This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/b28626e0-29fe-4e86-84d6-68478c5cd9ed/0/2E8BAC7E81911F08A189CA9FDD32A643C88E05B7.mft File: 2E8BAC7E81911F08A189CA9FDD32A643C88E05B7.mft (raw, json) Hash identifier: G3YzaTVuWbsbRdif4ZvY+IxPbUFbHVCoahdMnN2CLl8= Subject key identifier: 31:69:86:A3:D0:21:05:64:5F:08:34:68:C7:3D:2E:B9:7C:46:B9:19 Authority key identifier: 2E:8B:AC:7E:81:91:1F:08:A1:89:CA:9F:DD:32:A6:43:C8:8E:05:B7 Certificate issuer: /CN=2E8BAC7E81911F08A189CA9FDD32A643C88E05B7 Certificate serial: 3D1CF55F6ACE4B0A8A8B2D93B11A6FF0982B461F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E8BAC7E81911F08A189CA9FDD32A643C88E05B7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b28626e0-29fe-4e86-84d6-68478c5cd9ed/0/2E8BAC7E81911F08A189CA9FDD32A643C88E05B7.mft Manifest number: 0151 Signing time: Mon 01 Dec 2025 23:11:30 +0000 Manifest this update: Mon 01 Dec 2025 23:06:30 +0000 Manifest next update: Fri 05 Dec 2025 02:27:30 +0000 Files and hashes: 1: 2E8BAC7E81911F08A189CA9FDD32A643C88E05B7.crl (hash: wbG2Za6pgtgfAafG0gUe3rzu7z5odV3NBtQE6g5E3BI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b28626e0-29fe-4e86-84d6-68478c5cd9ed/0/2E8BAC7E81911F08A189CA9FDD32A643C88E05B7.crl rsync://repo-rpki.idnic.net/repo/b28626e0-29fe-4e86-84d6-68478c5cd9ed/0/2E8BAC7E81911F08A189CA9FDD32A643C88E05B7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E8BAC7E81911F08A189CA9FDD32A643C88E05B7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 02:27:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:1c:f5:5f:6a:ce:4b:0a:8a:8b:2d:93:b1:1a:6f:f0:98:2b:46:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E8BAC7E81911F08A189CA9FDD32A643C88E05B7 Validity Not Before: Dec 1 23:06:30 2025 GMT Not After : Dec 5 02:27:30 2025 GMT Subject: CN=316986A3D02105645F083468C73D2EB97C46B919 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:93:f7:6f:69:86:28:a7:3a:fd:c2:4a:d6:c6: 04:ea:b1:e4:b4:7a:2c:18:40:e7:96:6f:cb:64:df: 0a:7e:45:12:fa:bb:be:45:6a:2a:32:8c:5d:08:43: 81:d7:55:fd:27:ec:62:d5:fc:04:53:46:d6:c0:76: 43:7a:1a:ef:b0:f0:66:7c:9e:08:f6:88:8a:a8:45: 3c:77:56:e2:ba:ef:41:76:bc:1e:de:c1:58:3c:30: 3c:a5:1b:5f:19:1e:0c:fb:10:4e:67:c7:d0:0d:20: bc:eb:37:58:78:4c:fa:d7:b2:3a:b8:a5:e9:99:ee: 87:df:7d:e7:83:7d:e8:c9:92:6b:2e:7d:bc:61:f6: 05:d7:ca:21:bb:fc:43:78:a3:47:b8:90:b5:31:c5: 44:e8:ea:06:e5:7f:6e:be:83:ca:56:ec:6d:18:6f: ae:c1:76:50:a6:0e:3d:9d:98:63:87:e6:c2:08:57: 1e:ef:8f:ac:bf:a5:fd:a6:cc:5e:38:98:f8:dc:29: 4a:66:dd:2a:53:16:ee:1f:2c:ea:54:ea:e0:16:79: d7:50:28:4b:d3:91:05:a0:84:41:30:7c:d9:d7:7a: b3:ef:b5:4b:1d:e2:3f:83:8a:6c:51:91:1e:25:9c: 1b:0d:2f:a5:7d:d8:f0:2e:7d:97:6f:0d:35:ca:89: d1:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:69:86:A3:D0:21:05:64:5F:08:34:68:C7:3D:2E:B9:7C:46:B9:19 X509v3 Authority Key Identifier: keyid:2E:8B:AC:7E:81:91:1F:08:A1:89:CA:9F:DD:32:A6:43:C8:8E:05:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b28626e0-29fe-4e86-84d6-68478c5cd9ed/0/2E8BAC7E81911F08A189CA9FDD32A643C88E05B7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E8BAC7E81911F08A189CA9FDD32A643C88E05B7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b28626e0-29fe-4e86-84d6-68478c5cd9ed/0/2E8BAC7E81911F08A189CA9FDD32A643C88E05B7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:ee:95:da:c2:da:59:49:93:16:3d:54:25:84:98:ab:51:eb: 2f:61:7a:e1:de:75:f3:ec:01:7e:cf:d7:f2:f5:7c:9b:58:10: 54:e8:3e:e7:51:7e:39:09:d4:7b:c9:75:20:04:e5:42:08:28: 45:ab:b1:13:28:6e:a9:1c:42:d1:83:0a:cb:69:f3:c3:6d:ea: dc:53:78:00:54:e5:a6:4b:cc:8f:c2:f7:20:43:70:13:d2:74: 23:2a:4c:fe:12:c1:a9:fa:48:fb:03:1d:85:bb:b5:df:ba:06: 5c:3f:50:b4:9b:6c:58:c9:a3:81:76:af:d8:ec:73:5e:97:e8: 21:01:1f:e1:a9:2a:c1:9a:02:cc:bf:e5:6a:39:77:5e:60:de: f8:ce:ef:e3:48:d7:4f:77:04:4f:56:cf:6a:18:8a:5d:0f:4a: a0:68:d9:06:b6:34:5c:d5:87:2f:4d:6b:09:89:62:7a:5a:39: 5c:50:dc:9d:9e:99:95:9e:99:00:b9:11:30:2e:33:72:83:c3: 90:18:f7:7b:94:cb:cb:ff:61:24:77:d8:32:89:d9:3f:f6:6a: 10:b3:57:d8:25:5a:12:66:5b:5f:13:8c:4a:05:6d:26:81:d2: 08:0c:cf:fd:7e:b8:b4:69:bd:4d:a2:e5:76:ff:93:54:4f:40: 6e:f2:f6:2b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPRz1X2rOSwqKiy2TsRpv8JgrRh8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkU4QkFDN0U4MTkxMUYwOEExODlDQTlGREQzMkE2NDND ODhFMDVCNzAeFw0yNTEyMDEyMzA2MzBaFw0yNTEyMDUwMjI3MzBaMDMxMTAvBgNV BAMTKDMxNjk4NkEzRDAyMTA1NjQ1RjA4MzQ2OEM3M0QyRUI5N0M0NkI5MTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7k/dvaYYopzr9wkrWxgTqseS0 eiwYQOeWb8tk3wp+RRL6u75FaioyjF0IQ4HXVf0n7GLV/ARTRtbAdkN6Gu+w8GZ8 ngj2iIqoRTx3VuK670F2vB7ewVg8MDylG18ZHgz7EE5nx9ANILzrN1h4TPrXsjq4 pemZ7offfeeDfejJkmsufbxh9gXXyiG7/EN4o0e4kLUxxUTo6gblf26+g8pW7G0Y b67BdlCmDj2dmGOH5sIIVx7vj6y/pf2mzF44mPjcKUpm3SpTFu4fLOpU6uAWeddQ KEvTkQWghEEwfNnXerPvtUsd4j+DimxRkR4lnBsNL6V92PAufZdvDTXKidGNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMWmGo9AhBWRfCDRoxz0uuXxGuRkwHwYDVR0j BBgwFoAULousfoGRHwihicqf3TKmQ8iOBbcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i Mjg2MjZlMC0yOWZlLTRlODYtODRkNi02ODQ3OGM1Y2Q5ZWQvMC8yRThCQUM3RTgx OTExRjA4QTE4OUNBOUZERDMyQTY0M0M4OEUwNUI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkU4QkFDN0U4MTkxMUYwOEExODlDQTlGREQzMkE2NDNDODhF MDVCNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjI4NjI2ZTAtMjlmZS00ZTg2LTg0 ZDYtNjg0NzhjNWNkOWVkLzAvMkU4QkFDN0U4MTkxMUYwOEExODlDQTlGREQzMkE2 NDNDODhFMDVCNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJruldrC2llJkxY9VCWEmKtR6y9heuHedfPs AX7P1/L1fJtYEFToPudRfjkJ1HvJdSAE5UIIKEWrsRMobqkcQtGDCstp88Nt6txT eABU5aZLzI/C9yBDcBPSdCMqTP4Swan6SPsDHYW7td+6Blw/ULSbbFjJo4F2r9js c16X6CEBH+GpKsGaAsy/5Wo5d15g3vjO7+NI1093BE9Wz2oYil0PSqBo2Qa2NFzV hy9NawmJYnpaOVxQ3J2emZWemQC5ETAuM3KDw5AY93uUy8v/YSR32DKJ2T/2ahCz V9glWhJmW18TjEoFbSaB0ggMz/1+uLRpvU2i5Xb/k1RPQG7y9is= -----END CERTIFICATE-----Generated at Wed Dec 3 16:07:13 2025 by rpki-client