This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/e1c48756-b662-468a-906d-6cd461cb6e42/0/EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26.mft File: EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26.mft (raw, json) Hash identifier: yd/CDssazfshDUdQ+fEuG3XpWRbfMFciFLCQnj/tRqE= Subject key identifier: 75:85:9F:9F:17:74:61:0E:E2:30:9D:19:D1:BD:F3:A2:CD:32:95:A1 Authority key identifier: EF:D2:09:19:B9:6F:4E:34:FA:9E:4A:0C:CC:23:47:A4:BC:D9:EA:26 Certificate issuer: /CN=EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26 Certificate serial: 4FCE7262388518A70460D19B3572FE9B7FDDCFAE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e1c48756-b662-468a-906d-6cd461cb6e42/0/EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26.mft Manifest number: 01FA Signing time: Sun 28 Dec 2025 22:31:24 +0000 Manifest this update: Sun 28 Dec 2025 22:26:24 +0000 Manifest next update: Thu 01 Jan 2026 08:32:24 +0000 Files and hashes: 1: 3130332e3131332e332e302f32342d3234203d3e20313337333432.roa (hash: a5r+evyHi4RcP5APmnZM1VFgptF4O6HvhFasr9olIfY=) 2: EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26.crl (hash: 4intqIo0RHCrbXAP0COiKj2QkfVzIOxG4nYOZwKM+O0=) 3: 3130332e3231392e3131322e302f32342d3234203d3e20313337333432.roa (hash: bSd7lFuLXvK7t89PrxW8ofWlYEOIMss9c7qTJsvJO80=) 4: 323030313a6466323a336130303a3a2f34382d3438203d3e20313337333432.roa (hash: ksIEFNaSzeLI+q7xZzyqipfYLMI/o1zxI631Se0BC2U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e1c48756-b662-468a-906d-6cd461cb6e42/0/EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26.crl rsync://repo-rpki.idnic.net/repo/e1c48756-b662-468a-906d-6cd461cb6e42/0/EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Jan 2026 08:32:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:ce:72:62:38:85:18:a7:04:60:d1:9b:35:72:fe:9b:7f:dd:cf:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26 Validity Not Before: Dec 28 22:26:24 2025 GMT Not After : Jan 1 08:32:24 2026 GMT Subject: CN=75859F9F1774610EE2309D19D1BDF3A2CD3295A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:59:78:77:1a:aa:c3:97:8a:66:63:12:8d:6f: d4:e7:11:3e:d5:59:3d:13:09:77:c1:68:87:12:35: 14:e1:fd:ff:03:1e:c5:cc:28:a5:39:73:c8:20:f6: 27:ad:8b:2e:59:31:de:3e:29:89:45:cd:7c:98:bd: b3:be:31:f6:39:45:9d:1e:a7:bd:47:d3:88:2b:07: 26:52:ab:3d:d0:3b:17:b2:54:83:99:b6:79:51:dd: 90:13:39:74:aa:33:d6:55:9a:91:84:91:8c:ac:3b: 9a:c8:44:91:26:ad:5c:7c:40:9c:64:74:7b:01:1f: 9f:be:28:9e:3e:31:5a:b4:ed:0e:f8:88:18:90:b8: 01:d7:99:0c:a3:f5:1d:2d:5d:10:c4:af:18:4d:8b: 7c:5d:c6:43:67:15:d4:9e:22:6a:55:d5:fb:8d:3f: 02:fb:03:f0:f1:8b:59:9f:1b:84:03:39:2c:5e:52: ca:86:8e:da:c3:82:ae:41:67:1b:b2:03:26:c3:b1: 6c:ad:23:54:7b:b4:1a:e4:c8:32:27:da:f1:3d:83: 3d:82:75:15:14:a8:b5:5b:38:4c:83:a3:fd:89:4c: 8f:26:6c:38:87:ad:b3:ef:15:44:5f:cc:b6:24:15: d6:4a:2c:85:cd:fb:ad:12:23:de:e4:4b:dd:60:cc: ca:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:85:9F:9F:17:74:61:0E:E2:30:9D:19:D1:BD:F3:A2:CD:32:95:A1 X509v3 Authority Key Identifier: keyid:EF:D2:09:19:B9:6F:4E:34:FA:9E:4A:0C:CC:23:47:A4:BC:D9:EA:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e1c48756-b662-468a-906d-6cd461cb6e42/0/EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e1c48756-b662-468a-906d-6cd461cb6e42/0/EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:e7:d4:03:01:06:0b:03:a6:5c:e8:bd:8e:9d:ff:ed:84:c0: 93:fe:06:26:f7:5e:95:e4:46:80:b3:a5:22:c1:84:bc:3b:c7: 59:88:14:bc:56:02:e9:81:01:f8:2b:35:e8:59:65:f9:05:76: b8:c8:87:84:4a:c1:e9:43:38:d2:9b:a6:62:4c:91:b7:4a:06: 08:0d:e3:17:bd:1c:d0:32:56:c1:06:ac:49:e6:81:8e:82:a1: 5a:1f:cb:30:d2:14:98:aa:9b:b0:e0:ab:36:bc:15:ad:c6:06: 38:04:69:e9:dd:5c:0a:92:54:a3:3c:84:61:c5:a4:30:9b:c3: 3c:05:f6:c1:00:33:c5:c3:dc:81:88:52:77:8d:41:3b:eb:2a: 0b:0a:31:5d:b8:ec:da:48:6a:f6:dc:3b:c9:de:a5:ae:55:ad: cb:b7:b9:3a:68:82:44:6b:ee:69:4b:49:83:b7:7f:34:a8:cd: db:d9:52:ba:53:63:5c:1f:8c:a9:d4:d7:da:49:08:f8:d1:15: 32:c5:40:f6:df:01:2f:ca:15:5f:2d:2f:14:99:a4:a3:1d:f5: 37:1f:49:a5:8e:9e:6d:63:d5:14:d5:d2:21:77:c9:ea:af:c6: b2:0f:5d:f2:a0:64:45:33:47:2c:12:2e:c8:34:59:dc:62:48: c4:d0:60:88 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUT85yYjiFGKcEYNGbNXL+m3/dz64wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUZEMjA5MTlCOTZGNEUzNEZBOUU0QTBDQ0MyMzQ3QTRC Q0Q5RUEyNjAeFw0yNTEyMjgyMjI2MjRaFw0yNjAxMDEwODMyMjRaMDMxMTAvBgNV BAMTKDc1ODU5RjlGMTc3NDYxMEVFMjMwOUQxOUQxQkRGM0EyQ0QzMjk1QTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9WXh3GqrDl4pmYxKNb9TnET7V WT0TCXfBaIcSNRTh/f8DHsXMKKU5c8gg9ietiy5ZMd4+KYlFzXyYvbO+MfY5RZ0e p71H04grByZSqz3QOxeyVIOZtnlR3ZATOXSqM9ZVmpGEkYysO5rIRJEmrVx8QJxk dHsBH5++KJ4+MVq07Q74iBiQuAHXmQyj9R0tXRDErxhNi3xdxkNnFdSeImpV1fuN PwL7A/Dxi1mfG4QDOSxeUsqGjtrDgq5BZxuyAybDsWytI1R7tBrkyDIn2vE9gz2C dRUUqLVbOEyDo/2JTI8mbDiHrbPvFURfzLYkFdZKLIXN+60SI97kS91gzMrRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdYWfnxd0YQ7iMJ0Z0b3zos0ylaEwHwYDVR0j BBgwFoAU79IJGblvTjT6nkoMzCNHpLzZ6iYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MWM0ODc1Ni1iNjYyLTQ2OGEtOTA2ZC02Y2Q0NjFjYjZlNDIvMC9FRkQyMDkxOUI5 NkY0RTM0RkE5RTRBMENDQzIzNDdBNEJDRDlFQTI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUZEMjA5MTlCOTZGNEUzNEZBOUU0QTBDQ0MyMzQ3QTRCQ0Q5 RUEyNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTFjNDg3NTYtYjY2Mi00NjhhLTkw NmQtNmNkNDYxY2I2ZTQyLzAvRUZEMjA5MTlCOTZGNEUzNEZBOUU0QTBDQ0MyMzQ3 QTRCQ0Q5RUEyNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACTn1AMBBgsDplzovY6d/+2EwJP+Bib3XpXk RoCzpSLBhLw7x1mIFLxWAumBAfgrNehZZfkFdrjIh4RKwelDONKbpmJMkbdKBggN 4xe9HNAyVsEGrEnmgY6CoVofyzDSFJiqm7Dgqza8Fa3GBjgEaendXAqSVKM8hGHF pDCbwzwF9sEAM8XD3IGIUneNQTvrKgsKMV247NpIavbcO8nepa5Vrcu3uTpogkRr 7mlLSYO3fzSozdvZUrpTY1wfjKnU19pJCPjRFTLFQPbfAS/KFV8tLxSZpKMd9Tcf SaWOnm1j1RTV0iF3yeqvxrIPXfKgZEUzRywSLsg0WdxiSMTQYIg= -----END CERTIFICATE-----Generated at Wed Dec 31 02:01:27 2025 by rpki-client