This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/ce4e103e-3d78-4ae0-9ba4-d1792ffa04ac/0/EB6A398D686553919657E094022E843191F4573E.mft
File: EB6A398D686553919657E094022E843191F4573E.mft (raw, json)
Hash identifier: ZInozvGtGbp7hqlSq8JD0r6sknes9A5uLcERNNOBs/c=
Subject key identifier: 06:0C:C0:B6:FA:AC:88:61:B3:8A:F4:5A:E9:2A:A4:77:44:E8:95:53
Authority key identifier: EB:6A:39:8D:68:65:53:91:96:57:E0:94:02:2E:84:31:91:F4:57:3E
Certificate issuer: /CN=EB6A398D686553919657E094022E843191F4573E
Certificate serial: 707BD6F64F8524A25F64FDE17BA25F8B7F788134
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EB6A398D686553919657E094022E843191F4573E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ce4e103e-3d78-4ae0-9ba4-d1792ffa04ac/0/EB6A398D686553919657E094022E843191F4573E.mft
Manifest number: 026E
Signing time: Tue 23 Dec 2025 07:32:04 +0000
Manifest this update: Tue 23 Dec 2025 07:27:04 +0000
Manifest next update: Fri 26 Dec 2025 18:31:04 +0000
Files and hashes: 1: EB6A398D686553919657E094022E843191F4573E.crl (hash: FkNCJS4F4PyZcwxM20TTHjl9IuD0LiBhj2pRBDZiQls=)
2: 3130332e3138312e3234382e302f32332d3234203d3e20313439343030.roa (hash: ZQvUbXHu4oitDR8z2M5lRxDV5Dfgz07kS0tfmIPrPQU=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/ce4e103e-3d78-4ae0-9ba4-d1792ffa04ac/0/EB6A398D686553919657E094022E843191F4573E.crl
rsync://repo-rpki.idnic.net/repo/ce4e103e-3d78-4ae0-9ba4-d1792ffa04ac/0/EB6A398D686553919657E094022E843191F4573E.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EB6A398D686553919657E094022E843191F4573E.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Dec 2025 18:31:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:7b:d6:f6:4f:85:24:a2:5f:64:fd:e1:7b:a2:5f:8b:7f:78:81:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB6A398D686553919657E094022E843191F4573E
Validity
Not Before: Dec 23 07:27:04 2025 GMT
Not After : Dec 26 18:31:04 2025 GMT
Subject: CN=060CC0B6FAAC8861B38AF45AE92AA47744E89553
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:70:e3:d4:06:a4:85:fd:88:3b:7e:c7:7b:cf:
33:41:5f:28:cb:9d:4c:79:99:0c:9b:25:1f:fd:be:
87:3c:f2:da:d5:71:35:d0:fa:c6:fd:9c:d2:a0:24:
e2:ea:6e:20:5d:ce:cc:93:9b:ba:22:8b:86:fa:12:
84:fd:73:79:37:4a:38:ae:3f:1b:34:b8:dd:03:d0:
d6:b7:e9:b0:ef:70:8f:ac:42:77:ec:73:04:71:60:
66:ff:51:ea:d6:5a:b8:c7:71:c4:51:d1:cd:67:7c:
c2:b5:28:99:4c:c6:39:b9:2d:e6:a5:3c:f3:cc:0a:
4e:53:87:88:6e:70:3d:28:3a:54:8e:8f:a9:5b:b4:
33:a9:d4:b3:d9:0a:23:59:86:66:5c:9c:fe:bd:8c:
1f:0f:05:d8:81:a7:cc:77:78:27:a8:b8:de:a0:c9:
c8:9d:9b:ef:a8:11:30:2b:26:ae:97:2e:30:8b:ae:
bc:c4:82:75:6b:46:8d:11:e9:5e:7b:68:b4:7b:22:
75:9c:77:5a:97:8c:36:ab:6f:41:be:da:dc:56:6c:
48:45:e2:84:05:4d:62:28:0d:c8:4e:0a:a6:ca:c3:
4c:82:4d:88:32:45:27:19:a2:35:8f:5e:05:64:2f:
95:2d:da:19:74:2a:df:50:a5:42:53:9e:fd:ca:fb:
0e:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:0C:C0:B6:FA:AC:88:61:B3:8A:F4:5A:E9:2A:A4:77:44:E8:95:53
X509v3 Authority Key Identifier:
keyid:EB:6A:39:8D:68:65:53:91:96:57:E0:94:02:2E:84:31:91:F4:57:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ce4e103e-3d78-4ae0-9ba4-d1792ffa04ac/0/EB6A398D686553919657E094022E843191F4573E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EB6A398D686553919657E094022E843191F4573E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ce4e103e-3d78-4ae0-9ba4-d1792ffa04ac/0/EB6A398D686553919657E094022E843191F4573E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:83:b2:ca:4e:4d:df:8c:1a:d1:82:db:35:34:b2:0f:8d:76:
d5:ff:fb:39:e8:7f:d2:77:44:93:21:7b:76:4f:4a:51:bb:71:
64:e1:19:b4:7a:bb:b1:6d:b8:d3:9a:d4:25:b0:dc:80:95:9a:
42:f4:dc:cf:d0:ea:b7:0c:e9:b8:f3:4e:04:53:43:ef:a5:51:
10:3f:04:99:91:c7:ac:3e:c3:c1:c4:86:4e:37:b8:ad:c0:2b:
4f:36:45:c4:c4:cf:9c:77:b4:91:72:9f:53:0b:75:dc:46:20:
b3:17:f4:66:5e:03:59:d7:d1:fe:0b:16:62:89:4b:ca:9e:2d:
58:f1:0c:62:82:66:02:75:7d:6a:67:52:a8:29:a8:51:63:ca:
57:7c:db:96:ee:2e:bf:02:73:e8:53:ff:47:b3:d3:58:64:d2:
60:03:3f:07:93:fe:59:37:86:18:24:51:8f:23:76:cf:9e:a2:
32:5a:1e:e4:22:fe:36:df:21:45:e3:1a:41:51:f6:13:a8:fb:
ed:48:4c:d8:5b:d4:2b:fb:a3:02:53:bb:af:9f:48:c8:05:b5:
a8:8f:41:46:13:29:2d:bf:d4:e7:06:0d:f8:a4:5e:eb:98:f2:
c7:70:e7:a0:41:39:ab:6f:73:8a:73:38:7a:c5:d9:5c:02:29:
3e:ac:72:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 25 00:37:57 2025 by rpki-client