This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/88a8ea7f-2f61-446b-8b51-51945b082faa/0/8539E127E16B793EFD92AE6EFC2BFB5879008FAD.mft File: 8539E127E16B793EFD92AE6EFC2BFB5879008FAD.mft (raw, json) Hash identifier: 7joURRphSgdvkr2vdn+i/15Fe00OvOAIfhkKGyLqXZY= Subject key identifier: BD:E5:41:05:52:A8:0D:1F:53:D2:CB:F4:9A:9C:5F:CA:B0:56:B7:45 Authority key identifier: 85:39:E1:27:E1:6B:79:3E:FD:92:AE:6E:FC:2B:FB:58:79:00:8F:AD Certificate issuer: /CN=8539E127E16B793EFD92AE6EFC2BFB5879008FAD Certificate serial: 3CD2B74E13B20F5360C314BB70D7729B6D1F85F3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8539E127E16B793EFD92AE6EFC2BFB5879008FAD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/88a8ea7f-2f61-446b-8b51-51945b082faa/0/8539E127E16B793EFD92AE6EFC2BFB5879008FAD.mft Manifest number: E4 Signing time: Sat 06 Dec 2025 20:11:53 +0000 Manifest this update: Sat 06 Dec 2025 20:06:53 +0000 Manifest next update: Tue 09 Dec 2025 20:12:53 +0000 Files and hashes: 1: 8539E127E16B793EFD92AE6EFC2BFB5879008FAD.crl (hash: s5ZnTMehh4L/ArCDFgb5kHe8Zltbrscjp7mPgp/yW3A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/88a8ea7f-2f61-446b-8b51-51945b082faa/0/8539E127E16B793EFD92AE6EFC2BFB5879008FAD.crl rsync://repo-rpki.idnic.net/repo/88a8ea7f-2f61-446b-8b51-51945b082faa/0/8539E127E16B793EFD92AE6EFC2BFB5879008FAD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8539E127E16B793EFD92AE6EFC2BFB5879008FAD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:d2:b7:4e:13:b2:0f:53:60:c3:14:bb:70:d7:72:9b:6d:1f:85:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8539E127E16B793EFD92AE6EFC2BFB5879008FAD Validity Not Before: Dec 6 20:06:53 2025 GMT Not After : Dec 9 20:12:53 2025 GMT Subject: CN=BDE5410552A80D1F53D2CBF49A9C5FCAB056B745 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:7d:98:10:3b:4b:74:6e:89:52:63:fd:19:65: 1f:52:71:53:1e:92:23:2c:34:e7:c9:07:1f:14:6d: 50:88:e9:66:57:c0:ca:98:05:ed:ae:fe:fb:95:13: 49:dc:83:8a:1b:fb:24:95:44:fa:29:28:66:d9:3f: 30:cc:b9:2c:a5:42:7a:00:c4:5e:14:2c:18:69:b1: be:72:c7:30:ac:e7:c6:f9:57:b7:ad:68:95:18:57: cf:0f:8d:dd:df:76:23:fb:69:f7:b1:12:15:12:b5: e9:72:10:f1:99:1a:fe:67:9e:63:87:42:df:7d:4e: bc:39:ab:a2:f8:38:b7:88:de:7a:b0:a0:ab:e0:7e: b7:10:6c:95:00:f8:f3:df:05:43:c9:e5:44:f3:16: 1f:5d:6c:3e:ce:93:23:a1:07:f9:4b:41:0b:80:50: 4b:c6:8b:13:df:c9:9b:cb:d5:60:bd:0d:08:b8:ed: 5f:44:70:98:91:54:a0:2e:5b:17:c4:98:d2:07:15: 32:f7:7a:ff:b8:c3:a2:1c:00:eb:0d:22:9d:9c:a9: 16:e5:5b:f7:70:ca:b1:64:8c:32:8f:36:49:e1:28: ab:99:d6:72:ca:6f:62:d5:49:b4:30:14:0e:e3:43: 83:80:2b:08:9f:fa:f4:26:db:43:81:90:42:dc:68: ac:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:E5:41:05:52:A8:0D:1F:53:D2:CB:F4:9A:9C:5F:CA:B0:56:B7:45 X509v3 Authority Key Identifier: keyid:85:39:E1:27:E1:6B:79:3E:FD:92:AE:6E:FC:2B:FB:58:79:00:8F:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/88a8ea7f-2f61-446b-8b51-51945b082faa/0/8539E127E16B793EFD92AE6EFC2BFB5879008FAD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8539E127E16B793EFD92AE6EFC2BFB5879008FAD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/88a8ea7f-2f61-446b-8b51-51945b082faa/0/8539E127E16B793EFD92AE6EFC2BFB5879008FAD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c8:25:3e:da:51:70:4a:a1:f8:66:cb:0f:7d:7e:46:16:45:25: 3f:74:ae:28:f5:1c:ec:a5:38:ea:fa:dc:fc:64:78:03:c8:6d: 40:06:82:19:aa:d8:7e:bb:58:6f:b4:b9:57:49:bd:4e:f4:a8: ad:bb:f5:cd:8d:15:09:b9:90:44:3e:85:15:4b:26:1e:27:5b: e5:42:fb:51:15:90:b2:41:56:8e:48:86:fa:ca:9f:a8:80:ad: f0:36:81:3b:b9:38:5f:1e:df:a2:79:38:d6:34:44:e9:34:1a: a5:b1:b5:e5:3e:d1:b7:79:ff:e9:0f:e3:63:c9:6b:f1:84:3f: 53:4b:60:85:a2:16:93:92:38:d8:bd:8c:d9:df:70:70:f5:a8: 82:ba:26:0f:08:aa:58:c4:b2:b4:0a:03:31:a8:ce:f1:0a:20: 8e:08:c0:d7:40:a5:3e:b8:9a:6c:26:e7:e3:37:df:b7:e3:bb: 12:e5:42:f0:41:f8:93:a4:05:5f:d9:39:88:62:eb:9f:be:fb: e5:83:68:a2:70:b2:c8:08:e6:2f:de:8a:5f:1b:98:b0:03:fe: 39:f8:37:dd:4a:37:cd:1a:1a:29:47:d7:b7:70:2e:2b:9b:10: 07:e2:97:23:76:bd:06:a5:d8:26:82:7b:d8:0c:41:cc:21:ec: d6:43:b4:c9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPNK3ThOyD1NgwxS7cNdym20fhfMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODUzOUUxMjdFMTZCNzkzRUZEOTJBRTZFRkMyQkZCNTg3 OTAwOEZBRDAeFw0yNTEyMDYyMDA2NTNaFw0yNTEyMDkyMDEyNTNaMDMxMTAvBgNV BAMTKEJERTU0MTA1NTJBODBEMUY1M0QyQ0JGNDlBOUM1RkNBQjA1NkI3NDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzfZgQO0t0bolSY/0ZZR9ScVMe kiMsNOfJBx8UbVCI6WZXwMqYBe2u/vuVE0ncg4ob+ySVRPopKGbZPzDMuSylQnoA xF4ULBhpsb5yxzCs58b5V7etaJUYV88Pjd3fdiP7afexEhUStelyEPGZGv5nnmOH Qt99Trw5q6L4OLeI3nqwoKvgfrcQbJUA+PPfBUPJ5UTzFh9dbD7OkyOhB/lLQQuA UEvGixPfyZvL1WC9DQi47V9EcJiRVKAuWxfEmNIHFTL3ev+4w6IcAOsNIp2cqRbl W/dwyrFkjDKPNknhKKuZ1nLKb2LVSbQwFA7jQ4OAKwif+vQm20OBkELcaKxhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUveVBBVKoDR9T0sv0mpxfyrBWt0UwHwYDVR0j BBgwFoAUhTnhJ+FreT79kq5u/Cv7WHkAj60wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 OGE4ZWE3Zi0yZjYxLTQ0NmItOGI1MS01MTk0NWIwODJmYWEvMC84NTM5RTEyN0Ux NkI3OTNFRkQ5MkFFNkVGQzJCRkI1ODc5MDA4RkFELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODUzOUUxMjdFMTZCNzkzRUZEOTJBRTZFRkMyQkZCNTg3OTAw OEZBRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODhhOGVhN2YtMmY2MS00NDZiLThi NTEtNTE5NDViMDgyZmFhLzAvODUzOUUxMjdFMTZCNzkzRUZEOTJBRTZFRkMyQkZC NTg3OTAwOEZBRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMglPtpRcEqh+GbLD31+RhZFJT90rij1HOyl OOr63PxkeAPIbUAGghmq2H67WG+0uVdJvU70qK279c2NFQm5kEQ+hRVLJh4nW+VC +1EVkLJBVo5IhvrKn6iArfA2gTu5OF8e36J5ONY0ROk0GqWxteU+0bd5/+kP42PJ a/GEP1NLYIWiFpOSONi9jNnfcHD1qIK6Jg8IqljEsrQKAzGozvEKII4IwNdApT64 mmwm5+M337fjuxLlQvBB+JOkBV/ZOYhi65++++WDaKJwssgI5i/eil8bmLAD/jn4 N91KN80aGilH17dwLiubEAfilyN2vQal2CaCe9gMQcwh7NZDtMk= -----END CERTIFICATE-----Generated at Sun Dec 7 02:17:11 2025 by rpki-client