This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/6cb2928e-9b39-4a90-97d2-04cf65fe9578/0/2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9.mft File: 2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9.mft (raw, json) Hash identifier: 3DlSYDhqVF7x66HEaU9F7y9/mjZzmyKrUq8yRBmAD5I= Subject key identifier: 55:26:0F:87:5F:B1:89:73:D5:FF:DB:51:B0:44:8C:BE:69:BC:36:67 Authority key identifier: 2E:A5:E6:62:51:DD:59:1E:7F:1F:48:55:AF:4B:AF:BB:64:4B:08:A9 Certificate issuer: /CN=2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9 Certificate serial: 0FFD2936D92F9C1B97D702B2C3E3BF29DBE503AF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6cb2928e-9b39-4a90-97d2-04cf65fe9578/0/2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9.mft Manifest number: 0256 Signing time: Tue 16 Dec 2025 22:32:07 +0000 Manifest this update: Tue 16 Dec 2025 22:27:07 +0000 Manifest next update: Sat 20 Dec 2025 08:08:07 +0000 Files and hashes: 1: 2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9.crl (hash: uJQSSb8mK9YAGzxp4jffqvVUHL+rQ5pHqlN24yaEutQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6cb2928e-9b39-4a90-97d2-04cf65fe9578/0/2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9.crl rsync://repo-rpki.idnic.net/repo/6cb2928e-9b39-4a90-97d2-04cf65fe9578/0/2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 08:08:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:fd:29:36:d9:2f:9c:1b:97:d7:02:b2:c3:e3:bf:29:db:e5:03:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9 Validity Not Before: Dec 16 22:27:07 2025 GMT Not After : Dec 20 08:08:07 2025 GMT Subject: CN=55260F875FB18973D5FFDB51B0448CBE69BC3667 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:ff:e6:c8:f0:5b:0e:fa:7b:49:43:2e:b4:c2: 5e:7f:9c:bb:90:89:6a:07:e5:cd:56:91:de:9e:8c: d1:a1:d3:3b:1e:a8:61:4d:df:dc:01:63:c7:18:87: b6:96:33:d7:05:e8:9c:09:fb:e1:66:82:5b:9c:53: 4a:9d:f6:90:94:c2:72:ee:3c:dc:c0:95:a9:47:8c: 0f:27:6b:b9:e5:c0:82:55:5f:cb:bc:18:21:b0:d2: 8c:dd:5d:5b:7a:09:8e:1b:6c:e6:80:f3:71:75:bf: 2d:3e:06:a4:80:73:7b:55:96:8e:da:b3:4c:50:49: da:e1:31:b5:be:8a:1d:52:de:4c:67:ca:96:cc:67: 98:be:5d:64:8d:b8:a6:5a:09:06:cd:e8:d3:1d:05: 4f:86:f8:41:27:e0:08:d3:79:de:9c:c0:73:fc:11: 80:23:3e:54:b6:01:77:3e:fe:5d:34:84:d1:61:08: fd:f5:23:93:f9:8e:67:65:22:77:84:f9:13:fb:71: d4:7a:0f:62:78:7b:2c:9c:26:10:45:96:6b:b5:f2: f5:3f:48:7e:db:7d:53:38:2b:2b:9c:0d:48:57:d3: 4b:3b:33:62:2a:67:58:f9:e2:da:2c:09:ac:83:71: 89:7e:82:25:01:55:6f:19:1b:9a:b7:a6:05:57:a1: 87:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:26:0F:87:5F:B1:89:73:D5:FF:DB:51:B0:44:8C:BE:69:BC:36:67 X509v3 Authority Key Identifier: keyid:2E:A5:E6:62:51:DD:59:1E:7F:1F:48:55:AF:4B:AF:BB:64:4B:08:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6cb2928e-9b39-4a90-97d2-04cf65fe9578/0/2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6cb2928e-9b39-4a90-97d2-04cf65fe9578/0/2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:0b:1c:63:f7:c4:2d:6b:a2:e0:2b:aa:57:42:6f:ce:a0:3f: b0:99:80:d3:76:38:a3:d8:60:71:ef:9c:c8:e4:4e:a5:f9:9c: 60:c9:81:84:4e:0f:e3:79:04:33:6a:63:9c:ff:7a:7d:e0:59: 45:34:bf:22:c3:c9:12:74:f2:0f:f7:57:d9:2c:c2:b2:79:e4: 6b:31:14:95:c6:d9:51:0c:9f:a1:25:32:b5:46:8d:c6:4d:1f: 7c:8b:be:00:eb:72:ea:8d:5b:ac:d2:53:02:1e:1c:e7:a4:bc: 49:d1:20:a8:7d:02:ac:0f:5d:c0:e4:e9:74:79:ff:d4:95:2f: 98:b3:98:3d:ad:f0:6b:e9:5d:93:7c:09:e1:c3:b8:a0:35:d8: 7f:8b:e5:39:e5:79:bc:e4:e9:64:6f:a4:a7:fb:cc:8a:f9:26: 50:eb:32:82:3c:c8:9e:e1:08:be:1b:83:ee:5c:b9:83:d0:80: 96:de:57:19:64:0f:dd:2d:9b:85:1f:26:58:2e:6f:12:56:f7: e4:ec:1c:43:2b:58:2a:71:66:04:b4:51:d2:e0:c3:99:58:e9: c9:63:af:2e:4c:29:8d:ca:c0:2e:41:f1:60:44:dd:ad:d9:cb: 63:ad:12:8c:89:19:3a:20:cb:12:d6:77:84:33:f7:24:91:f7: 8a:04:35:d1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD/0pNtkvnBuX1wKyw+O/KdvlA68wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkVBNUU2NjI1MURENTkxRTdGMUY0ODU1QUY0QkFGQkI2 NDRCMDhBOTAeFw0yNTEyMTYyMjI3MDdaFw0yNTEyMjAwODA4MDdaMDMxMTAvBgNV BAMTKDU1MjYwRjg3NUZCMTg5NzNENUZGREI1MUIwNDQ4Q0JFNjlCQzM2NjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO/+bI8FsO+ntJQy60wl5/nLuQ iWoH5c1Wkd6ejNGh0zseqGFN39wBY8cYh7aWM9cF6JwJ++FmglucU0qd9pCUwnLu PNzAlalHjA8na7nlwIJVX8u8GCGw0ozdXVt6CY4bbOaA83F1vy0+BqSAc3tVlo7a s0xQSdrhMbW+ih1S3kxnypbMZ5i+XWSNuKZaCQbN6NMdBU+G+EEn4AjTed6cwHP8 EYAjPlS2AXc+/l00hNFhCP31I5P5jmdlIneE+RP7cdR6D2J4eyycJhBFlmu18vU/ SH7bfVM4KyucDUhX00s7M2IqZ1j54tosCayDcYl+giUBVW8ZG5q3pgVXoYd9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVSYPh1+xiXPV/9tRsESMvmm8NmcwHwYDVR0j BBgwFoAULqXmYlHdWR5/H0hVr0uvu2RLCKkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 Y2IyOTI4ZS05YjM5LTRhOTAtOTdkMi0wNGNmNjVmZTk1NzgvMC8yRUE1RTY2MjUx REQ1OTFFN0YxRjQ4NTVBRjRCQUZCQjY0NEIwOEE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkVBNUU2NjI1MURENTkxRTdGMUY0ODU1QUY0QkFGQkI2NDRC MDhBOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmNiMjkyOGUtOWIzOS00YTkwLTk3 ZDItMDRjZjY1ZmU5NTc4LzAvMkVBNUU2NjI1MURENTkxRTdGMUY0ODU1QUY0QkFG QkI2NDRCMDhBOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAkLHGP3xC1rouArqldCb86gP7CZgNN2OKPY YHHvnMjkTqX5nGDJgYROD+N5BDNqY5z/en3gWUU0vyLDyRJ08g/3V9kswrJ55Gsx FJXG2VEMn6ElMrVGjcZNH3yLvgDrcuqNW6zSUwIeHOekvEnRIKh9AqwPXcDk6XR5 /9SVL5izmD2t8GvpXZN8CeHDuKA12H+L5Tnlebzk6WRvpKf7zIr5JlDrMoI8yJ7h CL4bg+5cuYPQgJbeVxlkD90tm4UfJlgubxJW9+TsHEMrWCpxZgS0UdLgw5lY6clj ry5MKY3KwC5B8WBE3a3Zy2OtEoyJGTogyxLWd4Qz9ySR94oENdE= -----END CERTIFICATE-----Generated at Thu Dec 18 07:10:06 2025 by rpki-client