This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/d5c2c71c-6ae5-4ea9-b850-6300e2e1badf/0/EBB7963402117E803037310CE98B392F968C3A9A.mft
File: EBB7963402117E803037310CE98B392F968C3A9A.mft (raw, json)
Hash identifier: /KQduZk81h6cuDN+omcd8QYzxqixqznMsTsyxEBNlbc=
Subject key identifier: EE:B2:0C:37:11:C0:44:57:D4:7A:28:90:B2:1A:B6:87:05:D7:0F:82
Authority key identifier: EB:B7:96:34:02:11:7E:80:30:37:31:0C:E9:8B:39:2F:96:8C:3A:9A
Certificate issuer: /CN=EBB7963402117E803037310CE98B392F968C3A9A
Certificate serial: 68FB0DDAC85E7D5E57BE87B43E09E11E32EBF305
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EBB7963402117E803037310CE98B392F968C3A9A.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/d5c2c71c-6ae5-4ea9-b850-6300e2e1badf/0/EBB7963402117E803037310CE98B392F968C3A9A.mft
Manifest number: 0219
Signing time: Wed 17 Dec 2025 00:02:10 +0000
Manifest this update: Tue 16 Dec 2025 23:57:10 +0000
Manifest next update: Sat 20 Dec 2025 04:47:10 +0000
Files and hashes: 1: EBB7963402117E803037310CE98B392F968C3A9A.crl (hash: L/a8T+FDNOz1WrLep/lNakmundT/arGElhrQC+9fd4E=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/d5c2c71c-6ae5-4ea9-b850-6300e2e1badf/0/EBB7963402117E803037310CE98B392F968C3A9A.crl
rsync://repo-rpki.idnic.net/repo/d5c2c71c-6ae5-4ea9-b850-6300e2e1badf/0/EBB7963402117E803037310CE98B392F968C3A9A.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EBB7963402117E803037310CE98B392F968C3A9A.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Dec 2025 04:47:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:fb:0d:da:c8:5e:7d:5e:57:be:87:b4:3e:09:e1:1e:32:eb:f3:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EBB7963402117E803037310CE98B392F968C3A9A
Validity
Not Before: Dec 16 23:57:10 2025 GMT
Not After : Dec 20 04:47:10 2025 GMT
Subject: CN=EEB20C3711C04457D47A2890B21AB68705D70F82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:64:f2:6c:67:fb:69:c8:64:36:02:a2:44:de:
27:9f:7c:c3:ab:b2:8d:05:29:aa:38:5a:cf:8f:fc:
72:47:72:cf:5c:e6:ad:e4:64:c8:57:2c:c1:82:72:
2b:26:6c:37:1d:41:82:8e:5b:ca:0a:08:e2:52:e1:
95:8e:6e:ec:29:ae:32:75:2f:33:b8:89:c6:04:55:
fd:a0:74:6f:a3:31:9c:ad:ca:57:39:d0:e1:81:87:
9f:97:6f:50:d1:0e:bf:79:e3:95:4e:05:ed:6b:da:
d4:4a:a2:1c:28:73:06:ba:85:ce:bd:6c:06:da:fb:
1e:7e:77:02:3d:54:f3:63:fd:16:cb:e3:fd:93:85:
80:7f:23:f8:2e:36:ab:63:90:4e:1a:1a:7f:c9:5a:
ec:df:a3:c3:f6:2a:19:71:f4:96:6c:2c:81:80:dc:
e9:a4:44:37:8d:14:ab:8a:65:a3:33:18:da:92:da:
42:ff:79:7c:e1:da:ed:1b:ee:fc:03:49:3b:f4:fa:
00:74:0f:89:a6:47:17:b1:a8:ae:71:ba:09:47:0e:
af:23:9b:da:99:5a:c3:e6:ed:bc:f9:72:26:80:47:
97:c6:c9:e9:1a:12:82:f6:b6:0f:7f:aa:b7:f8:43:
3f:4f:49:ca:6e:94:48:ff:de:0c:2f:3b:60:2d:47:
da:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:B2:0C:37:11:C0:44:57:D4:7A:28:90:B2:1A:B6:87:05:D7:0F:82
X509v3 Authority Key Identifier:
keyid:EB:B7:96:34:02:11:7E:80:30:37:31:0C:E9:8B:39:2F:96:8C:3A:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/d5c2c71c-6ae5-4ea9-b850-6300e2e1badf/0/EBB7963402117E803037310CE98B392F968C3A9A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EBB7963402117E803037310CE98B392F968C3A9A.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d5c2c71c-6ae5-4ea9-b850-6300e2e1badf/0/EBB7963402117E803037310CE98B392F968C3A9A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:44:f2:17:84:54:2b:4f:7c:80:2a:6a:0f:a2:32:ef:89:89:
c2:3b:90:5b:50:d7:82:ce:9b:fa:86:e4:be:e1:15:9c:30:e4:
0f:79:4f:50:5c:41:90:6f:6e:67:d5:8d:fa:c1:01:5c:41:01:
b9:1d:5f:b9:13:40:ac:5d:08:11:91:c2:9c:5f:b9:c7:a9:8d:
21:0c:ae:4b:a7:a4:0b:b9:08:5b:93:a3:88:5f:ce:0b:16:62:
38:3a:3f:79:41:70:7a:92:f7:c2:c7:a3:37:7e:ca:d6:39:44:
78:2b:fb:34:37:0c:4e:2b:35:71:72:77:62:d2:e3:65:a1:b1:
dc:06:ae:58:08:89:2b:1e:61:8d:fe:2e:0b:57:00:3a:c9:d0:
87:14:9f:1e:ee:5e:ab:e8:92:ae:8c:b6:21:23:b4:ae:11:51:
3a:9b:8e:71:36:25:14:cf:35:98:70:97:e0:df:a7:08:cd:88:
5c:e0:96:36:9b:a4:90:6a:40:c8:77:ca:6b:45:f1:02:c9:d5:
a0:aa:46:b2:81:16:e1:6c:e2:e2:3a:80:2e:06:b1:ae:dc:72:
ce:6f:80:ff:61:56:6c:4a:81:90:e4:4c:3e:38:7f:94:8d:f3:
60:1c:91:01:59:bf:2e:c7:ad:88:49:b4:84:74:10:83:79:d9:
8f:ed:76:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 11:19:53 2025 by rpki-client