This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/0a1f3971-3a47-455d-ab30-e7c23b61b9f2/0/EB78214F248EFE08B4E462FDAFD4E70BC3D05A2F.mft
File: EB78214F248EFE08B4E462FDAFD4E70BC3D05A2F.mft (raw, json)
Hash identifier: YsVKMcC8hf1Uq5GbhfPgm0smGE+B8WUX4xGuIKTB4gs=
Subject key identifier: 94:9C:E2:9A:BC:FE:B3:82:DD:8F:A1:1C:39:A6:8D:04:5B:11:61:3A
Authority key identifier: EB:78:21:4F:24:8E:FE:08:B4:E4:62:FD:AF:D4:E7:0B:C3:D0:5A:2F
Certificate issuer: /CN=EB78214F248EFE08B4E462FDAFD4E70BC3D05A2F
Certificate serial: 1033BDDB4683E7AE50E6A53C9D5BE3E01CDB1BB5
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EB78214F248EFE08B4E462FDAFD4E70BC3D05A2F.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/0a1f3971-3a47-455d-ab30-e7c23b61b9f2/0/EB78214F248EFE08B4E462FDAFD4E70BC3D05A2F.mft
Manifest number: 010A
Signing time: Thu 18 Dec 2025 01:10:52 +0000
Manifest this update: Thu 18 Dec 2025 01:05:52 +0000
Manifest next update: Sun 21 Dec 2025 11:37:52 +0000
Files and hashes: 1: 3130332e3130312e3231372e302f32342d3234203d3e20313530393431.roa (hash: aAMjUzaN1yMPp7oXLSGICiOHUfNylQXYPCCHO4WZk9E=)
2: 3130332e3130312e3231362e302f32342d3234203d3e20313530393431.roa (hash: V76cC5CNnJtNiE3A1eNlVqFtp7QA7yYWZJ54/BrVb60=)
3: 3130332e3130312e3231362e302f32332d3233203d3e20313530393431.roa (hash: 0KEJOj4To40f7hQCQKr4Kq8RhTmo523YXQIvq+ZY6HI=)
4: EB78214F248EFE08B4E462FDAFD4E70BC3D05A2F.crl (hash: wRvMdfMVRJSaD4CIW8eNDoKjGA/yiYnUtYcxPTgm8G8=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/0a1f3971-3a47-455d-ab30-e7c23b61b9f2/0/EB78214F248EFE08B4E462FDAFD4E70BC3D05A2F.crl
rsync://repo-rpki.idnic.net/repo/0a1f3971-3a47-455d-ab30-e7c23b61b9f2/0/EB78214F248EFE08B4E462FDAFD4E70BC3D05A2F.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EB78214F248EFE08B4E462FDAFD4E70BC3D05A2F.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 21 Dec 2025 11:37:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:33:bd:db:46:83:e7:ae:50:e6:a5:3c:9d:5b:e3:e0:1c:db:1b:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB78214F248EFE08B4E462FDAFD4E70BC3D05A2F
Validity
Not Before: Dec 18 01:05:52 2025 GMT
Not After : Dec 21 11:37:52 2025 GMT
Subject: CN=949CE29ABCFEB382DD8FA11C39A68D045B11613A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:67:7d:d6:c0:7f:ae:1b:a9:ba:d4:2f:c1:a3:
0a:71:93:e2:39:8c:d2:fe:38:de:a1:f1:9c:f2:af:
20:21:2b:15:9e:45:c1:8c:e6:f6:9c:d0:3b:fd:be:
16:23:d1:3c:ce:bc:8c:de:ae:e9:65:46:df:6c:3d:
fe:6a:ee:36:97:24:4a:24:56:7d:b7:a2:10:8d:3e:
a7:83:82:78:b6:e9:3a:32:1e:f2:4b:ae:90:37:06:
61:65:51:02:38:9b:8b:d5:50:0f:d6:91:76:62:3c:
3e:a7:04:ff:7b:32:3f:91:ce:6e:bb:1a:e7:5e:5e:
7a:c0:8b:50:0d:a5:05:6b:a0:13:9c:43:d0:71:9b:
4d:40:c7:13:e1:7a:a6:b7:e1:3a:5d:75:54:29:99:
3d:25:3e:f2:96:8a:97:1c:8b:b9:58:0d:ae:27:0a:
83:ed:f1:59:31:64:e7:73:0f:d6:ab:25:8d:66:f4:
4e:54:53:54:52:62:e6:67:74:ef:1f:10:d4:d1:c8:
c4:67:fb:58:e9:bf:0a:b3:67:c0:6b:ae:18:6d:a2:
00:3e:c0:e9:3a:d3:ee:a5:8c:db:3a:e0:78:1b:6e:
d0:30:9a:41:de:a3:76:d7:54:8c:aa:ef:23:58:a6:
cc:ab:87:86:b4:48:af:d4:2c:a3:02:19:24:8a:73:
34:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:9C:E2:9A:BC:FE:B3:82:DD:8F:A1:1C:39:A6:8D:04:5B:11:61:3A
X509v3 Authority Key Identifier:
keyid:EB:78:21:4F:24:8E:FE:08:B4:E4:62:FD:AF:D4:E7:0B:C3:D0:5A:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/0a1f3971-3a47-455d-ab30-e7c23b61b9f2/0/EB78214F248EFE08B4E462FDAFD4E70BC3D05A2F.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EB78214F248EFE08B4E462FDAFD4E70BC3D05A2F.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0a1f3971-3a47-455d-ab30-e7c23b61b9f2/0/EB78214F248EFE08B4E462FDAFD4E70BC3D05A2F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:cc:6d:49:66:c7:ba:79:b0:a1:86:da:6f:11:b1:fd:a9:91:
a6:71:90:4a:56:dd:7e:e5:7a:13:7f:2b:8c:64:8a:5f:11:1c:
e9:1d:cb:6e:95:84:d2:38:8b:60:5c:67:f6:18:5f:2d:7a:6e:
10:39:9f:d9:dc:3a:c0:69:7f:7a:51:6a:c4:22:00:00:10:ab:
2b:73:77:12:c9:c0:19:90:15:8c:f7:47:c1:97:12:ba:16:31:
67:c8:55:78:0b:3b:54:5c:87:a9:ea:14:fd:93:2d:c7:07:8e:
e8:5c:44:0c:c0:0d:1c:89:de:21:a5:b9:ee:c1:c0:7a:2c:50:
b7:33:e9:cb:39:ee:ff:2f:25:d0:aa:bc:72:ca:0a:57:cc:c1:
b9:68:d1:2b:35:54:c8:45:ac:ad:23:cc:c6:df:a4:cc:9a:2d:
ea:09:c9:a9:8c:03:fc:44:a3:78:86:45:54:41:84:43:b4:43:
d3:1c:a3:c2:d1:1e:ca:91:46:03:36:87:1e:69:ef:07:ec:3f:
28:b9:b0:59:77:58:01:f1:ee:b6:0e:03:f2:cd:be:85:71:37:
12:2b:3d:b1:e5:bd:6e:e0:5f:da:4e:d9:4d:e6:88:73:93:49:
ac:ef:2c:f5:5e:e4:da:8d:a1:03:0f:8a:dc:fe:d1:b3:9f:82:
9c:34:c8:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 22:34:13 2025 by rpki-client