This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/f260586d-b027-4656-b631-05896b543782/0/EB17E46ABCB78A51E4C5B9A14BD7817FCC6092F9.mft
File: EB17E46ABCB78A51E4C5B9A14BD7817FCC6092F9.mft (raw, json)
Hash identifier: mq4fpuq3EXaFXAAv+lcDnmfqQTik8QjM9IZWmmHysbk=
Subject key identifier: 51:68:6A:B2:0F:45:2A:99:9F:71:98:8B:3B:AA:72:95:D5:05:3F:7C
Authority key identifier: EB:17:E4:6A:BC:B7:8A:51:E4:C5:B9:A1:4B:D7:81:7F:CC:60:92:F9
Certificate issuer: /CN=EB17E46ABCB78A51E4C5B9A14BD7817FCC6092F9
Certificate serial: 092695E952BEDB9CA04B9118838B4336BE8D0FB5
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EB17E46ABCB78A51E4C5B9A14BD7817FCC6092F9.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/f260586d-b027-4656-b631-05896b543782/0/EB17E46ABCB78A51E4C5B9A14BD7817FCC6092F9.mft
Manifest number: 052C
Signing time: Tue 02 Dec 2025 11:32:47 +0000
Manifest this update: Tue 02 Dec 2025 11:27:47 +0000
Manifest next update: Fri 05 Dec 2025 21:08:47 +0000
Files and hashes: 1: EB17E46ABCB78A51E4C5B9A14BD7817FCC6092F9.crl (hash: 6uxX3EgrrRy+EyBH3BfCLH+UtBLef6RqmBKqbDbkr0g=)
2: 3130332e38362e3130332e302f32342d3234203d3e20313336303831.roa (hash: FH/voLgmuZE3XbtxgnYOWLHEkRd7OKtR53sqhIsyCzA=)
3: 3130332e3134372e3231382e302f32342d3234203d3e20313336303831.roa (hash: 02HM7GscUCusvpAfXhQDEcc8ZOiBFbCmHDfQadfKtFE=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/f260586d-b027-4656-b631-05896b543782/0/EB17E46ABCB78A51E4C5B9A14BD7817FCC6092F9.crl
rsync://repo-rpki.idnic.net/repo/f260586d-b027-4656-b631-05896b543782/0/EB17E46ABCB78A51E4C5B9A14BD7817FCC6092F9.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EB17E46ABCB78A51E4C5B9A14BD7817FCC6092F9.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 05 Dec 2025 21:08:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:26:95:e9:52:be:db:9c:a0:4b:91:18:83:8b:43:36:be:8d:0f:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB17E46ABCB78A51E4C5B9A14BD7817FCC6092F9
Validity
Not Before: Dec 2 11:27:47 2025 GMT
Not After : Dec 5 21:08:47 2025 GMT
Subject: CN=51686AB20F452A999F71988B3BAA7295D5053F7C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:9f:35:f7:ae:23:52:50:0e:f4:fd:84:e7:79:
fe:ad:59:0e:5b:96:a2:07:f1:1a:6b:20:7f:7c:12:
e5:2f:10:07:9a:ed:0e:89:6d:ee:89:1b:b2:90:33:
65:e8:0b:8d:d8:a9:08:09:82:68:73:57:a9:cf:8e:
d5:5d:46:12:ce:1c:6c:e7:31:45:ec:8b:f0:09:d5:
50:fc:d3:8c:cc:d1:3e:ea:19:ec:a5:b2:13:08:ee:
d7:85:16:c8:24:42:d7:0f:db:44:52:2f:dd:95:09:
b2:be:7d:5e:a7:02:fe:bd:01:db:f9:a5:32:3f:bf:
d1:d6:77:5a:4e:10:50:e0:b1:95:dd:2c:cd:19:89:
23:98:1a:a4:6d:fe:27:d8:90:78:26:73:82:21:19:
26:32:aa:bf:df:fe:52:3b:85:e2:ec:3c:a1:08:26:
2a:8b:3e:50:66:5a:c0:79:a3:5e:0a:b9:06:dd:7f:
5e:13:45:26:14:ea:16:74:26:31:8a:97:e2:7a:be:
16:8f:58:dc:20:6e:0f:a1:98:45:7d:95:3e:2b:6f:
d9:96:58:e8:2c:f5:8e:6f:ed:b0:70:00:1d:e7:ab:
1d:7d:c3:65:2f:68:c1:93:bd:ae:96:4f:fc:55:f1:
1c:ba:40:a8:85:28:b3:8d:5c:8a:f4:b4:1f:bd:be:
bb:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:68:6A:B2:0F:45:2A:99:9F:71:98:8B:3B:AA:72:95:D5:05:3F:7C
X509v3 Authority Key Identifier:
keyid:EB:17:E4:6A:BC:B7:8A:51:E4:C5:B9:A1:4B:D7:81:7F:CC:60:92:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/f260586d-b027-4656-b631-05896b543782/0/EB17E46ABCB78A51E4C5B9A14BD7817FCC6092F9.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EB17E46ABCB78A51E4C5B9A14BD7817FCC6092F9.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f260586d-b027-4656-b631-05896b543782/0/EB17E46ABCB78A51E4C5B9A14BD7817FCC6092F9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:ba:f1:7f:55:fb:9d:4b:77:52:ea:0c:68:9e:46:a6:f7:c2:
a7:d8:2a:4c:97:2d:fd:39:de:de:ea:1a:b5:7d:9c:2b:bf:94:
b7:0b:aa:7a:19:13:dd:ae:52:a5:59:d8:c8:4e:a0:0e:a4:91:
91:95:1c:42:12:b2:4f:99:a0:8c:b7:ad:46:49:ed:52:81:b9:
10:8a:39:50:a6:92:6e:81:95:2e:23:a0:fc:3d:cc:a0:3b:0c:
81:25:f9:fa:b5:59:fa:f7:6f:8a:ef:a3:53:f6:1e:c5:4a:14:
3e:62:00:3e:5b:48:d5:9f:da:61:a3:a4:24:97:47:13:26:66:
0c:78:b9:e9:09:d4:03:67:c5:d2:7a:c2:d9:9e:15:a3:15:5f:
8b:10:f7:4e:cc:d6:db:32:fb:56:0d:f5:6f:77:ec:02:38:27:
cd:d2:e4:a5:0b:67:6d:12:f4:71:1d:af:70:ee:29:5a:84:59:
18:64:9c:82:c4:45:fb:59:24:8c:ea:8e:20:37:22:30:31:d2:
a3:0a:52:a1:ca:54:78:1a:44:fe:f7:15:5a:e0:dd:13:7a:d2:
98:b5:ce:63:bf:60:f1:19:20:4d:b7:06:b8:a2:01:0f:be:55:
03:52:b6:4b:6a:f6:9d:89:a5:67:da:4e:ee:55:cb:cf:4a:e6:
74:6e:d6:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 14:14:37 2025 by rpki-client