This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/6cb2928e-9b39-4a90-97d2-04cf65fe9578/0/2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9.mft File: 2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9.mft (raw, json) Hash identifier: yaPOOfJakEYC/jlKZD+FFJrau0iNTQu3mWQ54uRFJm4= Subject key identifier: FA:AF:5E:D3:E9:A9:2A:1E:97:5C:18:27:3D:BC:43:4A:41:5D:25:15 Authority key identifier: 2E:A5:E6:62:51:DD:59:1E:7F:1F:48:55:AF:4B:AF:BB:64:4B:08:A9 Certificate issuer: /CN=2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9 Certificate serial: 66FFE33D0D69A4A6E5866C00F88382C06C604C57 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6cb2928e-9b39-4a90-97d2-04cf65fe9578/0/2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9.mft Manifest number: 0258 Signing time: Sun 21 Dec 2025 15:32:44 +0000 Manifest this update: Sun 21 Dec 2025 15:27:44 +0000 Manifest next update: Wed 24 Dec 2025 19:24:44 +0000 Files and hashes: 1: 2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9.crl (hash: kj6MaeZv7tCHJLB4ai3TO9Js9ACCUqhUZASYyButKcI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6cb2928e-9b39-4a90-97d2-04cf65fe9578/0/2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9.crl rsync://repo-rpki.idnic.net/repo/6cb2928e-9b39-4a90-97d2-04cf65fe9578/0/2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Dec 2025 07:39:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:ff:e3:3d:0d:69:a4:a6:e5:86:6c:00:f8:83:82:c0:6c:60:4c:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9 Validity Not Before: Dec 21 15:27:44 2025 GMT Not After : Dec 24 19:24:44 2025 GMT Subject: CN=FAAF5ED3E9A92A1E975C18273DBC434A415D2515 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:9f:57:0e:21:7a:b7:ce:c5:f0:09:0e:11:1d: 7d:48:1f:b5:6b:ee:51:69:05:e9:8b:77:22:06:a6: 25:13:af:2a:59:2b:cc:32:9e:ae:8f:5f:ff:e1:1c: c8:ff:f8:aa:bb:3a:53:a9:e1:e7:04:31:4c:76:f7: 98:67:2a:88:61:1c:df:8c:73:a4:d0:ab:47:0b:d0: fa:32:85:37:94:67:df:75:1b:7d:9e:45:0f:1a:0a: 65:49:67:80:8f:24:9e:6c:43:c3:8c:14:9d:2a:79: 8d:7f:a3:70:66:7a:ee:4b:2b:84:53:3c:80:5b:49: ab:f3:9e:fd:03:a8:39:03:7f:c9:6a:51:c9:6e:9d: 72:fd:f8:53:8e:62:5c:6c:13:47:1d:23:1f:87:40: 51:1e:7c:18:dd:d4:33:0d:34:ae:72:6f:13:e9:e6: c7:01:46:3e:9b:04:88:04:7c:f7:11:df:cd:67:71: 31:ac:bc:1e:89:c2:8d:fa:66:ea:c6:49:f6:3d:04: 8e:03:ba:a2:0c:82:bc:25:63:66:d5:c1:21:22:ad: 1c:7a:dd:51:88:9d:d6:29:57:d7:75:18:87:d3:9d: b2:a9:fd:c4:78:31:d7:b5:20:af:28:f4:a2:d7:e5: 35:24:3b:35:1b:ec:b5:48:7c:0e:02:3b:41:e8:fc: 84:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:AF:5E:D3:E9:A9:2A:1E:97:5C:18:27:3D:BC:43:4A:41:5D:25:15 X509v3 Authority Key Identifier: keyid:2E:A5:E6:62:51:DD:59:1E:7F:1F:48:55:AF:4B:AF:BB:64:4B:08:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6cb2928e-9b39-4a90-97d2-04cf65fe9578/0/2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6cb2928e-9b39-4a90-97d2-04cf65fe9578/0/2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:d0:d1:b0:16:15:75:42:ee:95:fa:8c:35:2e:52:b7:2b:f8: c6:df:9d:b0:78:8b:ac:ab:54:a2:76:45:c6:9d:e7:65:7c:c8: c1:16:43:9a:6c:ab:e1:d8:80:f6:6a:b3:34:43:81:8c:69:ba: 37:5b:73:a8:5e:fd:3b:18:46:4f:4a:43:62:fb:4f:b2:28:ff: a5:9e:98:5c:e4:8f:26:87:ae:8d:eb:8b:62:4b:c1:09:4a:45: b2:c8:1a:9b:09:66:52:ca:52:b0:9e:f4:ff:46:2a:74:e3:bd: b3:89:bf:d5:e1:b9:a6:bb:88:2b:f8:61:96:bd:2f:63:49:5b: 27:4a:df:5e:01:48:50:fd:e3:22:ca:60:82:71:68:ac:53:06: 75:2b:78:8b:48:61:18:31:c4:4f:d9:d1:1f:5f:cf:fa:5f:61: 6d:06:8a:30:63:70:d3:9a:5f:7c:b3:4b:6a:d1:d0:98:c7:d4: 5b:32:e7:19:1f:65:77:43:cd:d9:3f:a6:8a:76:37:e4:4d:06: 92:7d:5b:26:1e:24:a8:b4:fe:80:f7:ac:b8:7e:ab:a3:f3:25: ce:05:d8:d8:82:a9:ae:3c:5f:61:a1:7d:8a:0d:bf:cb:f2:b5: 25:43:37:3d:a8:5a:42:14:e1:ec:3c:df:8f:d5:08:23:5a:f7: 1d:35:09:ba -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZv/jPQ1ppKblhmwA+IOCwGxgTFcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkVBNUU2NjI1MURENTkxRTdGMUY0ODU1QUY0QkFGQkI2 NDRCMDhBOTAeFw0yNTEyMjExNTI3NDRaFw0yNTEyMjQxOTI0NDRaMDMxMTAvBgNV BAMTKEZBQUY1RUQzRTlBOTJBMUU5NzVDMTgyNzNEQkM0MzRBNDE1RDI1MTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDon1cOIXq3zsXwCQ4RHX1IH7Vr 7lFpBemLdyIGpiUTrypZK8wynq6PX//hHMj/+Kq7OlOp4ecEMUx295hnKohhHN+M c6TQq0cL0PoyhTeUZ991G32eRQ8aCmVJZ4CPJJ5sQ8OMFJ0qeY1/o3Bmeu5LK4RT PIBbSavznv0DqDkDf8lqUclunXL9+FOOYlxsE0cdIx+HQFEefBjd1DMNNK5ybxPp 5scBRj6bBIgEfPcR381ncTGsvB6Jwo36ZurGSfY9BI4DuqIMgrwlY2bVwSEirRx6 3VGIndYpV9d1GIfTnbKp/cR4Mde1IK8o9KLX5TUkOzUb7LVIfA4CO0Ho/IRdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+q9e0+mpKh6XXBgnPbxDSkFdJRUwHwYDVR0j BBgwFoAULqXmYlHdWR5/H0hVr0uvu2RLCKkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 Y2IyOTI4ZS05YjM5LTRhOTAtOTdkMi0wNGNmNjVmZTk1NzgvMC8yRUE1RTY2MjUx REQ1OTFFN0YxRjQ4NTVBRjRCQUZCQjY0NEIwOEE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkVBNUU2NjI1MURENTkxRTdGMUY0ODU1QUY0QkFGQkI2NDRC MDhBOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmNiMjkyOGUtOWIzOS00YTkwLTk3 ZDItMDRjZjY1ZmU5NTc4LzAvMkVBNUU2NjI1MURENTkxRTdGMUY0ODU1QUY0QkFG QkI2NDRCMDhBOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEjQ0bAWFXVC7pX6jDUuUrcr+MbfnbB4i6yr VKJ2Rcad52V8yMEWQ5psq+HYgPZqszRDgYxpujdbc6he/TsYRk9KQ2L7T7Io/6We mFzkjyaHro3ri2JLwQlKRbLIGpsJZlLKUrCe9P9GKnTjvbOJv9Xhuaa7iCv4YZa9 L2NJWydK314BSFD94yLKYIJxaKxTBnUreItIYRgxxE/Z0R9fz/pfYW0GijBjcNOa X3yzS2rR0JjH1Fsy5xkfZXdDzdk/pop2N+RNBpJ9WyYeJKi0/oD3rLh+q6PzJc4F 2NiCqa48X2GhfYoNv8vytSVDNz2oWkIU4ew834/VCCNa9x01Cbo= -----END CERTIFICATE-----Generated at Tue Dec 23 00:43:20 2025 by rpki-client