This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/1127eafd-a674-4437-abf1-e550dec137fa/0/EBA04070CA27E646C332039E07557734C6732ED2.mft File: EBA04070CA27E646C332039E07557734C6732ED2.mft (raw, json) Hash identifier: qEsHMKuqvebX5ReNwPmYltLXwPJ3uhvad7n45AqTyQU= Subject key identifier: 92:2F:87:29:CF:CA:C9:7C:4D:48:8B:26:BA:A3:56:02:BB:0D:B8:8D Authority key identifier: EB:A0:40:70:CA:27:E6:46:C3:32:03:9E:07:55:77:34:C6:73:2E:D2 Certificate issuer: /CN=EBA04070CA27E646C332039E07557734C6732ED2 Certificate serial: 4F2F395836809504956D1C666DE26C5D2C6A86D9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EBA04070CA27E646C332039E07557734C6732ED2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1127eafd-a674-4437-abf1-e550dec137fa/0/EBA04070CA27E646C332039E07557734C6732ED2.mft Manifest number: 01F4 Signing time: Tue 02 Dec 2025 13:11:57 +0000 Manifest this update: Tue 02 Dec 2025 13:06:57 +0000 Manifest next update: Fri 05 Dec 2025 20:24:57 +0000 Files and hashes: 1: 3130332e3131312e3134302e302f32342d3234203d3e20313431343631.roa (hash: bDyPI2WVo6BjRMZp12OHCZAGn1tdLEQqcz47No/uxaA=) 2: 3130332e3131312e3134332e302f32342d3234203d3e20313431343631.roa (hash: vMUSQ2h0yM8CNBMFULwiVWwmyMjPH1qg6y43JB4Vwvw=) 3: 3130332e3131312e3134312e302f32342d3234203d3e20313431343631.roa (hash: FOKCBmZQR+RvQ/YXjf6i5T2Jp3732D5RrjsxBFstWVo=) 4: EBA04070CA27E646C332039E07557734C6732ED2.crl (hash: sErVM7SR/EGSaVC8fLViWS39XKYD72b3A8l9EexLa6I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1127eafd-a674-4437-abf1-e550dec137fa/0/EBA04070CA27E646C332039E07557734C6732ED2.crl rsync://repo-rpki.idnic.net/repo/1127eafd-a674-4437-abf1-e550dec137fa/0/EBA04070CA27E646C332039E07557734C6732ED2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EBA04070CA27E646C332039E07557734C6732ED2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 20:24:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:2f:39:58:36:80:95:04:95:6d:1c:66:6d:e2:6c:5d:2c:6a:86:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EBA04070CA27E646C332039E07557734C6732ED2 Validity Not Before: Dec 2 13:06:57 2025 GMT Not After : Dec 5 20:24:57 2025 GMT Subject: CN=922F8729CFCAC97C4D488B26BAA35602BB0DB88D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:69:36:d1:81:e4:e5:38:23:5d:7b:b7:da:ee: 3b:e7:2b:95:ce:f7:2e:70:2b:28:00:fc:36:a9:6a: 43:af:8d:a2:6f:0d:6f:ae:4b:e5:6f:96:3f:45:de: 5a:5b:7a:a2:77:c5:9e:5b:a3:6c:2b:9b:a4:5b:75: aa:1e:1f:5e:17:a1:89:c5:a3:b7:5d:a4:01:18:31: 30:38:dd:b6:a6:42:81:35:e5:38:fe:fb:8c:a5:54: e4:b4:bb:d4:3d:96:87:f1:cd:f0:b8:4f:63:b7:72: d2:9b:0f:02:e6:b3:85:82:9e:9b:32:ae:83:7d:6a: 6f:f4:00:a6:37:fd:34:e5:e2:93:29:66:16:73:72: 2c:ba:99:fc:11:2d:ac:13:a3:88:3d:80:67:c2:88: c3:b7:67:90:26:6a:0b:5e:d0:9e:33:41:5a:59:a3: bb:d4:ca:7e:41:60:69:52:35:96:6c:b4:6a:f6:b2: 66:47:d8:1c:36:e1:ff:46:8b:e9:87:a7:2c:eb:05: a4:b9:14:53:bd:98:22:f0:cd:22:a2:39:cf:c8:67: d1:c9:c1:57:4b:4e:b7:27:b7:cd:ce:7d:de:41:39: 23:c4:e1:53:a0:52:80:15:80:8f:47:7f:d3:c4:31: f4:2a:6c:35:56:93:b6:d6:6b:cb:24:b8:d7:f7:93: e7:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:2F:87:29:CF:CA:C9:7C:4D:48:8B:26:BA:A3:56:02:BB:0D:B8:8D X509v3 Authority Key Identifier: keyid:EB:A0:40:70:CA:27:E6:46:C3:32:03:9E:07:55:77:34:C6:73:2E:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1127eafd-a674-4437-abf1-e550dec137fa/0/EBA04070CA27E646C332039E07557734C6732ED2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EBA04070CA27E646C332039E07557734C6732ED2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1127eafd-a674-4437-abf1-e550dec137fa/0/EBA04070CA27E646C332039E07557734C6732ED2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:b7:23:0d:87:a4:40:d6:28:42:4c:76:1f:cc:40:14:51:e1: 1a:e8:71:af:8d:c5:b7:f2:be:ef:94:bb:67:49:25:98:82:af: 45:c6:23:54:69:6f:74:23:ea:15:0c:0e:e4:9b:f2:f0:07:de: af:35:09:b3:b5:01:f0:54:a7:c8:d8:bd:89:27:b4:a4:51:d8: f4:42:bc:62:75:b7:d5:cd:28:95:66:e2:f0:97:49:2a:ab:bb: 3c:13:ba:9c:e8:3b:ad:15:05:73:bf:14:39:4a:91:c3:1f:5d: 74:b3:38:ce:de:21:a2:e6:7f:34:9e:18:82:2c:42:2e:5c:cc: 9f:21:ad:1c:05:d3:f4:d5:38:22:4a:3b:3f:95:5c:cf:72:8c: c8:e4:91:b9:11:f6:0f:69:f0:bd:f3:33:31:3d:b4:50:a0:19: f9:6f:89:11:98:dd:d6:d1:f4:2d:dc:83:4e:f2:9c:82:42:8e: 5e:88:a1:cd:57:4e:bc:06:2f:24:e9:20:ec:72:6d:fd:83:a8: 01:41:61:a4:4c:f1:72:23:c8:2b:6d:fc:34:ac:80:2d:1e:24: d9:03:ae:5d:f8:56:b5:79:8e:d4:a2:eb:7f:98:ff:eb:af:cc: a6:7a:38:4e:6b:94:80:9f:de:19:e6:f4:d0:1c:2c:49:5f:3a: aa:45:05:e5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTy85WDaAlQSVbRxmbeJsXSxqhtkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUJBMDQwNzBDQTI3RTY0NkMzMzIwMzlFMDc1NTc3MzRD NjczMkVEMjAeFw0yNTEyMDIxMzA2NTdaFw0yNTEyMDUyMDI0NTdaMDMxMTAvBgNV BAMTKDkyMkY4NzI5Q0ZDQUM5N0M0RDQ4OEIyNkJBQTM1NjAyQkIwREI4OEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDaTbRgeTlOCNde7fa7jvnK5XO 9y5wKygA/DapakOvjaJvDW+uS+Vvlj9F3lpbeqJ3xZ5bo2wrm6RbdaoeH14XoYnF o7ddpAEYMTA43bamQoE15Tj++4ylVOS0u9Q9lofxzfC4T2O3ctKbDwLms4WCnpsy roN9am/0AKY3/TTl4pMpZhZzciy6mfwRLawTo4g9gGfCiMO3Z5Amagte0J4zQVpZ o7vUyn5BYGlSNZZstGr2smZH2Bw24f9Gi+mHpyzrBaS5FFO9mCLwzSKiOc/IZ9HJ wVdLTrcnt83Ofd5BOSPE4VOgUoAVgI9Hf9PEMfQqbDVWk7bWa8skuNf3k+fLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUki+HKc/KyXxNSIsmuqNWArsNuI0wHwYDVR0j BBgwFoAU66BAcMon5kbDMgOeB1V3NMZzLtIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MTI3ZWFmZC1hNjc0LTQ0MzctYWJmMS1lNTUwZGVjMTM3ZmEvMC9FQkEwNDA3MENB MjdFNjQ2QzMzMjAzOUUwNzU1NzczNEM2NzMyRUQyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUJBMDQwNzBDQTI3RTY0NkMzMzIwMzlFMDc1NTc3MzRDNjcz MkVEMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTEyN2VhZmQtYTY3NC00NDM3LWFi ZjEtZTU1MGRlYzEzN2ZhLzAvRUJBMDQwNzBDQTI3RTY0NkMzMzIwMzlFMDc1NTc3 MzRDNjczMkVEMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGC3Iw2HpEDWKEJMdh/MQBRR4Rroca+Nxbfy vu+Uu2dJJZiCr0XGI1Rpb3Qj6hUMDuSb8vAH3q81CbO1AfBUp8jYvYkntKRR2PRC vGJ1t9XNKJVm4vCXSSqruzwTupzoO60VBXO/FDlKkcMfXXSzOM7eIaLmfzSeGIIs Qi5czJ8hrRwF0/TVOCJKOz+VXM9yjMjkkbkR9g9p8L3zMzE9tFCgGflviRGY3dbR 9C3cg07ynIJCjl6Ioc1XTrwGLyTpIOxybf2DqAFBYaRM8XIjyCtt/DSsgC0eJNkD rl34VrV5jtSi63+Y/+uvzKZ6OE5rlICf3hnm9NAcLElfOqpFBeU= -----END CERTIFICATE-----Generated at Wed Dec 3 13:58:23 2025 by rpki-client