This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/214676cd-de39-468a-ad25-675e1b910fac/0/E8DA87F34A550D0047EEC039A20C8441F066EC5B.mft
File: E8DA87F34A550D0047EEC039A20C8441F066EC5B.mft (raw, json)
Hash identifier: 3tjwKrbvoEgE7DFWrkSVXrDy5ZzGKHN9y2/Av/GU15w=
Subject key identifier: 47:A6:19:F3:62:05:D9:77:D7:16:0D:C1:96:AC:55:65:F8:08:41:E4
Authority key identifier: E8:DA:87:F3:4A:55:0D:00:47:EE:C0:39:A2:0C:84:41:F0:66:EC:5B
Certificate issuer: /CN=E8DA87F34A550D0047EEC039A20C8441F066EC5B
Certificate serial: 1DACFD5B5CD912EA909C4EA177D4041AD80D3B15
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E8DA87F34A550D0047EEC039A20C8441F066EC5B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/214676cd-de39-468a-ad25-675e1b910fac/0/E8DA87F34A550D0047EEC039A20C8441F066EC5B.mft
Manifest number: 0334
Signing time: Sat 06 Dec 2025 19:10:40 +0000
Manifest this update: Sat 06 Dec 2025 19:05:40 +0000
Manifest next update: Wed 10 Dec 2025 04:52:40 +0000
Files and hashes: 1: E8DA87F34A550D0047EEC039A20C8441F066EC5B.crl (hash: 2JjQPTKJzPP4pvZCrAM+DhFZ24dHWXpqrySnsqD0Nuw=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/214676cd-de39-468a-ad25-675e1b910fac/0/E8DA87F34A550D0047EEC039A20C8441F066EC5B.crl
rsync://repo-rpki.idnic.net/repo/214676cd-de39-468a-ad25-675e1b910fac/0/E8DA87F34A550D0047EEC039A20C8441F066EC5B.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E8DA87F34A550D0047EEC039A20C8441F066EC5B.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 09 Dec 2025 15:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:ac:fd:5b:5c:d9:12:ea:90:9c:4e:a1:77:d4:04:1a:d8:0d:3b:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E8DA87F34A550D0047EEC039A20C8441F066EC5B
Validity
Not Before: Dec 6 19:05:40 2025 GMT
Not After : Dec 10 04:52:40 2025 GMT
Subject: CN=47A619F36205D977D7160DC196AC5565F80841E4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:93:b2:74:43:b8:95:1f:93:ba:b4:05:94:35:
a4:00:0c:13:a6:a5:02:63:72:a8:98:80:29:c6:05:
92:9e:59:d0:2e:e0:6d:4c:be:aa:c2:e6:86:24:1b:
e4:f6:5f:a8:59:f1:c5:c9:2a:89:b1:8b:e8:33:1d:
e3:c7:80:a9:f2:a1:97:0b:f3:5f:d5:6d:dd:dc:88:
ae:88:36:43:7f:46:a1:0d:7f:4c:48:f6:98:8b:26:
08:e5:60:c1:9a:00:08:8a:8f:5d:81:19:ec:fd:d6:
20:e6:a5:c8:28:97:88:61:1a:3b:17:f6:d8:be:f3:
ba:d7:ed:74:a2:8b:86:93:d5:44:56:39:48:6a:34:
95:a5:44:72:df:15:90:3f:39:3a:02:bb:82:f9:34:
01:5e:77:b8:4c:39:dd:19:f4:e6:ea:e0:21:e9:bc:
53:d8:da:d1:b6:e4:33:7b:9c:39:2d:29:37:b1:7e:
0f:8e:a0:6f:a5:ac:57:3c:94:d8:3b:61:14:28:dc:
29:22:cf:a0:6b:c8:d2:7b:d9:b7:d7:0e:2d:31:92:
59:48:e7:31:ab:53:76:47:29:e1:03:ce:fc:49:71:
8c:8c:de:38:4e:4c:9e:aa:01:86:62:ff:90:af:e2:
ce:cb:a5:f5:a6:43:bd:4b:b7:95:56:7d:2b:0c:83:
fa:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:A6:19:F3:62:05:D9:77:D7:16:0D:C1:96:AC:55:65:F8:08:41:E4
X509v3 Authority Key Identifier:
keyid:E8:DA:87:F3:4A:55:0D:00:47:EE:C0:39:A2:0C:84:41:F0:66:EC:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/214676cd-de39-468a-ad25-675e1b910fac/0/E8DA87F34A550D0047EEC039A20C8441F066EC5B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E8DA87F34A550D0047EEC039A20C8441F066EC5B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/214676cd-de39-468a-ad25-675e1b910fac/0/E8DA87F34A550D0047EEC039A20C8441F066EC5B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:b3:fb:5c:39:0e:04:5a:fd:dd:c0:20:33:58:a6:a5:15:c2:
7e:eb:c3:d8:21:13:10:67:31:d5:5e:97:9d:78:27:ac:a1:ca:
22:81:1c:a4:2f:72:ed:15:1a:b4:cb:1d:da:d9:a7:60:a4:6f:
33:54:24:18:f3:8b:8b:11:6a:ca:bf:9e:5f:e9:f8:84:e0:52:
c2:6a:ea:0a:c6:b3:96:d1:81:f7:c2:a0:82:82:3d:3f:10:85:
5c:2d:83:d0:bb:f9:a3:9e:1a:84:60:2a:d3:0d:c4:e1:30:e3:
eb:f9:37:ba:e5:ed:ce:e7:ae:bc:ea:2e:28:f6:ef:38:03:92:
95:bc:79:4c:65:7e:f4:e2:29:9a:4b:f9:bb:2c:bc:0b:73:34:
70:40:55:6a:4b:40:30:9f:97:52:26:26:b0:00:b4:0c:87:78:
a4:fb:01:53:32:b3:5a:4b:ef:c9:09:69:d2:c4:c5:73:71:e2:
bd:03:02:35:b6:00:c2:46:b3:7f:52:6b:7a:9b:3b:da:49:78:
42:da:00:4a:07:a2:50:d7:4b:22:fe:02:52:66:3e:61:f2:3a:
0d:99:ea:32:b8:21:70:60:5c:c5:3f:95:0a:de:b3:f3:fb:ab:
9f:61:54:99:14:56:24:2e:be:08:64:84:e2:50:3a:a4:03:6c:
b3:f1:a9:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 05:40:49 2025 by rpki-client