This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/3e8fdeb0-3513-4f3d-9259-82b9d19a3556/0/EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02.mft File: EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02.mft (raw, json) Hash identifier: 00wE4cKQ+Ft5fp91zCjfcNSXFApBGbffWvnkVORaEkU= Subject key identifier: 89:7B:4C:51:78:C3:05:1E:80:53:5E:5E:0F:F9:BE:00:96:0D:FD:FC Authority key identifier: EF:C4:76:AB:80:A5:D0:AD:9F:CC:AA:14:41:C1:F6:41:83:8E:2E:02 Certificate issuer: /CN=EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02 Certificate serial: 424F30D9630A9D0C4DA1AFFFD5768AE0C1D7D7A1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3e8fdeb0-3513-4f3d-9259-82b9d19a3556/0/EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02.mft Manifest number: 0534 Signing time: Mon 22 Dec 2025 12:23:08 +0000 Manifest this update: Mon 22 Dec 2025 12:18:08 +0000 Manifest next update: Thu 25 Dec 2025 23:02:08 +0000 Files and hashes: 1: EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02.crl (hash: XevXX+16zybQ/7VdfMBKckNJHmb70p03/wbqcBos9bU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3e8fdeb0-3513-4f3d-9259-82b9d19a3556/0/EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02.crl rsync://repo-rpki.idnic.net/repo/3e8fdeb0-3513-4f3d-9259-82b9d19a3556/0/EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 23:02:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:4f:30:d9:63:0a:9d:0c:4d:a1:af:ff:d5:76:8a:e0:c1:d7:d7:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02 Validity Not Before: Dec 22 12:18:08 2025 GMT Not After : Dec 25 23:02:08 2025 GMT Subject: CN=897B4C5178C3051E80535E5E0FF9BE00960DFDFC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:ab:39:aa:f8:10:7f:74:e6:56:08:50:2d:53: be:a6:e0:c8:b9:28:25:bd:e5:63:6e:2a:a4:fb:9f: 40:7f:95:f4:d0:57:55:e7:52:da:86:e6:cf:6b:3a: 06:8b:82:4e:41:e6:62:cd:e5:5a:38:9e:f4:6f:be: 10:23:b9:ef:a1:2c:88:72:dc:e6:4b:bf:49:fe:b2: 67:54:4f:d7:8a:32:de:fe:9e:7e:bf:09:d4:27:0e: 36:6e:93:91:4f:cc:f3:ad:b7:4e:18:f0:ae:fa:8e: 77:47:a2:7a:ba:35:77:1a:a3:aa:1a:32:20:fe:e3: b1:25:05:2c:06:e4:cb:49:be:d4:cc:80:6e:50:88: b7:1e:8c:66:a4:1d:31:85:cf:d6:0f:6c:3a:5c:5b: df:61:1d:58:f4:e6:43:56:cd:2a:7d:88:df:40:13: 35:4c:7a:44:09:93:06:e7:14:1b:85:9b:60:93:09: b5:38:73:05:da:bc:b5:38:ff:d5:07:fc:3c:e3:a6: 96:4a:23:4c:43:6a:d9:46:3d:53:c5:6a:07:a0:59: 1e:f5:e6:fe:c6:2a:51:4e:2c:ff:ad:19:68:e5:5c: 02:4b:ce:19:66:75:b6:d8:db:23:43:df:7b:29:cd: 3f:a0:6c:6a:ae:12:44:e1:75:af:d6:9d:79:45:f6: 4c:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:7B:4C:51:78:C3:05:1E:80:53:5E:5E:0F:F9:BE:00:96:0D:FD:FC X509v3 Authority Key Identifier: keyid:EF:C4:76:AB:80:A5:D0:AD:9F:CC:AA:14:41:C1:F6:41:83:8E:2E:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3e8fdeb0-3513-4f3d-9259-82b9d19a3556/0/EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3e8fdeb0-3513-4f3d-9259-82b9d19a3556/0/EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:25:c6:ee:40:cb:97:9d:47:26:8c:97:b2:19:c7:9a:6f:e3: fc:da:f1:92:b3:bb:ec:5e:50:d7:e6:e6:7e:06:57:34:2c:4a: 69:19:37:a1:d0:e6:28:91:43:aa:94:bb:99:05:33:fe:31:97: ea:97:ef:82:09:f1:88:d6:e6:b1:a6:f7:01:50:10:67:6b:57: 3e:59:15:87:cf:18:4f:4b:7d:9f:ad:5e:8e:e2:b1:5f:0e:63: 51:9d:82:85:76:23:1e:0b:8b:ab:69:f0:63:57:29:4f:24:1d: 5d:91:bf:8a:53:bf:57:10:0d:88:70:16:5d:c5:ed:fd:f5:49: 0c:92:4f:2d:7c:70:44:14:26:dc:58:87:48:5f:34:c1:c1:32: be:22:ee:a4:c6:2b:a3:83:b6:88:3b:f5:7f:8f:de:34:75:91: 8c:82:93:5d:4e:ba:fe:61:80:4f:cc:f1:d7:fc:9b:11:de:a9: 7b:59:f1:8b:5a:4a:85:78:3d:8d:85:00:4c:ff:6d:74:12:62: 46:b0:b4:de:e0:8b:e6:e9:6d:13:5b:3e:25:8d:aa:c1:7b:6b: 1d:7f:5b:cd:e4:4b:c8:35:f5:9d:5c:9f:4b:48:f0:59:5d:97: 3d:d9:38:36:b9:a3:9b:eb:0b:cb:b0:69:50:d0:8f:87:40:00: c7:0a:cb:df -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQk8w2WMKnQxNoa//1XaK4MHX16EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUZDNDc2QUI4MEE1RDBBRDlGQ0NBQTE0NDFDMUY2NDE4 MzhFMkUwMjAeFw0yNTEyMjIxMjE4MDhaFw0yNTEyMjUyMzAyMDhaMDMxMTAvBgNV BAMTKDg5N0I0QzUxNzhDMzA1MUU4MDUzNUU1RTBGRjlCRTAwOTYwREZERkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChqzmq+BB/dOZWCFAtU76m4Mi5 KCW95WNuKqT7n0B/lfTQV1XnUtqG5s9rOgaLgk5B5mLN5Vo4nvRvvhAjue+hLIhy 3OZLv0n+smdUT9eKMt7+nn6/CdQnDjZuk5FPzPOtt04Y8K76jndHonq6NXcao6oa MiD+47ElBSwG5MtJvtTMgG5QiLcejGakHTGFz9YPbDpcW99hHVj05kNWzSp9iN9A EzVMekQJkwbnFBuFm2CTCbU4cwXavLU4/9UH/DzjppZKI0xDatlGPVPFagegWR71 5v7GKlFOLP+tGWjlXAJLzhlmdbbY2yND33spzT+gbGquEkThda/WnXlF9kwxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiXtMUXjDBR6AU15eD/m+AJYN/fwwHwYDVR0j BBgwFoAU78R2q4Cl0K2fzKoUQcH2QYOOLgIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZThmZGViMC0zNTEzLTRmM2QtOTI1OS04MmI5ZDE5YTM1NTYvMC9FRkM0NzZBQjgw QTVEMEFEOUZDQ0FBMTQ0MUMxRjY0MTgzOEUyRTAyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUZDNDc2QUI4MEE1RDBBRDlGQ0NBQTE0NDFDMUY2NDE4MzhF MkUwMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2U4ZmRlYjAtMzUxMy00ZjNkLTky NTktODJiOWQxOWEzNTU2LzAvRUZDNDc2QUI4MEE1RDBBRDlGQ0NBQTE0NDFDMUY2 NDE4MzhFMkUwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFUlxu5Ay5edRyaMl7IZx5pv4/za8ZKzu+xe UNfm5n4GVzQsSmkZN6HQ5iiRQ6qUu5kFM/4xl+qX74IJ8YjW5rGm9wFQEGdrVz5Z FYfPGE9LfZ+tXo7isV8OY1GdgoV2Ix4Li6tp8GNXKU8kHV2Rv4pTv1cQDYhwFl3F 7f31SQySTy18cEQUJtxYh0hfNMHBMr4i7qTGK6ODtog79X+P3jR1kYyCk11Ouv5h gE/M8df8mxHeqXtZ8YtaSoV4PY2FAEz/bXQSYkawtN7gi+bpbRNbPiWNqsF7ax1/ W83kS8g19Z1cn0tI8Fldlz3ZODa5o5vrC8uwaVDQj4dAAMcKy98= -----END CERTIFICATE-----Generated at Wed Dec 24 22:06:25 2025 by rpki-client