This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/383ed7ab-1ac9-4f42-acdd-53557ac7b3f3/0/EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.mft File: EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.mft (raw, json) Hash identifier: x5azBIvFzLTi9dCMK4lj1Oi1miLDAW4vyVo84qmJ4/0= Subject key identifier: 37:7C:7A:06:36:5A:2B:38:04:5F:A6:71:49:A3:AA:D0:9C:FE:58:BD Authority key identifier: EF:C0:FE:32:8F:7B:86:F9:C6:82:F4:FE:37:36:0C:4E:3A:D9:94:2C Certificate issuer: /CN=EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C Certificate serial: 0AA2DDB0424DCE635A6E01867EAF719B09C4DE94 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/383ed7ab-1ac9-4f42-acdd-53557ac7b3f3/0/EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.mft Manifest number: 04C3 Signing time: Mon 22 Dec 2025 21:31:48 +0000 Manifest this update: Mon 22 Dec 2025 21:26:48 +0000 Manifest next update: Thu 25 Dec 2025 21:34:48 +0000 Files and hashes: 1: 323430363a343463303a3a2f33322d3438203d3e20313430343632.roa (hash: LyQVOVVD0SyWAzKbbigEAOPOxnvDfTq86SNZAm/SmRY=) 2: 3130332e3135332e3132362e302f32342d3234203d3e20313430343632.roa (hash: T6Hicz2H8CuNDpKjhaA17WaIW/oy1qNlEePPsSxqMqI=) 3: 3130332e3135332e3132372e302f32342d3234203d3e20313338303839.roa (hash: KdIUSWjYk6G6khIi44dRxNIcc82FtwrOj3DoMvqmaNE=) 4: EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.crl (hash: ADK47qSWeiGQc+QBZUmXxYzjCEh+3draLnefmi2SYZw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/383ed7ab-1ac9-4f42-acdd-53557ac7b3f3/0/EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.crl rsync://repo-rpki.idnic.net/repo/383ed7ab-1ac9-4f42-acdd-53557ac7b3f3/0/EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 21:34:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:a2:dd:b0:42:4d:ce:63:5a:6e:01:86:7e:af:71:9b:09:c4:de:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C Validity Not Before: Dec 22 21:26:48 2025 GMT Not After : Dec 25 21:34:48 2025 GMT Subject: CN=377C7A06365A2B38045FA67149A3AAD09CFE58BD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:a4:f6:68:cf:bb:ca:d8:a3:3e:2d:d4:ed:a2: 1b:72:dd:ea:6b:32:c7:88:1a:30:92:06:da:69:a4: 2d:9a:f3:66:33:15:24:51:17:03:cd:87:17:e7:cc: 40:c6:c4:b3:67:54:72:5b:a3:e5:f6:06:30:50:d2: 24:48:8b:ce:58:0f:fb:cc:a7:89:53:33:0a:71:1d: e2:ac:b0:e9:f5:2b:61:f2:ea:db:a7:41:ce:57:fc: 39:af:16:52:9b:cb:1f:b6:6a:db:cc:29:26:cd:1d: 69:bd:be:4c:04:02:df:8d:06:a3:f8:de:c4:1a:aa: 75:bd:6c:70:66:38:8a:d2:95:1f:48:b3:c1:d4:94: 2c:4c:12:c3:2e:29:d5:8d:cf:b3:3d:3a:a0:18:12: 36:63:ac:09:19:0e:94:a2:68:d3:52:96:a0:9c:76: cf:d9:98:c0:07:6f:55:17:9c:d0:44:55:e4:08:3d: 88:bf:6d:58:5a:89:4c:c5:b0:c2:19:f2:20:88:5a: f0:31:65:7d:8e:67:1b:6a:a2:d0:6e:c2:a2:12:d5: 06:9d:b9:16:6a:27:61:28:64:78:2a:45:1f:f7:1c: 84:dd:9c:14:29:91:21:0a:18:f6:d7:bd:e6:7c:2d: dc:39:a5:8f:e3:f5:01:f5:5d:3e:11:16:92:7b:a7: 0f:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:7C:7A:06:36:5A:2B:38:04:5F:A6:71:49:A3:AA:D0:9C:FE:58:BD X509v3 Authority Key Identifier: keyid:EF:C0:FE:32:8F:7B:86:F9:C6:82:F4:FE:37:36:0C:4E:3A:D9:94:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/383ed7ab-1ac9-4f42-acdd-53557ac7b3f3/0/EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/383ed7ab-1ac9-4f42-acdd-53557ac7b3f3/0/EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:72:53:af:e3:a1:03:8f:ed:39:a0:1e:b3:0c:60:37:93:5f: 71:61:c7:f9:f9:df:63:b5:49:68:c3:f4:f7:ad:57:54:53:0b: 28:6e:86:04:47:d3:27:c4:15:3e:5a:ad:86:d3:90:2f:fa:92: 02:41:31:b3:92:f8:d2:4f:23:56:23:0f:97:2f:c5:81:22:06: 20:61:d9:97:af:91:7e:84:fc:95:53:6f:ad:b9:1b:b5:f0:d9: b9:22:a6:78:61:f3:1e:6a:5b:5c:eb:b0:dc:d1:86:38:1b:cc: 8d:47:a7:57:08:8b:5b:80:3e:9e:e5:62:b5:15:f8:45:4d:6d: 6f:9c:64:cd:11:fb:87:ce:c4:88:11:23:25:00:dd:8c:42:a6: b6:3f:f7:54:ce:2d:19:53:52:42:12:b9:bc:52:a8:24:b5:d8: b8:6d:69:32:13:a4:dd:e5:36:38:fe:aa:4b:33:15:4a:47:2a: dd:81:03:09:e7:6a:04:79:92:42:02:09:c8:5c:f2:1e:92:43: 2f:d0:1c:dc:4d:43:27:6d:27:22:16:20:a2:d6:a9:ee:ac:7a: 3e:01:48:6f:ee:e0:d1:91:16:14:4f:f7:f3:6f:fa:cd:87:9c: 44:ce:db:a9:ac:ef:08:35:a1:56:80:44:86:51:84:a0:be:3f: 82:08:e4:12 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCqLdsEJNzmNabgGGfq9xmwnE3pQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUZDMEZFMzI4RjdCODZGOUM2ODJGNEZFMzczNjBDNEUz QUQ5OTQyQzAeFw0yNTEyMjIyMTI2NDhaFw0yNTEyMjUyMTM0NDhaMDMxMTAvBgNV BAMTKDM3N0M3QTA2MzY1QTJCMzgwNDVGQTY3MTQ5QTNBQUQwOUNGRTU4QkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCupPZoz7vK2KM+LdTtohty3epr MseIGjCSBtpppC2a82YzFSRRFwPNhxfnzEDGxLNnVHJbo+X2BjBQ0iRIi85YD/vM p4lTMwpxHeKssOn1K2Hy6tunQc5X/DmvFlKbyx+2atvMKSbNHWm9vkwEAt+NBqP4 3sQaqnW9bHBmOIrSlR9Is8HUlCxMEsMuKdWNz7M9OqAYEjZjrAkZDpSiaNNSlqCc ds/ZmMAHb1UXnNBEVeQIPYi/bVhaiUzFsMIZ8iCIWvAxZX2OZxtqotBuwqIS1Qad uRZqJ2EoZHgqRR/3HITdnBQpkSEKGPbXveZ8Ldw5pY/j9QH1XT4RFpJ7pw8lAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUN3x6BjZaKzgEX6ZxSaOq0Jz+WL0wHwYDVR0j BBgwFoAU78D+Mo97hvnGgvT+NzYMTjrZlCwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ODNlZDdhYi0xYWM5LTRmNDItYWNkZC01MzU1N2FjN2IzZjMvMC9FRkMwRkUzMjhG N0I4NkY5QzY4MkY0RkUzNzM2MEM0RTNBRDk5NDJDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUZDMEZFMzI4RjdCODZGOUM2ODJGNEZFMzczNjBDNEUzQUQ5 OTQyQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzgzZWQ3YWItMWFjOS00ZjQyLWFj ZGQtNTM1NTdhYzdiM2YzLzAvRUZDMEZFMzI4RjdCODZGOUM2ODJGNEZFMzczNjBD NEUzQUQ5OTQyQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAByU6/joQOP7TmgHrMMYDeTX3Fhx/n532O1 SWjD9PetV1RTCyhuhgRH0yfEFT5arYbTkC/6kgJBMbOS+NJPI1YjD5cvxYEiBiBh 2ZevkX6E/JVTb625G7Xw2bkipnhh8x5qW1zrsNzRhjgbzI1Hp1cIi1uAPp7lYrUV +EVNbW+cZM0R+4fOxIgRIyUA3YxCprY/91TOLRlTUkISubxSqCS12LhtaTITpN3l Njj+qkszFUpHKt2BAwnnagR5kkICCchc8h6SQy/QHNxNQydtJyIWIKLWqe6sej4B SG/u4NGRFhRP9/Nv+s2HnETO26ms7wg1oVaARIZRhKC+P4II5BI= -----END CERTIFICATE-----Generated at Wed Dec 24 16:23:23 2025 by rpki-client