This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/0a75d371-18c7-48df-8f61-1d404b646413/0/8EEE0584B224A95915512EA70FE012A4AF134C7A.mft
File: 8EEE0584B224A95915512EA70FE012A4AF134C7A.mft (raw, json)
Hash identifier: hXWQ6z3iDSet+vdU5oDF0Tptap50Ei6Af8xLiuSgTSg=
Subject key identifier: 5E:EE:1C:0C:BA:3F:60:03:5B:71:50:67:5C:4F:F8:C8:54:66:E6:8D
Authority key identifier: 8E:EE:05:84:B2:24:A9:59:15:51:2E:A7:0F:E0:12:A4:AF:13:4C:7A
Certificate issuer: /CN=8EEE0584B224A95915512EA70FE012A4AF134C7A
Certificate serial: 67221DC4F55D57FF517653CD470E506BBD5A099E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8EEE0584B224A95915512EA70FE012A4AF134C7A.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/0a75d371-18c7-48df-8f61-1d404b646413/0/8EEE0584B224A95915512EA70FE012A4AF134C7A.mft
Manifest number: 052E
Signing time: Sat 06 Dec 2025 20:01:15 +0000
Manifest this update: Sat 06 Dec 2025 19:56:15 +0000
Manifest next update: Wed 10 Dec 2025 03:03:15 +0000
Files and hashes: 1: 8EEE0584B224A95915512EA70FE012A4AF134C7A.crl (hash: 2Hqi6vc+nVxHMxxKZQtXfCVhZqk/SdH07AlsopU/yz0=)
2: 3130332e39352e3136302e302f32332d3234203d3e20313336313236.roa (hash: KD7T4Ue/VEXioee+nFto/OfNIEmRxJwHxyIAd7JKH2Q=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/0a75d371-18c7-48df-8f61-1d404b646413/0/8EEE0584B224A95915512EA70FE012A4AF134C7A.crl
rsync://repo-rpki.idnic.net/repo/0a75d371-18c7-48df-8f61-1d404b646413/0/8EEE0584B224A95915512EA70FE012A4AF134C7A.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8EEE0584B224A95915512EA70FE012A4AF134C7A.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 09 Dec 2025 15:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:22:1d:c4:f5:5d:57:ff:51:76:53:cd:47:0e:50:6b:bd:5a:09:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8EEE0584B224A95915512EA70FE012A4AF134C7A
Validity
Not Before: Dec 6 19:56:15 2025 GMT
Not After : Dec 10 03:03:15 2025 GMT
Subject: CN=5EEE1C0CBA3F60035B7150675C4FF8C85466E68D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:3b:e9:fa:ee:8b:7d:9d:28:98:80:38:10:8c:
3a:51:8f:ea:bb:ef:da:9b:8b:7a:df:a7:86:1e:3b:
84:9b:a3:83:58:a3:98:30:24:e0:cc:62:d8:23:e7:
de:ae:18:4a:58:59:f1:65:8b:7e:6d:a3:4c:38:4f:
40:fc:fa:76:09:13:ec:88:fa:67:1c:e5:0b:92:d9:
23:08:9f:33:1d:0e:f6:3e:14:90:41:68:05:b8:7a:
f2:60:12:10:7b:07:1a:2a:d4:36:6e:fc:69:a5:34:
2b:71:fa:94:55:b0:bb:a6:8a:46:4a:9f:00:3c:b2:
26:0b:b0:19:d6:5b:0d:1d:df:9f:84:b6:96:c1:1a:
03:1c:5f:59:4c:51:10:cc:b9:7c:d8:81:15:a0:f8:
1e:3a:45:9b:03:68:66:c9:02:76:3c:df:a0:88:15:
c0:6b:fa:70:9e:8e:19:6d:50:b6:3a:80:48:7e:05:
2a:77:02:6f:0c:c2:15:10:82:66:e1:c1:e2:48:1d:
98:25:14:21:f5:82:ea:30:69:cf:ab:e6:6b:f3:c8:
d0:85:68:03:81:04:9b:8c:2d:fe:59:2a:76:c7:29:
16:93:37:3a:b3:96:00:aa:94:f8:5f:35:31:ef:53:
43:81:0b:ec:3e:5a:01:ea:8b:84:3b:75:b3:46:3f:
b1:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:EE:1C:0C:BA:3F:60:03:5B:71:50:67:5C:4F:F8:C8:54:66:E6:8D
X509v3 Authority Key Identifier:
keyid:8E:EE:05:84:B2:24:A9:59:15:51:2E:A7:0F:E0:12:A4:AF:13:4C:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/0a75d371-18c7-48df-8f61-1d404b646413/0/8EEE0584B224A95915512EA70FE012A4AF134C7A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8EEE0584B224A95915512EA70FE012A4AF134C7A.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0a75d371-18c7-48df-8f61-1d404b646413/0/8EEE0584B224A95915512EA70FE012A4AF134C7A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:de:e0:2e:5f:59:01:3d:c3:7d:d1:75:9b:b3:51:ba:28:65:
65:c6:dd:98:80:f8:43:11:74:2e:d2:aa:64:ba:6c:e0:77:10:
33:00:92:79:6b:11:55:33:38:5a:a6:96:70:07:ad:b0:b9:5e:
35:2e:53:3b:21:c7:00:25:d4:bb:99:f8:d5:88:f2:2d:28:1a:
ef:bc:ee:eb:b8:af:0b:13:ba:2d:c1:c7:4e:31:85:b5:f6:34:
9b:7a:c5:78:d5:9e:a3:be:0c:e0:e6:74:bf:37:ff:84:60:27:
0a:4b:a0:a4:1e:6f:78:b9:03:05:9e:e3:51:84:a4:2d:bd:3d:
f0:37:18:10:85:0a:15:20:16:03:fa:83:23:eb:bf:5f:04:62:
b1:ef:10:f5:a0:85:25:94:ac:49:8b:6b:e3:21:55:46:b7:6c:
ec:41:67:e1:7a:84:d6:32:8d:8a:86:be:1d:36:56:c6:17:da:
4b:d8:4c:5b:6c:d1:de:66:8d:dd:ed:40:b8:e2:06:22:3e:8f:
d6:9d:43:2d:8b:c3:c4:fc:42:e4:ed:ec:a3:27:fe:00:b2:2a:
56:45:b6:7d:85:78:61:db:96:3a:4a:21:41:aa:97:70:e2:fb:
74:91:ed:38:ff:d0:ad:8c:9d:09:46:8e:ff:75:d4:c1:c8:a7:
91:9a:7c:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 12:45:36 2025 by rpki-client