This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/1127eafd-a674-4437-abf1-e550dec137fa/0/EBA04070CA27E646C332039E07557734C6732ED2.mft File: EBA04070CA27E646C332039E07557734C6732ED2.mft (raw, json) Hash identifier: fCAuFjIBv5tx9YmO2hVhkzWhB3+QUc3HEL8xMziTOCA= Subject key identifier: 0E:4C:96:0D:5C:AF:1E:6D:D1:69:0E:96:06:FF:2F:75:AA:7E:E7:2B Authority key identifier: EB:A0:40:70:CA:27:E6:46:C3:32:03:9E:07:55:77:34:C6:73:2E:D2 Certificate issuer: /CN=EBA04070CA27E646C332039E07557734C6732ED2 Certificate serial: 7E448206726F7CD63043B9211371B5C3E8695B90 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EBA04070CA27E646C332039E07557734C6732ED2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1127eafd-a674-4437-abf1-e550dec137fa/0/EBA04070CA27E646C332039E07557734C6732ED2.mft Manifest number: 01F5 Signing time: Thu 04 Dec 2025 20:31:58 +0000 Manifest this update: Thu 04 Dec 2025 20:26:58 +0000 Manifest next update: Mon 08 Dec 2025 02:59:58 +0000 Files and hashes: 1: EBA04070CA27E646C332039E07557734C6732ED2.crl (hash: /of+a5T+F/zmSjuLdfAyU7PeFiuSkq9fPdqoiEi3iHc=) 2: 3130332e3131312e3134312e302f32342d3234203d3e20313431343631.roa (hash: FOKCBmZQR+RvQ/YXjf6i5T2Jp3732D5RrjsxBFstWVo=) 3: 3130332e3131312e3134302e302f32342d3234203d3e20313431343631.roa (hash: bDyPI2WVo6BjRMZp12OHCZAGn1tdLEQqcz47No/uxaA=) 4: 3130332e3131312e3134332e302f32342d3234203d3e20313431343631.roa (hash: vMUSQ2h0yM8CNBMFULwiVWwmyMjPH1qg6y43JB4Vwvw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1127eafd-a674-4437-abf1-e550dec137fa/0/EBA04070CA27E646C332039E07557734C6732ED2.crl rsync://repo-rpki.idnic.net/repo/1127eafd-a674-4437-abf1-e550dec137fa/0/EBA04070CA27E646C332039E07557734C6732ED2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EBA04070CA27E646C332039E07557734C6732ED2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 02:59:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:44:82:06:72:6f:7c:d6:30:43:b9:21:13:71:b5:c3:e8:69:5b:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EBA04070CA27E646C332039E07557734C6732ED2 Validity Not Before: Dec 4 20:26:58 2025 GMT Not After : Dec 8 02:59:58 2025 GMT Subject: CN=0E4C960D5CAF1E6DD1690E9606FF2F75AA7EE72B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:4f:26:34:af:75:33:1e:6a:28:e5:9f:23:5e: 74:a9:86:44:2f:fd:39:0b:3c:f7:63:e9:c0:5d:08: 4d:da:65:8c:5f:0d:05:15:e5:f6:b0:10:88:a4:ae: f2:f8:b7:4b:04:71:68:1c:7b:7e:4e:09:75:29:72: d4:8e:84:92:7f:3f:b9:cf:fe:98:f0:13:4c:b1:d1: d6:a8:19:96:6f:ea:e6:58:5c:69:77:00:87:29:58: 9e:8d:0b:9b:ef:01:97:30:19:5f:be:85:6b:3d:58: 3b:d3:6d:2d:27:57:68:45:90:63:80:7a:52:9a:aa: 22:ed:86:92:07:b9:eb:32:c3:11:86:70:ec:73:53: ae:1a:7e:48:cf:2c:d7:42:62:5b:97:98:1c:c5:d9: a7:a4:5d:98:d8:86:5e:e3:2a:ee:69:99:4b:a7:46: f7:55:29:7a:c0:eb:89:ac:15:bc:18:24:6e:68:f9: e7:9a:42:81:01:09:b7:36:70:91:d8:b1:b7:e3:ee: ba:d6:00:a2:7f:5d:20:3f:ba:5c:a7:2f:95:90:a9: a7:33:85:e9:06:37:a8:01:79:fc:af:3b:35:01:02: 22:b1:30:49:03:e9:4d:0f:45:9e:68:f4:8f:ef:1a: 92:0f:fc:c1:df:f4:bd:bf:74:2b:54:96:cf:7c:4b: 62:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:4C:96:0D:5C:AF:1E:6D:D1:69:0E:96:06:FF:2F:75:AA:7E:E7:2B X509v3 Authority Key Identifier: keyid:EB:A0:40:70:CA:27:E6:46:C3:32:03:9E:07:55:77:34:C6:73:2E:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1127eafd-a674-4437-abf1-e550dec137fa/0/EBA04070CA27E646C332039E07557734C6732ED2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EBA04070CA27E646C332039E07557734C6732ED2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1127eafd-a674-4437-abf1-e550dec137fa/0/EBA04070CA27E646C332039E07557734C6732ED2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:12:bc:09:3e:80:15:be:d7:ad:49:03:c6:06:ab:1d:70:fd: ee:58:de:f9:50:21:f5:20:5c:90:61:32:06:3d:7e:11:a2:df: 9f:03:38:56:9f:8a:81:77:05:8e:98:c1:d0:3c:6a:3c:85:26: 2c:8a:ad:36:0e:b9:9e:13:d9:2f:69:0e:7a:b0:ac:02:a2:09: c6:e7:75:55:f9:a4:a5:ed:30:10:10:cd:00:1d:f5:8b:56:fc: 71:b9:af:30:f7:ad:dd:27:4b:04:9a:43:62:fc:c7:4f:df:8b: 98:7f:0a:34:70:a5:fd:10:16:1d:af:da:ac:39:dc:db:ce:73: 43:98:f2:31:1a:8b:dd:2a:5b:7e:54:bf:55:ce:71:1c:bf:55: a5:a1:d4:0a:78:10:5f:e6:e5:81:c6:c7:5c:71:8f:a8:c3:9b: 93:50:01:6e:b3:c1:82:f7:b9:aa:be:f1:97:9e:15:9d:ff:8a: 12:3a:dc:03:60:1d:8e:8f:c9:8e:49:58:48:9a:40:62:58:c6: 37:7c:58:ae:a6:8f:43:97:15:49:21:73:21:86:80:20:3f:bb: 13:88:b8:10:f0:68:88:b9:dd:19:e9:e8:74:c7:1f:57:56:3b: 9e:c0:98:56:4f:63:d7:95:93:d1:e9:14:89:46:bd:85:46:af: 3d:86:bb:83 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfkSCBnJvfNYwQ7khE3G1w+hpW5AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUJBMDQwNzBDQTI3RTY0NkMzMzIwMzlFMDc1NTc3MzRD NjczMkVEMjAeFw0yNTEyMDQyMDI2NThaFw0yNTEyMDgwMjU5NThaMDMxMTAvBgNV BAMTKDBFNEM5NjBENUNBRjFFNkREMTY5MEU5NjA2RkYyRjc1QUE3RUU3MkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNTyY0r3UzHmoo5Z8jXnSphkQv /TkLPPdj6cBdCE3aZYxfDQUV5fawEIikrvL4t0sEcWgce35OCXUpctSOhJJ/P7nP /pjwE0yx0daoGZZv6uZYXGl3AIcpWJ6NC5vvAZcwGV++hWs9WDvTbS0nV2hFkGOA elKaqiLthpIHuesywxGGcOxzU64afkjPLNdCYluXmBzF2aekXZjYhl7jKu5pmUun RvdVKXrA64msFbwYJG5o+eeaQoEBCbc2cJHYsbfj7rrWAKJ/XSA/ulynL5WQqacz hekGN6gBefyvOzUBAiKxMEkD6U0PRZ5o9I/vGpIP/MHf9L2/dCtUls98S2KlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDkyWDVyvHm3RaQ6WBv8vdap+5yswHwYDVR0j BBgwFoAU66BAcMon5kbDMgOeB1V3NMZzLtIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MTI3ZWFmZC1hNjc0LTQ0MzctYWJmMS1lNTUwZGVjMTM3ZmEvMC9FQkEwNDA3MENB MjdFNjQ2QzMzMjAzOUUwNzU1NzczNEM2NzMyRUQyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUJBMDQwNzBDQTI3RTY0NkMzMzIwMzlFMDc1NTc3MzRDNjcz MkVEMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTEyN2VhZmQtYTY3NC00NDM3LWFi ZjEtZTU1MGRlYzEzN2ZhLzAvRUJBMDQwNzBDQTI3RTY0NkMzMzIwMzlFMDc1NTc3 MzRDNjczMkVEMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABgSvAk+gBW+161JA8YGqx1w/e5Y3vlQIfUg XJBhMgY9fhGi358DOFafioF3BY6YwdA8ajyFJiyKrTYOuZ4T2S9pDnqwrAKiCcbn dVX5pKXtMBAQzQAd9YtW/HG5rzD3rd0nSwSaQ2L8x0/fi5h/CjRwpf0QFh2v2qw5 3NvOc0OY8jEai90qW35Uv1XOcRy/VaWh1Ap4EF/m5YHGx1xxj6jDm5NQAW6zwYL3 uaq+8ZeeFZ3/ihI63ANgHY6PyY5JWEiaQGJYxjd8WK6mj0OXFUkhcyGGgCA/uxOI uBDwaIi53Rnp6HTHH1dWO57AmFZPY9eVk9HpFIlGvYVGrz2Gu4M= -----END CERTIFICATE-----Generated at Sat Dec 6 23:23:23 2025 by rpki-client