This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/73fe4255-1d91-4fcc-bce4-8a42adfe3c29/0/EC39D766063B56E5EA4DBFB2A502298FB995956A.mft
File: EC39D766063B56E5EA4DBFB2A502298FB995956A.mft (raw, json)
Hash identifier: wPdKbxvByQsgZAQULbO1oPNaJwSTGpphTRhvRK2ftaQ=
Subject key identifier: 96:38:95:FB:93:C0:FE:CF:4C:56:A0:50:20:09:C4:BC:AC:59:26:F8
Authority key identifier: EC:39:D7:66:06:3B:56:E5:EA:4D:BF:B2:A5:02:29:8F:B9:95:95:6A
Certificate issuer: /CN=EC39D766063B56E5EA4DBFB2A502298FB995956A
Certificate serial: 0C56038613DDC844D766D0CF12E3FC5A35672272
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC39D766063B56E5EA4DBFB2A502298FB995956A.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/73fe4255-1d91-4fcc-bce4-8a42adfe3c29/0/EC39D766063B56E5EA4DBFB2A502298FB995956A.mft
Manifest number: 0532
Signing time: Thu 18 Dec 2025 23:30:41 +0000
Manifest this update: Thu 18 Dec 2025 23:25:41 +0000
Manifest next update: Mon 22 Dec 2025 10:00:41 +0000
Files and hashes: 1: EC39D766063B56E5EA4DBFB2A502298FB995956A.crl (hash: vk2IpVmcFQmO3l/zqwgFEyquo1KBchSD3pEWvfvHP/0=)
2: 3130332e3133392e32352e302f32342d3234203d3e20313338383738.roa (hash: fXYsqxCjsvIrOq+7nStBZ2/w2ahyZCjmKRe5J8m8wVg=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/73fe4255-1d91-4fcc-bce4-8a42adfe3c29/0/EC39D766063B56E5EA4DBFB2A502298FB995956A.crl
rsync://repo-rpki.idnic.net/repo/73fe4255-1d91-4fcc-bce4-8a42adfe3c29/0/EC39D766063B56E5EA4DBFB2A502298FB995956A.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC39D766063B56E5EA4DBFB2A502298FB995956A.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 22 Dec 2025 03:43:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:56:03:86:13:dd:c8:44:d7:66:d0:cf:12:e3:fc:5a:35:67:22:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EC39D766063B56E5EA4DBFB2A502298FB995956A
Validity
Not Before: Dec 18 23:25:41 2025 GMT
Not After : Dec 22 10:00:41 2025 GMT
Subject: CN=963895FB93C0FECF4C56A0502009C4BCAC5926F8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:74:9c:ab:83:cb:38:56:9c:a3:ed:a3:44:92:
34:09:93:d6:ba:7f:1f:ad:06:93:50:9c:5f:f2:c4:
d2:24:60:06:81:64:33:6b:c1:76:7e:20:2d:b2:93:
bb:2a:f6:0c:85:c3:55:c5:79:3f:a0:95:58:7d:2b:
21:a8:c7:e7:83:6f:d3:64:ae:fe:c8:32:42:bd:51:
94:75:74:5d:38:30:13:77:1a:84:4a:e2:75:20:4d:
9d:65:93:6d:4c:ef:53:06:b4:d0:a2:49:19:00:b1:
d3:e3:d3:5d:c4:a5:f3:f6:55:c8:98:4f:25:7c:56:
7a:59:94:11:d5:5a:f5:6a:75:45:40:a1:24:a6:77:
b4:91:f8:2c:31:91:36:07:60:af:8c:37:83:5d:dd:
80:07:bf:ca:a4:87:1e:75:77:c7:2c:28:2d:bd:54:
b5:9a:ef:25:e2:3b:73:71:f4:08:40:af:2b:ab:13:
5d:30:c6:99:66:58:3e:54:21:b8:96:51:5e:42:ab:
4a:4b:03:fc:fd:53:fe:21:45:35:7a:8b:0f:23:bc:
2b:08:9b:15:b9:3b:ec:9a:11:46:00:4e:de:43:06:
ea:02:ab:b1:54:15:0c:e4:4a:b3:a0:8c:da:f6:37:
22:d8:1a:fe:45:7e:45:12:e8:7d:39:93:2a:54:96:
3b:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:38:95:FB:93:C0:FE:CF:4C:56:A0:50:20:09:C4:BC:AC:59:26:F8
X509v3 Authority Key Identifier:
keyid:EC:39:D7:66:06:3B:56:E5:EA:4D:BF:B2:A5:02:29:8F:B9:95:95:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/73fe4255-1d91-4fcc-bce4-8a42adfe3c29/0/EC39D766063B56E5EA4DBFB2A502298FB995956A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC39D766063B56E5EA4DBFB2A502298FB995956A.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73fe4255-1d91-4fcc-bce4-8a42adfe3c29/0/EC39D766063B56E5EA4DBFB2A502298FB995956A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:a4:b8:76:0d:7b:c5:84:b8:f8:54:94:fd:2c:14:10:4d:11:
c1:a2:bc:14:44:4e:75:f2:ac:b4:67:9a:2a:5d:04:af:7a:b3:
af:6b:a5:a6:ea:4c:51:66:45:99:d4:58:f3:e0:e4:d8:c3:3b:
ef:7a:5b:ec:1e:b0:24:92:59:60:8a:6f:68:ee:10:60:53:d2:
8b:4b:97:84:d1:17:ba:88:68:66:85:08:41:66:25:53:4f:9f:
02:dd:c1:bb:d0:07:a8:ec:7a:39:8e:1f:dd:77:27:f7:a5:f5:
6b:6e:71:a4:09:d9:27:88:05:28:29:fe:c7:86:46:47:ac:bb:
bb:a8:33:de:c8:66:e5:6c:8a:20:70:ad:91:ea:c6:30:91:63:
d8:b6:10:44:ab:3a:d4:64:61:7e:e6:5d:ea:d2:54:fd:53:f7:
f0:cc:25:c6:96:26:1f:66:8c:1a:40:0f:5c:37:30:6e:e4:86:
38:6b:19:04:9c:4c:a3:8c:cf:30:4f:7e:53:6f:d1:5c:3e:1b:
1c:e5:3b:6e:ae:a8:e3:72:7e:96:4b:f1:99:1a:e8:56:fa:f5:
5a:38:96:f0:74:58:b7:c6:91:c6:91:e3:09:38:bb:56:7a:24:
51:af:44:90:c8:d7:c1:a4:46:b5:43:e2:92:66:9a:a2:a6:ec:
0e:de:f6:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 18:33:55 2025 by rpki-client