This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/0/EEC1A7BF2D95D0BAFE37105E4BB1BB23601DD1DB.mft File: EEC1A7BF2D95D0BAFE37105E4BB1BB23601DD1DB.mft (raw, json) Hash identifier: rRXBa3Sw9u4WT2Aj+J59rf67T+Hai1pXpXCM1RF6/v4= Subject key identifier: 41:30:FA:73:D5:4F:18:48:A3:BA:C0:61:20:FF:CE:74:BC:A0:9B:E1 Authority key identifier: EE:C1:A7:BF:2D:95:D0:BA:FE:37:10:5E:4B:B1:BB:23:60:1D:D1:DB Certificate issuer: /CN=EEC1A7BF2D95D0BAFE37105E4BB1BB23601DD1DB Certificate serial: 28918E54E3B8EA7D10EA6104C4EA9010E1C0DC56 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/EEC1A7BF2D95D0BAFE37105E4BB1BB23601DD1DB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/0/EEC1A7BF2D95D0BAFE37105E4BB1BB23601DD1DB.mft Manifest number: ED Signing time: Thu 25 Dec 2025 18:22:22 +0000 Manifest this update: Thu 25 Dec 2025 18:17:22 +0000 Manifest next update: Sun 28 Dec 2025 22:06:22 +0000 Files and hashes: 1: 3136302e32352e34352e302f32342d3234203d3e20313533303639.roa (hash: pjrXRUj5r2IszWCXojX+FWGkandw2VMiyslpGWMGbUA=) 2: EEC1A7BF2D95D0BAFE37105E4BB1BB23601DD1DB.crl (hash: yE7n5FnVP5SLBlvzVb3X274RXT6FrzRzuSOiKTKO7eI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/0/EEC1A7BF2D95D0BAFE37105E4BB1BB23601DD1DB.crl rsync://repo-rpki.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/0/EEC1A7BF2D95D0BAFE37105E4BB1BB23601DD1DB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/EEC1A7BF2D95D0BAFE37105E4BB1BB23601DD1DB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 21:07:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:91:8e:54:e3:b8:ea:7d:10:ea:61:04:c4:ea:90:10:e1:c0:dc:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EEC1A7BF2D95D0BAFE37105E4BB1BB23601DD1DB Validity Not Before: Dec 25 18:17:22 2025 GMT Not After : Dec 28 22:06:22 2025 GMT Subject: CN=4130FA73D54F1848A3BAC06120FFCE74BCA09BE1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:10:be:e2:42:18:b4:c7:67:2e:6c:27:18:8b: 00:01:7c:be:58:fa:19:ae:0f:46:18:84:ae:f7:d1: bd:ce:8b:c9:bb:34:3f:1c:16:da:b5:ac:b2:6a:0e: 8b:64:c1:d9:fe:8c:a4:a2:36:2f:db:48:0e:91:d1: 4e:c8:8f:c1:c3:d0:60:b9:1e:8a:b8:b6:71:f3:31: c8:46:10:05:8a:a9:8a:95:aa:aa:ac:66:35:d8:1d: c7:01:cd:3d:ec:f6:7e:f2:74:6b:4f:e2:0e:a7:02: e0:44:f1:0d:08:17:d5:9b:27:43:d5:9f:55:61:b4: 24:0e:af:e2:2f:09:00:e6:42:16:21:91:87:34:9c: f3:c9:ec:0d:ab:f6:0f:5b:80:01:21:48:9a:38:a0: 61:f8:e3:d4:70:cc:73:5c:a4:af:27:e4:1b:76:a2: f9:72:11:0d:d7:a7:63:58:be:20:1b:b5:91:04:42: 9a:df:62:fb:ae:31:74:00:54:57:6c:e3:f1:47:90: 8a:9d:61:8b:7e:71:a6:22:a8:7a:ab:2c:ad:0f:2d: cb:fc:40:4c:71:af:8d:51:dd:90:d6:38:2d:f2:fa: 7f:26:1d:91:74:96:31:6a:92:14:32:82:38:61:1d: f4:5e:e7:a5:3a:98:f9:d6:f7:f7:3b:b6:c2:84:7c: 58:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:30:FA:73:D5:4F:18:48:A3:BA:C0:61:20:FF:CE:74:BC:A0:9B:E1 X509v3 Authority Key Identifier: keyid:EE:C1:A7:BF:2D:95:D0:BA:FE:37:10:5E:4B:B1:BB:23:60:1D:D1:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/0/EEC1A7BF2D95D0BAFE37105E4BB1BB23601DD1DB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/EEC1A7BF2D95D0BAFE37105E4BB1BB23601DD1DB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/0/EEC1A7BF2D95D0BAFE37105E4BB1BB23601DD1DB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:fb:5a:e6:15:77:08:9d:41:a3:07:c6:2f:84:d9:7d:62:04: 3b:1f:00:d5:27:d8:50:73:dc:be:1e:cd:d2:ad:72:a3:a2:50: 62:d9:f5:3e:ae:23:c9:f3:ad:55:73:02:0e:8a:ff:79:14:d6: ee:72:2e:67:eb:ff:a7:e1:12:a5:f5:db:00:e6:ac:df:7f:25: b0:7f:52:56:0e:1e:aa:79:57:1c:b1:30:47:5e:6e:20:39:b0: 3b:ad:7c:f6:55:08:04:2e:40:be:d4:87:f0:b3:1e:91:db:3a: 25:fb:11:10:93:50:d2:54:28:46:18:4c:f7:ec:2f:a6:40:1c: 71:7a:0f:40:ed:ab:19:81:4f:f5:e7:82:bd:ad:85:7b:48:02: 20:ac:82:ff:50:58:df:77:09:01:db:4d:4e:55:94:aa:f0:ca: 68:d9:a2:df:f0:36:99:14:19:05:b2:ea:1b:c7:e3:9a:d5:d2: 8e:8a:5e:cd:bb:3c:a8:f7:4d:4c:2c:40:25:fe:65:9f:e8:b7: 22:63:f6:8a:df:b7:03:3a:07:3e:14:78:3d:4e:25:90:dc:0b: 63:0d:75:cc:57:6d:b0:d1:03:d5:f9:b1:87:48:e3:8b:7f:9d: 3c:e7:d1:08:5c:3c:ac:43:c7:40:0e:cc:b2:6b:f8:a6:4d:a9: 55:ba:91:9c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKJGOVOO46n0Q6mEExOqQEOHA3FYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUVDMUE3QkYyRDk1RDBCQUZFMzcxMDVFNEJCMUJCMjM2 MDFERDFEQjAeFw0yNTEyMjUxODE3MjJaFw0yNTEyMjgyMjA2MjJaMDMxMTAvBgNV BAMTKDQxMzBGQTczRDU0RjE4NDhBM0JBQzA2MTIwRkZDRTc0QkNBMDlCRTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/EL7iQhi0x2cubCcYiwABfL5Y +hmuD0YYhK730b3Oi8m7ND8cFtq1rLJqDotkwdn+jKSiNi/bSA6R0U7Ij8HD0GC5 Hoq4tnHzMchGEAWKqYqVqqqsZjXYHccBzT3s9n7ydGtP4g6nAuBE8Q0IF9WbJ0PV n1VhtCQOr+IvCQDmQhYhkYc0nPPJ7A2r9g9bgAEhSJo4oGH449RwzHNcpK8n5Bt2 ovlyEQ3Xp2NYviAbtZEEQprfYvuuMXQAVFds4/FHkIqdYYt+caYiqHqrLK0PLcv8 QExxr41R3ZDWOC3y+n8mHZF0ljFqkhQygjhhHfRe56U6mPnW9/c7tsKEfFiFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQTD6c9VPGEijusBhIP/OdLygm+EwHwYDVR0j BBgwFoAU7sGnvy2V0Lr+NxBeS7G7I2Ad0dswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MzY1NjFkNC0yM2M4LTRjOWItODkwZS00ZjI2MzJlNTJjOTcvMC9FRUMxQTdCRjJE OTVEMEJBRkUzNzEwNUU0QkIxQkIyMzYwMUREMURCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRUVDMUE3QkYyRDk1RDBCQUZFMzcxMDVFNEJCMUJCMjM2MDFE RDFEQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjM2NTYxZDQtMjNjOC00YzliLTg5 MGUtNGYyNjMyZTUyYzk3LzAvRUVDMUE3QkYyRDk1RDBCQUZFMzcxMDVFNEJCMUJC MjM2MDFERDFEQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABv7WuYVdwidQaMHxi+E2X1iBDsfANUn2FBz 3L4ezdKtcqOiUGLZ9T6uI8nzrVVzAg6K/3kU1u5yLmfr/6fhEqX12wDmrN9/JbB/ UlYOHqp5VxyxMEdebiA5sDutfPZVCAQuQL7Uh/CzHpHbOiX7ERCTUNJUKEYYTPfs L6ZAHHF6D0DtqxmBT/Xngr2thXtIAiCsgv9QWN93CQHbTU5VlKrwymjZot/wNpkU GQWy6hvH45rV0o6KXs27PKj3TUwsQCX+ZZ/otyJj9orftwM6Bz4UeD1OJZDcC2MN dcxXbbDRA9X5sYdI44t/nTzn0QhcPKxDx0AOzLJr+KZNqVW6kZw= -----END CERTIFICATE-----Generated at Fri Dec 26 04:51:12 2025 by rpki-client