This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7e8cd97e-56f5-4ca5-a85c-55a323f0608c/0/EB7AB53449E52996F1539393C3DA704C6F12F359.mft File: EB7AB53449E52996F1539393C3DA704C6F12F359.mft (raw, json) Hash identifier: O1BOTYIrYsBelj9917UIn9pPk8ayGgPf+N3iQgWkmVQ= Subject key identifier: F7:4F:57:91:EC:14:93:2A:EF:A4:E2:F3:F4:D5:5D:1A:8C:B4:9C:5E Authority key identifier: EB:7A:B5:34:49:E5:29:96:F1:53:93:93:C3:DA:70:4C:6F:12:F3:59 Certificate issuer: /CN=EB7AB53449E52996F1539393C3DA704C6F12F359 Certificate serial: 133B9F975EF4FC5B0EE2FEFA684FF75AEDAF56A0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EB7AB53449E52996F1539393C3DA704C6F12F359.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7e8cd97e-56f5-4ca5-a85c-55a323f0608c/0/EB7AB53449E52996F1539393C3DA704C6F12F359.mft Manifest number: 037E Signing time: Tue 02 Dec 2025 11:40:39 +0000 Manifest this update: Tue 02 Dec 2025 11:35:39 +0000 Manifest next update: Fri 05 Dec 2025 21:47:39 +0000 Files and hashes: 1: 3131362e302e302e302f32312d3234203d3e203539313339.roa (hash: tvzxlzO0vwNEL3kdVV0vVfOPTOFF94uCEicPO2IlBZc=) 2: 3130332e3235332e302e302f32322d3234203d3e203539313339.roa (hash: DyW9wD+/QVlej0CI+5sCilJX/+5ZDxLLSw8cy8l6+Ec=) 3: EB7AB53449E52996F1539393C3DA704C6F12F359.crl (hash: jc9T8EesfkXQafvBxUc9j7ZkHH6j2Yy2lR99M8wa0hA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7e8cd97e-56f5-4ca5-a85c-55a323f0608c/0/EB7AB53449E52996F1539393C3DA704C6F12F359.crl rsync://repo-rpki.idnic.net/repo/7e8cd97e-56f5-4ca5-a85c-55a323f0608c/0/EB7AB53449E52996F1539393C3DA704C6F12F359.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EB7AB53449E52996F1539393C3DA704C6F12F359.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 21:47:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:3b:9f:97:5e:f4:fc:5b:0e:e2:fe:fa:68:4f:f7:5a:ed:af:56:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB7AB53449E52996F1539393C3DA704C6F12F359 Validity Not Before: Dec 2 11:35:39 2025 GMT Not After : Dec 5 21:47:39 2025 GMT Subject: CN=F74F5791EC14932AEFA4E2F3F4D55D1A8CB49C5E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:9b:34:1b:23:9d:b7:1e:43:23:11:a8:71:d9: 21:da:56:e3:1a:19:58:8b:fb:e7:73:ee:55:0a:a4: 22:2f:17:25:c8:69:14:4c:60:ed:a2:31:45:83:45: bd:a1:11:27:11:0b:77:bc:38:3c:bb:22:58:ad:85: 96:91:21:82:a3:b8:ba:6f:b1:24:57:f4:6c:b2:b4: 7f:42:b9:4f:05:fc:c9:29:79:b2:02:b8:30:cc:3e: 67:d6:a5:4d:35:25:9a:24:79:ab:39:52:0c:93:c8: 9e:f3:e6:c8:ce:0e:24:2b:6c:86:0b:2f:ea:05:c9: 2e:06:20:7c:9a:84:fa:39:73:22:16:4a:bc:8c:49: f9:e1:8f:93:2b:94:bb:64:8c:a7:7b:f3:e7:01:33: 66:e5:b8:24:c5:07:2f:29:c5:89:3a:2f:e7:8f:9a: 35:13:a5:58:3c:94:21:01:e2:13:d6:54:79:56:14: 9c:e6:73:e2:5f:ac:d8:8a:96:28:75:33:32:da:70: 19:2a:c9:29:87:72:18:ea:44:45:37:91:71:79:25: 16:c8:70:26:5e:1d:9f:bc:69:ed:61:fc:79:c7:20: 27:76:84:5e:95:46:62:f2:31:50:16:d6:26:9c:6e: 8e:84:9d:21:06:87:42:3d:b6:4e:6b:a8:ca:3e:ef: b2:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:4F:57:91:EC:14:93:2A:EF:A4:E2:F3:F4:D5:5D:1A:8C:B4:9C:5E X509v3 Authority Key Identifier: keyid:EB:7A:B5:34:49:E5:29:96:F1:53:93:93:C3:DA:70:4C:6F:12:F3:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7e8cd97e-56f5-4ca5-a85c-55a323f0608c/0/EB7AB53449E52996F1539393C3DA704C6F12F359.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EB7AB53449E52996F1539393C3DA704C6F12F359.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e8cd97e-56f5-4ca5-a85c-55a323f0608c/0/EB7AB53449E52996F1539393C3DA704C6F12F359.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:0c:27:92:43:8f:b1:25:68:7c:b3:c0:12:6f:92:75:b4:26: 6f:dc:35:25:c3:59:0b:6b:d2:95:60:a3:d2:68:87:cc:22:38: 7d:cb:e4:04:62:fd:8c:75:38:48:c4:92:4e:73:13:56:7b:7b: 3b:12:e1:dc:bd:ce:6b:3b:31:33:a1:aa:e9:ee:c6:9d:96:67: 8a:9d:bb:33:bd:2d:eb:d0:81:9d:16:f9:e0:bc:62:31:4e:85: 5f:21:bd:1d:f1:84:68:d0:68:21:78:87:61:65:5d:06:44:a3: 1b:ff:09:0e:b0:3b:3d:61:13:7b:42:cd:36:bd:28:67:eb:60: 50:fc:b8:37:89:42:db:22:03:48:8f:cf:33:c4:9e:3a:9d:3e: 4b:5f:1d:b8:45:4b:fa:50:ae:2d:1a:71:e9:1d:74:71:48:4d: 47:97:50:d1:96:6c:80:34:6b:4e:95:8d:66:14:54:ee:d6:db: 66:fb:45:a7:2c:de:0e:16:4e:d5:34:9e:78:6e:b5:e3:c8:dc: 77:30:c4:65:4e:94:f7:9b:56:79:a3:f8:71:d7:0c:c1:c6:8c: c5:05:d3:e2:6e:c6:96:55:0c:46:e2:07:06:eb:bb:8e:45:4e: cc:62:50:4e:62:39:6d:1e:8b:6c:83:7b:ee:1e:16:ad:cf:71: 2b:33:f5:4f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEzufl170/FsO4v76aE/3Wu2vVqAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUI3QUI1MzQ0OUU1Mjk5NkYxNTM5MzkzQzNEQTcwNEM2 RjEyRjM1OTAeFw0yNTEyMDIxMTM1MzlaFw0yNTEyMDUyMTQ3MzlaMDMxMTAvBgNV BAMTKEY3NEY1NzkxRUMxNDkzMkFFRkE0RTJGM0Y0RDU1RDFBOENCNDlDNUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhmzQbI523HkMjEahx2SHaVuMa GViL++dz7lUKpCIvFyXIaRRMYO2iMUWDRb2hEScRC3e8ODy7IlithZaRIYKjuLpv sSRX9GyytH9CuU8F/MkpebICuDDMPmfWpU01JZokeas5UgyTyJ7z5sjODiQrbIYL L+oFyS4GIHyahPo5cyIWSryMSfnhj5MrlLtkjKd78+cBM2bluCTFBy8pxYk6L+eP mjUTpVg8lCEB4hPWVHlWFJzmc+JfrNiKlih1MzLacBkqySmHchjqREU3kXF5JRbI cCZeHZ+8ae1h/HnHICd2hF6VRmLyMVAW1iacbo6EnSEGh0I9tk5rqMo+77JRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU909XkewUkyrvpOLz9NVdGoy0nF4wHwYDVR0j BBgwFoAU63q1NEnlKZbxU5OTw9pwTG8S81kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZThjZDk3ZS01NmY1LTRjYTUtYTg1Yy01NWEzMjNmMDYwOGMvMC9FQjdBQjUzNDQ5 RTUyOTk2RjE1MzkzOTNDM0RBNzA0QzZGMTJGMzU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUI3QUI1MzQ0OUU1Mjk5NkYxNTM5MzkzQzNEQTcwNEM2RjEy RjM1OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2U4Y2Q5N2UtNTZmNS00Y2E1LWE4 NWMtNTVhMzIzZjA2MDhjLzAvRUI3QUI1MzQ0OUU1Mjk5NkYxNTM5MzkzQzNEQTcw NEM2RjEyRjM1OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFsMJ5JDj7ElaHyzwBJvknW0Jm/cNSXDWQtr 0pVgo9Joh8wiOH3L5ARi/Yx1OEjEkk5zE1Z7ezsS4dy9zms7MTOhqunuxp2WZ4qd uzO9LevQgZ0W+eC8YjFOhV8hvR3xhGjQaCF4h2FlXQZEoxv/CQ6wOz1hE3tCzTa9 KGfrYFD8uDeJQtsiA0iPzzPEnjqdPktfHbhFS/pQri0acekddHFITUeXUNGWbIA0 a06VjWYUVO7W22b7Racs3g4WTtU0nnhutePI3HcwxGVOlPebVnmj+HHXDMHGjMUF 0+JuxpZVDEbiBwbru45FTsxiUE5iOW0ei2yDe+4eFq3PcSsz9U8= -----END CERTIFICATE-----Generated at Wed Dec 3 13:55:25 2025 by rpki-client