This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d5c2c71c-6ae5-4ea9-b850-6300e2e1badf/0/EBB7963402117E803037310CE98B392F968C3A9A.mft File: EBB7963402117E803037310CE98B392F968C3A9A.mft (raw, json) Hash identifier: 3meqwMSxsEqpMCPN8xF7kjs38E6ci6FRkrI9imUTM+Y= Subject key identifier: DE:5F:AF:BC:21:EF:9A:13:4E:9B:11:05:CB:C9:32:B8:2A:A1:77:B9 Authority key identifier: EB:B7:96:34:02:11:7E:80:30:37:31:0C:E9:8B:39:2F:96:8C:3A:9A Certificate issuer: /CN=EBB7963402117E803037310CE98B392F968C3A9A Certificate serial: 426F479CE952F6FA8128EF1AAF9E9005F9F79255 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EBB7963402117E803037310CE98B392F968C3A9A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d5c2c71c-6ae5-4ea9-b850-6300e2e1badf/0/EBB7963402117E803037310CE98B392F968C3A9A.mft Manifest number: 0214 Signing time: Fri 05 Dec 2025 22:12:09 +0000 Manifest this update: Fri 05 Dec 2025 22:07:09 +0000 Manifest next update: Tue 09 Dec 2025 03:29:09 +0000 Files and hashes: 1: EBB7963402117E803037310CE98B392F968C3A9A.crl (hash: sjkYftnvFfrnG8vs0zgqIAnDv8OqpDitzB0qg70jKeo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d5c2c71c-6ae5-4ea9-b850-6300e2e1badf/0/EBB7963402117E803037310CE98B392F968C3A9A.crl rsync://repo-rpki.idnic.net/repo/d5c2c71c-6ae5-4ea9-b850-6300e2e1badf/0/EBB7963402117E803037310CE98B392F968C3A9A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EBB7963402117E803037310CE98B392F968C3A9A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 03:29:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:6f:47:9c:e9:52:f6:fa:81:28:ef:1a:af:9e:90:05:f9:f7:92:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EBB7963402117E803037310CE98B392F968C3A9A Validity Not Before: Dec 5 22:07:09 2025 GMT Not After : Dec 9 03:29:09 2025 GMT Subject: CN=DE5FAFBC21EF9A134E9B1105CBC932B82AA177B9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:a7:9c:c0:97:42:27:37:6c:61:ad:f9:69:f2: 51:9b:2a:cc:6d:d6:57:ea:30:80:00:63:d3:9d:47: 26:03:0e:66:0a:31:a1:d2:ce:d5:c7:31:bd:e1:37: 71:e8:a7:07:67:20:d5:7d:a2:93:76:e6:ce:9b:d9: 51:a8:85:4f:97:b2:36:65:3b:96:85:ff:0a:af:97: 54:1b:4d:f9:a1:5c:b4:9f:a2:45:fc:6f:b3:76:39: f4:32:dc:e1:c2:9e:38:e9:77:13:92:13:11:b0:35: 3d:fa:eb:39:92:2b:46:bb:a4:fe:c2:fa:d9:84:fc: 01:8c:f3:88:81:ba:8e:5c:e6:f8:ef:2c:a2:ac:1c: d1:aa:af:63:50:18:c9:31:98:95:89:ac:8a:77:3d: 89:43:fe:4b:51:0c:a0:9e:2f:5e:55:33:72:60:fa: 8e:44:e8:d4:3a:3f:e1:62:61:39:33:97:de:79:f5: 3b:df:2d:2c:db:45:52:ab:29:40:7c:22:90:c4:ff: bb:66:4b:e0:69:74:da:d8:ee:ef:f9:52:b2:d7:2d: 89:e1:45:14:9b:9e:35:d9:6b:7d:c1:43:b5:66:fc: 27:19:8f:f9:88:41:32:f4:fc:c2:e8:80:d3:6e:94: d3:66:6d:fc:9d:c6:65:60:04:56:c9:da:57:7e:ff: 45:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:5F:AF:BC:21:EF:9A:13:4E:9B:11:05:CB:C9:32:B8:2A:A1:77:B9 X509v3 Authority Key Identifier: keyid:EB:B7:96:34:02:11:7E:80:30:37:31:0C:E9:8B:39:2F:96:8C:3A:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d5c2c71c-6ae5-4ea9-b850-6300e2e1badf/0/EBB7963402117E803037310CE98B392F968C3A9A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EBB7963402117E803037310CE98B392F968C3A9A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d5c2c71c-6ae5-4ea9-b850-6300e2e1badf/0/EBB7963402117E803037310CE98B392F968C3A9A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:4d:ce:e3:91:35:fa:35:a2:c9:48:b2:c0:f9:a5:3c:31:50: 81:77:e8:ca:20:c2:e1:fd:a3:a5:77:96:a6:92:b9:bc:d2:ef: 58:aa:c6:60:9f:e3:b1:a1:5e:cb:4f:0e:87:99:3e:a8:91:97: a0:ea:c4:f0:02:22:25:df:89:7b:57:cc:96:23:66:db:57:06: ed:48:10:92:31:a6:a1:a5:52:74:81:5b:d4:1e:93:44:a8:c0: c8:e5:d6:37:2d:0d:df:58:0b:ab:57:80:50:90:6d:0d:df:6b: c5:7e:3e:06:c7:4d:ab:97:a9:f5:fb:c5:9e:a0:9c:84:21:2f: a0:6b:26:ad:27:e0:bc:97:5c:a9:d2:ff:33:90:69:69:3f:ff: b1:bf:cb:68:a6:46:0f:56:aa:9c:b7:1c:df:25:55:95:55:f2: 95:f6:8c:30:ff:47:53:f1:8f:30:7c:05:08:31:8f:10:59:43: 75:b2:99:82:05:4f:46:82:36:92:c2:1e:80:7a:6f:3a:cd:c0: fc:fa:eb:99:79:34:66:6d:5c:1a:9a:7a:80:2e:de:a2:7c:04: 24:c3:08:4e:05:d2:f2:54:5a:41:cc:89:05:b0:6e:0f:98:14: 05:74:cc:20:64:a3:4e:a5:7d:c4:fc:f4:a5:fb:9e:c4:a4:56: 46:ec:d3:79 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQm9HnOlS9vqBKO8ar56QBfn3klUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUJCNzk2MzQwMjExN0U4MDMwMzczMTBDRTk4QjM5MkY5 NjhDM0E5QTAeFw0yNTEyMDUyMjA3MDlaFw0yNTEyMDkwMzI5MDlaMDMxMTAvBgNV BAMTKERFNUZBRkJDMjFFRjlBMTM0RTlCMTEwNUNCQzkzMkI4MkFBMTc3QjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHp5zAl0InN2xhrflp8lGbKsxt 1lfqMIAAY9OdRyYDDmYKMaHSztXHMb3hN3HopwdnINV9opN25s6b2VGohU+XsjZl O5aF/wqvl1QbTfmhXLSfokX8b7N2OfQy3OHCnjjpdxOSExGwNT366zmSK0a7pP7C +tmE/AGM84iBuo5c5vjvLKKsHNGqr2NQGMkxmJWJrIp3PYlD/ktRDKCeL15VM3Jg +o5E6NQ6P+FiYTkzl9559TvfLSzbRVKrKUB8IpDE/7tmS+BpdNrY7u/5UrLXLYnh RRSbnjXZa33BQ7Vm/CcZj/mIQTL0/MLogNNulNNmbfydxmVgBFbJ2ld+/0V7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3l+vvCHvmhNOmxEFy8kyuCqhd7kwHwYDVR0j BBgwFoAU67eWNAIRfoAwNzEM6Ys5L5aMOpowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NWMyYzcxYy02YWU1LTRlYTktYjg1MC02MzAwZTJlMWJhZGYvMC9FQkI3OTYzNDAy MTE3RTgwMzAzNzMxMENFOThCMzkyRjk2OEMzQTlBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUJCNzk2MzQwMjExN0U4MDMwMzczMTBDRTk4QjM5MkY5NjhD M0E5QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDVjMmM3MWMtNmFlNS00ZWE5LWI4 NTAtNjMwMGUyZTFiYWRmLzAvRUJCNzk2MzQwMjExN0U4MDMwMzczMTBDRTk4QjM5 MkY5NjhDM0E5QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFJNzuORNfo1oslIssD5pTwxUIF36MogwuH9 o6V3lqaSubzS71iqxmCf47GhXstPDoeZPqiRl6DqxPACIiXfiXtXzJYjZttXBu1I EJIxpqGlUnSBW9Qek0SowMjl1jctDd9YC6tXgFCQbQ3fa8V+PgbHTauXqfX7xZ6g nIQhL6BrJq0n4LyXXKnS/zOQaWk//7G/y2imRg9Wqpy3HN8lVZVV8pX2jDD/R1Px jzB8BQgxjxBZQ3WymYIFT0aCNpLCHoB6bzrNwPz665l5NGZtXBqaeoAu3qJ8BCTD CE4F0vJUWkHMiQWwbg+YFAV0zCBko06lfcT89KX7nsSkVkbs03k= -----END CERTIFICATE-----Generated at Sun Dec 7 02:14:22 2025 by rpki-client