42:49:be:ee: ce:e6:4e:35:be:93:04:57:56:b5:8a:d8:c3:e8:92: 69:0f:61:c6:24:df:92:ff:9d:82:1f:ad:ff:1a:49: 48:51:91:70:af:5e:f8:df:3e:1c:23:f9:56:ff:2d: d3:90:c4:fc:6e:b0:6f:50:15:25:fe:4e:06:c4:ff: 2f:a4:a5:06:0e:9a:b2:b0:d3:14:3c:cc:50:00:45: 7e:5d:13:fe:85:6a:fc:f1:84:29:12:c5:81:b2:31: 4a:6f:9a:6a:3d:45:f2:49:95:62:c9:db:96:ec:21: f7:d2:87:d6:5b:99:6f:ff:44:e2:6d:73:7c:ca:92: b4:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:D8:07:E4:88:3B:2B:62:04:DD:DB:C1:7B:70:5C:F7:46:69:2E:D7 X509v3 Authority Key Identifier: keyid:EC:97:3B:E1:3E:F3:24:E7:D5:90:46:CF:76:90:A1:2F:9D:F1:29:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fe1cbd79-8f26-4b0e-8b3b-ab9e9938fcae/0/EC973BE13EF324E7D59046CF7690A12F9DF12932.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC973BE13EF324E7D59046CF7690A12F9DF12932.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fe1cbd79-8f26-4b0e-8b3b-ab9e9938fcae/0/EC973BE13EF324E7D59046CF7690A12F9DF12932.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:47:d3:f0:c7:c4:1f:a6:a5:69:f7:0e:af:b3:cd:bc:93:d6: e5:52:46:c0:95:eb:b1:57:b0:76:ca:95:1e:de:c8:b8:3b:84: 3c:de:3c:2e:70:f8:16:ad:0b:2b:c5:38:ad:1f:66:9f:7a:10: e0:4a:84:27:13:95:2a:0a:72:43:6f:27:eb:d9:50:10:68:2b: ae:cd:1f:a8:8c:ea:9c:97:fa:78:77:2c:9a:fe:58:10:fb:a5: d4:10:54:4c:f6:a8:bb:c3:b2:bc:d9:36:27:41:aa:a4:eb:8b: 8f:16:90:3f:52:13:76:75:d7:3a:55:ce:e8:01:b3:f1:2b:51: aa:3c:9d:df:d2:52:45:7a:ae:f1:76:b9:7b:5f:66:63:2f:51: 1c:59:57:ec:79:a9:06:c2:2c:e8:06:00:69:22:99:fe:61:4f: 6c:8e:a7:7f:83:00:66:ed:94:f6:cb:1f:1e:1c:3a:f8:ee:85: 21:ee:b5:5d:99:5a:34:43:1f:bd:f6:6c:4b:1a:e6:03:f2:79: af:e6:fb:88:e1:40:51:59:d3:4b:74:b3:65:40:1c:72:4e:58: 2a:b9:3a:e3:81:77:0a:db:a8:0f:46:d7:fd:57:71:44:5d:8a: a6:22:75:5f:3f:bf:e4:7e:a3:75:da:6c:6b:74:83:86:37:b7: ff:26:6c:27 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPWzna2fGrg2n2gW76JjE9IQ8UTswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUM5NzNCRTEzRUYzMjRFN0Q1OTA0NkNGNzY5MEExMkY5 REYxMjkzMjAeFw0yNTEyMTIwMDU2MjNaFw0yNTEyMTUwMTQwMjNaMDMxMTAvBgNV BAMTKDA1RDgwN0U0ODgzQjJCNjIwNEREREJDMTdCNzA1Q0Y3NDY2OTJFRDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmMnSx3d6FnD8pXtQTk+5OCxVi bBMbKB/zOONZrdzCTBLOoVoF5NK3jXeQFmk2WmJkYE7X8iYZESitM2KTr7XHxl4N VSeSTS1BkpSWJ2zZsvZwZM0MS/XqNd5UfRFLxwqU30Di595y8mwCaPPzq2tGamHp OUKgPDx08PzjW9C/xMcCQkm+7s7mTjW+kwRXVrWK2MPokmkPYcYk35L/nYIfrf8a SUhRkXCvXvjfPhwj+Vb/LdOQxPxusG9QFSX+TgbE/y+kpQYOmrKw0xQ8zFAARX5d E/6FavzxhCkSxYGyMUpvmmo9RfJJlWLJ25bsIffSh9ZbmW//ROJtc3zKkrSdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBdgH5Ig7K2IE3dvBe3Bc90ZpLtcwHwYDVR0j BBgwFoAU7Jc74T7zJOfVkEbPdpChL53xKTIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ZTFjYmQ3OS04ZjI2LTRiMGUtOGIzYi1hYjllOTkzOGZjYWUvMC9FQzk3M0JFMTNF RjMyNEU3RDU5MDQ2Q0Y3NjkwQTEyRjlERjEyOTMyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUM5NzNCRTEzRUYzMjRFN0Q1OTA0NkNGNzY5MEExMkY5REYx MjkzMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmUxY2JkNzktOGYyNi00YjBlLThi M2ItYWI5ZTk5MzhmY2FlLzAvRUM5NzNCRTEzRUYzMjRFN0Q1OTA0NkNGNzY5MEEx MkY5REYxMjkzMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJxH0/DHxB+mpWn3Dq+zzbyT1uVSRsCV67FX sHbKlR7eyLg7hDzePC5w+BatCyvFOK0fZp96EOBKhCcTlSoKckNvJ+vZUBBoK67N H6iM6pyX+nh3LJr+WBD7pdQQVEz2qLvDsrzZNidBqqTri48WkD9SE3Z11zpVzugB s/ErUao8nd/SUkV6rvF2uXtfZmMvURxZV+x5qQbCLOgGAGkimf5hT2yOp3+DAGbt lPbLHx4cOvjuhSHutV2ZWjRDH732bEsa5gPyea/m+4jhQFFZ00t0s2VAHHJOWCq5 OuOBdwrbqA9G1/1XcURdiqYidV8/v+R+o3XabGt0g4Y3t/8mbCc= -----END CERTIFICATE-----Generated at Sun Dec 14 01:56:37 2025 by rpki-client