This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/1127eafd-a674-4437-abf1-e550dec137fa/0/EBA04070CA27E646C332039E07557734C6732ED2.mft File: EBA04070CA27E646C332039E07557734C6732ED2.mft (raw, json) Hash identifier: VZvAWYaD0nz17d77XMRhlQRNTlmTkMjaGXCrNdhkNx8= Subject key identifier: 6C:74:7F:D1:D9:16:61:34:6E:2E:F4:89:88:F9:1A:F8:A6:64:8A:96 Authority key identifier: EB:A0:40:70:CA:27:E6:46:C3:32:03:9E:07:55:77:34:C6:73:2E:D2 Certificate issuer: /CN=EBA04070CA27E646C332039E07557734C6732ED2 Certificate serial: 3DD456FBE9BD2BED9ED9B64DF3BE6D3945C0D33E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EBA04070CA27E646C332039E07557734C6732ED2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1127eafd-a674-4437-abf1-e550dec137fa/0/EBA04070CA27E646C332039E07557734C6732ED2.mft Manifest number: 01FC Signing time: Sun 21 Dec 2025 05:02:02 +0000 Manifest this update: Sun 21 Dec 2025 04:57:02 +0000 Manifest next update: Wed 24 Dec 2025 11:07:02 +0000 Files and hashes: 1: 3130332e3131312e3134332e302f32342d3234203d3e20313431343631.roa (hash: vMUSQ2h0yM8CNBMFULwiVWwmyMjPH1qg6y43JB4Vwvw=) 2: 3130332e3131312e3134312e302f32342d3234203d3e20313431343631.roa (hash: FOKCBmZQR+RvQ/YXjf6i5T2Jp3732D5RrjsxBFstWVo=) 3: EBA04070CA27E646C332039E07557734C6732ED2.crl (hash: k8tZC/Fxu0sJh1byPxg11WmUWcQs451ku92TXYuIc3M=) 4: 3130332e3131312e3134302e302f32342d3234203d3e20313431343631.roa (hash: bDyPI2WVo6BjRMZp12OHCZAGn1tdLEQqcz47No/uxaA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1127eafd-a674-4437-abf1-e550dec137fa/0/EBA04070CA27E646C332039E07557734C6732ED2.crl rsync://repo-rpki.idnic.net/repo/1127eafd-a674-4437-abf1-e550dec137fa/0/EBA04070CA27E646C332039E07557734C6732ED2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EBA04070CA27E646C332039E07557734C6732ED2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Dec 2025 07:39:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:d4:56:fb:e9:bd:2b:ed:9e:d9:b6:4d:f3:be:6d:39:45:c0:d3:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EBA04070CA27E646C332039E07557734C6732ED2 Validity Not Before: Dec 21 04:57:02 2025 GMT Not After : Dec 24 11:07:02 2025 GMT Subject: CN=6C747FD1D91661346E2EF48988F91AF8A6648A96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:c4:ce:3e:7e:7a:fa:07:7d:56:c6:63:32:65: 2e:95:48:98:05:25:01:80:c4:a0:3b:7d:92:3a:46: ae:63:45:50:d2:49:de:78:12:7c:ea:b6:cc:33:1e: a6:bc:96:c4:b1:27:d7:01:98:8b:82:bb:ad:6b:1a: c7:a1:66:b6:15:53:56:d3:0c:09:0a:39:7e:5e:dd: d6:b5:91:55:ad:14:90:8f:52:31:4a:fb:0c:29:c9: f0:29:f4:b4:76:f2:eb:56:73:45:07:6d:8e:0d:c4: bd:52:5c:bf:38:6c:da:fa:d4:26:a7:1a:d1:a1:47: 38:69:b1:ef:f4:85:33:c8:43:cc:fb:18:6c:cb:7e: 1d:c7:a1:bc:66:c0:25:b7:9d:b2:1c:ec:bf:66:f2: 35:83:e2:d5:aa:b3:94:8d:fc:a4:a0:56:ae:fa:01: cf:38:43:b6:20:9e:41:22:6f:3f:8e:41:ae:4c:b9: 91:41:f2:e2:6c:46:f0:16:87:d0:c7:ca:1c:5a:f8: aa:66:c9:44:ef:24:54:a5:af:3e:9e:98:1a:2e:25: 1e:bb:94:54:fe:82:07:e4:dd:42:d6:f3:d8:86:02: c6:48:cb:7e:50:40:80:d8:5b:5a:a5:d7:08:e4:8f: 39:1b:db:91:78:d7:86:e2:1e:b0:8d:00:07:32:bc: 9d:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:74:7F:D1:D9:16:61:34:6E:2E:F4:89:88:F9:1A:F8:A6:64:8A:96 X509v3 Authority Key Identifier: keyid:EB:A0:40:70:CA:27:E6:46:C3:32:03:9E:07:55:77:34:C6:73:2E:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1127eafd-a674-4437-abf1-e550dec137fa/0/EBA04070CA27E646C332039E07557734C6732ED2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EBA04070CA27E646C332039E07557734C6732ED2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1127eafd-a674-4437-abf1-e550dec137fa/0/EBA04070CA27E646C332039E07557734C6732ED2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:5c:b6:23:79:a7:89:9d:cd:9e:1c:7a:85:b4:a5:1b:bd:d9: c8:0c:e1:94:f4:e2:d7:e4:f6:cb:29:01:9a:bf:6f:d5:a7:53: d8:b0:3b:6d:f5:0b:a4:5e:a5:74:86:4b:58:17:5a:22:94:20: 01:3f:09:17:e8:af:10:e6:22:fa:ea:54:37:db:58:db:51:af: b8:b5:1b:b4:fb:e5:03:05:e6:6e:79:d8:db:e6:63:90:2a:50: 89:0f:10:54:73:18:cf:67:64:92:d5:6e:61:8d:9e:b2:7b:05: 9d:e9:21:d6:32:02:b6:19:c4:5c:23:57:d2:4d:58:90:f9:0b: 3d:51:7a:8e:8b:fa:d1:63:4d:ba:ea:28:11:40:9b:16:5b:81: ab:6d:c6:c9:dc:75:5a:71:41:ee:cd:5b:02:9b:22:06:8d:79: fb:53:4d:74:67:38:af:5b:24:f4:17:ce:b9:6a:14:2c:a2:34: a4:2d:d7:a8:8b:65:61:94:c7:81:41:a8:99:1c:f7:82:3e:50: ca:6b:d5:49:6b:2f:ba:1f:02:90:3f:7f:99:83:24:d2:9e:82: 77:de:89:3b:2a:d6:15:7a:72:e8:7a:19:54:75:5c:a5:23:b3: 9b:aa:e4:89:98:d2:cb:ee:47:15:23:2d:ff:f0:6f:c9:12:7b: 4d:92:b5:d3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPdRW++m9K+2e2bZN875tOUXA0z4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUJBMDQwNzBDQTI3RTY0NkMzMzIwMzlFMDc1NTc3MzRD NjczMkVEMjAeFw0yNTEyMjEwNDU3MDJaFw0yNTEyMjQxMTA3MDJaMDMxMTAvBgNV BAMTKDZDNzQ3RkQxRDkxNjYxMzQ2RTJFRjQ4OTg4RjkxQUY4QTY2NDhBOTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxxM4+fnr6B31WxmMyZS6VSJgF JQGAxKA7fZI6Rq5jRVDSSd54EnzqtswzHqa8lsSxJ9cBmIuCu61rGsehZrYVU1bT DAkKOX5e3da1kVWtFJCPUjFK+wwpyfAp9LR28utWc0UHbY4NxL1SXL84bNr61Can GtGhRzhpse/0hTPIQ8z7GGzLfh3HobxmwCW3nbIc7L9m8jWD4tWqs5SN/KSgVq76 Ac84Q7YgnkEibz+OQa5MuZFB8uJsRvAWh9DHyhxa+KpmyUTvJFSlrz6emBouJR67 lFT+ggfk3ULW89iGAsZIy35QQIDYW1ql1wjkjzkb25F414biHrCNAAcyvJ0HAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbHR/0dkWYTRuLvSJiPka+KZkipYwHwYDVR0j BBgwFoAU66BAcMon5kbDMgOeB1V3NMZzLtIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MTI3ZWFmZC1hNjc0LTQ0MzctYWJmMS1lNTUwZGVjMTM3ZmEvMC9FQkEwNDA3MENB MjdFNjQ2QzMzMjAzOUUwNzU1NzczNEM2NzMyRUQyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUJBMDQwNzBDQTI3RTY0NkMzMzIwMzlFMDc1NTc3MzRDNjcz MkVEMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTEyN2VhZmQtYTY3NC00NDM3LWFi ZjEtZTU1MGRlYzEzN2ZhLzAvRUJBMDQwNzBDQTI3RTY0NkMzMzIwMzlFMDc1NTc3 MzRDNjczMkVEMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIhctiN5p4mdzZ4ceoW0pRu92cgM4ZT04tfk 9sspAZq/b9WnU9iwO231C6RepXSGS1gXWiKUIAE/CRforxDmIvrqVDfbWNtRr7i1 G7T75QMF5m552NvmY5AqUIkPEFRzGM9nZJLVbmGNnrJ7BZ3pIdYyArYZxFwjV9JN WJD5Cz1Reo6L+tFjTbrqKBFAmxZbgattxsncdVpxQe7NWwKbIgaNeftTTXRnOK9b JPQXzrlqFCyiNKQt16iLZWGUx4FBqJkc94I+UMpr1UlrL7ofApA/f5mDJNKegnfe iTsq1hV6cuh6GVR1XKUjs5uq5ImY0svuRxUjLf/wb8kSe02StdM= -----END CERTIFICATE-----Generated at Tue Dec 23 14:55:55 2025 by rpki-client