This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/bd354c1b-677e-41d6-ab0f-e96edfd92957/0/2A575ADD644E97D61D2EBFFF2A23056B78EFAE6C.mft File: 2A575ADD644E97D61D2EBFFF2A23056B78EFAE6C.mft (raw, json) Hash identifier: BzgEXKHDoDybyObXnn33TxbmHDBPiBt1mxaZqEExkRk= Subject key identifier: 14:9F:F5:EA:F0:61:8F:0B:A9:32:43:7C:27:36:7C:02:49:C0:8C:4E Authority key identifier: 2A:57:5A:DD:64:4E:97:D6:1D:2E:BF:FF:2A:23:05:6B:78:EF:AE:6C Certificate issuer: /CN=2A575ADD644E97D61D2EBFFF2A23056B78EFAE6C Certificate serial: 0EF7DA7A75022A0786A6A27C54920B81142B8631 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2A575ADD644E97D61D2EBFFF2A23056B78EFAE6C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bd354c1b-677e-41d6-ab0f-e96edfd92957/0/2A575ADD644E97D61D2EBFFF2A23056B78EFAE6C.mft Manifest number: E2 Signing time: Fri 05 Dec 2025 21:01:48 +0000 Manifest this update: Fri 05 Dec 2025 20:56:48 +0000 Manifest next update: Tue 09 Dec 2025 03:06:48 +0000 Files and hashes: 1: 2A575ADD644E97D61D2EBFFF2A23056B78EFAE6C.crl (hash: KPJsgX8cruRmGOroW2Dlnus4CNVkzVVwg5O3XYVWYhI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bd354c1b-677e-41d6-ab0f-e96edfd92957/0/2A575ADD644E97D61D2EBFFF2A23056B78EFAE6C.crl rsync://repo-rpki.idnic.net/repo/bd354c1b-677e-41d6-ab0f-e96edfd92957/0/2A575ADD644E97D61D2EBFFF2A23056B78EFAE6C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2A575ADD644E97D61D2EBFFF2A23056B78EFAE6C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 03:06:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:f7:da:7a:75:02:2a:07:86:a6:a2:7c:54:92:0b:81:14:2b:86:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A575ADD644E97D61D2EBFFF2A23056B78EFAE6C Validity Not Before: Dec 5 20:56:48 2025 GMT Not After : Dec 9 03:06:48 2025 GMT Subject: CN=149FF5EAF0618F0BA932437C27367C0249C08C4E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:06:10:d6:45:d7:f0:4d:23:fe:9f:84:b2:a2: fc:a3:b3:9c:38:c8:31:fd:03:db:c9:d9:9b:90:c2: 7b:ea:92:37:1a:87:52:d6:71:f0:e8:82:e1:1b:ac: 8a:35:33:40:b1:73:65:63:bd:53:85:eb:46:bb:53: c7:dc:72:e2:33:af:24:25:58:56:23:dd:4f:62:3e: 3a:ac:c5:e6:fa:ab:86:a7:75:89:36:dd:60:55:b3: fd:98:a4:4a:42:b7:94:b0:b0:a9:dc:59:49:02:55: 68:f3:92:96:c8:21:47:e8:c4:ad:0b:1e:4c:8f:2a: 10:f5:93:b5:04:65:e8:3d:3c:96:70:89:5e:7e:e9: 85:3d:6b:fd:10:77:94:f8:b7:3a:e9:a7:02:00:09: aa:37:af:bc:d7:9c:e9:15:45:c9:b3:d4:c7:59:39: 98:b2:13:55:2c:bd:46:af:a9:8e:68:a5:7f:ce:15: 09:78:b2:99:f8:a5:16:59:8a:5f:2f:1f:e0:de:8c: 93:ed:05:4b:88:c2:45:24:fd:19:e3:d2:b3:2d:f2: e6:fe:51:1f:f5:8b:2d:b8:05:99:45:ab:58:ed:2e: e8:99:6a:3b:f5:93:70:6f:12:43:65:c8:4f:28:e2: 32:4e:4e:0d:c0:ae:bb:e8:37:ea:80:5f:69:50:50: 6c:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:9F:F5:EA:F0:61:8F:0B:A9:32:43:7C:27:36:7C:02:49:C0:8C:4E X509v3 Authority Key Identifier: keyid:2A:57:5A:DD:64:4E:97:D6:1D:2E:BF:FF:2A:23:05:6B:78:EF:AE:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bd354c1b-677e-41d6-ab0f-e96edfd92957/0/2A575ADD644E97D61D2EBFFF2A23056B78EFAE6C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2A575ADD644E97D61D2EBFFF2A23056B78EFAE6C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bd354c1b-677e-41d6-ab0f-e96edfd92957/0/2A575ADD644E97D61D2EBFFF2A23056B78EFAE6C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:e0:a2:32:42:8d:bc:f5:84:44:ca:9a:df:d9:12:b5:31:bd: 5b:fd:26:cd:55:1c:73:12:8c:15:11:a8:18:af:b3:3a:c6:c6: b5:cd:74:98:a7:29:63:e5:4a:87:c6:d0:89:dd:ad:6c:4a:fa: ea:4a:5d:8f:aa:5a:03:57:a6:07:1d:0a:6c:9b:56:01:20:37: 7c:e5:65:5b:0c:22:63:a2:f7:96:78:95:39:b3:41:f2:c3:33: dc:a4:a1:c9:2d:03:de:45:a0:f4:1f:69:29:0f:2c:4a:65:6e: e5:f9:fc:3b:a5:2e:e1:3c:78:c6:5c:fd:69:df:b2:c1:ca:90: b7:2c:6f:47:5c:d0:57:df:c9:17:8d:c2:fb:16:96:96:bf:d8: 2f:fb:78:a9:31:11:c1:1a:75:03:8e:b7:95:1c:45:a2:e0:c0: dd:b9:b9:79:21:df:51:69:b0:75:d7:d9:19:e4:fd:6c:81:92: 41:cd:3f:0b:3c:ab:20:74:1e:00:88:2d:98:58:5b:22:60:0a: bf:db:fd:b7:d8:b1:c8:f3:c7:ac:f1:c3:03:58:5e:e5:49:f4: 8f:14:a6:b2:06:d4:76:fa:4d:6e:a7:0d:1d:4e:4e:60:bc:31: ad:af:cb:fe:03:7e:b5:13:de:f2:54:94:0a:5e:a8:50:ed:17: 30:c9:93:56 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDvfaenUCKgeGpqJ8VJILgRQrhjEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkE1NzVBREQ2NDRFOTdENjFEMkVCRkZGMkEyMzA1NkI3 OEVGQUU2QzAeFw0yNTEyMDUyMDU2NDhaFw0yNTEyMDkwMzA2NDhaMDMxMTAvBgNV BAMTKDE0OUZGNUVBRjA2MThGMEJBOTMyNDM3QzI3MzY3QzAyNDlDMDhDNEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUBhDWRdfwTSP+n4Syovyjs5w4 yDH9A9vJ2ZuQwnvqkjcah1LWcfDoguEbrIo1M0Cxc2VjvVOF60a7U8fccuIzryQl WFYj3U9iPjqsxeb6q4andYk23WBVs/2YpEpCt5SwsKncWUkCVWjzkpbIIUfoxK0L HkyPKhD1k7UEZeg9PJZwiV5+6YU9a/0Qd5T4tzrppwIACao3r7zXnOkVRcmz1MdZ OZiyE1UsvUavqY5opX/OFQl4spn4pRZZil8vH+DejJPtBUuIwkUk/Rnj0rMt8ub+ UR/1iy24BZlFq1jtLuiZajv1k3BvEkNlyE8o4jJOTg3ArrvoN+qAX2lQUGypAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFJ/16vBhjwupMkN8JzZ8AknAjE4wHwYDVR0j BBgwFoAUKlda3WROl9YdLr//KiMFa3jvrmwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZDM1NGMxYi02NzdlLTQxZDYtYWIwZi1lOTZlZGZkOTI5NTcvMC8yQTU3NUFERDY0 NEU5N0Q2MUQyRUJGRkYyQTIzMDU2Qjc4RUZBRTZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMkE1NzVBREQ2NDRFOTdENjFEMkVCRkZGMkEyMzA1NkI3OEVG QUU2Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmQzNTRjMWItNjc3ZS00MWQ2LWFi MGYtZTk2ZWRmZDkyOTU3LzAvMkE1NzVBREQ2NDRFOTdENjFEMkVCRkZGMkEyMzA1 NkI3OEVGQUU2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIrgojJCjbz1hETKmt/ZErUxvVv9Js1VHHMS jBURqBivszrGxrXNdJinKWPlSofG0IndrWxK+upKXY+qWgNXpgcdCmybVgEgN3zl ZVsMImOi95Z4lTmzQfLDM9ykocktA95FoPQfaSkPLEplbuX5/DulLuE8eMZc/Wnf ssHKkLcsb0dc0FffyReNwvsWlpa/2C/7eKkxEcEadQOOt5UcRaLgwN25uXkh31Fp sHXX2Rnk/WyBkkHNPws8qyB0HgCILZhYWyJgCr/b/bfYscjzx6zxwwNYXuVJ9I8U prIG1Hb6TW6nDR1OTmC8Ma2vy/4DfrUT3vJUlApeqFDtFzDJk1Y= -----END CERTIFICATE-----Generated at Sat Dec 6 21:42:51 2025 by rpki-client