This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7e8cd97e-56f5-4ca5-a85c-55a323f0608c/0/EB7AB53449E52996F1539393C3DA704C6F12F359.mft File: EB7AB53449E52996F1539393C3DA704C6F12F359.mft (raw, json) Hash identifier: 07cVr273T6GLkTnkf2aqM+CWWCJW9hesLlopKiFn1ME= Subject key identifier: 12:98:96:EF:F2:81:D6:43:DE:FD:99:5B:E2:A1:89:17:B0:9D:4B:6D Authority key identifier: EB:7A:B5:34:49:E5:29:96:F1:53:93:93:C3:DA:70:4C:6F:12:F3:59 Certificate issuer: /CN=EB7AB53449E52996F1539393C3DA704C6F12F359 Certificate serial: 14F49AF33740965579BABD14D14E99BA96F196D2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EB7AB53449E52996F1539393C3DA704C6F12F359.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7e8cd97e-56f5-4ca5-a85c-55a323f0608c/0/EB7AB53449E52996F1539393C3DA704C6F12F359.mft Manifest number: 037F Signing time: Thu 04 Dec 2025 21:50:37 +0000 Manifest this update: Thu 04 Dec 2025 21:45:37 +0000 Manifest next update: Mon 08 Dec 2025 07:33:37 +0000 Files and hashes: 1: EB7AB53449E52996F1539393C3DA704C6F12F359.crl (hash: yY6wrelYlFLPlSNWdMeRdtQEIzjBzme7HW9VoGcO7xQ=) 2: 3131362e302e302e302f32312d3234203d3e203539313339.roa (hash: tvzxlzO0vwNEL3kdVV0vVfOPTOFF94uCEicPO2IlBZc=) 3: 3130332e3235332e302e302f32322d3234203d3e203539313339.roa (hash: DyW9wD+/QVlej0CI+5sCilJX/+5ZDxLLSw8cy8l6+Ec=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7e8cd97e-56f5-4ca5-a85c-55a323f0608c/0/EB7AB53449E52996F1539393C3DA704C6F12F359.crl rsync://repo-rpki.idnic.net/repo/7e8cd97e-56f5-4ca5-a85c-55a323f0608c/0/EB7AB53449E52996F1539393C3DA704C6F12F359.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EB7AB53449E52996F1539393C3DA704C6F12F359.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 07:33:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:f4:9a:f3:37:40:96:55:79:ba:bd:14:d1:4e:99:ba:96:f1:96:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB7AB53449E52996F1539393C3DA704C6F12F359 Validity Not Before: Dec 4 21:45:37 2025 GMT Not After : Dec 8 07:33:37 2025 GMT Subject: CN=129896EFF281D643DEFD995BE2A18917B09D4B6D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:2d:c5:14:40:cb:e6:b3:1c:43:52:e6:a6:ce: 0c:98:8b:0f:d4:49:cc:b9:87:ca:b9:5a:55:ce:ec: ed:82:45:41:7c:f6:f1:7e:50:2a:c0:39:75:dd:92: 6d:e9:dc:81:37:df:a7:5d:ef:39:55:8b:f7:8b:3f: 0f:06:0e:c2:2e:62:19:84:a5:88:c6:f3:b9:31:32: 19:57:6b:57:ae:de:8e:a9:d2:90:6e:c9:36:18:b2: ca:4f:8b:60:c4:ab:a0:29:6f:e4:7f:fd:1a:90:16: 1b:0e:72:8c:af:f8:d4:6c:a0:f4:09:74:e0:ec:b7: e4:61:bf:d1:91:64:87:b2:9f:6d:dd:c7:56:9a:ff: ef:09:99:b8:d7:74:63:1c:25:51:b2:49:5a:5c:36: dc:70:4f:07:f9:ac:32:3b:b0:b3:0b:80:86:f1:b3: 7c:25:c8:51:59:cc:d4:4d:3f:bc:54:22:ed:d7:ad: 65:79:2a:39:bd:35:b1:ce:8f:5d:47:53:82:e6:e5: 25:b9:1f:70:03:60:ae:f8:33:4b:23:b3:8c:86:0f: 54:8e:99:a3:44:b9:07:6a:cc:2b:18:bd:e5:01:6e: 69:02:6b:a8:81:3d:3b:82:39:59:1a:10:36:f0:91: 9a:a9:e9:a0:32:84:ec:f2:fa:81:d4:f1:b3:7d:37: e5:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:98:96:EF:F2:81:D6:43:DE:FD:99:5B:E2:A1:89:17:B0:9D:4B:6D X509v3 Authority Key Identifier: keyid:EB:7A:B5:34:49:E5:29:96:F1:53:93:93:C3:DA:70:4C:6F:12:F3:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7e8cd97e-56f5-4ca5-a85c-55a323f0608c/0/EB7AB53449E52996F1539393C3DA704C6F12F359.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EB7AB53449E52996F1539393C3DA704C6F12F359.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e8cd97e-56f5-4ca5-a85c-55a323f0608c/0/EB7AB53449E52996F1539393C3DA704C6F12F359.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:03:80:dd:1c:27:57:c2:68:ff:a8:19:b5:f3:a5:12:ab:e8: 46:fa:22:a8:5a:e7:1e:d9:f1:ef:ff:60:61:a4:2b:43:b8:f1: 48:1d:56:66:95:5d:e2:64:2a:a0:01:3e:a9:ce:56:0f:65:5e: 5e:4d:7e:73:e6:fb:32:74:ec:39:63:66:34:19:ae:4e:e6:11: 51:da:97:c9:68:0e:d7:86:10:d7:b1:5c:5c:d7:14:87:15:a7: 26:5e:9e:49:23:47:fc:88:33:4a:4f:23:d7:2b:e8:ad:ce:73: 87:2e:f2:1a:58:a6:8e:53:a6:7a:ed:a7:e7:30:fd:61:dc:49: c4:65:df:cd:1c:44:86:14:92:6d:42:9e:62:89:b7:5e:c7:97: d9:26:5e:da:c5:3c:da:f0:88:be:b9:86:4c:4d:f9:1e:61:20: 7a:83:e1:b1:1d:ac:44:a8:f2:6b:13:f5:43:34:05:33:05:2b: f7:4e:2f:f6:7b:b3:e9:a1:8a:53:a4:09:3d:e4:89:da:95:8d: db:b9:11:9a:71:1f:07:80:dc:24:37:19:4e:97:56:ac:d5:94: 39:ac:40:18:05:7a:90:d2:ea:12:2f:01:e8:29:34:fb:ff:70: c0:6a:ac:07:e5:0e:00:4f:23:f8:aa:d0:ac:4d:d8:bd:94:34: 31:5e:a6:c1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFPSa8zdAllV5ur0U0U6ZupbxltIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUI3QUI1MzQ0OUU1Mjk5NkYxNTM5MzkzQzNEQTcwNEM2 RjEyRjM1OTAeFw0yNTEyMDQyMTQ1MzdaFw0yNTEyMDgwNzMzMzdaMDMxMTAvBgNV BAMTKDEyOTg5NkVGRjI4MUQ2NDNERUZEOTk1QkUyQTE4OTE3QjA5RDRCNkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDyLcUUQMvmsxxDUuamzgyYiw/U Scy5h8q5WlXO7O2CRUF89vF+UCrAOXXdkm3p3IE336dd7zlVi/eLPw8GDsIuYhmE pYjG87kxMhlXa1eu3o6p0pBuyTYYsspPi2DEq6Apb+R//RqQFhsOcoyv+NRsoPQJ dODst+Rhv9GRZIeyn23dx1aa/+8JmbjXdGMcJVGySVpcNtxwTwf5rDI7sLMLgIbx s3wlyFFZzNRNP7xUIu3XrWV5Kjm9NbHOj11HU4Lm5SW5H3ADYK74M0sjs4yGD1SO maNEuQdqzCsYveUBbmkCa6iBPTuCOVkaEDbwkZqp6aAyhOzy+oHU8bN9N+WDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEpiW7/KB1kPe/Zlb4qGJF7CdS20wHwYDVR0j BBgwFoAU63q1NEnlKZbxU5OTw9pwTG8S81kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZThjZDk3ZS01NmY1LTRjYTUtYTg1Yy01NWEzMjNmMDYwOGMvMC9FQjdBQjUzNDQ5 RTUyOTk2RjE1MzkzOTNDM0RBNzA0QzZGMTJGMzU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUI3QUI1MzQ0OUU1Mjk5NkYxNTM5MzkzQzNEQTcwNEM2RjEy RjM1OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2U4Y2Q5N2UtNTZmNS00Y2E1LWE4 NWMtNTVhMzIzZjA2MDhjLzAvRUI3QUI1MzQ0OUU1Mjk5NkYxNTM5MzkzQzNEQTcw NEM2RjEyRjM1OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALIDgN0cJ1fCaP+oGbXzpRKr6Eb6Iqha5x7Z 8e//YGGkK0O48UgdVmaVXeJkKqABPqnOVg9lXl5NfnPm+zJ07DljZjQZrk7mEVHa l8loDteGENexXFzXFIcVpyZenkkjR/yIM0pPI9cr6K3Oc4cu8hpYpo5Tpnrtp+cw /WHcScRl380cRIYUkm1CnmKJt17Hl9kmXtrFPNrwiL65hkxN+R5hIHqD4bEdrESo 8msT9UM0BTMFK/dOL/Z7s+mhilOkCT3kidqVjdu5EZpxHweA3CQ3GU6XVqzVlDms QBgFepDS6hIvAegpNPv/cMBqrAflDgBPI/iq0KxN2L2UNDFepsE= -----END CERTIFICATE-----Generated at Sun Dec 7 07:44:06 2025 by rpki-client