This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7e8cd97e-56f5-4ca5-a85c-55a323f0608c/0/EB7AB53449E52996F1539393C3DA704C6F12F359.mft File: EB7AB53449E52996F1539393C3DA704C6F12F359.mft (raw, json) Hash identifier: 74cFirG+MJFRChGLAqloKBCz1PKbON90/fV+lTqLf4k= Subject key identifier: BF:48:B2:B2:9A:1A:F8:A3:73:A6:B8:99:5B:15:98:7C:C2:F8:5E:D7 Authority key identifier: EB:7A:B5:34:49:E5:29:96:F1:53:93:93:C3:DA:70:4C:6F:12:F3:59 Certificate issuer: /CN=EB7AB53449E52996F1539393C3DA704C6F12F359 Certificate serial: 4AA09CAE71C3C423E38326310672852FFFAA2BFC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EB7AB53449E52996F1539393C3DA704C6F12F359.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7e8cd97e-56f5-4ca5-a85c-55a323f0608c/0/EB7AB53449E52996F1539393C3DA704C6F12F359.mft Manifest number: 0399 Signing time: Sat 31 Jan 2026 22:30:38 +0000 Manifest this update: Sat 31 Jan 2026 22:25:38 +0000 Manifest next update: Wed 04 Feb 2026 01:08:38 +0000 Files and hashes: 1: 3131362e302e302e302f32312d3234203d3e203539313339.roa (hash: tvzxlzO0vwNEL3kdVV0vVfOPTOFF94uCEicPO2IlBZc=) 2: EB7AB53449E52996F1539393C3DA704C6F12F359.crl (hash: EHUDfta9StI7Lk7lbOsWBKclpkch8vIrGZYWhW5FDu8=) 3: 3130332e3235332e302e302f32322d3234203d3e203539313339.roa (hash: DyW9wD+/QVlej0CI+5sCilJX/+5ZDxLLSw8cy8l6+Ec=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7e8cd97e-56f5-4ca5-a85c-55a323f0608c/0/EB7AB53449E52996F1539393C3DA704C6F12F359.crl rsync://repo-rpki.idnic.net/repo/7e8cd97e-56f5-4ca5-a85c-55a323f0608c/0/EB7AB53449E52996F1539393C3DA704C6F12F359.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EB7AB53449E52996F1539393C3DA704C6F12F359.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Feb 2026 01:08:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:a0:9c:ae:71:c3:c4:23:e3:83:26:31:06:72:85:2f:ff:aa:2b:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB7AB53449E52996F1539393C3DA704C6F12F359 Validity Not Before: Jan 31 22:25:38 2026 GMT Not After : Feb 4 01:08:38 2026 GMT Subject: CN=BF48B2B29A1AF8A373A6B8995B15987CC2F85ED7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:8c:3c:3f:66:18:d5:9d:1f:0c:8c:f9:d1:f9: 4b:b3:e9:6c:fe:35:7a:c1:8d:8a:60:df:54:3e:3e: 78:12:e9:ac:81:3f:97:29:d3:45:ab:07:1c:67:69: e9:4a:ae:55:d8:72:e6:12:0d:1c:d9:f9:f4:08:12: f4:86:77:bf:49:32:18:89:a4:39:4e:22:87:d4:74: 69:8f:1a:e4:c6:da:d4:da:b3:6d:b5:33:80:1d:ca: 45:3b:22:93:4c:42:6e:8f:d3:e7:72:00:5d:3b:40: 5d:84:1b:4d:38:3e:c2:3b:1e:de:4f:1d:86:9f:97: 71:b8:48:83:2d:ea:be:e7:3a:cb:1e:ab:e9:bc:2f: 33:bd:34:d0:c9:8d:6c:f6:24:91:92:1b:98:4f:a1: 96:78:47:37:14:11:42:14:29:c6:4b:45:36:65:8c: ca:4b:ed:80:00:c5:51:5a:8e:41:69:81:f8:7c:a7: ec:a2:b2:2e:7e:ee:26:8a:a6:ec:83:23:b3:59:db: b6:6a:74:70:0f:6a:08:01:ab:f0:df:44:64:89:6c: 42:fd:34:c0:7c:22:79:49:17:64:15:a5:f1:ab:42: 04:bd:6b:2d:4a:cc:0f:e8:6f:dd:29:c3:90:5a:95: 50:6b:59:3a:2e:48:a5:be:84:d9:ee:ae:9a:d1:66: 72:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:48:B2:B2:9A:1A:F8:A3:73:A6:B8:99:5B:15:98:7C:C2:F8:5E:D7 X509v3 Authority Key Identifier: keyid:EB:7A:B5:34:49:E5:29:96:F1:53:93:93:C3:DA:70:4C:6F:12:F3:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7e8cd97e-56f5-4ca5-a85c-55a323f0608c/0/EB7AB53449E52996F1539393C3DA704C6F12F359.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EB7AB53449E52996F1539393C3DA704C6F12F359.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e8cd97e-56f5-4ca5-a85c-55a323f0608c/0/EB7AB53449E52996F1539393C3DA704C6F12F359.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:2b:09:fd:28:2f:0e:08:d0:5c:5e:83:e4:64:05:08:70:59: 55:0f:8e:ff:28:5d:90:e0:f9:3c:ed:fe:a6:5c:a6:de:f9:5e: 12:f2:1b:13:13:49:e1:10:8d:90:6a:82:c6:41:11:80:42:df: f5:b5:6b:f1:2b:56:04:39:ba:ba:e8:0c:cc:aa:09:f0:29:55: 73:67:5b:a6:01:38:b6:10:92:5f:7f:bc:ce:e8:42:32:bb:9f: 48:49:8d:50:6c:68:6d:20:19:7d:c8:01:75:16:7d:44:7d:88: c2:f7:38:eb:74:9d:a5:b8:82:85:16:16:de:d9:25:67:a9:f0: e0:37:e3:8c:57:11:c0:d0:5c:9b:5c:eb:0e:cd:92:93:64:a2: fc:da:4f:30:a2:40:0e:dd:29:78:9f:d3:09:c0:68:a4:cc:1e: 47:36:42:d0:81:39:86:73:a1:a9:17:b8:cd:2e:c8:b4:c9:4e: c6:cc:c7:04:bd:eb:c0:80:90:2f:9d:60:1f:b7:c9:87:8d:14: a7:72:bc:7a:23:73:d4:e7:31:a2:da:20:27:b4:f8:09:18:40: a9:97:e4:7d:d9:15:9f:81:1d:84:62:68:66:a2:dc:ff:b4:54: e6:78:9e:f9:4e:2f:21:03:bc:b1:90:53:86:94:b9:c4:75:0f: 50:cb:21:01 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSqCcrnHDxCPjgyYxBnKFL/+qK/wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUI3QUI1MzQ0OUU1Mjk5NkYxNTM5MzkzQzNEQTcwNEM2 RjEyRjM1OTAeFw0yNjAxMzEyMjI1MzhaFw0yNjAyMDQwMTA4MzhaMDMxMTAvBgNV BAMTKEJGNDhCMkIyOUExQUY4QTM3M0E2Qjg5OTVCMTU5ODdDQzJGODVFRDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnjDw/ZhjVnR8MjPnR+Uuz6Wz+ NXrBjYpg31Q+PngS6ayBP5cp00WrBxxnaelKrlXYcuYSDRzZ+fQIEvSGd79JMhiJ pDlOIofUdGmPGuTG2tTas221M4AdykU7IpNMQm6P0+dyAF07QF2EG004PsI7Ht5P HYafl3G4SIMt6r7nOsseq+m8LzO9NNDJjWz2JJGSG5hPoZZ4RzcUEUIUKcZLRTZl jMpL7YAAxVFajkFpgfh8p+yisi5+7iaKpuyDI7NZ27ZqdHAPaggBq/DfRGSJbEL9 NMB8InlJF2QVpfGrQgS9ay1KzA/ob90pw5BalVBrWTouSKW+hNnurprRZnLnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUv0iyspoa+KNzpriZWxWYfML4XtcwHwYDVR0j BBgwFoAU63q1NEnlKZbxU5OTw9pwTG8S81kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZThjZDk3ZS01NmY1LTRjYTUtYTg1Yy01NWEzMjNmMDYwOGMvMC9FQjdBQjUzNDQ5 RTUyOTk2RjE1MzkzOTNDM0RBNzA0QzZGMTJGMzU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUI3QUI1MzQ0OUU1Mjk5NkYxNTM5MzkzQzNEQTcwNEM2RjEy RjM1OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2U4Y2Q5N2UtNTZmNS00Y2E1LWE4 NWMtNTVhMzIzZjA2MDhjLzAvRUI3QUI1MzQ0OUU1Mjk5NkYxNTM5MzkzQzNEQTcw NEM2RjEyRjM1OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABkrCf0oLw4I0Fxeg+RkBQhwWVUPjv8oXZDg +Tzt/qZcpt75XhLyGxMTSeEQjZBqgsZBEYBC3/W1a/ErVgQ5urroDMyqCfApVXNn W6YBOLYQkl9/vM7oQjK7n0hJjVBsaG0gGX3IAXUWfUR9iML3OOt0naW4goUWFt7Z JWep8OA344xXEcDQXJtc6w7NkpNkovzaTzCiQA7dKXif0wnAaKTMHkc2QtCBOYZz oakXuM0uyLTJTsbMxwS968CAkC+dYB+3yYeNFKdyvHojc9TnMaLaICe0+AkYQKmX 5H3ZFZ+BHYRiaGai3P+0VOZ4nvlOLyEDvLGQU4aUucR1D1DLIQE= -----END CERTIFICATE-----Generated at Mon Feb 2 08:20:19 2026 by rpki-client