This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/214676cd-de39-468a-ad25-675e1b910fac/0/E8DA87F34A550D0047EEC039A20C8441F066EC5B.mft
File: E8DA87F34A550D0047EEC039A20C8441F066EC5B.mft (raw, json)
Hash identifier: 5KYLRu7WqxIAotRdQSfcLEl1VapnO7/rI10w4Dh85dA=
Subject key identifier: 92:9C:B6:7D:7C:F3:D6:2D:D2:74:93:2F:03:F2:32:2C:91:AF:10:20
Authority key identifier: E8:DA:87:F3:4A:55:0D:00:47:EE:C0:39:A2:0C:84:41:F0:66:EC:5B
Certificate issuer: /CN=E8DA87F34A550D0047EEC039A20C8441F066EC5B
Certificate serial: 266DD86386838A942262C95CEE69D91CB546043C
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E8DA87F34A550D0047EEC039A20C8441F066EC5B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/214676cd-de39-468a-ad25-675e1b910fac/0/E8DA87F34A550D0047EEC039A20C8441F066EC5B.mft
Manifest number: 033A
Signing time: Sun 21 Dec 2025 02:50:41 +0000
Manifest this update: Sun 21 Dec 2025 02:45:41 +0000
Manifest next update: Wed 24 Dec 2025 13:32:41 +0000
Files and hashes: 1: E8DA87F34A550D0047EEC039A20C8441F066EC5B.crl (hash: F3Hypa48mHMEB6ZBnzpWAeSZ3TBY1hy93+m/0SxNnng=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/214676cd-de39-468a-ad25-675e1b910fac/0/E8DA87F34A550D0047EEC039A20C8441F066EC5B.crl
rsync://repo-rpki.idnic.net/repo/214676cd-de39-468a-ad25-675e1b910fac/0/E8DA87F34A550D0047EEC039A20C8441F066EC5B.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E8DA87F34A550D0047EEC039A20C8441F066EC5B.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 24 Dec 2025 07:39:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:6d:d8:63:86:83:8a:94:22:62:c9:5c:ee:69:d9:1c:b5:46:04:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E8DA87F34A550D0047EEC039A20C8441F066EC5B
Validity
Not Before: Dec 21 02:45:41 2025 GMT
Not After : Dec 24 13:32:41 2025 GMT
Subject: CN=929CB67D7CF3D62DD274932F03F2322C91AF1020
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f4:73:58:5f:66:6e:1d:4a:b0:bd:8d:a7:c1:
04:1e:e4:5d:5c:8c:d7:5c:02:3c:f3:2b:13:9d:60:
fd:2e:4e:b6:51:4f:8b:dc:e7:3b:40:a9:dc:84:d6:
1e:f1:7f:e8:2f:19:55:55:0b:d5:eb:fc:ce:12:1e:
e5:93:0a:d2:77:65:de:4e:37:81:25:43:05:f1:d9:
e8:8c:7f:d7:38:07:42:a0:f1:03:47:16:a9:bb:0d:
65:d1:53:25:2b:3e:8b:d0:b4:d7:ae:ea:b5:19:46:
f2:f2:3f:54:e2:8a:91:0b:ca:ea:e6:a7:bb:db:c4:
40:a5:8f:be:f7:36:7c:b8:55:7a:e2:d9:0a:00:36:
c4:9e:ef:ee:3b:8f:e1:05:5a:a8:e3:e4:c9:36:99:
65:c9:6a:87:0a:a7:93:59:5e:72:81:7f:85:dc:02:
cf:d0:0c:46:40:a5:5c:c6:6b:93:3f:a1:eb:b6:7b:
23:f2:ae:78:d5:31:41:7f:9c:aa:28:f8:f7:f2:5d:
9c:5a:0c:60:33:ec:cc:a5:1d:08:e9:18:b8:00:69:
de:4d:f2:af:50:db:40:b1:e8:b5:cf:0a:1a:8e:49:
b2:51:ed:d2:c2:df:99:6e:34:42:e8:b0:e8:39:cd:
3f:12:d5:c6:1c:b8:78:60:af:1f:ec:6a:bc:b7:97:
bd:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:9C:B6:7D:7C:F3:D6:2D:D2:74:93:2F:03:F2:32:2C:91:AF:10:20
X509v3 Authority Key Identifier:
keyid:E8:DA:87:F3:4A:55:0D:00:47:EE:C0:39:A2:0C:84:41:F0:66:EC:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/214676cd-de39-468a-ad25-675e1b910fac/0/E8DA87F34A550D0047EEC039A20C8441F066EC5B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E8DA87F34A550D0047EEC039A20C8441F066EC5B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/214676cd-de39-468a-ad25-675e1b910fac/0/E8DA87F34A550D0047EEC039A20C8441F066EC5B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:0f:73:be:c1:ac:82:60:6b:a1:75:fb:1b:8a:fe:70:34:22:
d5:45:c0:a8:2f:5a:c9:c1:6a:5c:4a:c7:9c:95:eb:91:f9:ff:
93:ec:7c:09:54:7e:66:f4:c2:39:0a:02:f8:a2:76:44:f4:84:
5d:83:06:28:28:2c:7f:a0:90:26:f1:fb:29:6e:1c:fe:ba:7c:
33:0e:bb:6c:7c:7d:aa:97:22:e0:d5:08:68:f3:a2:dd:49:9f:
f1:73:65:89:fe:25:78:16:8b:bf:38:2c:87:14:77:e0:86:53:
ee:c5:5e:bb:ff:aa:c5:f0:5c:dc:65:b5:09:ff:03:06:97:64:
62:df:d3:ec:ff:e6:b9:27:ac:eb:be:0a:d7:5d:ed:af:d0:59:
4b:53:53:50:ce:8a:ec:da:79:06:e1:4d:0e:9b:7e:03:65:03:
da:79:d5:d4:6e:3b:a5:58:73:cf:f1:d6:89:4f:ef:8c:26:23:
83:4b:4f:c7:4a:49:02:92:89:9d:b8:ad:43:ec:68:d9:59:ba:
b5:ba:6e:94:5f:b0:a7:1d:d4:04:4b:31:c0:6b:99:b4:7f:cb:
76:08:a9:9a:79:e8:72:13:cc:a8:01:18:f5:f7:a9:a6:86:bd:
fe:65:31:56:f7:3c:0e:ad:74:bb:1f:ac:6a:f8:2d:33:ea:ad:
15:6c:d9:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 06:18:29 2025 by rpki-client