This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7e8cd97e-56f5-4ca5-a85c-55a323f0608c/0/EB7AB53449E52996F1539393C3DA704C6F12F359.mft File: EB7AB53449E52996F1539393C3DA704C6F12F359.mft (raw, json) Hash identifier: n/8gyAzDzSAA5SC+aPDEyJNMhCLovsAg5BcJwiNBTLo= Subject key identifier: 25:DD:A0:89:13:BE:A1:92:0E:05:D6:29:34:94:AD:2F:D5:7C:EC:49 Authority key identifier: EB:7A:B5:34:49:E5:29:96:F1:53:93:93:C3:DA:70:4C:6F:12:F3:59 Certificate issuer: /CN=EB7AB53449E52996F1539393C3DA704C6F12F359 Certificate serial: 5729B215D19021C0CF1015C2EF6420F3EA91F14B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EB7AB53449E52996F1539393C3DA704C6F12F359.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7e8cd97e-56f5-4ca5-a85c-55a323f0608c/0/EB7AB53449E52996F1539393C3DA704C6F12F359.mft Manifest number: 0385 Signing time: Thu 18 Dec 2025 10:30:38 +0000 Manifest this update: Thu 18 Dec 2025 10:25:38 +0000 Manifest next update: Sun 21 Dec 2025 19:24:38 +0000 Files and hashes: 1: 3130332e3235332e302e302f32322d3234203d3e203539313339.roa (hash: DyW9wD+/QVlej0CI+5sCilJX/+5ZDxLLSw8cy8l6+Ec=) 2: 3131362e302e302e302f32312d3234203d3e203539313339.roa (hash: tvzxlzO0vwNEL3kdVV0vVfOPTOFF94uCEicPO2IlBZc=) 3: EB7AB53449E52996F1539393C3DA704C6F12F359.crl (hash: QSS30U4jum24Ygh2zx4Cmbb+iRhk3iZoQwz5cXI1Yis=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7e8cd97e-56f5-4ca5-a85c-55a323f0608c/0/EB7AB53449E52996F1539393C3DA704C6F12F359.crl rsync://repo-rpki.idnic.net/repo/7e8cd97e-56f5-4ca5-a85c-55a323f0608c/0/EB7AB53449E52996F1539393C3DA704C6F12F359.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EB7AB53449E52996F1539393C3DA704C6F12F359.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 19:24:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:29:b2:15:d1:90:21:c0:cf:10:15:c2:ef:64:20:f3:ea:91:f1:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB7AB53449E52996F1539393C3DA704C6F12F359 Validity Not Before: Dec 18 10:25:38 2025 GMT Not After : Dec 21 19:24:38 2025 GMT Subject: CN=25DDA08913BEA1920E05D6293494AD2FD57CEC49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:a6:50:24:6b:68:f8:e2:f5:c7:45:b0:aa:a3: 56:84:13:b0:70:ae:9d:68:06:39:86:e4:a9:01:47: 93:ae:3e:c0:bb:bd:f8:00:c1:e7:a4:cb:2b:93:6d: eb:88:2b:3f:46:1b:e1:b7:84:c2:39:e0:da:22:d2: fa:be:bb:b6:a8:78:ce:53:3a:f8:a5:52:51:33:83: dc:80:95:e6:c3:92:23:66:0b:c8:ef:c2:80:1a:4f: 9b:a9:94:3a:af:12:31:fd:6b:dc:f6:e9:8b:5d:cf: c4:53:c3:a6:2c:51:76:e7:bf:07:d1:d5:9b:3e:30: c5:27:bf:92:66:ff:39:0c:2a:9a:7a:fe:b4:09:cd: a2:78:35:bc:8b:7f:d5:f6:9a:76:c7:73:fb:c2:42: b9:94:83:60:ad:24:aa:42:b3:cd:a0:0b:65:ef:b1: c2:58:63:78:cc:46:13:2e:6d:5a:79:ad:a9:91:85: 49:07:39:44:31:bd:7a:c5:3f:ac:b4:0b:f5:35:a7: 69:f1:9b:84:ed:73:d5:77:05:40:7e:a1:4d:53:6f: a6:02:c4:b6:8b:e7:33:4b:7c:e0:09:fb:97:f7:ba: 82:8a:a3:81:37:26:b7:e6:5b:e7:71:1c:1c:be:da: 44:76:91:4a:37:13:ee:44:ce:3f:22:9b:34:8b:95: 59:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:DD:A0:89:13:BE:A1:92:0E:05:D6:29:34:94:AD:2F:D5:7C:EC:49 X509v3 Authority Key Identifier: keyid:EB:7A:B5:34:49:E5:29:96:F1:53:93:93:C3:DA:70:4C:6F:12:F3:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7e8cd97e-56f5-4ca5-a85c-55a323f0608c/0/EB7AB53449E52996F1539393C3DA704C6F12F359.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EB7AB53449E52996F1539393C3DA704C6F12F359.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e8cd97e-56f5-4ca5-a85c-55a323f0608c/0/EB7AB53449E52996F1539393C3DA704C6F12F359.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:ed:66:44:cd:56:49:83:69:48:4c:a2:34:d1:e9:ab:9e:ec: ff:56:23:ff:83:8e:93:95:46:cb:65:51:16:96:e2:cf:07:8d: 56:aa:bf:27:5f:be:f9:23:3a:2b:26:fc:42:a7:15:11:d3:ee: d4:48:7b:f8:2f:2d:e0:ca:e7:04:b6:08:45:6f:89:98:3e:9a: e2:4c:3c:06:80:af:29:17:f4:4e:a7:10:c0:ab:c8:4f:1c:72: 39:20:89:a3:49:54:67:86:5a:46:88:47:99:69:ef:63:43:15: 1c:32:af:4d:03:a7:65:4f:6e:50:f7:c8:68:1a:37:00:08:ca: 9c:40:38:02:cf:d3:bf:26:04:30:00:35:62:b5:f1:6d:f0:67: db:a1:af:83:f2:ca:a5:38:a5:91:63:9b:84:a6:04:79:58:b3: 8b:4d:42:3b:a7:4f:ac:85:9f:a3:e3:b4:dd:b4:e5:c4:ba:3d: 3d:f0:6f:b4:a5:07:f3:3b:56:ab:ff:05:a3:f2:f3:a4:0c:00: 66:ad:04:1d:c1:0c:b8:d9:cf:17:c8:ee:a7:0e:24:ec:3c:bb: c5:68:a7:3b:8b:1a:b8:f7:e9:6c:d1:26:69:97:a9:be:e9:a0: 64:3f:e3:58:93:37:98:21:b0:49:37:bb:fb:55:79:c9:a2:e3: c2:7a:0e:ed -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVymyFdGQIcDPEBXC72Qg8+qR8UswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUI3QUI1MzQ0OUU1Mjk5NkYxNTM5MzkzQzNEQTcwNEM2 RjEyRjM1OTAeFw0yNTEyMTgxMDI1MzhaFw0yNTEyMjExOTI0MzhaMDMxMTAvBgNV BAMTKDI1RERBMDg5MTNCRUExOTIwRTA1RDYyOTM0OTRBRDJGRDU3Q0VDNDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/plAka2j44vXHRbCqo1aEE7Bw rp1oBjmG5KkBR5OuPsC7vfgAweekyyuTbeuIKz9GG+G3hMI54Noi0vq+u7aoeM5T OvilUlEzg9yAlebDkiNmC8jvwoAaT5uplDqvEjH9a9z26Ytdz8RTw6YsUXbnvwfR 1Zs+MMUnv5Jm/zkMKpp6/rQJzaJ4NbyLf9X2mnbHc/vCQrmUg2CtJKpCs82gC2Xv scJYY3jMRhMubVp5ramRhUkHOUQxvXrFP6y0C/U1p2nxm4Ttc9V3BUB+oU1Tb6YC xLaL5zNLfOAJ+5f3uoKKo4E3JrfmW+dxHBy+2kR2kUo3E+5Ezj8imzSLlVlBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJd2giRO+oZIOBdYpNJStL9V87EkwHwYDVR0j BBgwFoAU63q1NEnlKZbxU5OTw9pwTG8S81kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZThjZDk3ZS01NmY1LTRjYTUtYTg1Yy01NWEzMjNmMDYwOGMvMC9FQjdBQjUzNDQ5 RTUyOTk2RjE1MzkzOTNDM0RBNzA0QzZGMTJGMzU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUI3QUI1MzQ0OUU1Mjk5NkYxNTM5MzkzQzNEQTcwNEM2RjEy RjM1OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2U4Y2Q5N2UtNTZmNS00Y2E1LWE4 NWMtNTVhMzIzZjA2MDhjLzAvRUI3QUI1MzQ0OUU1Mjk5NkYxNTM5MzkzQzNEQTcw NEM2RjEyRjM1OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIPtZkTNVkmDaUhMojTR6aue7P9WI/+DjpOV RstlURaW4s8HjVaqvydfvvkjOism/EKnFRHT7tRIe/gvLeDK5wS2CEVviZg+muJM PAaArykX9E6nEMCryE8ccjkgiaNJVGeGWkaIR5lp72NDFRwyr00Dp2VPblD3yGga NwAIypxAOALP078mBDAANWK18W3wZ9uhr4PyyqU4pZFjm4SmBHlYs4tNQjunT6yF n6PjtN205cS6PT3wb7SlB/M7Vqv/BaPy86QMAGatBB3BDLjZzxfI7qcOJOw8u8Vo pzuLGrj36WzRJmmXqb7poGQ/41iTN5ghsEk3u/tVecmi48J6Du0= -----END CERTIFICATE-----Generated at Fri Dec 19 18:10:37 2025 by rpki-client