This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/1/8920EB690658C013C7B4AAC28EC6B511B39DAE3E.mft File: 8920EB690658C013C7B4AAC28EC6B511B39DAE3E.mft (raw, json) Hash identifier: a0hnLuhjkfFqOlaJpCLEqT0SR8Pi5Vz9ZzPJVfZeELI= Subject key identifier: 09:0F:6C:65:1A:89:96:9C:36:E9:9B:38:AB:26:E9:2A:24:0A:88:02 Authority key identifier: 89:20:EB:69:06:58:C0:13:C7:B4:AA:C2:8E:C6:B5:11:B3:9D:AE:3E Certificate issuer: /CN=8920EB690658C013C7B4AAC28EC6B511B39DAE3E Certificate serial: 2EA6691FF19DBBB866ED737A93F3211B31FDFBFE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8920EB690658C013C7B4AAC28EC6B511B39DAE3E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/1/8920EB690658C013C7B4AAC28EC6B511B39DAE3E.mft Manifest number: B8 Signing time: Fri 05 Dec 2025 21:10:05 +0000 Manifest this update: Fri 05 Dec 2025 21:05:05 +0000 Manifest next update: Tue 09 Dec 2025 08:29:05 +0000 Files and hashes: 1: 8920EB690658C013C7B4AAC28EC6B511B39DAE3E.crl (hash: f5FnnuVuAHnMZQzVWxPM9xpIOWSnHws8Qdh7+IBnL+c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/1/8920EB690658C013C7B4AAC28EC6B511B39DAE3E.crl rsync://repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/1/8920EB690658C013C7B4AAC28EC6B511B39DAE3E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8920EB690658C013C7B4AAC28EC6B511B39DAE3E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 08:29:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:a6:69:1f:f1:9d:bb:b8:66:ed:73:7a:93:f3:21:1b:31:fd:fb:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8920EB690658C013C7B4AAC28EC6B511B39DAE3E Validity Not Before: Dec 5 21:05:05 2025 GMT Not After : Dec 9 08:29:05 2025 GMT Subject: CN=090F6C651A89969C36E99B38AB26E92A240A8802 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:5c:18:5e:f6:dd:8d:94:47:94:94:84:83:bc: c0:94:0b:0e:ed:ba:e8:fa:be:a1:3f:9a:1e:a5:86: a6:e5:00:29:f4:44:69:98:96:38:39:4d:27:25:a0: bf:32:e5:d0:c6:b7:84:5d:2a:50:f1:21:2e:9b:8c: 9a:ea:78:09:74:c0:e5:8e:67:ed:f8:cf:af:dc:a5: 67:19:f6:45:e4:d5:f3:3c:59:7a:4e:f5:c8:73:58: 09:c9:6e:08:13:6a:0b:79:d3:cb:26:e3:e2:b8:16: d6:75:cc:24:8d:d5:af:6d:d8:f3:fd:74:31:28:e5: 7e:68:f1:a0:0c:e2:9e:1f:75:90:52:b3:7e:3b:53: 4f:e6:8f:ba:bc:91:6b:b3:9d:54:75:60:ac:6d:49: e6:76:0e:a8:f7:6f:4e:d4:33:72:1c:f9:14:07:8a: 70:94:de:58:5b:50:e0:2b:3e:3b:4c:b3:86:52:3b: 7b:8b:56:bf:fc:04:83:f4:c6:89:68:c8:4b:ea:8a: 87:b6:c4:81:54:48:04:c8:58:52:55:a4:69:a2:e6: 51:53:e4:86:9b:96:83:b8:eb:dc:00:a3:17:5c:99: eb:fd:76:95:56:21:e5:c6:67:22:cf:60:5e:2c:c1: 05:43:35:fd:aa:df:e2:19:e8:92:5f:d0:25:d1:68: 61:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:0F:6C:65:1A:89:96:9C:36:E9:9B:38:AB:26:E9:2A:24:0A:88:02 X509v3 Authority Key Identifier: keyid:89:20:EB:69:06:58:C0:13:C7:B4:AA:C2:8E:C6:B5:11:B3:9D:AE:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/1/8920EB690658C013C7B4AAC28EC6B511B39DAE3E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8920EB690658C013C7B4AAC28EC6B511B39DAE3E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/1/8920EB690658C013C7B4AAC28EC6B511B39DAE3E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:4f:29:bd:32:50:97:75:a5:d9:c6:06:87:e8:e8:3d:5c:00: cc:ab:e8:dd:ac:4c:ce:50:29:88:68:5a:e1:7e:d3:ea:76:b3: 30:16:08:64:82:51:d8:ce:6a:5f:92:e0:47:31:c9:51:65:36: c8:73:0e:cd:a0:f6:a6:6f:43:dc:78:f2:75:21:51:d7:75:4d: 47:1d:30:a1:0c:4b:2a:8d:a3:ea:26:b0:ca:8d:bc:b4:6c:d7: ce:ac:1e:6d:de:7d:ee:33:d1:4d:66:6c:2d:e5:7f:5c:ac:8b: 2d:32:27:3a:10:b4:36:f2:3e:35:03:3d:2a:5b:ba:4c:98:4c: 89:4e:96:75:cc:99:ae:1a:bb:c8:34:ea:fc:f7:46:45:e1:2f: 8d:49:ea:1d:c2:30:ad:34:af:a3:f1:33:a5:c4:9c:65:09:2b: bb:83:e5:13:a9:56:5f:2f:cc:35:6f:77:4b:62:a9:b6:41:cd: d5:7a:31:b6:6f:2a:c6:b2:dd:31:23:31:8b:5f:a4:83:21:91: be:2e:d3:0f:c9:84:5c:4c:7f:56:40:66:aa:12:83:9c:49:20: f0:3a:fd:77:9c:8c:87:21:22:74:c7:ce:25:62:eb:74:ec:e8: 89:d3:b5:40:7d:14:d9:b4:8a:35:c8:3a:27:10:53:1a:f4:04: 2f:14:27:62 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULqZpH/Gdu7hm7XN6k/MhGzH9+/4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODkyMEVCNjkwNjU4QzAxM0M3QjRBQUMyOEVDNkI1MTFC MzlEQUUzRTAeFw0yNTEyMDUyMTA1MDVaFw0yNTEyMDkwODI5MDVaMDMxMTAvBgNV BAMTKDA5MEY2QzY1MUE4OTk2OUMzNkU5OUIzOEFCMjZFOTJBMjQwQTg4MDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyXBhe9t2NlEeUlISDvMCUCw7t uuj6vqE/mh6lhqblACn0RGmYljg5TScloL8y5dDGt4RdKlDxIS6bjJrqeAl0wOWO Z+34z6/cpWcZ9kXk1fM8WXpO9chzWAnJbggTagt508sm4+K4FtZ1zCSN1a9t2PP9 dDEo5X5o8aAM4p4fdZBSs347U0/mj7q8kWuznVR1YKxtSeZ2Dqj3b07UM3Ic+RQH inCU3lhbUOArPjtMs4ZSO3uLVr/8BIP0xoloyEvqioe2xIFUSATIWFJVpGmi5lFT 5IabloO469wAoxdcmev9dpVWIeXGZyLPYF4swQVDNf2q3+IZ6JJf0CXRaGGvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCQ9sZRqJlpw26Zs4qybpKiQKiAIwHwYDVR0j BBgwFoAUiSDraQZYwBPHtKrCjsa1EbOdrj4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MDM5NjM4OC0yZDZiLTQ3NmUtOTYzZC0xY2MzODEzNzRiMWMvMS84OTIwRUI2OTA2 NThDMDEzQzdCNEFBQzI4RUM2QjUxMUIzOURBRTNFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODkyMEVCNjkwNjU4QzAxM0M3QjRBQUMyOEVDNkI1MTFCMzlE QUUzRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjAzOTYzODgtMmQ2Yi00NzZlLTk2 M2QtMWNjMzgxMzc0YjFjLzEvODkyMEVCNjkwNjU4QzAxM0M3QjRBQUMyOEVDNkI1 MTFCMzlEQUUzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAhPKb0yUJd1pdnGBofo6D1cAMyr6N2sTM5Q KYhoWuF+0+p2szAWCGSCUdjOal+S4EcxyVFlNshzDs2g9qZvQ9x48nUhUdd1TUcd MKEMSyqNo+omsMqNvLRs186sHm3efe4z0U1mbC3lf1ysiy0yJzoQtDbyPjUDPSpb ukyYTIlOlnXMma4au8g06vz3RkXhL41J6h3CMK00r6PxM6XEnGUJK7uD5ROpVl8v zDVvd0tiqbZBzdV6MbZvKsay3TEjMYtfpIMhkb4u0w/JhFxMf1ZAZqoSg5xJIPA6 /XecjIchInTHziVi63Ts6InTtUB9FNm0ijXIOicQUxr0BC8UJ2I= -----END CERTIFICATE-----Generated at Sun Dec 7 07:44:18 2025 by rpki-client