This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d5c2c71c-6ae5-4ea9-b850-6300e2e1badf/0/EBB7963402117E803037310CE98B392F968C3A9A.mft File: EBB7963402117E803037310CE98B392F968C3A9A.mft (raw, json) Hash identifier: ktaMvmQCIVFn1aqZ0UUiTqFFaY0w3NOAwFP4UilC1TA= Subject key identifier: 1A:DA:D1:72:AF:C5:89:91:87:B6:48:76:53:73:FE:B3:2C:01:1E:58 Authority key identifier: EB:B7:96:34:02:11:7E:80:30:37:31:0C:E9:8B:39:2F:96:8C:3A:9A Certificate issuer: /CN=EBB7963402117E803037310CE98B392F968C3A9A Certificate serial: 5D6580FE8007622E8A8E68014997A8FE601EFB32 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EBB7963402117E803037310CE98B392F968C3A9A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d5c2c71c-6ae5-4ea9-b850-6300e2e1badf/0/EBB7963402117E803037310CE98B392F968C3A9A.mft Manifest number: 022A Signing time: Sat 24 Jan 2026 18:52:10 +0000 Manifest this update: Sat 24 Jan 2026 18:47:10 +0000 Manifest next update: Tue 27 Jan 2026 20:47:10 +0000 Files and hashes: 1: EBB7963402117E803037310CE98B392F968C3A9A.crl (hash: mmCwi9cgmIdZOt7a+h3ZcicWGNOW2TOV06HwhVoJmfQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d5c2c71c-6ae5-4ea9-b850-6300e2e1badf/0/EBB7963402117E803037310CE98B392F968C3A9A.crl rsync://repo-rpki.idnic.net/repo/d5c2c71c-6ae5-4ea9-b850-6300e2e1badf/0/EBB7963402117E803037310CE98B392F968C3A9A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EBB7963402117E803037310CE98B392F968C3A9A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 20:47:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:65:80:fe:80:07:62:2e:8a:8e:68:01:49:97:a8:fe:60:1e:fb:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EBB7963402117E803037310CE98B392F968C3A9A Validity Not Before: Jan 24 18:47:10 2026 GMT Not After : Jan 27 20:47:10 2026 GMT Subject: CN=1ADAD172AFC5899187B648765373FEB32C011E58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:0b:d9:89:4f:f7:8e:88:e0:61:d1:4b:5f:76: c2:ff:d0:56:25:6d:8e:9f:14:39:ed:64:f8:49:a1: 48:a2:7a:b8:c7:5e:c5:43:47:ff:05:16:aa:09:80: 58:f4:79:91:91:30:96:fc:3d:7a:96:6b:9a:8a:68: e9:17:1a:15:a5:05:c9:7f:11:49:bb:03:22:33:d2: c0:fe:46:e4:ae:e2:8a:b9:12:ee:78:32:d1:2a:f8: 47:14:56:ab:d2:59:7b:cf:26:51:48:fb:02:23:c7: f7:93:f4:e2:ed:b2:b2:3d:d9:2b:2d:f1:87:7f:ae: a9:bb:b9:6e:07:3a:ae:95:0b:49:7a:5a:d2:01:ed: a6:01:df:66:84:de:28:b5:b1:8c:a4:97:98:aa:b2: a7:d2:9b:d0:d4:22:ac:d4:a4:2c:7d:05:d9:e3:eb: 49:dc:f1:57:9a:00:f5:ff:ed:a4:9c:70:7b:a4:b4: c9:a4:03:c6:cd:e0:53:60:1f:29:bd:a7:24:37:bf: ea:eb:db:27:20:af:0f:39:85:4f:2a:85:77:d5:31: c4:84:e4:bb:1f:02:5a:21:63:80:b4:33:1c:6c:fa: cd:7e:0d:fc:20:0f:49:f6:16:36:aa:da:2b:63:9d: d7:99:30:bc:12:14:1d:04:b9:a2:f8:33:d8:48:b2: b3:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:DA:D1:72:AF:C5:89:91:87:B6:48:76:53:73:FE:B3:2C:01:1E:58 X509v3 Authority Key Identifier: keyid:EB:B7:96:34:02:11:7E:80:30:37:31:0C:E9:8B:39:2F:96:8C:3A:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d5c2c71c-6ae5-4ea9-b850-6300e2e1badf/0/EBB7963402117E803037310CE98B392F968C3A9A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EBB7963402117E803037310CE98B392F968C3A9A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d5c2c71c-6ae5-4ea9-b850-6300e2e1badf/0/EBB7963402117E803037310CE98B392F968C3A9A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:14:b8:0f:21:71:22:02:a3:1e:86:ab:ab:a8:bb:22:0b:e9: 89:f5:fd:52:10:2f:15:a9:f2:65:4c:8b:a6:90:22:ee:a1:45: 69:7c:74:e5:ea:4d:5e:3d:4c:c1:cb:00:bd:1d:d2:30:10:ed: 34:c6:92:59:8e:b6:65:a8:20:37:23:86:3b:ae:dd:5a:36:23: 69:ca:a8:ba:13:d9:6c:10:2f:7c:98:af:53:d3:4f:95:ac:88: 6c:c1:b9:dc:54:1a:64:b2:8c:cf:2f:0d:21:40:92:bd:a9:b7: 36:cd:45:f9:f3:d5:4d:9c:fa:db:b6:08:52:3b:5c:2e:1d:f5: f8:5d:6c:3e:2f:e7:a5:d0:09:1a:d5:34:b3:8b:3d:6f:76:6c: 89:02:0f:98:69:51:3b:68:ad:6b:5d:b4:f9:48:eb:2b:8e:27: 57:df:f5:6a:29:7c:3d:d3:08:13:3b:f5:81:bc:a6:15:30:54: 30:29:d6:90:0f:a1:2a:db:5f:ae:12:92:81:d0:fc:8d:cd:ab: 32:e1:a7:d2:3e:19:b3:b6:39:7f:96:db:ad:18:83:91:c2:4e: 4a:5f:e9:94:71:db:8b:36:77:05:f3:74:89:1b:ec:a7:f7:6f: 52:09:f2:d7:4a:e9:a5:23:18:e9:b8:cf:0f:65:43:2d:f1:2d: 25:67:4d:69 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXWWA/oAHYi6KjmgBSZeo/mAe+zIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUJCNzk2MzQwMjExN0U4MDMwMzczMTBDRTk4QjM5MkY5 NjhDM0E5QTAeFw0yNjAxMjQxODQ3MTBaFw0yNjAxMjcyMDQ3MTBaMDMxMTAvBgNV BAMTKDFBREFEMTcyQUZDNTg5OTE4N0I2NDg3NjUzNzNGRUIzMkMwMTFFNTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXC9mJT/eOiOBh0UtfdsL/0FYl bY6fFDntZPhJoUiierjHXsVDR/8FFqoJgFj0eZGRMJb8PXqWa5qKaOkXGhWlBcl/ EUm7AyIz0sD+RuSu4oq5Eu54MtEq+EcUVqvSWXvPJlFI+wIjx/eT9OLtsrI92Sst 8Yd/rqm7uW4HOq6VC0l6WtIB7aYB32aE3ii1sYykl5iqsqfSm9DUIqzUpCx9Bdnj 60nc8VeaAPX/7aSccHuktMmkA8bN4FNgHym9pyQ3v+rr2ycgrw85hU8qhXfVMcSE 5LsfAlohY4C0Mxxs+s1+DfwgD0n2Fjaq2itjndeZMLwSFB0EuaL4M9hIsrM1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGtrRcq/FiZGHtkh2U3P+sywBHlgwHwYDVR0j BBgwFoAU67eWNAIRfoAwNzEM6Ys5L5aMOpowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NWMyYzcxYy02YWU1LTRlYTktYjg1MC02MzAwZTJlMWJhZGYvMC9FQkI3OTYzNDAy MTE3RTgwMzAzNzMxMENFOThCMzkyRjk2OEMzQTlBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUJCNzk2MzQwMjExN0U4MDMwMzczMTBDRTk4QjM5MkY5NjhD M0E5QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDVjMmM3MWMtNmFlNS00ZWE5LWI4 NTAtNjMwMGUyZTFiYWRmLzAvRUJCNzk2MzQwMjExN0U4MDMwMzczMTBDRTk4QjM5 MkY5NjhDM0E5QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI0UuA8hcSICox6Gq6uouyIL6Yn1/VIQLxWp 8mVMi6aQIu6hRWl8dOXqTV49TMHLAL0d0jAQ7TTGklmOtmWoIDcjhjuu3Vo2I2nK qLoT2WwQL3yYr1PTT5WsiGzBudxUGmSyjM8vDSFAkr2ptzbNRfnz1U2c+tu2CFI7 XC4d9fhdbD4v56XQCRrVNLOLPW92bIkCD5hpUTtorWtdtPlI6yuOJ1ff9WopfD3T CBM79YG8phUwVDAp1pAPoSrbX64SkoHQ/I3NqzLhp9I+GbO2OX+W260Yg5HCTkpf 6ZRx24s2dwXzdIkb7Kf3b1IJ8tdK6aUjGOm4zw9lQy3xLSVnTWk= -----END CERTIFICATE-----Generated at Sun Jan 25 18:59:46 2026 by rpki-client