This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/76954636-9829-4ba8-96af-6e00b71a8ef8/0/EBBE263817C941A8999ED0A874948E0C42CC0DB6.mft File: EBBE263817C941A8999ED0A874948E0C42CC0DB6.mft (raw, json) Hash identifier: vZHQhCkE88vwWg2wPgbmzyY8NIKmDfFa1W8+sJtYuIk= Subject key identifier: B6:AB:42:1B:F0:33:EE:0E:21:6C:BA:A1:AE:BE:3A:F2:C5:AB:4E:B0 Authority key identifier: EB:BE:26:38:17:C9:41:A8:99:9E:D0:A8:74:94:8E:0C:42:CC:0D:B6 Certificate issuer: /CN=EBBE263817C941A8999ED0A874948E0C42CC0DB6 Certificate serial: 3AA086C2699123F4E0C7DC58FC901AC5265773CC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EBBE263817C941A8999ED0A874948E0C42CC0DB6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/76954636-9829-4ba8-96af-6e00b71a8ef8/0/EBBE263817C941A8999ED0A874948E0C42CC0DB6.mft Manifest number: 026D Signing time: Thu 18 Dec 2025 18:12:54 +0000 Manifest this update: Thu 18 Dec 2025 18:07:54 +0000 Manifest next update: Sun 21 Dec 2025 19:55:54 +0000 Files and hashes: 1: EBBE263817C941A8999ED0A874948E0C42CC0DB6.crl (hash: 76D2Ihe//ugMKh0+a8Fofp2wrr92eqkeNyjlu5nQB8o=) 2: 3130332e3134362e32362e302f32332d3234203d3e20313339393834.roa (hash: 1wk6K0cNbtH08x4iJmFx550HbWAFQO6tmwxxHOAuLSM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/76954636-9829-4ba8-96af-6e00b71a8ef8/0/EBBE263817C941A8999ED0A874948E0C42CC0DB6.crl rsync://repo-rpki.idnic.net/repo/76954636-9829-4ba8-96af-6e00b71a8ef8/0/EBBE263817C941A8999ED0A874948E0C42CC0DB6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EBBE263817C941A8999ED0A874948E0C42CC0DB6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 19:55:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:a0:86:c2:69:91:23:f4:e0:c7:dc:58:fc:90:1a:c5:26:57:73:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EBBE263817C941A8999ED0A874948E0C42CC0DB6 Validity Not Before: Dec 18 18:07:54 2025 GMT Not After : Dec 21 19:55:54 2025 GMT Subject: CN=B6AB421BF033EE0E216CBAA1AEBE3AF2C5AB4EB0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:45:56:45:a1:41:08:1d:46:96:76:29:c7:9e: 06:ea:5b:a7:33:d6:d3:02:13:82:95:32:3a:7c:ff: 7c:72:c9:a1:e1:a3:71:2a:48:75:69:8a:7e:54:ae: af:87:1e:82:17:2b:01:b3:b5:0a:b2:96:74:f7:2e: f8:d5:4b:69:e9:0c:e2:d8:49:2d:90:e6:9e:13:ce: dd:40:90:fb:65:cc:b5:1f:1c:1f:4f:ab:4e:0e:2f: db:6e:c4:a5:4f:1d:34:e7:e5:75:3a:b0:6f:f5:c9: 07:ff:b9:b0:ce:3f:62:1c:9b:64:7d:8c:03:fa:ff: f1:b6:c0:b9:be:f1:5e:aa:25:14:a9:6c:3f:95:6f: 59:82:6d:fc:fd:dc:e3:f6:9e:6f:a8:f8:17:f6:56: 65:5f:7e:4d:81:c6:4c:f7:78:b6:c3:e9:0f:25:7e: 3a:38:ab:04:c1:c0:a7:f7:71:89:37:aa:e8:de:0d: 78:40:b9:0a:53:f5:5d:57:ef:4c:ce:2a:65:06:dd: 90:ac:48:9d:8e:7a:38:69:70:4b:0c:08:f5:34:94: 7b:57:d8:ff:6b:fb:a8:86:3c:c2:23:0a:ac:b7:48: 52:79:70:2b:30:41:76:67:24:4c:5f:93:b9:d0:0c: 65:e5:fc:64:34:fa:c1:a1:3c:e9:c2:3b:4b:8e:87: 4b:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:AB:42:1B:F0:33:EE:0E:21:6C:BA:A1:AE:BE:3A:F2:C5:AB:4E:B0 X509v3 Authority Key Identifier: keyid:EB:BE:26:38:17:C9:41:A8:99:9E:D0:A8:74:94:8E:0C:42:CC:0D:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/76954636-9829-4ba8-96af-6e00b71a8ef8/0/EBBE263817C941A8999ED0A874948E0C42CC0DB6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EBBE263817C941A8999ED0A874948E0C42CC0DB6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/76954636-9829-4ba8-96af-6e00b71a8ef8/0/EBBE263817C941A8999ED0A874948E0C42CC0DB6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:10:97:7a:1d:6d:9d:ac:b4:a5:ea:5f:43:8a:30:d5:de:41: f0:5e:50:13:67:76:c7:4b:e2:a7:15:07:2e:8b:75:1c:f7:d3: 68:b9:c5:bb:d4:79:3b:ab:ee:f2:ef:a9:e5:1f:38:44:a3:63: e7:ac:a5:ae:7e:4e:5f:76:3c:67:cd:f0:cd:60:21:4d:ce:ef: 76:a1:a9:0a:b0:e9:28:66:59:77:0a:ce:e9:d0:69:06:a9:38: 0f:5a:d7:4c:4d:73:92:d0:2e:dd:71:a3:84:5f:dd:83:fc:03: 35:e1:ed:88:af:07:b4:9f:8a:ba:f0:95:04:9a:12:97:a7:d3: b2:d0:9a:05:59:58:44:25:e5:76:9f:06:6d:61:b0:6f:30:75: b1:82:31:53:25:64:c4:24:e6:43:4e:dd:82:08:48:96:fd:5d: 61:64:3b:aa:af:02:cf:d4:7f:05:52:8f:1c:30:91:96:1c:a7: 37:b2:6e:4a:75:5f:6b:ae:26:8f:5d:1c:87:df:5a:b1:9d:52: 42:c7:5c:e5:67:55:e1:b8:3a:da:f1:40:95:63:7e:11:16:0f: 98:d4:58:80:7b:fb:29:e0:d8:26:5d:e3:76:aa:27:8d:9a:91: a3:3f:39:28:54:1f:f1:88:f2:9d:4c:66:39:55:89:95:97:1a: bd:a3:ba:24 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOqCGwmmRI/Tgx9xY/JAaxSZXc8wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUJCRTI2MzgxN0M5NDFBODk5OUVEMEE4NzQ5NDhFMEM0 MkNDMERCNjAeFw0yNTEyMTgxODA3NTRaFw0yNTEyMjExOTU1NTRaMDMxMTAvBgNV BAMTKEI2QUI0MjFCRjAzM0VFMEUyMTZDQkFBMUFFQkUzQUYyQzVBQjRFQjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0RVZFoUEIHUaWdinHngbqW6cz 1tMCE4KVMjp8/3xyyaHho3EqSHVpin5Urq+HHoIXKwGztQqylnT3LvjVS2npDOLY SS2Q5p4Tzt1AkPtlzLUfHB9Pq04OL9tuxKVPHTTn5XU6sG/1yQf/ubDOP2Icm2R9 jAP6//G2wLm+8V6qJRSpbD+Vb1mCbfz93OP2nm+o+Bf2VmVffk2Bxkz3eLbD6Q8l fjo4qwTBwKf3cYk3qujeDXhAuQpT9V1X70zOKmUG3ZCsSJ2OejhpcEsMCPU0lHtX 2P9r+6iGPMIjCqy3SFJ5cCswQXZnJExfk7nQDGXl/GQ0+sGhPOnCO0uOh0vpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtqtCG/Az7g4hbLqhrr468sWrTrAwHwYDVR0j BBgwFoAU674mOBfJQaiZntCodJSODELMDbYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 Njk1NDYzNi05ODI5LTRiYTgtOTZhZi02ZTAwYjcxYThlZjgvMC9FQkJFMjYzODE3 Qzk0MUE4OTk5RUQwQTg3NDk0OEUwQzQyQ0MwREI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUJCRTI2MzgxN0M5NDFBODk5OUVEMEE4NzQ5NDhFMEM0MkND MERCNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzY5NTQ2MzYtOTgyOS00YmE4LTk2 YWYtNmUwMGI3MWE4ZWY4LzAvRUJCRTI2MzgxN0M5NDFBODk5OUVEMEE4NzQ5NDhF MEM0MkNDMERCNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAsQl3odbZ2stKXqX0OKMNXeQfBeUBNndsdL 4qcVBy6LdRz302i5xbvUeTur7vLvqeUfOESjY+espa5+Tl92PGfN8M1gIU3O73ah qQqw6ShmWXcKzunQaQapOA9a10xNc5LQLt1xo4Rf3YP8AzXh7YivB7SfirrwlQSa Epen07LQmgVZWEQl5XafBm1hsG8wdbGCMVMlZMQk5kNO3YIISJb9XWFkO6qvAs/U fwVSjxwwkZYcpzeybkp1X2uuJo9dHIffWrGdUkLHXOVnVeG4OtrxQJVjfhEWD5jU WIB7+yng2CZd43aqJ42akaM/OShUH/GI8p1MZjlViZWXGr2juiQ= -----END CERTIFICATE-----Generated at Fri Dec 19 04:52:42 2025 by rpki-client