This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/1127eafd-a674-4437-abf1-e550dec137fa/0/EBA04070CA27E646C332039E07557734C6732ED2.mft File: EBA04070CA27E646C332039E07557734C6732ED2.mft (raw, json) Hash identifier: z/Y5+OSrKf5sqHjpXzLbZoKstX7qX9QXDOVwki2mSn4= Subject key identifier: 43:70:C5:12:2B:D0:88:ED:9D:27:9D:E0:C8:28:B3:20:DF:65:88:A8 Authority key identifier: EB:A0:40:70:CA:27:E6:46:C3:32:03:9E:07:55:77:34:C6:73:2E:D2 Certificate issuer: /CN=EBA04070CA27E646C332039E07557734C6732ED2 Certificate serial: 3814051E1A67C090C84C7E71E3938D780BB95FC8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EBA04070CA27E646C332039E07557734C6732ED2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1127eafd-a674-4437-abf1-e550dec137fa/0/EBA04070CA27E646C332039E07557734C6732ED2.mft Manifest number: 01FD Signing time: Tue 23 Dec 2025 11:12:51 +0000 Manifest this update: Tue 23 Dec 2025 11:07:51 +0000 Manifest next update: Fri 26 Dec 2025 12:14:51 +0000 Files and hashes: 1: 3130332e3131312e3134332e302f32342d3234203d3e20313431343631.roa (hash: vMUSQ2h0yM8CNBMFULwiVWwmyMjPH1qg6y43JB4Vwvw=) 2: EBA04070CA27E646C332039E07557734C6732ED2.crl (hash: 1RLGIpf/mWGfnh+pcLJFlIf6JMYgZrSK4viuLBWLwNg=) 3: 3130332e3131312e3134302e302f32342d3234203d3e20313431343631.roa (hash: bDyPI2WVo6BjRMZp12OHCZAGn1tdLEQqcz47No/uxaA=) 4: 3130332e3131312e3134312e302f32342d3234203d3e20313431343631.roa (hash: FOKCBmZQR+RvQ/YXjf6i5T2Jp3732D5RrjsxBFstWVo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1127eafd-a674-4437-abf1-e550dec137fa/0/EBA04070CA27E646C332039E07557734C6732ED2.crl rsync://repo-rpki.idnic.net/repo/1127eafd-a674-4437-abf1-e550dec137fa/0/EBA04070CA27E646C332039E07557734C6732ED2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EBA04070CA27E646C332039E07557734C6732ED2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 12:14:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:14:05:1e:1a:67:c0:90:c8:4c:7e:71:e3:93:8d:78:0b:b9:5f:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EBA04070CA27E646C332039E07557734C6732ED2 Validity Not Before: Dec 23 11:07:51 2025 GMT Not After : Dec 26 12:14:51 2025 GMT Subject: CN=4370C5122BD088ED9D279DE0C828B320DF6588A8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:b6:e1:ca:50:a8:97:b4:81:15:ca:4d:7c:d7: fb:20:43:3d:ad:b4:ce:c4:06:d0:b6:74:31:d9:a8: 14:ea:e8:8d:26:a2:6f:78:f7:0d:8a:db:55:3a:d3: fd:f1:6f:bf:49:a1:36:b2:20:5d:3f:7a:1b:d0:d5: cf:9d:23:22:01:45:9c:88:d8:2a:c2:f9:b3:e2:67: 14:e9:66:5f:4e:c6:df:34:8d:03:74:ca:69:75:62: 34:38:b1:e9:ce:93:f7:04:e4:b6:60:4b:3c:4a:bd: 07:0e:78:5d:89:08:d4:45:0a:74:b7:e0:16:60:31: 41:ab:09:6c:69:02:38:bd:0b:35:9d:d5:0a:bb:a8: 5b:d9:d3:d3:de:b4:42:8e:6e:46:d2:8c:1d:95:8b: 9e:d4:8b:4a:a4:ca:b8:ca:00:7a:03:2b:60:6f:06: 25:63:95:26:49:18:fd:54:69:c5:8d:39:e0:1b:aa: a9:22:91:49:f5:55:c7:87:51:a0:85:5c:2a:6e:27: 06:7a:c7:10:45:2f:4c:3e:ca:60:db:7a:ed:74:86: e2:bc:fc:da:c8:ee:bc:0f:51:b5:23:a6:5f:f3:06: 41:6e:8b:46:df:27:f4:bf:53:af:7b:9c:97:c6:1e: 5c:9a:56:d7:db:57:84:5b:f7:06:b5:12:d4:33:db: 4d:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:70:C5:12:2B:D0:88:ED:9D:27:9D:E0:C8:28:B3:20:DF:65:88:A8 X509v3 Authority Key Identifier: keyid:EB:A0:40:70:CA:27:E6:46:C3:32:03:9E:07:55:77:34:C6:73:2E:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1127eafd-a674-4437-abf1-e550dec137fa/0/EBA04070CA27E646C332039E07557734C6732ED2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EBA04070CA27E646C332039E07557734C6732ED2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1127eafd-a674-4437-abf1-e550dec137fa/0/EBA04070CA27E646C332039E07557734C6732ED2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:7c:84:68:af:2c:d9:ae:c1:62:11:48:4b:0c:e0:81:71:66: 11:f5:8f:15:10:f9:64:f2:27:83:6a:48:6f:bd:27:60:38:36: b9:04:02:68:6d:07:bd:f0:d4:dc:7a:6d:c9:db:1c:dc:b7:f0: 86:01:dd:9f:fe:7c:4f:ec:4d:61:be:dd:e9:a3:bc:ef:61:2a: f0:7a:b3:a8:2b:44:c8:be:3c:6b:46:ba:b9:d5:59:60:f2:93: fb:c6:34:6e:07:da:ed:65:c3:0b:77:5c:99:0e:df:8a:6b:14: 1d:da:a1:f1:f3:93:28:75:c3:64:1a:99:dd:99:b5:4e:d5:a1: da:db:a3:59:ac:4b:b5:05:be:45:44:fc:b9:62:0f:8e:17:b5: 9c:ab:a9:5e:fe:1c:d2:7a:1d:76:7c:9e:e3:4c:93:61:ff:25: 53:aa:53:b9:78:61:82:fb:6d:0e:25:d9:21:4e:88:42:88:1b: 38:d6:92:b6:79:fd:27:08:c2:b4:0b:0f:e6:49:14:aa:92:09: dc:1a:ec:9f:59:56:70:a6:99:cd:09:5c:e5:dd:be:11:72:08: 17:94:34:37:4f:3c:67:68:98:b9:1e:da:9c:f5:cf:97:91:ca: ba:64:5a:76:6b:de:84:aa:a6:71:9a:5d:77:8e:2a:11:82:dc: 30:b9:c5:63 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOBQFHhpnwJDITH5x45ONeAu5X8gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUJBMDQwNzBDQTI3RTY0NkMzMzIwMzlFMDc1NTc3MzRD NjczMkVEMjAeFw0yNTEyMjMxMTA3NTFaFw0yNTEyMjYxMjE0NTFaMDMxMTAvBgNV BAMTKDQzNzBDNTEyMkJEMDg4RUQ5RDI3OURFMEM4MjhCMzIwREY2NTg4QTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/tuHKUKiXtIEVyk181/sgQz2t tM7EBtC2dDHZqBTq6I0mom949w2K21U60/3xb79JoTayIF0/ehvQ1c+dIyIBRZyI 2CrC+bPiZxTpZl9Oxt80jQN0yml1YjQ4senOk/cE5LZgSzxKvQcOeF2JCNRFCnS3 4BZgMUGrCWxpAji9CzWd1Qq7qFvZ09PetEKObkbSjB2Vi57Ui0qkyrjKAHoDK2Bv BiVjlSZJGP1UacWNOeAbqqkikUn1VceHUaCFXCpuJwZ6xxBFL0w+ymDbeu10huK8 /NrI7rwPUbUjpl/zBkFui0bfJ/S/U697nJfGHlyaVtfbV4Rb9wa1EtQz203vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQ3DFEivQiO2dJ53gyCizIN9liKgwHwYDVR0j BBgwFoAU66BAcMon5kbDMgOeB1V3NMZzLtIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MTI3ZWFmZC1hNjc0LTQ0MzctYWJmMS1lNTUwZGVjMTM3ZmEvMC9FQkEwNDA3MENB MjdFNjQ2QzMzMjAzOUUwNzU1NzczNEM2NzMyRUQyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUJBMDQwNzBDQTI3RTY0NkMzMzIwMzlFMDc1NTc3MzRDNjcz MkVEMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTEyN2VhZmQtYTY3NC00NDM3LWFi ZjEtZTU1MGRlYzEzN2ZhLzAvRUJBMDQwNzBDQTI3RTY0NkMzMzIwMzlFMDc1NTc3 MzRDNjczMkVEMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABx8hGivLNmuwWIRSEsM4IFxZhH1jxUQ+WTy J4NqSG+9J2A4NrkEAmhtB73w1Nx6bcnbHNy38IYB3Z/+fE/sTWG+3emjvO9hKvB6 s6grRMi+PGtGurnVWWDyk/vGNG4H2u1lwwt3XJkO34prFB3aofHzkyh1w2Qamd2Z tU7Vodrbo1msS7UFvkVE/LliD44XtZyrqV7+HNJ6HXZ8nuNMk2H/JVOqU7l4YYL7 bQ4l2SFOiEKIGzjWkrZ5/ScIwrQLD+ZJFKqSCdwa7J9ZVnCmmc0JXOXdvhFyCBeU NDdPPGdomLke2pz1z5eRyrpkWnZr3oSqpnGaXXeOKhGC3DC5xWM= -----END CERTIFICATE-----Generated at Wed Dec 24 20:23:42 2025 by rpki-client