This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/ce4e103e-3d78-4ae0-9ba4-d1792ffa04ac/0/EB6A398D686553919657E094022E843191F4573E.mft
File: EB6A398D686553919657E094022E843191F4573E.mft (raw, json)
Hash identifier: saKE1l1wY+1yDwyVp8f4XfP7Wfs6zYopEEum5tkVJAk=
Subject key identifier: 62:5F:36:EF:41:01:B4:0B:00:34:CB:A0:49:0F:8B:24:EA:CC:8F:2D
Authority key identifier: EB:6A:39:8D:68:65:53:91:96:57:E0:94:02:2E:84:31:91:F4:57:3E
Certificate issuer: /CN=EB6A398D686553919657E094022E843191F4573E
Certificate serial: 069461AB1ED8FD39DD93E4837E1813012361818E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EB6A398D686553919657E094022E843191F4573E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ce4e103e-3d78-4ae0-9ba4-d1792ffa04ac/0/EB6A398D686553919657E094022E843191F4573E.mft
Manifest number: 027F
Signing time: Fri 30 Jan 2026 22:41:59 +0000
Manifest this update: Fri 30 Jan 2026 22:36:59 +0000
Manifest next update: Tue 03 Feb 2026 08:50:59 +0000
Files and hashes: 1: EB6A398D686553919657E094022E843191F4573E.crl (hash: u7ZaEvy0R0LCuKkSNbPNOaujk+kgcJIYtiXToW4wc6U=)
2: 3130332e3138312e3234382e302f32332d3234203d3e20313439343030.roa (hash: ZQvUbXHu4oitDR8z2M5lRxDV5Dfgz07kS0tfmIPrPQU=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/ce4e103e-3d78-4ae0-9ba4-d1792ffa04ac/0/EB6A398D686553919657E094022E843191F4573E.crl
rsync://repo-rpki.idnic.net/repo/ce4e103e-3d78-4ae0-9ba4-d1792ffa04ac/0/EB6A398D686553919657E094022E843191F4573E.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EB6A398D686553919657E094022E843191F4573E.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Feb 2026 08:50:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:94:61:ab:1e:d8:fd:39:dd:93:e4:83:7e:18:13:01:23:61:81:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB6A398D686553919657E094022E843191F4573E
Validity
Not Before: Jan 30 22:36:59 2026 GMT
Not After : Feb 3 08:50:59 2026 GMT
Subject: CN=625F36EF4101B40B0034CBA0490F8B24EACC8F2D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d5:2c:58:1b:26:c7:8a:49:62:70:9d:59:8e:
4a:b0:86:b9:6f:33:30:0c:c7:39:08:e3:83:f6:ea:
f8:b0:d7:f6:41:10:92:04:27:fc:b1:5a:f6:d9:ee:
fa:f9:6d:ee:24:db:fc:1a:a1:a8:75:99:4b:59:55:
2c:84:42:bf:4a:0c:bb:1a:2e:15:20:b4:4c:95:c5:
ac:4f:92:fb:a7:49:77:ce:ba:76:16:e6:15:c0:ee:
b3:1f:34:f2:7e:41:96:5a:1b:04:14:5b:ec:db:96:
ce:10:27:7f:38:9e:dc:c6:99:8b:84:3a:87:06:79:
00:13:35:c6:8c:f4:89:60:9c:66:16:38:f5:9d:c2:
fe:0a:2e:25:41:6a:f7:29:46:16:98:22:f8:5a:be:
9c:b7:80:0a:ca:bb:b4:fb:a3:8a:e2:7f:40:bd:89:
34:9f:1e:9d:06:a0:61:69:67:8e:09:5c:31:6e:be:
83:05:fe:ef:22:16:69:91:09:49:7f:cd:7c:7c:d1:
db:7a:98:51:84:b7:e3:ad:87:b6:1f:8b:01:80:e2:
42:67:20:48:18:d0:5e:d7:bf:d9:02:98:65:80:3c:
93:37:e7:a9:e1:d6:c8:a0:cc:87:4a:1d:34:5b:60:
bb:99:b9:60:1a:0a:cc:49:6b:0d:af:b0:f0:67:7e:
53:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:5F:36:EF:41:01:B4:0B:00:34:CB:A0:49:0F:8B:24:EA:CC:8F:2D
X509v3 Authority Key Identifier:
keyid:EB:6A:39:8D:68:65:53:91:96:57:E0:94:02:2E:84:31:91:F4:57:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ce4e103e-3d78-4ae0-9ba4-d1792ffa04ac/0/EB6A398D686553919657E094022E843191F4573E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EB6A398D686553919657E094022E843191F4573E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ce4e103e-3d78-4ae0-9ba4-d1792ffa04ac/0/EB6A398D686553919657E094022E843191F4573E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:00:20:f8:c8:69:ad:68:86:8e:af:74:de:21:df:d8:13:eb:
8f:47:be:7f:9a:1d:19:d5:58:ce:67:48:6d:01:06:6e:07:be:
69:28:98:07:1d:b0:ce:33:81:28:9c:06:6a:0b:21:41:67:d1:
e0:31:a0:f9:e7:93:5b:b1:bd:c5:b5:e3:c7:1c:2c:73:46:25:
9a:89:2a:be:ed:44:84:a4:e3:c3:26:fd:1b:a8:b8:bc:b2:1f:
7b:4b:01:6e:c9:c9:01:f4:3c:76:63:e1:05:6c:a3:1d:22:c3:
4f:cf:3c:2e:ef:49:ba:b4:93:7d:e8:e0:e0:8e:e1:03:d4:a8:
47:31:20:51:9a:b5:fa:6a:62:eb:49:fc:09:4a:6a:f0:c1:75:
d7:d6:f6:7f:6e:cf:ee:98:87:17:d9:14:e8:ee:2b:c1:e1:b1:
f0:1c:72:66:89:20:eb:01:c4:64:15:92:33:94:58:cb:1c:38:
4a:15:69:e9:5e:74:22:b8:06:b0:34:38:70:c7:bd:ce:18:6b:
aa:96:52:ea:91:f9:fa:04:a1:3a:7d:29:ef:50:da:3d:fb:c0:
01:99:d5:39:22:57:f7:03:ba:03:20:bf:f1:81:df:b6:cb:64:
c5:e2:31:5b:3a:d8:4e:b8:8d:74:45:2a:c0:20:6a:3a:f6:f4:
12:84:f3:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:43:15 2026 by rpki-client