This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/0a1f3971-3a47-455d-ab30-e7c23b61b9f2/0/EB78214F248EFE08B4E462FDAFD4E70BC3D05A2F.mft File: EB78214F248EFE08B4E462FDAFD4E70BC3D05A2F.mft (raw, json) Hash identifier: cODTNf/9tzbnReErsPEuDIdovC69hOgpBNLZ6zViU2E= Subject key identifier: CD:74:F0:75:E9:E9:34:29:22:5A:CF:8E:C6:34:51:71:38:9D:C8:E7 Authority key identifier: EB:78:21:4F:24:8E:FE:08:B4:E4:62:FD:AF:D4:E7:0B:C3:D0:5A:2F Certificate issuer: /CN=EB78214F248EFE08B4E462FDAFD4E70BC3D05A2F Certificate serial: 16C2C5C7153B8A34B067BFCE248926C99738D342 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EB78214F248EFE08B4E462FDAFD4E70BC3D05A2F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0a1f3971-3a47-455d-ab30-e7c23b61b9f2/0/EB78214F248EFE08B4E462FDAFD4E70BC3D05A2F.mft Manifest number: 0103 Signing time: Mon 01 Dec 2025 23:30:52 +0000 Manifest this update: Mon 01 Dec 2025 23:25:52 +0000 Manifest next update: Fri 05 Dec 2025 00:49:52 +0000 Files and hashes: 1: 3130332e3130312e3231362e302f32332d3233203d3e20313530393431.roa (hash: 0KEJOj4To40f7hQCQKr4Kq8RhTmo523YXQIvq+ZY6HI=) 2: 3130332e3130312e3231372e302f32342d3234203d3e20313530393431.roa (hash: aAMjUzaN1yMPp7oXLSGICiOHUfNylQXYPCCHO4WZk9E=) 3: EB78214F248EFE08B4E462FDAFD4E70BC3D05A2F.crl (hash: c+n3PcZEGWdGKayWqOA0pZwTTOewhns11bFOtjShxWE=) 4: 3130332e3130312e3231362e302f32342d3234203d3e20313530393431.roa (hash: V76cC5CNnJtNiE3A1eNlVqFtp7QA7yYWZJ54/BrVb60=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0a1f3971-3a47-455d-ab30-e7c23b61b9f2/0/EB78214F248EFE08B4E462FDAFD4E70BC3D05A2F.crl rsync://repo-rpki.idnic.net/repo/0a1f3971-3a47-455d-ab30-e7c23b61b9f2/0/EB78214F248EFE08B4E462FDAFD4E70BC3D05A2F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EB78214F248EFE08B4E462FDAFD4E70BC3D05A2F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 00:49:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:c2:c5:c7:15:3b:8a:34:b0:67:bf:ce:24:89:26:c9:97:38:d3:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB78214F248EFE08B4E462FDAFD4E70BC3D05A2F Validity Not Before: Dec 1 23:25:52 2025 GMT Not After : Dec 5 00:49:52 2025 GMT Subject: CN=CD74F075E9E93429225ACF8EC6345171389DC8E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:dc:5d:66:cd:e9:42:52:52:56:fd:3e:50:50: 4f:9a:98:c9:57:c8:55:a8:83:cf:c3:9d:e9:51:89: 95:d5:05:82:a0:e7:d3:b5:f6:65:53:fc:da:1c:a0: 82:9c:a5:8d:1c:8c:5c:fe:1e:43:be:b3:c3:86:7a: 65:18:91:6f:6c:e8:a2:3d:c7:d9:a4:4e:26:86:f0: 07:a5:c2:4d:f0:97:35:08:d5:24:47:76:90:1a:74: 05:59:46:99:14:d8:ca:55:fa:a5:50:9b:24:71:80: b3:82:fc:0d:ee:45:e2:f6:f7:d0:6f:00:80:2c:ed: 9e:87:58:13:75:b7:32:90:37:d8:7b:2d:db:57:95: 63:30:40:6d:0d:2e:dd:c9:39:e6:c2:fa:40:a4:00: c1:64:48:71:32:fa:af:7d:44:55:48:04:e8:81:0a: 2e:4e:e3:33:97:cb:ec:0f:55:90:b7:df:e7:8a:54: ed:ca:ce:48:e0:a8:1e:e7:f5:cd:6a:51:44:24:27: e3:55:0b:cf:3d:bc:ca:d8:44:6e:9c:7f:c9:3e:c3: 89:b5:c8:f6:2a:3a:34:52:b8:60:9d:51:5e:d7:98: bb:46:11:90:d0:34:fc:f6:4b:1d:86:5f:c9:98:78: 4d:1a:26:58:f4:f6:40:75:29:85:47:5b:60:39:5d: d0:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:74:F0:75:E9:E9:34:29:22:5A:CF:8E:C6:34:51:71:38:9D:C8:E7 X509v3 Authority Key Identifier: keyid:EB:78:21:4F:24:8E:FE:08:B4:E4:62:FD:AF:D4:E7:0B:C3:D0:5A:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0a1f3971-3a47-455d-ab30-e7c23b61b9f2/0/EB78214F248EFE08B4E462FDAFD4E70BC3D05A2F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EB78214F248EFE08B4E462FDAFD4E70BC3D05A2F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0a1f3971-3a47-455d-ab30-e7c23b61b9f2/0/EB78214F248EFE08B4E462FDAFD4E70BC3D05A2F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:fd:f5:86:af:f2:ee:ff:26:f2:02:cc:6e:f2:89:18:89:26: ac:65:98:cb:68:fa:2d:2e:15:18:9c:87:d2:05:0d:ae:db:4e: 22:c3:7e:18:e7:98:c4:df:97:10:0d:68:5b:73:d8:e3:20:95: 53:4d:c5:13:f7:7f:9e:ff:3e:fa:6c:de:01:c7:51:b5:21:bc: f1:96:58:ed:c7:16:f7:e4:68:f2:b6:cb:86:d2:21:32:9a:90: c5:e7:fd:78:f2:83:19:be:8d:52:17:12:06:5f:59:c3:53:bd: 41:14:03:93:56:0b:47:bc:a3:01:3e:ac:b6:b6:00:9c:62:7c: ba:13:17:61:43:25:68:bc:e6:03:e7:02:3f:cc:45:6c:e2:3d: 33:22:f0:23:38:a6:01:59:09:f9:2b:f6:2b:fd:dd:e2:6c:ae: 60:68:d4:d4:d7:5c:f7:0e:f5:85:01:c4:d9:6b:3e:b7:6e:69: ec:92:27:6d:47:8f:0b:61:9a:b3:b8:0c:20:aa:c9:06:7d:51: a1:ad:21:05:21:0a:b8:d5:71:91:c5:82:09:23:be:f4:96:60: 77:c7:fe:00:c6:ee:41:41:e2:ba:5e:67:06:87:60:02:42:06: f1:3b:bc:43:ae:2b:2f:dd:b9:9b:28:84:a9:05:48:13:13:0d: 16:d4:a1:d8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFsLFxxU7ijSwZ7/OJIkmyZc400IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUI3ODIxNEYyNDhFRkUwOEI0RTQ2MkZEQUZENEU3MEJD M0QwNUEyRjAeFw0yNTEyMDEyMzI1NTJaFw0yNTEyMDUwMDQ5NTJaMDMxMTAvBgNV BAMTKENENzRGMDc1RTlFOTM0MjkyMjVBQ0Y4RUM2MzQ1MTcxMzg5REM4RTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu3F1mzelCUlJW/T5QUE+amMlX yFWog8/DnelRiZXVBYKg59O19mVT/NocoIKcpY0cjFz+HkO+s8OGemUYkW9s6KI9 x9mkTiaG8Aelwk3wlzUI1SRHdpAadAVZRpkU2MpV+qVQmyRxgLOC/A3uReL299Bv AIAs7Z6HWBN1tzKQN9h7LdtXlWMwQG0NLt3JOebC+kCkAMFkSHEy+q99RFVIBOiB Ci5O4zOXy+wPVZC33+eKVO3KzkjgqB7n9c1qUUQkJ+NVC889vMrYRG6cf8k+w4m1 yPYqOjRSuGCdUV7XmLtGEZDQNPz2Sx2GX8mYeE0aJlj09kB1KYVHW2A5XdDpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzXTwdenpNCkiWs+OxjRRcTidyOcwHwYDVR0j BBgwFoAU63ghTySO/gi05GL9r9TnC8PQWi8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YTFmMzk3MS0zYTQ3LTQ1NWQtYWIzMC1lN2MyM2I2MWI5ZjIvMC9FQjc4MjE0RjI0 OEVGRTA4QjRFNDYyRkRBRkQ0RTcwQkMzRDA1QTJGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUI3ODIxNEYyNDhFRkUwOEI0RTQ2MkZEQUZENEU3MEJDM0Qw NUEyRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGExZjM5NzEtM2E0Ny00NTVkLWFi MzAtZTdjMjNiNjFiOWYyLzAvRUI3ODIxNEYyNDhFRkUwOEI0RTQ2MkZEQUZENEU3 MEJDM0QwNUEyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJn99Yav8u7/JvICzG7yiRiJJqxlmMto+i0u FRich9IFDa7bTiLDfhjnmMTflxANaFtz2OMglVNNxRP3f57/Pvps3gHHUbUhvPGW WO3HFvfkaPK2y4bSITKakMXn/Xjygxm+jVIXEgZfWcNTvUEUA5NWC0e8owE+rLa2 AJxifLoTF2FDJWi85gPnAj/MRWziPTMi8CM4pgFZCfkr9iv93eJsrmBo1NTXXPcO 9YUBxNlrPrduaeySJ21HjwthmrO4DCCqyQZ9UaGtIQUhCrjVcZHFggkjvvSWYHfH /gDG7kFB4rpeZwaHYAJCBvE7vEOuKy/duZsohKkFSBMTDRbUodg= -----END CERTIFICATE-----Generated at Wed Dec 3 14:42:48 2025 by rpki-client