This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/9338bdad-d2dd-4f07-ae84-c540612baf6a/0/8C3462809943E9E8E8E89052BF9B9C3DDC60EE22.mft File: 8C3462809943E9E8E8E89052BF9B9C3DDC60EE22.mft (raw, json) Hash identifier: PAKYj9eyLr9dboAbnXHFXFUG8bN5yIO6ADUeRbLXKB0= Subject key identifier: A5:60:5B:F5:CD:5E:83:37:9A:86:80:C8:90:BA:64:9B:20:97:3C:D1 Authority key identifier: 8C:34:62:80:99:43:E9:E8:E8:E8:90:52:BF:9B:9C:3D:DC:60:EE:22 Certificate issuer: /CN=8C3462809943E9E8E8E89052BF9B9C3DDC60EE22 Certificate serial: 5BEDF254149C0A26130C619C5B37FBDDCA4E1CA7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C3462809943E9E8E8E89052BF9B9C3DDC60EE22.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9338bdad-d2dd-4f07-ae84-c540612baf6a/0/8C3462809943E9E8E8E89052BF9B9C3DDC60EE22.mft Manifest number: 0272 Signing time: Sun 07 Dec 2025 04:50:50 +0000 Manifest this update: Sun 07 Dec 2025 04:45:50 +0000 Manifest next update: Wed 10 Dec 2025 11:34:50 +0000 Files and hashes: 1: 8C3462809943E9E8E8E89052BF9B9C3DDC60EE22.crl (hash: A9MsXHDypjGBroz3dqBgSi2UzP+7Vsl2jYNRUT926zg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9338bdad-d2dd-4f07-ae84-c540612baf6a/0/8C3462809943E9E8E8E89052BF9B9C3DDC60EE22.crl rsync://repo-rpki.idnic.net/repo/9338bdad-d2dd-4f07-ae84-c540612baf6a/0/8C3462809943E9E8E8E89052BF9B9C3DDC60EE22.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C3462809943E9E8E8E89052BF9B9C3DDC60EE22.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:ed:f2:54:14:9c:0a:26:13:0c:61:9c:5b:37:fb:dd:ca:4e:1c:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8C3462809943E9E8E8E89052BF9B9C3DDC60EE22 Validity Not Before: Dec 7 04:45:50 2025 GMT Not After : Dec 10 11:34:50 2025 GMT Subject: CN=A5605BF5CD5E83379A8680C890BA649B20973CD1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:1b:0f:cd:d8:c6:a9:7a:90:87:38:db:e7:cc: c2:3a:57:b4:0e:9d:3d:33:6e:71:85:68:ac:eb:16: b6:3f:d0:26:2e:dd:d1:22:10:a6:9e:54:4b:5a:68: 07:0f:69:66:9f:8a:7e:39:ab:fa:51:c0:2a:ba:8b: 3b:55:b4:4a:16:7a:b5:53:ef:f2:8b:5b:67:d0:c8: 9c:5f:3d:84:95:d8:c0:83:d7:45:34:fe:96:e1:d8: 23:44:04:d2:0f:74:4a:ea:7f:ae:b2:0d:88:9e:e4: 38:47:11:28:4b:83:0e:0b:4a:7a:2e:45:53:c0:d8: fd:ee:9c:7d:0b:da:cf:55:a4:ae:94:bf:44:cf:57: 00:43:92:2b:e7:02:f3:8b:b3:5c:9d:0a:89:cc:31: 95:17:43:a0:9a:c0:df:5b:02:a3:92:b4:c8:d4:68: 98:26:38:f1:3d:e5:cf:12:53:3e:28:80:19:46:89: 8c:d0:45:df:f3:a1:5b:2a:49:47:2e:5f:b9:d4:85: 29:50:f5:ae:5d:f6:33:4d:fa:bd:53:9d:0d:60:0c: ff:a9:0c:30:28:9f:18:70:26:36:7c:b0:60:1e:a3: f0:1a:c4:f9:18:f5:73:d7:e5:3c:55:e4:d7:6d:67: 67:b8:6d:0e:bb:5e:51:90:69:1c:12:23:ac:a9:19: 3c:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:60:5B:F5:CD:5E:83:37:9A:86:80:C8:90:BA:64:9B:20:97:3C:D1 X509v3 Authority Key Identifier: keyid:8C:34:62:80:99:43:E9:E8:E8:E8:90:52:BF:9B:9C:3D:DC:60:EE:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9338bdad-d2dd-4f07-ae84-c540612baf6a/0/8C3462809943E9E8E8E89052BF9B9C3DDC60EE22.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C3462809943E9E8E8E89052BF9B9C3DDC60EE22.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9338bdad-d2dd-4f07-ae84-c540612baf6a/0/8C3462809943E9E8E8E89052BF9B9C3DDC60EE22.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:b8:73:44:05:bb:a1:d7:19:67:f3:6c:8b:4a:82:64:f0:ba: 98:68:31:3f:b5:1f:b4:17:25:ad:50:7c:52:97:f2:93:3e:6c: 6f:76:80:cb:da:73:58:46:da:47:88:f8:20:97:c8:73:e5:d1: 99:6a:08:8b:f0:3b:93:7f:16:b1:13:fc:87:04:5a:43:d4:5f: 86:e4:86:4a:f3:4d:f0:38:fb:5c:80:67:46:63:82:32:9c:74: 1e:56:f3:a4:57:d4:0a:8d:13:19:59:92:d7:6c:3e:ce:da:78: d1:29:ea:ec:c4:39:f1:69:8c:7d:23:77:59:6c:58:94:ae:69: 49:d2:bf:37:9c:11:43:4c:20:b7:82:c9:f5:89:8d:d6:90:33: 42:1c:56:72:fa:fb:c1:3f:53:e8:b8:23:5a:e8:86:2a:26:cb: f5:76:1c:3d:35:9b:c3:70:60:91:ee:3e:6f:d1:d3:09:98:34: 6b:55:fa:75:ae:8a:17:0d:ec:75:6a:5a:a5:4d:f5:2b:ce:ab: 99:f9:8d:ed:81:7b:9e:e8:47:af:0e:0b:2b:a1:0f:3d:2b:e2: 1c:c3:a0:6a:dc:c6:a1:d7:29:a1:55:53:f9:58:e1:0c:5b:17: 9c:a4:0b:13:5d:79:d7:0d:a3:8d:7e:0a:5b:99:93:96:56:70: 8d:c1:cc:46 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUW+3yVBScCiYTDGGcWzf73cpOHKcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEMzNDYyODA5OTQzRTlFOEU4RTg5MDUyQkY5QjlDM0RE QzYwRUUyMjAeFw0yNTEyMDcwNDQ1NTBaFw0yNTEyMTAxMTM0NTBaMDMxMTAvBgNV BAMTKEE1NjA1QkY1Q0Q1RTgzMzc5QTg2ODBDODkwQkE2NDlCMjA5NzNDRDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJGw/N2MapepCHONvnzMI6V7QO nT0zbnGFaKzrFrY/0CYu3dEiEKaeVEtaaAcPaWafin45q/pRwCq6iztVtEoWerVT 7/KLW2fQyJxfPYSV2MCD10U0/pbh2CNEBNIPdErqf66yDYie5DhHEShLgw4LSnou RVPA2P3unH0L2s9VpK6Uv0TPVwBDkivnAvOLs1ydConMMZUXQ6CawN9bAqOStMjU aJgmOPE95c8SUz4ogBlGiYzQRd/zoVsqSUcuX7nUhSlQ9a5d9jNN+r1TnQ1gDP+p DDAonxhwJjZ8sGAeo/AaxPkY9XPX5TxV5NdtZ2e4bQ67XlGQaRwSI6ypGTxjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpWBb9c1egzeahoDIkLpkmyCXPNEwHwYDVR0j BBgwFoAUjDRigJlD6ejo6JBSv5ucPdxg7iIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MzM4YmRhZC1kMmRkLTRmMDctYWU4NC1jNTQwNjEyYmFmNmEvMC84QzM0NjI4MDk5 NDNFOUU4RThFODkwNTJCRjlCOUMzRERDNjBFRTIyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEMzNDYyODA5OTQzRTlFOEU4RTg5MDUyQkY5QjlDM0REQzYw RUUyMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTMzOGJkYWQtZDJkZC00ZjA3LWFl ODQtYzU0MDYxMmJhZjZhLzAvOEMzNDYyODA5OTQzRTlFOEU4RTg5MDUyQkY5QjlD M0REQzYwRUUyMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIm4c0QFu6HXGWfzbItKgmTwuphoMT+1H7QX Ja1QfFKX8pM+bG92gMvac1hG2keI+CCXyHPl0ZlqCIvwO5N/FrET/IcEWkPUX4bk hkrzTfA4+1yAZ0ZjgjKcdB5W86RX1AqNExlZktdsPs7aeNEp6uzEOfFpjH0jd1ls WJSuaUnSvzecEUNMILeCyfWJjdaQM0IcVnL6+8E/U+i4I1rohiomy/V2HD01m8Nw YJHuPm/R0wmYNGtV+nWuihcN7HVqWqVN9SvOq5n5je2Be57oR68OCyuhDz0r4hzD oGrcxqHXKaFVU/lY4QxbF5ykCxNdedcNo41+CluZk5ZWcI3BzEY= -----END CERTIFICATE-----Generated at Sun Dec 7 07:25:25 2025 by rpki-client