This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7e8cd97e-56f5-4ca5-a85c-55a323f0608c/0/EB7AB53449E52996F1539393C3DA704C6F12F359.mft File: EB7AB53449E52996F1539393C3DA704C6F12F359.mft (raw, json) Hash identifier: uA8/JgiyvwqLTBn8gxFs+JQIGvIimJ0QhyxypZI9WcA= Subject key identifier: C7:B3:81:CF:F7:51:05:A7:54:02:12:7C:65:4C:A7:04:30:A0:27:35 Authority key identifier: EB:7A:B5:34:49:E5:29:96:F1:53:93:93:C3:DA:70:4C:6F:12:F3:59 Certificate issuer: /CN=EB7AB53449E52996F1539393C3DA704C6F12F359 Certificate serial: 602EB50DC91EBF189ED237AC1E7F3752D05AD627 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EB7AB53449E52996F1539393C3DA704C6F12F359.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7e8cd97e-56f5-4ca5-a85c-55a323f0608c/0/EB7AB53449E52996F1539393C3DA704C6F12F359.mft Manifest number: 0383 Signing time: Sat 13 Dec 2025 22:40:37 +0000 Manifest this update: Sat 13 Dec 2025 22:35:37 +0000 Manifest next update: Tue 16 Dec 2025 23:57:37 +0000 Files and hashes: 1: 3130332e3235332e302e302f32322d3234203d3e203539313339.roa (hash: DyW9wD+/QVlej0CI+5sCilJX/+5ZDxLLSw8cy8l6+Ec=) 2: EB7AB53449E52996F1539393C3DA704C6F12F359.crl (hash: td6CL0ZzEpXXMdhq4+laDWJFa+BHWU8qrniARoqejDo=) 3: 3131362e302e302e302f32312d3234203d3e203539313339.roa (hash: tvzxlzO0vwNEL3kdVV0vVfOPTOFF94uCEicPO2IlBZc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7e8cd97e-56f5-4ca5-a85c-55a323f0608c/0/EB7AB53449E52996F1539393C3DA704C6F12F359.crl rsync://repo-rpki.idnic.net/repo/7e8cd97e-56f5-4ca5-a85c-55a323f0608c/0/EB7AB53449E52996F1539393C3DA704C6F12F359.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EB7AB53449E52996F1539393C3DA704C6F12F359.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Dec 2025 13:15:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:2e:b5:0d:c9:1e:bf:18:9e:d2:37:ac:1e:7f:37:52:d0:5a:d6:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB7AB53449E52996F1539393C3DA704C6F12F359 Validity Not Before: Dec 13 22:35:37 2025 GMT Not After : Dec 16 23:57:37 2025 GMT Subject: CN=C7B381CFF75105A75402127C654CA70430A02735 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:1f:9f:e7:61:01:da:e0:de:c7:d9:e2:bb:bd: e4:6c:0a:90:ef:5b:cd:6a:fb:63:54:9e:e4:ea:d5: ca:62:21:79:a9:a9:7c:49:91:27:41:62:0a:c1:33: 4f:97:83:94:49:c8:65:dc:05:9c:5f:5d:f1:b1:02: 1d:ad:28:18:be:fa:fc:cc:f8:60:f7:99:c9:a9:14: 3b:af:c5:9a:e8:e9:2d:4e:98:2f:2c:75:7f:e5:27: c1:2b:b6:37:26:a0:e6:33:36:89:44:b0:29:ca:a4: e6:60:da:a5:31:8e:56:8f:7a:b5:f8:44:41:2c:e3: 07:3a:0b:98:08:1f:8e:2e:7e:26:67:1c:25:7a:d7: eb:aa:17:43:5a:9c:f9:0d:97:91:e7:c9:5e:42:1e: f9:ee:06:8a:45:44:40:59:00:98:b4:d5:9c:40:d2: 6c:a5:0c:d3:09:6c:04:04:c5:46:d9:a1:86:91:df: 29:3e:e5:3b:78:11:ce:3f:20:9c:8f:d7:07:18:4b: 40:d0:5b:e3:35:b9:6b:ca:77:8f:c1:30:91:3f:ab: 8d:ed:57:07:83:9e:3b:70:71:61:53:6a:02:c5:03: 5d:8d:02:22:24:8d:4b:ed:d1:76:17:a4:66:50:a9: 6e:47:86:ee:d8:f5:ac:bd:54:e1:f9:1c:d9:9f:26: 0f:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:B3:81:CF:F7:51:05:A7:54:02:12:7C:65:4C:A7:04:30:A0:27:35 X509v3 Authority Key Identifier: keyid:EB:7A:B5:34:49:E5:29:96:F1:53:93:93:C3:DA:70:4C:6F:12:F3:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7e8cd97e-56f5-4ca5-a85c-55a323f0608c/0/EB7AB53449E52996F1539393C3DA704C6F12F359.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EB7AB53449E52996F1539393C3DA704C6F12F359.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e8cd97e-56f5-4ca5-a85c-55a323f0608c/0/EB7AB53449E52996F1539393C3DA704C6F12F359.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:a6:8a:70:58:84:ca:5d:7a:c7:e6:91:43:26:b2:28:68:d9: 61:ea:ff:82:04:9a:0f:c1:eb:e9:46:f0:26:3e:7c:e6:9f:a1: 99:04:cb:b0:ab:ac:e1:dc:64:aa:e0:0e:36:72:9d:26:37:0c: 5d:a7:0e:48:5b:61:95:6a:f1:cc:33:65:dc:a4:7d:88:88:9b: 0f:c6:bf:ea:09:5c:39:ba:ff:c1:f0:85:9a:45:b4:31:fb:b2: 88:94:fe:2e:f4:c0:10:f2:9c:48:a2:10:e0:e5:9e:c4:9e:39: 6c:b7:6b:dc:a9:fe:00:ce:7a:cb:8a:86:70:1a:aa:90:df:23: 93:56:51:07:82:75:f8:4d:54:f3:c3:b2:3a:4f:99:2f:66:bd: 93:5b:a3:27:cc:53:9e:02:8d:c5:22:c9:b2:b3:96:62:d7:fb: ee:56:85:72:0d:68:09:55:59:ca:62:01:2b:9c:02:89:22:ce: bd:2a:b8:80:e0:5f:6f:20:f9:8f:07:e5:43:31:9d:b5:ab:31: d3:86:be:2a:41:7d:5d:96:7f:24:56:f4:9a:7c:16:96:6c:e7: 9d:54:0c:6d:1c:c3:da:8a:2b:bf:3d:8f:71:32:a7:a3:64:ce: c9:93:0b:93:55:c2:85:33:fb:51:0a:25:1a:7b:78:36:6c:44: 59:8f:c4:c8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYC61Dckevxie0jesHn83UtBa1icwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUI3QUI1MzQ0OUU1Mjk5NkYxNTM5MzkzQzNEQTcwNEM2 RjEyRjM1OTAeFw0yNTEyMTMyMjM1MzdaFw0yNTEyMTYyMzU3MzdaMDMxMTAvBgNV BAMTKEM3QjM4MUNGRjc1MTA1QTc1NDAyMTI3QzY1NENBNzA0MzBBMDI3MzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZH5/nYQHa4N7H2eK7veRsCpDv W81q+2NUnuTq1cpiIXmpqXxJkSdBYgrBM0+Xg5RJyGXcBZxfXfGxAh2tKBi++vzM +GD3mcmpFDuvxZro6S1OmC8sdX/lJ8ErtjcmoOYzNolEsCnKpOZg2qUxjlaPerX4 REEs4wc6C5gIH44ufiZnHCV61+uqF0NanPkNl5HnyV5CHvnuBopFREBZAJi01ZxA 0mylDNMJbAQExUbZoYaR3yk+5Tt4Ec4/IJyP1wcYS0DQW+M1uWvKd4/BMJE/q43t VweDnjtwcWFTagLFA12NAiIkjUvt0XYXpGZQqW5Hhu7Y9ay9VOH5HNmfJg9XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUx7OBz/dRBadUAhJ8ZUynBDCgJzUwHwYDVR0j BBgwFoAU63q1NEnlKZbxU5OTw9pwTG8S81kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZThjZDk3ZS01NmY1LTRjYTUtYTg1Yy01NWEzMjNmMDYwOGMvMC9FQjdBQjUzNDQ5 RTUyOTk2RjE1MzkzOTNDM0RBNzA0QzZGMTJGMzU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUI3QUI1MzQ0OUU1Mjk5NkYxNTM5MzkzQzNEQTcwNEM2RjEy RjM1OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2U4Y2Q5N2UtNTZmNS00Y2E1LWE4 NWMtNTVhMzIzZjA2MDhjLzAvRUI3QUI1MzQ0OUU1Mjk5NkYxNTM5MzkzQzNEQTcw NEM2RjEyRjM1OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALuminBYhMpdesfmkUMmsiho2WHq/4IEmg/B 6+lG8CY+fOafoZkEy7CrrOHcZKrgDjZynSY3DF2nDkhbYZVq8cwzZdykfYiImw/G v+oJXDm6/8HwhZpFtDH7soiU/i70wBDynEiiEODlnsSeOWy3a9yp/gDOesuKhnAa qpDfI5NWUQeCdfhNVPPDsjpPmS9mvZNboyfMU54CjcUiybKzlmLX++5WhXINaAlV WcpiASucAokizr0quIDgX28g+Y8H5UMxnbWrMdOGvipBfV2WfyRW9Jp8FpZs551U DG0cw9qKK789j3Eyp6NkzsmTC5NVwoUz+1EKJRp7eDZsRFmPxMg= -----END CERTIFICATE-----Generated at Sun Dec 14 03:26:00 2025 by rpki-client