This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/b28626e0-29fe-4e86-84d6-68478c5cd9ed/0/2E8BAC7E81911F08A189CA9FDD32A643C88E05B7.mft File: 2E8BAC7E81911F08A189CA9FDD32A643C88E05B7.mft (raw, json) Hash identifier: Hd3HXbO91/PwOjsj06Uvq2eMsmBISysMiOsqcYA189E= Subject key identifier: AD:E1:24:4A:71:A2:26:08:E0:08:70:2D:A6:89:16:CD:99:C6:F2:F8 Authority key identifier: 2E:8B:AC:7E:81:91:1F:08:A1:89:CA:9F:DD:32:A6:43:C8:8E:05:B7 Certificate issuer: /CN=2E8BAC7E81911F08A189CA9FDD32A643C88E05B7 Certificate serial: 67CFBB48184D8687753B8995BE36172D115E9DBC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E8BAC7E81911F08A189CA9FDD32A643C88E05B7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b28626e0-29fe-4e86-84d6-68478c5cd9ed/0/2E8BAC7E81911F08A189CA9FDD32A643C88E05B7.mft Manifest number: 0153 Signing time: Sat 06 Dec 2025 03:10:52 +0000 Manifest this update: Sat 06 Dec 2025 03:05:52 +0000 Manifest next update: Tue 09 Dec 2025 09:25:52 +0000 Files and hashes: 1: 2E8BAC7E81911F08A189CA9FDD32A643C88E05B7.crl (hash: iC/wZwXUM6ALVr7CNSI5Hy2UfVyeAgzUbhlS7UTP8t8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b28626e0-29fe-4e86-84d6-68478c5cd9ed/0/2E8BAC7E81911F08A189CA9FDD32A643C88E05B7.crl rsync://repo-rpki.idnic.net/repo/b28626e0-29fe-4e86-84d6-68478c5cd9ed/0/2E8BAC7E81911F08A189CA9FDD32A643C88E05B7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E8BAC7E81911F08A189CA9FDD32A643C88E05B7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 09:25:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:cf:bb:48:18:4d:86:87:75:3b:89:95:be:36:17:2d:11:5e:9d:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E8BAC7E81911F08A189CA9FDD32A643C88E05B7 Validity Not Before: Dec 6 03:05:52 2025 GMT Not After : Dec 9 09:25:52 2025 GMT Subject: CN=ADE1244A71A22608E008702DA68916CD99C6F2F8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:d4:f3:7c:5c:83:c7:68:0c:79:76:21:ea:49: 50:79:2d:b2:32:3a:1a:23:50:1d:80:39:17:23:fe: e7:9c:d0:01:ae:da:37:08:94:fe:07:1a:5f:2d:90: db:3e:84:55:c3:48:d0:5b:2d:ae:55:b2:62:a6:0a: f6:92:c5:3d:98:0c:e5:73:13:fe:56:11:b2:fd:26: b4:a5:b4:6a:02:3d:37:4e:27:be:d8:c7:ca:76:a0: 20:86:26:be:bf:0f:d9:81:09:f8:3a:e6:df:94:62: 47:50:dd:e1:0b:a9:19:78:fb:f5:37:61:c3:62:8c: c2:c4:59:ac:88:0c:3c:e6:86:87:16:33:f2:30:67: 5f:6d:03:fe:f6:81:6e:12:d3:cf:01:d9:36:b7:d7: ba:2b:ee:4a:cd:f2:b5:69:39:0c:d8:c0:8f:2d:38: 34:87:9c:2a:1c:c2:8e:33:aa:97:cf:94:59:6f:8e: 0a:90:a6:95:37:14:ed:f8:40:88:95:5d:ed:82:a1: 9f:e9:05:23:4b:d9:11:59:28:3a:68:c1:82:83:5c: 6c:8d:39:ab:ef:ee:75:f6:f2:8e:1f:7a:41:ce:ca: f7:a1:2c:41:df:e1:49:d1:ad:76:d4:55:b7:3f:d3: fd:c9:22:3d:91:5b:ac:56:48:fa:a9:0c:8a:e5:be: 64:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:E1:24:4A:71:A2:26:08:E0:08:70:2D:A6:89:16:CD:99:C6:F2:F8 X509v3 Authority Key Identifier: keyid:2E:8B:AC:7E:81:91:1F:08:A1:89:CA:9F:DD:32:A6:43:C8:8E:05:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b28626e0-29fe-4e86-84d6-68478c5cd9ed/0/2E8BAC7E81911F08A189CA9FDD32A643C88E05B7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E8BAC7E81911F08A189CA9FDD32A643C88E05B7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b28626e0-29fe-4e86-84d6-68478c5cd9ed/0/2E8BAC7E81911F08A189CA9FDD32A643C88E05B7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:6b:d2:96:ce:11:70:4e:6f:7f:ea:dc:49:55:cc:8a:de:5b: 27:f3:88:2a:c6:65:f4:c1:68:1c:de:36:60:d5:76:8e:fd:dd: 4a:16:fb:c9:b7:b1:8f:a6:ac:89:b6:3e:77:34:1e:02:e2:57: cc:59:ec:12:c1:d1:f5:7e:1d:81:12:52:7b:15:27:e9:17:6c: 14:09:9a:b5:20:ba:69:b2:1d:2d:13:ff:6a:ca:20:cf:20:81: ab:98:0b:ba:40:d8:ed:59:2b:8e:1b:3f:cf:f5:21:f8:c4:5c: 44:c9:5e:db:f2:c9:51:94:3e:01:1b:61:55:8d:38:3f:cb:cb: 84:30:da:b2:86:07:9e:5d:3d:08:8c:86:1c:58:79:ec:f0:9d: 79:9f:28:51:4a:79:3a:95:c8:79:9f:af:47:e9:89:21:db:a8: 5f:5b:46:b4:6b:50:d2:58:31:88:25:5d:aa:f2:8a:38:4f:42: e6:cd:89:f7:46:97:18:a4:ab:5f:e4:d2:48:88:27:71:d3:32: 87:bd:47:91:79:70:42:18:0d:e0:5d:7f:53:d5:8b:47:5b:b6: 24:52:76:1c:12:32:cd:5d:3c:3f:3a:ea:d4:d9:0c:3b:dc:7b: b4:4b:0c:27:f7:ee:59:f4:f2:bd:21:7e:31:3b:43:f7:1c:43: c1:5b:56:40 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZ8+7SBhNhod1O4mVvjYXLRFenbwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkU4QkFDN0U4MTkxMUYwOEExODlDQTlGREQzMkE2NDND ODhFMDVCNzAeFw0yNTEyMDYwMzA1NTJaFw0yNTEyMDkwOTI1NTJaMDMxMTAvBgNV BAMTKEFERTEyNDRBNzFBMjI2MDhFMDA4NzAyREE2ODkxNkNEOTlDNkYyRjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC21PN8XIPHaAx5diHqSVB5LbIy OhojUB2AORcj/uec0AGu2jcIlP4HGl8tkNs+hFXDSNBbLa5VsmKmCvaSxT2YDOVz E/5WEbL9JrSltGoCPTdOJ77Yx8p2oCCGJr6/D9mBCfg65t+UYkdQ3eELqRl4+/U3 YcNijMLEWayIDDzmhocWM/IwZ19tA/72gW4S088B2Ta317or7krN8rVpOQzYwI8t ODSHnCocwo4zqpfPlFlvjgqQppU3FO34QIiVXe2CoZ/pBSNL2RFZKDpowYKDXGyN Oavv7nX28o4fekHOyvehLEHf4UnRrXbUVbc/0/3JIj2RW6xWSPqpDIrlvmTvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUreEkSnGiJgjgCHAtpokWzZnG8vgwHwYDVR0j BBgwFoAULousfoGRHwihicqf3TKmQ8iOBbcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i Mjg2MjZlMC0yOWZlLTRlODYtODRkNi02ODQ3OGM1Y2Q5ZWQvMC8yRThCQUM3RTgx OTExRjA4QTE4OUNBOUZERDMyQTY0M0M4OEUwNUI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkU4QkFDN0U4MTkxMUYwOEExODlDQTlGREQzMkE2NDNDODhF MDVCNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjI4NjI2ZTAtMjlmZS00ZTg2LTg0 ZDYtNjg0NzhjNWNkOWVkLzAvMkU4QkFDN0U4MTkxMUYwOEExODlDQTlGREQzMkE2 NDNDODhFMDVCNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG1r0pbOEXBOb3/q3ElVzIreWyfziCrGZfTB aBzeNmDVdo793UoW+8m3sY+mrIm2Pnc0HgLiV8xZ7BLB0fV+HYESUnsVJ+kXbBQJ mrUgummyHS0T/2rKIM8ggauYC7pA2O1ZK44bP8/1IfjEXETJXtvyyVGUPgEbYVWN OD/Ly4Qw2rKGB55dPQiMhhxYeezwnXmfKFFKeTqVyHmfr0fpiSHbqF9bRrRrUNJY MYglXaryijhPQubNifdGlxikq1/k0kiIJ3HTMoe9R5F5cEIYDeBdf1PVi0dbtiRS dhwSMs1dPD866tTZDDvce7RLDCf37ln08r0hfjE7Q/ccQ8FbVkA= -----END CERTIFICATE-----Generated at Sun Dec 7 00:49:37 2025 by rpki-client