This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/5bb43ec8-f582-4025-8f36-3cea539d0b09/0/EC9AAB91007053E63CE17F98D74FFD8945F29EDE.mft File: EC9AAB91007053E63CE17F98D74FFD8945F29EDE.mft (raw, json) Hash identifier: lZB6BAtue7RuBMog/WO9Tzd6QAGTpTS6YO0/2adwfbQ= Subject key identifier: C7:5D:E5:24:6C:22:69:B8:93:76:B8:08:A2:06:52:0B:E0:0F:A5:04 Authority key identifier: EC:9A:AB:91:00:70:53:E6:3C:E1:7F:98:D7:4F:FD:89:45:F2:9E:DE Certificate issuer: /CN=EC9AAB91007053E63CE17F98D74FFD8945F29EDE Certificate serial: 6C02D30612E23A164E751221B461A469540E01EF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC9AAB91007053E63CE17F98D74FFD8945F29EDE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5bb43ec8-f582-4025-8f36-3cea539d0b09/0/EC9AAB91007053E63CE17F98D74FFD8945F29EDE.mft Manifest number: 015A Signing time: Wed 24 Dec 2025 15:43:50 +0000 Manifest this update: Wed 24 Dec 2025 15:38:50 +0000 Manifest next update: Sun 28 Dec 2025 02:29:50 +0000 Files and hashes: 1: 3130332e35332e32382e302f32332d3234203d3e20313339393535.roa (hash: XmUhlDLdTlUEJxqMyV5d8izbXv0SLIMUNSTUR2SbfXQ=) 2: EC9AAB91007053E63CE17F98D74FFD8945F29EDE.crl (hash: OtSU7Peb1J09/U9uVIoF51qlBdIHzP/71vGmoIO0x70=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5bb43ec8-f582-4025-8f36-3cea539d0b09/0/EC9AAB91007053E63CE17F98D74FFD8945F29EDE.crl rsync://repo-rpki.idnic.net/repo/5bb43ec8-f582-4025-8f36-3cea539d0b09/0/EC9AAB91007053E63CE17F98D74FFD8945F29EDE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC9AAB91007053E63CE17F98D74FFD8945F29EDE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 17:20:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:02:d3:06:12:e2:3a:16:4e:75:12:21:b4:61:a4:69:54:0e:01:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EC9AAB91007053E63CE17F98D74FFD8945F29EDE Validity Not Before: Dec 24 15:38:50 2025 GMT Not After : Dec 28 02:29:50 2025 GMT Subject: CN=C75DE5246C2269B89376B808A206520BE00FA504 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:55:1e:35:bd:ed:aa:3a:10:40:03:fd:bf:87: 31:ad:23:31:48:8d:d5:ac:16:36:78:a3:57:87:0b: 63:03:26:7d:36:a4:fb:57:3d:9e:66:e1:b8:5b:a9: 43:b8:82:c5:f1:9e:43:c1:7f:bf:e8:60:22:00:8f: c9:5a:98:9b:da:35:8e:1c:75:30:b0:92:f7:ac:d6: ec:6b:4a:7e:37:c0:00:e0:2c:b5:8e:81:6b:b7:9e: 06:50:bd:c3:75:f1:68:9a:f3:32:0b:3d:08:e2:b0: c7:3b:d9:76:ef:90:ab:bb:e6:b0:30:ab:85:dd:99: e7:90:34:42:35:bc:42:59:7f:a7:95:c3:f3:d3:b6: 2c:28:be:13:b3:d4:21:8d:f6:26:c6:22:1a:cc:43: 1a:09:dc:76:a4:d8:81:a0:09:3b:0c:7c:ee:88:43: fd:5f:0e:70:04:02:8f:0c:01:0a:b1:0b:5c:51:c1: 8d:80:ae:ba:f9:68:7c:2e:15:cd:f1:eb:f0:40:05: e4:73:b4:87:00:ab:4b:2f:3d:1a:c1:2a:bd:46:df: 6d:ae:0c:f9:d6:f0:ec:41:0c:4e:19:f7:af:70:59: 84:5c:be:6d:d2:e3:9d:53:3c:cc:cb:b8:da:1a:17: 2d:28:7b:86:6f:0d:3f:93:cc:77:de:cd:81:53:ad: 1d:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:5D:E5:24:6C:22:69:B8:93:76:B8:08:A2:06:52:0B:E0:0F:A5:04 X509v3 Authority Key Identifier: keyid:EC:9A:AB:91:00:70:53:E6:3C:E1:7F:98:D7:4F:FD:89:45:F2:9E:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5bb43ec8-f582-4025-8f36-3cea539d0b09/0/EC9AAB91007053E63CE17F98D74FFD8945F29EDE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC9AAB91007053E63CE17F98D74FFD8945F29EDE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5bb43ec8-f582-4025-8f36-3cea539d0b09/0/EC9AAB91007053E63CE17F98D74FFD8945F29EDE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:8d:e5:ea:31:d6:cc:5f:54:b0:35:50:0e:76:a6:f0:07:4c: 1c:cc:d3:9c:ba:be:74:60:ce:f2:51:63:5f:dc:ec:5e:53:3d: e1:ee:8d:9b:66:9d:7f:09:78:4f:11:e4:5f:79:22:48:f4:88: 81:24:7e:51:d5:c5:a3:a8:a4:cd:d3:4c:6c:15:75:92:cf:72: ee:1a:94:d1:a7:4b:e0:28:60:3e:43:b6:91:7e:b6:4f:76:a8: 2b:a1:65:9c:3d:f7:45:dd:4a:12:f7:35:e6:8a:2a:5a:e8:31: 97:77:9a:b2:f8:02:19:7b:ee:9b:2c:5e:d1:d9:56:65:4b:38: 6f:92:0d:37:59:bf:3f:03:4c:32:0a:44:f6:e6:d8:62:72:b6: 7d:96:cc:b8:7f:9f:aa:c1:d4:1b:5f:63:12:25:0c:5e:cf:96: 38:20:7a:e2:4e:48:10:13:5c:9a:ed:1a:8c:f5:de:f7:9e:6e: f3:68:30:b6:e5:67:f5:8f:d2:59:4c:20:25:70:e4:d2:27:6a: 4c:45:77:e8:00:58:37:ff:07:30:07:2a:a6:68:a6:61:07:c3: 5a:67:f3:73:56:48:a9:bb:bf:09:4c:4a:f3:a0:d9:ad:e6:04: 77:fb:90:b2:37:d6:c2:41:47:6a:93:56:2b:fd:09:c1:3e:b2: d1:9c:64:be -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbALTBhLiOhZOdRIhtGGkaVQOAe8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUM5QUFCOTEwMDcwNTNFNjNDRTE3Rjk4RDc0RkZEODk0 NUYyOUVERTAeFw0yNTEyMjQxNTM4NTBaFw0yNTEyMjgwMjI5NTBaMDMxMTAvBgNV BAMTKEM3NURFNTI0NkMyMjY5Qjg5Mzc2QjgwOEEyMDY1MjBCRTAwRkE1MDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuVR41ve2qOhBAA/2/hzGtIzFI jdWsFjZ4o1eHC2MDJn02pPtXPZ5m4bhbqUO4gsXxnkPBf7/oYCIAj8lamJvaNY4c dTCwkves1uxrSn43wADgLLWOgWu3ngZQvcN18Wia8zILPQjisMc72XbvkKu75rAw q4XdmeeQNEI1vEJZf6eVw/PTtiwovhOz1CGN9ibGIhrMQxoJ3Hak2IGgCTsMfO6I Q/1fDnAEAo8MAQqxC1xRwY2Arrr5aHwuFc3x6/BABeRztIcAq0svPRrBKr1G322u DPnW8OxBDE4Z969wWYRcvm3S451TPMzLuNoaFy0oe4ZvDT+TzHfezYFTrR0fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUx13lJGwiabiTdrgIogZSC+APpQQwHwYDVR0j BBgwFoAU7JqrkQBwU+Y84X+Y10/9iUXynt4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YmI0M2VjOC1mNTgyLTQwMjUtOGYzNi0zY2VhNTM5ZDBiMDkvMC9FQzlBQUI5MTAw NzA1M0U2M0NFMTdGOThENzRGRkQ4OTQ1RjI5RURFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUM5QUFCOTEwMDcwNTNFNjNDRTE3Rjk4RDc0RkZEODk0NUYy OUVERS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWJiNDNlYzgtZjU4Mi00MDI1LThm MzYtM2NlYTUzOWQwYjA5LzAvRUM5QUFCOTEwMDcwNTNFNjNDRTE3Rjk4RDc0RkZE ODk0NUYyOUVERS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGmN5eox1sxfVLA1UA52pvAHTBzM05y6vnRg zvJRY1/c7F5TPeHujZtmnX8JeE8R5F95Ikj0iIEkflHVxaOopM3TTGwVdZLPcu4a lNGnS+AoYD5DtpF+tk92qCuhZZw990XdShL3NeaKKlroMZd3mrL4Ahl77pssXtHZ VmVLOG+SDTdZvz8DTDIKRPbm2GJytn2WzLh/n6rB1BtfYxIlDF7PljggeuJOSBAT XJrtGoz13veebvNoMLblZ/WP0llMICVw5NInakxFd+gAWDf/BzAHKqZopmEHw1pn 83NWSKm7vwlMSvOg2a3mBHf7kLI31sJBR2qTViv9CcE+stGcZL4= -----END CERTIFICATE-----Generated at Wed Dec 24 22:07:21 2025 by rpki-client