This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/e1c48756-b662-468a-906d-6cd461cb6e42/0/EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26.mft File: EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26.mft (raw, json) Hash identifier: JDlbGY3VNaQbELFh5K+rTKgQ26RSnuW5Cuk9JgGjHXU= Subject key identifier: 44:53:23:C8:3A:ED:D3:43:16:78:41:AA:69:3B:77:10:EE:9D:3F:4A Authority key identifier: EF:D2:09:19:B9:6F:4E:34:FA:9E:4A:0C:CC:23:47:A4:BC:D9:EA:26 Certificate issuer: /CN=EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26 Certificate serial: 76070D1198210FD1E56FA569E273681CBB3ABEC2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e1c48756-b662-468a-906d-6cd461cb6e42/0/EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26.mft Manifest number: 01F5 Signing time: Wed 17 Dec 2025 22:51:25 +0000 Manifest this update: Wed 17 Dec 2025 22:46:25 +0000 Manifest next update: Sat 20 Dec 2025 23:46:25 +0000 Files and hashes: 1: EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26.crl (hash: YeX0rsP+ZUs/9I4fYh/AjzCpcl1Q1ksuVYvggBFuX8w=) 2: 3130332e3131332e332e302f32342d3234203d3e20313337333432.roa (hash: a5r+evyHi4RcP5APmnZM1VFgptF4O6HvhFasr9olIfY=) 3: 3130332e3231392e3131322e302f32342d3234203d3e20313337333432.roa (hash: bSd7lFuLXvK7t89PrxW8ofWlYEOIMss9c7qTJsvJO80=) 4: 323030313a6466323a336130303a3a2f34382d3438203d3e20313337333432.roa (hash: ksIEFNaSzeLI+q7xZzyqipfYLMI/o1zxI631Se0BC2U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e1c48756-b662-468a-906d-6cd461cb6e42/0/EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26.crl rsync://repo-rpki.idnic.net/repo/e1c48756-b662-468a-906d-6cd461cb6e42/0/EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 23:46:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:07:0d:11:98:21:0f:d1:e5:6f:a5:69:e2:73:68:1c:bb:3a:be:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26 Validity Not Before: Dec 17 22:46:25 2025 GMT Not After : Dec 20 23:46:25 2025 GMT Subject: CN=445323C83AEDD343167841AA693B7710EE9D3F4A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:62:40:35:7f:cc:d1:6b:5d:50:b7:3e:26:90: d3:4e:28:0f:f4:91:6b:bd:00:7f:5a:eb:86:46:21: 56:ed:f9:d5:25:1a:8e:e0:74:0e:47:81:34:7a:93: eb:ca:cc:d2:73:a2:41:c9:bb:1e:28:10:92:fd:75: 72:52:28:0d:ec:0c:57:6c:56:10:b8:7c:89:a3:77: be:93:37:a4:a5:22:b6:7b:a1:76:46:9e:4d:53:7c: de:92:f0:8f:d1:96:6d:7e:db:d4:9b:c3:df:64:59: 5d:d4:dd:29:18:bd:cc:17:1e:27:4f:c3:87:76:ea: 82:03:a1:23:88:35:26:93:98:92:e4:bf:b7:53:78: e8:7d:d9:7d:b1:cf:dc:78:b9:c2:fa:14:59:58:f8: 0d:ef:52:1d:55:57:d4:57:a0:3d:13:fb:49:44:dc: 8d:b3:ac:c7:91:04:d9:3a:3e:9d:eb:55:f2:ac:f5: 15:4a:04:ad:05:5c:ad:97:85:21:5f:68:bf:37:76: 20:d5:9e:d3:63:97:e0:44:54:ab:a2:86:fe:12:5b: 46:7a:50:7d:52:11:10:d7:d8:67:a3:9e:0b:aa:35: 18:2b:45:a4:96:f1:e7:27:95:a4:03:bf:07:a0:5d: cf:9f:27:bf:a7:18:c0:ed:4e:ab:f5:be:de:98:d9: 34:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:53:23:C8:3A:ED:D3:43:16:78:41:AA:69:3B:77:10:EE:9D:3F:4A X509v3 Authority Key Identifier: keyid:EF:D2:09:19:B9:6F:4E:34:FA:9E:4A:0C:CC:23:47:A4:BC:D9:EA:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e1c48756-b662-468a-906d-6cd461cb6e42/0/EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e1c48756-b662-468a-906d-6cd461cb6e42/0/EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:38:b4:b7:c4:11:9a:06:6c:22:70:02:e7:35:d9:e9:c7:10: b6:87:32:86:85:50:45:d3:9e:f4:28:94:b1:b3:8d:5d:cd:4f: 29:58:1d:fa:57:73:c9:21:f5:87:44:d9:27:22:af:27:a0:49: 2a:39:84:d0:9c:94:6b:0b:5b:e9:f2:15:95:d9:03:20:f9:0e: 44:33:73:7e:d0:f4:6e:3d:d2:25:f8:16:09:d2:31:d1:4d:24: 69:81:c6:cc:56:58:b5:9b:aa:85:dd:09:9d:66:2a:7c:3b:26: 23:75:50:e1:dc:54:ae:79:aa:7a:de:f5:48:ee:7a:53:d2:56: 58:e0:e0:8a:c2:27:55:0c:2f:24:55:d9:8e:17:f3:35:e1:ea: 4d:46:0a:03:b9:9f:30:b0:dc:cc:6f:cc:44:2b:aa:24:3b:ed: 38:61:7f:3c:55:cf:a0:47:99:95:c4:0f:8a:22:48:b8:25:7a: ef:7f:e7:b7:2a:f5:af:eb:6b:07:29:6b:1c:46:ff:6b:86:ee: 26:18:3a:0e:30:ad:66:e8:22:37:8e:02:aa:45:33:59:4f:51: ec:21:22:7e:ad:7a:68:63:63:f4:6f:d5:c8:6a:55:b0:d6:40: 8c:ba:db:f4:18:45:30:62:14:52:a7:67:60:44:75:c9:59:17: 81:6b:db:b6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdgcNEZghD9Hlb6Vp4nNoHLs6vsIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUZEMjA5MTlCOTZGNEUzNEZBOUU0QTBDQ0MyMzQ3QTRC Q0Q5RUEyNjAeFw0yNTEyMTcyMjQ2MjVaFw0yNTEyMjAyMzQ2MjVaMDMxMTAvBgNV BAMTKDQ0NTMyM0M4M0FFREQzNDMxNjc4NDFBQTY5M0I3NzEwRUU5RDNGNEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7YkA1f8zRa11Qtz4mkNNOKA/0 kWu9AH9a64ZGIVbt+dUlGo7gdA5HgTR6k+vKzNJzokHJux4oEJL9dXJSKA3sDFds VhC4fImjd76TN6SlIrZ7oXZGnk1TfN6S8I/Rlm1+29Sbw99kWV3U3SkYvcwXHidP w4d26oIDoSOINSaTmJLkv7dTeOh92X2xz9x4ucL6FFlY+A3vUh1VV9RXoD0T+0lE 3I2zrMeRBNk6Pp3rVfKs9RVKBK0FXK2XhSFfaL83diDVntNjl+BEVKuihv4SW0Z6 UH1SERDX2GejnguqNRgrRaSW8ecnlaQDvwegXc+fJ7+nGMDtTqv1vt6Y2TRxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURFMjyDrt00MWeEGqaTt3EO6dP0owHwYDVR0j BBgwFoAU79IJGblvTjT6nkoMzCNHpLzZ6iYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MWM0ODc1Ni1iNjYyLTQ2OGEtOTA2ZC02Y2Q0NjFjYjZlNDIvMC9FRkQyMDkxOUI5 NkY0RTM0RkE5RTRBMENDQzIzNDdBNEJDRDlFQTI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUZEMjA5MTlCOTZGNEUzNEZBOUU0QTBDQ0MyMzQ3QTRCQ0Q5 RUEyNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTFjNDg3NTYtYjY2Mi00NjhhLTkw NmQtNmNkNDYxY2I2ZTQyLzAvRUZEMjA5MTlCOTZGNEUzNEZBOUU0QTBDQ0MyMzQ3 QTRCQ0Q5RUEyNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJE4tLfEEZoGbCJwAuc12enHELaHMoaFUEXT nvQolLGzjV3NTylYHfpXc8kh9YdE2SciryegSSo5hNCclGsLW+nyFZXZAyD5DkQz c37Q9G490iX4FgnSMdFNJGmBxsxWWLWbqoXdCZ1mKnw7JiN1UOHcVK55qnre9Uju elPSVljg4IrCJ1UMLyRV2Y4X8zXh6k1GCgO5nzCw3MxvzEQrqiQ77ThhfzxVz6BH mZXED4oiSLgleu9/57cq9a/rawcpaxxG/2uG7iYYOg4wrWboIjeOAqpFM1lPUewh In6temhjY/Rv1chqVbDWQIy62/QYRTBiFFKnZ2BEdclZF4Fr27Y= -----END CERTIFICATE-----Generated at Fri Dec 19 12:58:27 2025 by rpki-client