This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/543cc6a8-e7aa-4f37-bd08-f2eb57e88736/0/EFBA99D11F5C07B48EC639EB1119AB525D8050AF.mft File: EFBA99D11F5C07B48EC639EB1119AB525D8050AF.mft (raw, json) Hash identifier: VrbBrdcs84zyT+9uV4x2pb8jN63koCbQ14P+Gmiam7g= Subject key identifier: D2:D3:A2:3A:D4:73:0E:50:FD:15:2B:C8:AA:F9:47:E2:7E:DF:DC:3E Authority key identifier: EF:BA:99:D1:1F:5C:07:B4:8E:C6:39:EB:11:19:AB:52:5D:80:50:AF Certificate issuer: /CN=EFBA99D11F5C07B48EC639EB1119AB525D8050AF Certificate serial: 7D69D13F7ED2AD027CACF63A8CB93C36C3AEB36F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFBA99D11F5C07B48EC639EB1119AB525D8050AF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/543cc6a8-e7aa-4f37-bd08-f2eb57e88736/0/EFBA99D11F5C07B48EC639EB1119AB525D8050AF.mft Manifest number: 0159 Signing time: Thu 18 Dec 2025 18:52:38 +0000 Manifest this update: Thu 18 Dec 2025 18:47:38 +0000 Manifest next update: Mon 22 Dec 2025 00:28:38 +0000 Files and hashes: 1: EFBA99D11F5C07B48EC639EB1119AB525D8050AF.crl (hash: DsZenjozBcWoPZE8bqifYheuqFpDh1YBRyL5LS/h69Y=) 2: 3130332e3136362e3132322e302f32332d3233203d3e20313431393435.roa (hash: C7+rbLPo0B/cgVSkvwAdhCUpa719Bxq+aRwWMlLdIX8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/543cc6a8-e7aa-4f37-bd08-f2eb57e88736/0/EFBA99D11F5C07B48EC639EB1119AB525D8050AF.crl rsync://repo-rpki.idnic.net/repo/543cc6a8-e7aa-4f37-bd08-f2eb57e88736/0/EFBA99D11F5C07B48EC639EB1119AB525D8050AF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFBA99D11F5C07B48EC639EB1119AB525D8050AF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 00:28:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:69:d1:3f:7e:d2:ad:02:7c:ac:f6:3a:8c:b9:3c:36:c3:ae:b3:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EFBA99D11F5C07B48EC639EB1119AB525D8050AF Validity Not Before: Dec 18 18:47:38 2025 GMT Not After : Dec 22 00:28:38 2025 GMT Subject: CN=D2D3A23AD4730E50FD152BC8AAF947E27EDFDC3E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:e9:d9:de:9c:ba:3e:99:81:79:67:66:69:1b: 7d:d5:a2:44:35:eb:1f:1e:4e:83:4b:3e:32:8a:d5: 43:14:5e:de:cd:49:41:6a:d0:79:a3:2e:af:43:cf: 00:97:3d:d4:69:bb:92:0d:e0:52:31:ac:76:0d:1b: 05:96:33:5d:ff:fc:c3:47:3b:b8:1d:5a:65:c7:50: 0a:56:e8:1c:74:44:db:45:fb:96:37:51:98:96:e3: b9:5a:a3:ba:53:9f:23:70:75:1f:1b:a2:32:99:95: 29:7e:df:34:dc:c4:41:c1:72:e0:e7:9b:08:4f:36: 9a:e7:9e:cc:76:21:e4:8b:57:5c:ba:0e:01:89:94: 97:e6:fa:f2:a9:74:aa:ad:f6:52:68:2b:18:26:12: ac:af:d8:59:3a:43:72:24:6b:5a:1b:e0:91:32:54: a7:65:b2:e0:4f:fa:80:7a:1d:1a:f3:39:b9:49:b6: bf:8d:e0:b5:9b:de:0c:2d:c6:25:cf:97:98:0b:ee: fd:f3:a4:22:5e:f5:a4:69:3b:c5:b0:3e:42:24:09: 08:54:c5:d1:51:c2:00:88:c9:47:e3:3c:07:b5:70: 33:ac:4f:41:4b:d6:62:5a:df:65:6c:33:f9:44:92: 10:a1:ff:4a:6f:25:07:63:e6:41:c3:d7:b1:44:0b: c6:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:D3:A2:3A:D4:73:0E:50:FD:15:2B:C8:AA:F9:47:E2:7E:DF:DC:3E X509v3 Authority Key Identifier: keyid:EF:BA:99:D1:1F:5C:07:B4:8E:C6:39:EB:11:19:AB:52:5D:80:50:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/543cc6a8-e7aa-4f37-bd08-f2eb57e88736/0/EFBA99D11F5C07B48EC639EB1119AB525D8050AF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFBA99D11F5C07B48EC639EB1119AB525D8050AF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/543cc6a8-e7aa-4f37-bd08-f2eb57e88736/0/EFBA99D11F5C07B48EC639EB1119AB525D8050AF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:1a:a5:99:a3:c3:f5:c4:c9:1a:7b:3a:9d:bd:56:b0:b0:16: e9:43:c1:73:12:1a:a5:87:38:33:a8:f3:dd:d6:4f:c1:c3:0c: ac:30:62:6b:56:39:00:fc:11:f2:cf:86:1f:69:85:43:a1:c6: 08:36:37:91:20:87:c8:d8:9d:8b:dd:f9:6c:de:87:4e:32:bb: 62:5c:1b:26:25:7f:ad:84:28:2c:3c:94:39:8d:b0:05:b8:10: 48:7d:68:30:6b:a0:b3:f6:99:9f:5b:c4:52:1c:35:95:00:1e: ab:5b:5a:d1:f5:bf:52:15:d5:d1:71:f5:de:21:fb:9e:b7:98: de:6c:2f:7b:64:b6:36:57:d5:1c:5c:2d:49:bb:59:3f:6e:67: 1b:aa:60:d1:64:d5:68:5d:af:e8:38:41:b7:74:41:17:46:c2: 1c:eb:14:26:06:14:df:5f:aa:c0:f7:c2:e1:05:53:24:68:78: 73:a4:66:23:e0:d8:b7:59:38:ff:2a:5f:80:3b:1b:70:31:d5: 64:33:32:fc:5e:f7:9c:2e:45:88:72:01:54:95:82:f8:59:71: 23:ca:65:38:22:50:bc:ca:42:10:0a:6b:a2:87:50:9d:31:f1: 1c:1c:17:36:7e:c4:fe:45:cb:61:33:6d:d8:15:c6:9e:44:1e: 2c:a6:ff:71 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfWnRP37SrQJ8rPY6jLk8NsOus28wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUZCQTk5RDExRjVDMDdCNDhFQzYzOUVCMTExOUFCNTI1 RDgwNTBBRjAeFw0yNTEyMTgxODQ3MzhaFw0yNTEyMjIwMDI4MzhaMDMxMTAvBgNV BAMTKEQyRDNBMjNBRDQ3MzBFNTBGRDE1MkJDOEFBRjk0N0UyN0VERkRDM0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC16dnenLo+mYF5Z2ZpG33VokQ1 6x8eToNLPjKK1UMUXt7NSUFq0HmjLq9DzwCXPdRpu5IN4FIxrHYNGwWWM13//MNH O7gdWmXHUApW6Bx0RNtF+5Y3UZiW47lao7pTnyNwdR8bojKZlSl+3zTcxEHBcuDn mwhPNprnnsx2IeSLV1y6DgGJlJfm+vKpdKqt9lJoKxgmEqyv2Fk6Q3Ika1ob4JEy VKdlsuBP+oB6HRrzOblJtr+N4LWb3gwtxiXPl5gL7v3zpCJe9aRpO8WwPkIkCQhU xdFRwgCIyUfjPAe1cDOsT0FL1mJa32VsM/lEkhCh/0pvJQdj5kHD17FEC8btAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0tOiOtRzDlD9FSvIqvlH4n7f3D4wHwYDVR0j BBgwFoAU77qZ0R9cB7SOxjnrERmrUl2AUK8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NDNjYzZhOC1lN2FhLTRmMzctYmQwOC1mMmViNTdlODg3MzYvMC9FRkJBOTlEMTFG NUMwN0I0OEVDNjM5RUIxMTE5QUI1MjVEODA1MEFGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUZCQTk5RDExRjVDMDdCNDhFQzYzOUVCMTExOUFCNTI1RDgw NTBBRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTQzY2M2YTgtZTdhYS00ZjM3LWJk MDgtZjJlYjU3ZTg4NzM2LzAvRUZCQTk5RDExRjVDMDdCNDhFQzYzOUVCMTExOUFC NTI1RDgwNTBBRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKEapZmjw/XEyRp7Op29VrCwFulDwXMSGqWH ODOo893WT8HDDKwwYmtWOQD8EfLPhh9phUOhxgg2N5Egh8jYnYvd+Wzeh04yu2Jc GyYlf62EKCw8lDmNsAW4EEh9aDBroLP2mZ9bxFIcNZUAHqtbWtH1v1IV1dFx9d4h +563mN5sL3tktjZX1RxcLUm7WT9uZxuqYNFk1Whdr+g4Qbd0QRdGwhzrFCYGFN9f qsD3wuEFUyRoeHOkZiPg2LdZOP8qX4A7G3Ax1WQzMvxe95wuRYhyAVSVgvhZcSPK ZTgiULzKQhAKa6KHUJ0x8RwcFzZ+xP5Fy2EzbdgVxp5EHiym/3E= -----END CERTIFICATE-----Generated at Fri Dec 19 03:06:40 2025 by rpki-client