This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/6cb2928e-9b39-4a90-97d2-04cf65fe9578/0/2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9.mft File: 2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9.mft (raw, json) Hash identifier: F+VyteA118yH6S+9M/3J8GuQ7jQ3I2uMbILRWWUSV5E= Subject key identifier: 7D:B3:20:E3:8C:18:0E:EF:A2:9B:12:8B:54:75:93:08:6A:75:89:F1 Authority key identifier: 2E:A5:E6:62:51:DD:59:1E:7F:1F:48:55:AF:4B:AF:BB:64:4B:08:A9 Certificate issuer: /CN=2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9 Certificate serial: 3F4AD723997569F5F42B9838A660ACEC900496B2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6cb2928e-9b39-4a90-97d2-04cf65fe9578/0/2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9.mft Manifest number: 0251 Signing time: Fri 05 Dec 2025 13:22:07 +0000 Manifest this update: Fri 05 Dec 2025 13:17:07 +0000 Manifest next update: Mon 08 Dec 2025 19:37:07 +0000 Files and hashes: 1: 2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9.crl (hash: 7O5tPZGXWIhAD3XHEgCN5x+ZTEBYEuhC+igsBFceuQU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6cb2928e-9b39-4a90-97d2-04cf65fe9578/0/2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9.crl rsync://repo-rpki.idnic.net/repo/6cb2928e-9b39-4a90-97d2-04cf65fe9578/0/2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 19:37:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:4a:d7:23:99:75:69:f5:f4:2b:98:38:a6:60:ac:ec:90:04:96:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9 Validity Not Before: Dec 5 13:17:07 2025 GMT Not After : Dec 8 19:37:07 2025 GMT Subject: CN=7DB320E38C180EEFA29B128B547593086A7589F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:2d:96:4c:55:96:90:51:41:ad:3f:06:b4:a4: ad:db:8f:96:d4:81:fa:8f:76:37:24:83:84:17:3b: e8:5b:3d:e5:72:08:0d:96:ca:bc:cb:61:bf:ab:1f: 71:10:a6:ce:c3:0d:22:30:b2:8e:fa:87:9c:53:1b: 1a:22:d9:f9:38:db:ba:f5:c5:b3:47:d9:1a:18:6c: 82:40:4c:74:72:fa:cd:96:41:0c:7f:e6:89:f5:6c: 21:d3:f5:3e:ae:fe:7b:96:ba:fb:92:16:ee:e3:5a: 56:4d:2f:b5:c8:1b:d2:8b:10:d1:6b:78:10:ed:73: 25:b7:04:29:f8:cc:5c:88:d2:cb:f6:e0:f2:4f:bd: ed:cb:65:ad:e9:c7:89:e7:75:74:ef:4c:98:ab:6f: 6d:96:d4:d5:12:80:4c:b3:4b:5a:47:4b:69:8b:f0: d4:af:b5:ba:86:8b:b5:c8:5a:75:7c:1f:30:fd:de: c5:09:46:f3:13:76:15:d3:32:aa:3f:45:0e:84:7c: 88:94:a4:69:04:9a:13:da:10:99:1a:7c:37:4f:5c: ee:f6:a1:86:0d:26:5c:0c:21:95:a2:5d:64:0f:e4: 37:2a:99:61:b3:15:34:7c:f7:34:bf:6b:d4:e7:fd: e5:df:72:bc:04:fb:c3:cc:12:94:36:60:f1:22:01: a5:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:B3:20:E3:8C:18:0E:EF:A2:9B:12:8B:54:75:93:08:6A:75:89:F1 X509v3 Authority Key Identifier: keyid:2E:A5:E6:62:51:DD:59:1E:7F:1F:48:55:AF:4B:AF:BB:64:4B:08:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6cb2928e-9b39-4a90-97d2-04cf65fe9578/0/2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6cb2928e-9b39-4a90-97d2-04cf65fe9578/0/2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:ce:cb:ed:6b:c7:4c:84:50:76:11:db:a3:1b:cd:a2:d4:18: 71:3f:21:07:54:29:ff:64:9c:d3:3b:1b:0e:89:a9:dc:4b:76: 43:20:13:cc:19:99:2b:a5:09:d6:c8:05:19:a3:a4:77:a5:56: eb:90:73:76:30:c5:40:d2:d0:a8:7f:73:83:94:16:15:fa:ee: dc:b2:a9:a1:65:97:b9:51:dd:36:cb:53:d4:64:ef:f0:de:b4: 4a:d0:29:ce:41:51:1a:f7:6d:3c:ea:e2:66:eb:6c:1a:21:a6: 24:13:e5:53:fc:86:12:3a:45:68:b9:d1:d1:58:34:1a:e7:9d: 12:82:26:be:fe:75:af:67:f1:74:49:be:e4:74:ed:03:8e:ae: cb:e9:d8:2d:3b:ea:36:65:1c:5d:b9:17:0f:f3:9c:ff:5e:06: 35:8b:2b:ac:68:83:15:a8:60:ae:5e:48:88:64:73:a9:a7:1e: 97:b1:0b:c8:1b:e8:ed:f6:da:6f:9a:37:9b:f9:a5:35:29:65: 99:dd:20:83:1f:a9:0d:ec:ce:48:27:5d:e1:06:fb:c4:7c:8c: bc:be:3e:f1:47:c0:d8:04:86:27:ec:b3:72:c3:34:75:ae:af: d5:10:99:78:15:24:aa:42:c0:27:5d:ba:cf:42:d9:fb:88:a5: 1e:00:e6:66 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP0rXI5l1afX0K5g4pmCs7JAElrIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkVBNUU2NjI1MURENTkxRTdGMUY0ODU1QUY0QkFGQkI2 NDRCMDhBOTAeFw0yNTEyMDUxMzE3MDdaFw0yNTEyMDgxOTM3MDdaMDMxMTAvBgNV BAMTKDdEQjMyMEUzOEMxODBFRUZBMjlCMTI4QjU0NzU5MzA4NkE3NTg5RjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuLZZMVZaQUUGtPwa0pK3bj5bU gfqPdjckg4QXO+hbPeVyCA2WyrzLYb+rH3EQps7DDSIwso76h5xTGxoi2fk427r1 xbNH2RoYbIJATHRy+s2WQQx/5on1bCHT9T6u/nuWuvuSFu7jWlZNL7XIG9KLENFr eBDtcyW3BCn4zFyI0sv24PJPve3LZa3px4nndXTvTJirb22W1NUSgEyzS1pHS2mL 8NSvtbqGi7XIWnV8HzD93sUJRvMTdhXTMqo/RQ6EfIiUpGkEmhPaEJkafDdPXO72 oYYNJlwMIZWiXWQP5DcqmWGzFTR89zS/a9Tn/eXfcrwE+8PMEpQ2YPEiAaV/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfbMg44wYDu+imxKLVHWTCGp1ifEwHwYDVR0j BBgwFoAULqXmYlHdWR5/H0hVr0uvu2RLCKkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 Y2IyOTI4ZS05YjM5LTRhOTAtOTdkMi0wNGNmNjVmZTk1NzgvMC8yRUE1RTY2MjUx REQ1OTFFN0YxRjQ4NTVBRjRCQUZCQjY0NEIwOEE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkVBNUU2NjI1MURENTkxRTdGMUY0ODU1QUY0QkFGQkI2NDRC MDhBOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmNiMjkyOGUtOWIzOS00YTkwLTk3 ZDItMDRjZjY1ZmU5NTc4LzAvMkVBNUU2NjI1MURENTkxRTdGMUY0ODU1QUY0QkFG QkI2NDRCMDhBOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHzOy+1rx0yEUHYR26MbzaLUGHE/IQdUKf9k nNM7Gw6JqdxLdkMgE8wZmSulCdbIBRmjpHelVuuQc3YwxUDS0Kh/c4OUFhX67tyy qaFll7lR3TbLU9Rk7/DetErQKc5BURr3bTzq4mbrbBohpiQT5VP8hhI6RWi50dFY NBrnnRKCJr7+da9n8XRJvuR07QOOrsvp2C076jZlHF25Fw/znP9eBjWLK6xogxWo YK5eSIhkc6mnHpexC8gb6O322m+aN5v5pTUpZZndIIMfqQ3szkgnXeEG+8R8jLy+ PvFHwNgEhifss3LDNHWur9UQmXgVJKpCwCddus9C2fuIpR4A5mY= -----END CERTIFICATE-----Generated at Sun Dec 7 02:07:49 2025 by rpki-client