This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/287f8f82-37bb-4983-93ca-5e0670ab02e3/0/EC62A94970E56AC9FE8B828A542B7EDBA3D116D5.mft File: EC62A94970E56AC9FE8B828A542B7EDBA3D116D5.mft (raw, json) Hash identifier: qHDfZKutoCdswCj7O0AzYQ3psGQosMdgnrFc2JK0bBw= Subject key identifier: CE:93:3F:85:79:9E:50:4A:08:65:63:06:9C:7C:31:E4:3A:C0:7F:A8 Authority key identifier: EC:62:A9:49:70:E5:6A:C9:FE:8B:82:8A:54:2B:7E:DB:A3:D1:16:D5 Certificate issuer: /CN=EC62A94970E56AC9FE8B828A542B7EDBA3D116D5 Certificate serial: 5512D498F85A0CF32B8B117630238AD8A86082C5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC62A94970E56AC9FE8B828A542B7EDBA3D116D5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/287f8f82-37bb-4983-93ca-5e0670ab02e3/0/EC62A94970E56AC9FE8B828A542B7EDBA3D116D5.mft Manifest number: 0534 Signing time: Wed 17 Dec 2025 07:21:42 +0000 Manifest this update: Wed 17 Dec 2025 07:16:42 +0000 Manifest next update: Sat 20 Dec 2025 17:59:42 +0000 Files and hashes: 1: EC62A94970E56AC9FE8B828A542B7EDBA3D116D5.crl (hash: Sz1g+ZqUe12aAti5M9e/pmkWFxwy5kEWwy9HdwKB6EA=) 2: 3130332e362e3231342e302f32342d3234203d3e20313331313132.roa (hash: F0a3JFzr6TEGFg4XROWEIEBL9cNyd2bfiVU6lzFtCLY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/287f8f82-37bb-4983-93ca-5e0670ab02e3/0/EC62A94970E56AC9FE8B828A542B7EDBA3D116D5.crl rsync://repo-rpki.idnic.net/repo/287f8f82-37bb-4983-93ca-5e0670ab02e3/0/EC62A94970E56AC9FE8B828A542B7EDBA3D116D5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC62A94970E56AC9FE8B828A542B7EDBA3D116D5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 17:59:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:12:d4:98:f8:5a:0c:f3:2b:8b:11:76:30:23:8a:d8:a8:60:82:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EC62A94970E56AC9FE8B828A542B7EDBA3D116D5 Validity Not Before: Dec 17 07:16:42 2025 GMT Not After : Dec 20 17:59:42 2025 GMT Subject: CN=CE933F85799E504A086563069C7C31E43AC07FA8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:84:59:4a:92:0a:3f:5d:e5:77:4d:f9:1f:f1: 08:a3:36:ad:2c:27:ea:47:fb:fc:ff:cf:90:12:44: ea:16:16:c3:05:a3:3c:6a:22:b2:07:06:a0:c4:f7: 71:25:6c:a3:23:e7:ec:e9:f2:cb:8f:ec:fb:37:e6: 47:89:68:82:c2:b5:b1:d4:75:06:33:8b:71:46:d0: e4:fb:df:85:d6:bf:18:06:33:27:44:0e:7e:1d:ff: 4b:56:fd:8c:0e:7d:38:ba:18:6d:62:dd:ee:14:c4: 2a:ea:dc:9a:17:55:d1:4a:9b:23:bd:12:29:78:01: f7:13:4f:ce:e1:bd:6f:ff:cf:d9:5a:02:ee:67:53: 01:2c:e8:d4:f9:d2:51:ee:4a:66:b6:bf:c4:9c:bc: 17:9d:5d:f6:2d:2a:5e:86:b5:1b:de:89:32:30:f1: 68:3e:33:17:d6:0e:f7:be:b0:b4:4b:04:51:e2:42: 0b:63:8a:7f:d5:8b:e0:69:02:19:63:b4:88:ed:6a: 9d:06:31:e2:08:94:80:48:52:43:ae:2f:1c:ad:9c: 03:d7:91:67:9c:0e:72:e4:2a:32:49:09:f0:59:45: 0d:ce:4c:95:fe:76:0d:4d:02:e2:f0:29:55:77:7b: e1:d7:f4:d8:81:74:c5:c8:c1:c9:48:b4:7e:24:61: b8:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:93:3F:85:79:9E:50:4A:08:65:63:06:9C:7C:31:E4:3A:C0:7F:A8 X509v3 Authority Key Identifier: keyid:EC:62:A9:49:70:E5:6A:C9:FE:8B:82:8A:54:2B:7E:DB:A3:D1:16:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/287f8f82-37bb-4983-93ca-5e0670ab02e3/0/EC62A94970E56AC9FE8B828A542B7EDBA3D116D5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC62A94970E56AC9FE8B828A542B7EDBA3D116D5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/287f8f82-37bb-4983-93ca-5e0670ab02e3/0/EC62A94970E56AC9FE8B828A542B7EDBA3D116D5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:f9:70:fc:dd:3f:2a:d9:96:a4:68:56:4f:10:33:64:d7:6f: 1f:c8:4a:a1:8d:d8:38:8c:f2:c5:db:a3:19:2d:67:2c:92:c2: 62:77:b2:58:c7:1c:20:12:c5:8f:63:86:94:ac:77:52:82:72: 56:6c:83:db:9c:f3:5b:87:b7:4e:8f:54:4e:de:23:bc:01:84: 64:39:e4:af:76:ac:c2:41:52:b3:e8:ed:49:58:b9:96:c9:c1: 3a:3e:7b:39:6c:aa:ad:3a:74:44:e1:4f:ab:c4:8c:75:30:c5: 8f:ac:7f:71:de:57:a9:76:31:f4:96:03:ee:99:f2:64:d7:e3: 3b:26:97:a3:09:f3:58:dc:fa:c3:23:62:ac:38:ec:27:46:84: ef:69:88:59:d1:bf:10:33:0d:c2:dd:86:f9:2a:1f:90:81:a9: 8e:49:8f:de:41:92:40:1e:12:f1:c4:e5:fb:8e:8e:bb:c4:51: 2e:43:2a:4b:43:c0:fc:f7:6b:80:7a:5b:8d:7b:79:9e:3a:22: 70:93:84:8f:2a:09:c5:c3:7e:8d:6e:a0:cc:b3:eb:88:aa:f5: e1:93:ec:9d:92:78:79:72:d0:08:09:32:26:53:63:fe:5b:78: 1a:8f:20:85:8a:9c:55:c5:b2:f0:21:78:0e:1c:b4:fd:b6:52: 56:f0:54:c9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVRLUmPhaDPMrixF2MCOK2KhggsUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUM2MkE5NDk3MEU1NkFDOUZFOEI4MjhBNTQyQjdFREJB M0QxMTZENTAeFw0yNTEyMTcwNzE2NDJaFw0yNTEyMjAxNzU5NDJaMDMxMTAvBgNV BAMTKENFOTMzRjg1Nzk5RTUwNEEwODY1NjMwNjlDN0MzMUU0M0FDMDdGQTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZhFlKkgo/XeV3Tfkf8QijNq0s J+pH+/z/z5ASROoWFsMFozxqIrIHBqDE93ElbKMj5+zp8suP7Ps35keJaILCtbHU dQYzi3FG0OT734XWvxgGMydEDn4d/0tW/YwOfTi6GG1i3e4UxCrq3JoXVdFKmyO9 Eil4AfcTT87hvW//z9laAu5nUwEs6NT50lHuSma2v8ScvBedXfYtKl6GtRveiTIw 8Wg+MxfWDve+sLRLBFHiQgtjin/Vi+BpAhljtIjtap0GMeIIlIBIUkOuLxytnAPX kWecDnLkKjJJCfBZRQ3OTJX+dg1NAuLwKVV3e+HX9NiBdMXIwclItH4kYbjzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzpM/hXmeUEoIZWMGnHwx5DrAf6gwHwYDVR0j BBgwFoAU7GKpSXDlasn+i4KKVCt+26PRFtUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ODdmOGY4Mi0zN2JiLTQ5ODMtOTNjYS01ZTA2NzBhYjAyZTMvMC9FQzYyQTk0OTcw RTU2QUM5RkU4QjgyOEE1NDJCN0VEQkEzRDExNkQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUM2MkE5NDk3MEU1NkFDOUZFOEI4MjhBNTQyQjdFREJBM0Qx MTZENS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjg3ZjhmODItMzdiYi00OTgzLTkz Y2EtNWUwNjcwYWIwMmUzLzAvRUM2MkE5NDk3MEU1NkFDOUZFOEI4MjhBNTQyQjdF REJBM0QxMTZENS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKP5cPzdPyrZlqRoVk8QM2TXbx/ISqGN2DiM 8sXboxktZyySwmJ3sljHHCASxY9jhpSsd1KCclZsg9uc81uHt06PVE7eI7wBhGQ5 5K92rMJBUrPo7UlYuZbJwTo+ezlsqq06dEThT6vEjHUwxY+sf3HeV6l2MfSWA+6Z 8mTX4zsml6MJ81jc+sMjYqw47CdGhO9piFnRvxAzDcLdhvkqH5CBqY5Jj95BkkAe EvHE5fuOjrvEUS5DKktDwPz3a4B6W417eZ46InCThI8qCcXDfo1uoMyz64iq9eGT 7J2SeHly0AgJMiZTY/5beBqPIIWKnFXFsvAheA4ctP22UlbwVMk= -----END CERTIFICATE-----Generated at Fri Dec 19 16:52:22 2025 by rpki-client