This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d3e27da9-e6e6-44a5-98f4-590eb5a1bd65/0/EFA4BF9A0D2DD57446126C57F39AF10838E0C675.mft File: EFA4BF9A0D2DD57446126C57F39AF10838E0C675.mft (raw, json) Hash identifier: CiB7wFuC7If7GRXOyqMRJtWeiayqRxfLd0Wihzw2Oe4= Subject key identifier: 23:BE:9D:E0:15:B8:FC:41:E2:46:66:E9:0A:6D:DD:B9:5B:DE:D0:FA Authority key identifier: EF:A4:BF:9A:0D:2D:D5:74:46:12:6C:57:F3:9A:F1:08:38:E0:C6:75 Certificate issuer: /CN=EFA4BF9A0D2DD57446126C57F39AF10838E0C675 Certificate serial: 4FD9EE8B6FAA8CE757EAF722AA1EAF29F28BDEA4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFA4BF9A0D2DD57446126C57F39AF10838E0C675.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d3e27da9-e6e6-44a5-98f4-590eb5a1bd65/0/EFA4BF9A0D2DD57446126C57F39AF10838E0C675.mft Manifest number: 01A8 Signing time: Tue 23 Dec 2025 01:11:30 +0000 Manifest this update: Tue 23 Dec 2025 01:06:30 +0000 Manifest next update: Fri 26 Dec 2025 01:45:30 +0000 Files and hashes: 1: EFA4BF9A0D2DD57446126C57F39AF10838E0C675.crl (hash: Cis4U2/7wO3tWV5145676SF3oqwwEzhJyys/Mqe92NQ=) 2: 3130332e3235332e3132372e302f32342d3234203d3e20313530393839.roa (hash: tiskF97htgFGOxcUjLLoNbBwjgTxxSKvgdsrNkZUkUk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d3e27da9-e6e6-44a5-98f4-590eb5a1bd65/0/EFA4BF9A0D2DD57446126C57F39AF10838E0C675.crl rsync://repo-rpki.idnic.net/repo/d3e27da9-e6e6-44a5-98f4-590eb5a1bd65/0/EFA4BF9A0D2DD57446126C57F39AF10838E0C675.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFA4BF9A0D2DD57446126C57F39AF10838E0C675.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 01:45:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:d9:ee:8b:6f:aa:8c:e7:57:ea:f7:22:aa:1e:af:29:f2:8b:de:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EFA4BF9A0D2DD57446126C57F39AF10838E0C675 Validity Not Before: Dec 23 01:06:30 2025 GMT Not After : Dec 26 01:45:30 2025 GMT Subject: CN=23BE9DE015B8FC41E24666E90A6DDDB95BDED0FA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ee:c2:22:7a:ad:96:f6:c7:a7:18:82:95:6b: f9:12:61:78:95:05:0f:e3:d4:41:9c:b2:09:c8:f8: a1:6a:34:0b:98:7a:44:d0:e4:5a:9b:4a:7f:a4:8b: e1:52:c6:58:cb:2e:ac:b6:6d:7c:65:d0:72:fd:ce: f4:34:da:58:19:4a:da:86:72:00:96:6c:72:61:81: a5:7e:f7:6b:a2:e1:1f:6f:51:6a:6d:27:6d:b5:9c: 49:a0:35:60:0d:b1:0a:1a:aa:c2:47:3d:ff:cd:83: 47:8d:f0:50:8f:41:ac:5e:f0:08:e4:c0:fb:54:37: e9:a2:25:21:b0:53:40:a1:c4:86:e6:1e:fd:67:0e: 4d:66:e1:3f:3a:6a:b7:86:28:a5:ba:e0:f0:9d:9b: be:98:dc:c1:a7:44:6a:ac:21:4f:b2:6f:4a:41:57: c0:09:22:7f:03:0f:43:2f:91:b1:45:1c:c8:d1:5a: b0:cc:4e:5a:48:fa:e2:20:b0:e6:c1:b3:c3:cf:fd: 49:88:52:58:f7:5d:78:21:db:fb:34:20:9b:f2:a5: dc:d9:0c:37:45:62:ec:57:03:00:e2:b9:63:34:38: 60:82:b2:ab:00:59:cb:19:a7:16:47:55:ee:21:5b: d4:1d:f6:d6:98:17:76:37:aa:b5:9f:67:00:d8:26: d0:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:BE:9D:E0:15:B8:FC:41:E2:46:66:E9:0A:6D:DD:B9:5B:DE:D0:FA X509v3 Authority Key Identifier: keyid:EF:A4:BF:9A:0D:2D:D5:74:46:12:6C:57:F3:9A:F1:08:38:E0:C6:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d3e27da9-e6e6-44a5-98f4-590eb5a1bd65/0/EFA4BF9A0D2DD57446126C57F39AF10838E0C675.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFA4BF9A0D2DD57446126C57F39AF10838E0C675.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d3e27da9-e6e6-44a5-98f4-590eb5a1bd65/0/EFA4BF9A0D2DD57446126C57F39AF10838E0C675.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:89:a3:5d:cf:62:06:11:b2:f5:72:38:62:72:0e:10:cd:5a: 9d:6c:e0:c0:6e:b9:34:de:54:5d:5a:9a:d5:7c:c5:6c:93:ca: 63:07:ca:06:66:c8:1b:29:15:c4:c7:c8:3d:cd:a9:a0:ed:53: 8f:27:3c:1c:25:b2:2d:fc:bb:8c:5a:c0:87:1a:ab:da:5c:20: d0:56:cf:01:55:05:4f:24:ec:19:8c:ed:f1:bc:60:01:84:58: 52:f5:98:16:5d:8a:fa:d4:87:98:80:b0:53:0f:b0:58:f0:21: 60:f2:58:5e:67:bc:8a:07:c2:6f:03:5f:5b:ef:4b:b3:aa:65: 10:c1:8e:57:16:45:8a:39:90:b7:02:f0:ed:72:92:8c:80:b3: ad:44:18:8c:ac:3f:7e:4e:c1:f2:21:b0:bb:ae:a0:bb:13:d8: ce:bb:af:5c:37:d1:54:b1:a0:2e:d1:9c:d9:da:21:6c:ab:8c: 84:f2:72:dc:14:ef:bd:d0:11:53:96:a4:c8:c4:d4:70:25:7c: f5:91:87:d9:9e:7d:e8:52:38:64:8d:51:16:7d:e5:17:f4:e9: 7e:fb:77:d1:fe:7b:6d:6c:69:b4:8c:91:44:b8:9e:81:64:e5: 14:65:a2:30:aa:1e:77:1c:bd:63:b4:74:e6:f8:7f:7b:40:4e: c6:7b:69:cc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUT9nui2+qjOdX6vciqh6vKfKL3qQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUZBNEJGOUEwRDJERDU3NDQ2MTI2QzU3RjM5QUYxMDgz OEUwQzY3NTAeFw0yNTEyMjMwMTA2MzBaFw0yNTEyMjYwMTQ1MzBaMDMxMTAvBgNV BAMTKDIzQkU5REUwMTVCOEZDNDFFMjQ2NjZFOTBBNkREREI5NUJERUQwRkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC7sIieq2W9senGIKVa/kSYXiV BQ/j1EGcsgnI+KFqNAuYekTQ5FqbSn+ki+FSxljLLqy2bXxl0HL9zvQ02lgZStqG cgCWbHJhgaV+92ui4R9vUWptJ221nEmgNWANsQoaqsJHPf/Ng0eN8FCPQaxe8Ajk wPtUN+miJSGwU0ChxIbmHv1nDk1m4T86areGKKW64PCdm76Y3MGnRGqsIU+yb0pB V8AJIn8DD0MvkbFFHMjRWrDMTlpI+uIgsObBs8PP/UmIUlj3XXgh2/s0IJvypdzZ DDdFYuxXAwDiuWM0OGCCsqsAWcsZpxZHVe4hW9Qd9taYF3Y3qrWfZwDYJtAfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUI76d4BW4/EHiRmbpCm3duVve0PowHwYDVR0j BBgwFoAU76S/mg0t1XRGEmxX85rxCDjgxnUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k M2UyN2RhOS1lNmU2LTQ0YTUtOThmNC01OTBlYjVhMWJkNjUvMC9FRkE0QkY5QTBE MkRENTc0NDYxMjZDNTdGMzlBRjEwODM4RTBDNjc1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUZBNEJGOUEwRDJERDU3NDQ2MTI2QzU3RjM5QUYxMDgzOEUw QzY3NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDNlMjdkYTktZTZlNi00NGE1LTk4 ZjQtNTkwZWI1YTFiZDY1LzAvRUZBNEJGOUEwRDJERDU3NDQ2MTI2QzU3RjM5QUYx MDgzOEUwQzY3NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGuJo13PYgYRsvVyOGJyDhDNWp1s4MBuuTTe VF1amtV8xWyTymMHygZmyBspFcTHyD3NqaDtU48nPBwlsi38u4xawIcaq9pcINBW zwFVBU8k7BmM7fG8YAGEWFL1mBZdivrUh5iAsFMPsFjwIWDyWF5nvIoHwm8DX1vv S7OqZRDBjlcWRYo5kLcC8O1ykoyAs61EGIysP35OwfIhsLuuoLsT2M67r1w30VSx oC7RnNnaIWyrjITyctwU773QEVOWpMjE1HAlfPWRh9mefehSOGSNURZ95Rf06X77 d9H+e21sabSMkUS4noFk5RRlojCqHnccvWO0dOb4f3tATsZ7acw= -----END CERTIFICATE-----Generated at Wed Dec 24 20:23:45 2025 by rpki-client