This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/2312a146-f954-47e3-b93f-92c2fe6d89ea/0/EBDA939B37F36E8A9F581B1036E01C32F1F3D9DF.mft File: EBDA939B37F36E8A9F581B1036E01C32F1F3D9DF.mft (raw, json) Hash identifier: pSFy6pJKLXTuunkuiSYPTEHjQFzu0KoW6mYVGeOIKy4= Subject key identifier: D1:A4:EA:F2:C6:6E:E4:ED:3E:8E:E9:F8:F6:A7:52:D9:43:17:F2:6C Authority key identifier: EB:DA:93:9B:37:F3:6E:8A:9F:58:1B:10:36:E0:1C:32:F1:F3:D9:DF Certificate issuer: /CN=EBDA939B37F36E8A9F581B1036E01C32F1F3D9DF Certificate serial: 6DD7DA0B25A69545FC70B6CE296C89E617B83937 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EBDA939B37F36E8A9F581B1036E01C32F1F3D9DF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2312a146-f954-47e3-b93f-92c2fe6d89ea/0/EBDA939B37F36E8A9F581B1036E01C32F1F3D9DF.mft Manifest number: 01B3 Signing time: Mon 01 Dec 2025 13:21:41 +0000 Manifest this update: Mon 01 Dec 2025 13:16:41 +0000 Manifest next update: Fri 05 Dec 2025 01:14:41 +0000 Files and hashes: 1: 3130332e3132322e302e302f32332d3234203d3e20313335343737.roa (hash: 0dxD7I8rMeBsoy/bZAItegSvjuCOP4VyKJVgOZz4NLU=) 2: EBDA939B37F36E8A9F581B1036E01C32F1F3D9DF.crl (hash: loQxKqgLxDbLfLeOdKSPkWV1cudbigRF6R9vHL+jf1g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2312a146-f954-47e3-b93f-92c2fe6d89ea/0/EBDA939B37F36E8A9F581B1036E01C32F1F3D9DF.crl rsync://repo-rpki.idnic.net/repo/2312a146-f954-47e3-b93f-92c2fe6d89ea/0/EBDA939B37F36E8A9F581B1036E01C32F1F3D9DF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EBDA939B37F36E8A9F581B1036E01C32F1F3D9DF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 01:14:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:d7:da:0b:25:a6:95:45:fc:70:b6:ce:29:6c:89:e6:17:b8:39:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EBDA939B37F36E8A9F581B1036E01C32F1F3D9DF Validity Not Before: Dec 1 13:16:41 2025 GMT Not After : Dec 5 01:14:41 2025 GMT Subject: CN=D1A4EAF2C66EE4ED3E8EE9F8F6A752D94317F26C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:2d:d1:79:24:04:18:fa:13:99:b4:21:b5:72: b7:57:4c:e3:bf:c5:cc:67:eb:8a:df:62:25:a3:0c: b3:01:d8:87:d6:0c:66:4e:fa:fe:d3:55:24:4a:f4: e0:c5:a4:c9:c9:91:30:6b:c0:ff:66:50:c7:ea:e3: 0f:ee:ec:a5:6c:61:55:b4:4b:17:6c:6d:f1:27:6e: 5a:b9:0b:82:ce:8b:0a:6e:88:5d:3e:14:7a:cb:8b: 1f:eb:05:94:91:23:22:60:e2:0a:c1:e5:a6:33:41: 1e:af:07:36:3f:0c:08:1c:d9:bc:52:fb:fc:6d:22: f0:0e:0f:b5:57:f7:96:cd:d4:e5:10:b9:d9:83:b2: 4b:4a:5f:47:84:a7:09:ba:7b:70:c0:e0:5a:36:42: 43:a4:ff:77:78:b3:c5:42:90:ca:51:f0:3b:57:4c: f1:e0:63:ef:2b:16:f5:e5:e2:b7:d4:d6:d4:8c:94: 56:ea:08:5e:cb:f9:63:45:99:2a:e0:3f:3c:81:c0: d8:0a:1d:5e:58:a8:b0:82:ff:4b:5c:88:64:9a:8b: 6e:c2:84:5b:4b:52:38:d6:01:f0:61:a5:35:1f:86: 5a:c1:83:5f:5f:da:71:a6:13:72:9f:fe:58:0c:ec: c6:39:57:c9:54:c0:b4:7d:3c:23:9b:c0:2d:66:2d: e4:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:A4:EA:F2:C6:6E:E4:ED:3E:8E:E9:F8:F6:A7:52:D9:43:17:F2:6C X509v3 Authority Key Identifier: keyid:EB:DA:93:9B:37:F3:6E:8A:9F:58:1B:10:36:E0:1C:32:F1:F3:D9:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2312a146-f954-47e3-b93f-92c2fe6d89ea/0/EBDA939B37F36E8A9F581B1036E01C32F1F3D9DF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EBDA939B37F36E8A9F581B1036E01C32F1F3D9DF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2312a146-f954-47e3-b93f-92c2fe6d89ea/0/EBDA939B37F36E8A9F581B1036E01C32F1F3D9DF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cb:bb:63:df:fa:8b:16:2a:68:48:dc:b2:08:17:e8:0c:b0:1d: 67:09:a3:06:c7:7c:68:9d:23:f7:4c:13:71:cf:cf:31:9e:09: 05:95:a3:30:06:01:09:06:1d:3c:0c:f2:34:c1:c4:f9:40:ae: f6:f7:bc:03:0d:45:56:90:a9:f2:a6:e6:b3:c9:02:cd:22:12: b5:31:d4:0a:4d:bc:71:46:dc:92:a8:8b:b9:0f:36:e7:77:d2: 80:43:1f:a1:62:53:ab:69:0b:0c:c8:18:dd:e1:ad:24:45:8c: 1f:7f:6f:99:bd:09:01:40:e9:14:8f:05:80:8c:08:f7:65:28: 36:dd:c0:c0:7c:95:60:96:c3:aa:0d:aa:c0:dd:a9:98:8c:79: 0b:4a:a2:58:05:43:9a:20:b1:44:91:1e:ab:b7:c8:1e:ba:b9: cc:f6:06:5b:32:e8:b0:a7:d0:eb:a4:1c:d4:cf:a7:ab:bb:fb: 7f:85:95:e1:4a:3e:80:34:65:d3:b4:a7:59:4f:af:a1:bf:73: 39:c7:69:7b:27:7d:16:3d:ef:87:51:ac:63:fb:67:78:55:a6: 7e:f1:d7:88:64:ab:72:e6:b6:03:b0:03:60:f2:b4:fb:6e:7c: 72:09:7d:d9:90:28:69:26:03:2b:09:de:10:3a:85:fe:97:a3: 5e:56:eb:3a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbdfaCyWmlUX8cLbOKWyJ5he4OTcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUJEQTkzOUIzN0YzNkU4QTlGNTgxQjEwMzZFMDFDMzJG MUYzRDlERjAeFw0yNTEyMDExMzE2NDFaFw0yNTEyMDUwMTE0NDFaMDMxMTAvBgNV BAMTKEQxQTRFQUYyQzY2RUU0RUQzRThFRTlGOEY2QTc1MkQ5NDMxN0YyNkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHLdF5JAQY+hOZtCG1crdXTOO/ xcxn64rfYiWjDLMB2IfWDGZO+v7TVSRK9ODFpMnJkTBrwP9mUMfq4w/u7KVsYVW0 SxdsbfEnblq5C4LOiwpuiF0+FHrLix/rBZSRIyJg4grB5aYzQR6vBzY/DAgc2bxS +/xtIvAOD7VX95bN1OUQudmDsktKX0eEpwm6e3DA4Fo2QkOk/3d4s8VCkMpR8DtX TPHgY+8rFvXl4rfU1tSMlFbqCF7L+WNFmSrgPzyBwNgKHV5YqLCC/0tciGSai27C hFtLUjjWAfBhpTUfhlrBg19f2nGmE3Kf/lgM7MY5V8lUwLR9PCObwC1mLeQ7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0aTq8sZu5O0+jun49qdS2UMX8mwwHwYDVR0j BBgwFoAU69qTmzfzboqfWBsQNuAcMvHz2d8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MzEyYTE0Ni1mOTU0LTQ3ZTMtYjkzZi05MmMyZmU2ZDg5ZWEvMC9FQkRBOTM5QjM3 RjM2RThBOUY1ODFCMTAzNkUwMUMzMkYxRjNEOURGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUJEQTkzOUIzN0YzNkU4QTlGNTgxQjEwMzZFMDFDMzJGMUYz RDlERi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjMxMmExNDYtZjk1NC00N2UzLWI5 M2YtOTJjMmZlNmQ4OWVhLzAvRUJEQTkzOUIzN0YzNkU4QTlGNTgxQjEwMzZFMDFD MzJGMUYzRDlERi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMu7Y9/6ixYqaEjcsggX6AywHWcJowbHfGid I/dME3HPzzGeCQWVozAGAQkGHTwM8jTBxPlArvb3vAMNRVaQqfKm5rPJAs0iErUx 1ApNvHFG3JKoi7kPNud30oBDH6FiU6tpCwzIGN3hrSRFjB9/b5m9CQFA6RSPBYCM CPdlKDbdwMB8lWCWw6oNqsDdqZiMeQtKolgFQ5ogsUSRHqu3yB66ucz2Blsy6LCn 0OukHNTPp6u7+3+FleFKPoA0ZdO0p1lPr6G/cznHaXsnfRY974dRrGP7Z3hVpn7x 14hkq3LmtgOwA2DytPtufHIJfdmQKGkmAysJ3hA6hf6Xo15W6zo= -----END CERTIFICATE-----Generated at Wed Dec 3 14:42:50 2025 by rpki-client