This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/1/C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88.mft File: C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88.mft (raw, json) Hash identifier: 2qc3wchW+8rGo8ojkrQJXzE9aKtWiGgeZ9kvvriAn7g= Subject key identifier: AC:43:40:04:88:9B:1B:F6:7F:AE:31:C4:D7:46:61:3E:6D:D0:56:09 Authority key identifier: C8:C5:B7:81:B7:F4:3C:62:74:BD:AA:C3:FD:8A:E1:91:4A:BE:ED:88 Certificate issuer: /CN=C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88 Certificate serial: 05A393A88269A1B8D1773FFB619D75CFE6C2E3C4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88.cer Subject info access: rsync://repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/1/C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88.mft Manifest number: B5 Signing time: Tue 16 Dec 2025 01:02:12 +0000 Manifest this update: Tue 16 Dec 2025 00:57:11 +0000 Manifest next update: Fri 19 Dec 2025 05:56:11 +0000 Files and hashes: 1: C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88.crl (hash: Rmkk+8VfiHS57T1+N6au8ZUIVrTzcg69KjFd4ACkIPA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/1/C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88.crl rsync://repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/1/C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Dec 2025 05:56:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:a3:93:a8:82:69:a1:b8:d1:77:3f:fb:61:9d:75:cf:e6:c2:e3:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88 Validity Not Before: Dec 16 00:57:11 2025 GMT Not After : Dec 19 05:56:11 2025 GMT Subject: CN=AC434004889B1BF67FAE31C4D746613E6DD05609 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:dc:d9:0d:03:66:c2:1a:3f:68:8b:ac:e7:ee: 2e:2a:da:9f:5a:fe:6f:ef:ae:33:58:c5:0e:aa:2d: 25:8c:25:21:c8:33:7b:3a:41:7a:a2:0e:36:a4:b8: ac:e0:d6:d4:de:a7:96:8e:95:d6:a1:2d:76:bd:e5: ab:9b:d0:75:88:9e:f4:d2:42:6d:7b:cb:fa:c9:36: b6:b4:38:34:10:89:00:98:32:75:5d:c4:39:1f:31: 01:b1:a8:ec:c6:38:2f:0e:30:48:95:b6:a4:71:36: b7:4b:71:1a:d5:b9:77:fe:48:9a:77:b6:9f:ef:bf: 41:64:8a:18:52:b9:6c:c7:c2:74:53:29:f2:de:3b: 4d:84:dc:44:88:8c:e7:5a:15:5f:75:4f:8f:d0:9a: 1b:a2:ba:1f:e7:16:64:2f:29:e1:14:d3:f9:00:5b: 1f:87:5c:cf:61:c2:de:6d:d0:ef:15:ee:c2:f0:54: fb:f0:85:c1:72:95:06:d1:1e:a0:c7:2f:19:0f:4f: b6:8c:73:24:54:23:91:12:31:9f:56:e5:29:c8:6b: e4:2a:27:b4:b5:3e:17:4c:5d:62:88:ea:4e:49:52: f9:32:76:58:de:e5:99:96:b3:06:84:69:56:85:a1: fb:0f:fe:37:54:11:92:4a:e5:59:e2:a3:2b:b7:87: 8d:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:43:40:04:88:9B:1B:F6:7F:AE:31:C4:D7:46:61:3E:6D:D0:56:09 X509v3 Authority Key Identifier: keyid:C8:C5:B7:81:B7:F4:3C:62:74:BD:AA:C3:FD:8A:E1:91:4A:BE:ED:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/1/C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/1/C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:da:1a:d8:5b:ee:cb:27:5b:3c:2a:6b:45:4c:57:24:c7:43: aa:17:4e:34:e5:02:53:ef:cd:35:02:e4:f0:56:e8:db:46:18: 1b:d2:50:61:5a:e5:d7:fa:2d:cb:40:68:8a:ca:19:81:99:2e: 80:22:7d:72:52:fe:a5:a8:b6:52:be:5e:89:1c:73:dc:23:b4: af:2f:ee:13:61:95:f1:ba:0d:d6:e3:7c:3d:d2:db:e4:68:78: 6a:6c:f3:ae:16:97:26:f6:c0:0a:0e:92:73:53:ca:eb:f8:5b: 7c:7f:f1:e2:9d:ca:56:5e:6e:87:c0:57:28:b4:93:57:e2:db: 89:9e:ed:d5:c0:0e:da:52:00:83:ca:da:10:68:68:63:62:25: b7:af:a8:fb:f8:47:3f:a3:be:da:4b:fd:e4:d1:23:8f:a7:76: 23:a0:08:6a:5f:e2:56:29:4b:9e:a8:73:ea:62:07:b5:86:4b: 7f:54:08:62:da:f9:81:9f:40:63:6d:48:9c:67:56:0e:4b:f9: fd:ca:5e:95:07:bc:70:25:24:85:6b:69:bf:28:f1:6a:8d:db: 16:7c:53:64:b7:18:e2:fb:b8:44:a4:7a:93:95:40:be:26:0c: d3:ac:12:0d:3c:57:8a:ba:79:43:5e:dc:2f:79:f0:11:f8:19: 9c:ec:2e:01 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBaOTqIJpobjRdz/7YZ11z+bC48QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzhDNUI3ODFCN0Y0M0M2Mjc0QkRBQUMzRkQ4QUUxOTE0 QUJFRUQ4ODAeFw0yNTEyMTYwMDU3MTFaFw0yNTEyMTkwNTU2MTFaMDMxMTAvBgNV BAMTKEFDNDM0MDA0ODg5QjFCRjY3RkFFMzFDNEQ3NDY2MTNFNkREMDU2MDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDU3NkNA2bCGj9oi6zn7i4q2p9a /m/vrjNYxQ6qLSWMJSHIM3s6QXqiDjakuKzg1tTep5aOldahLXa95aub0HWInvTS Qm17y/rJNra0ODQQiQCYMnVdxDkfMQGxqOzGOC8OMEiVtqRxNrdLcRrVuXf+SJp3 tp/vv0FkihhSuWzHwnRTKfLeO02E3ESIjOdaFV91T4/Qmhuiuh/nFmQvKeEU0/kA Wx+HXM9hwt5t0O8V7sLwVPvwhcFylQbRHqDHLxkPT7aMcyRUI5ESMZ9W5SnIa+Qq J7S1PhdMXWKI6k5JUvkydlje5ZmWswaEaVaFofsP/jdUEZJK5Vnioyu3h43TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrENABIibG/Z/rjHE10ZhPm3QVgkwHwYDVR0j BBgwFoAUyMW3gbf0PGJ0varD/YrhkUq+7YgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ODg1M2FhYi04ZDZjLTQ1N2YtOWQ1Ny00ODRhY2FjZWE5ZDgvMS9DOEM1Qjc4MUI3 RjQzQzYyNzRCREFBQzNGRDhBRTE5MTRBQkVFRDg4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzhDNUI3ODFCN0Y0M0M2Mjc0QkRBQUMzRkQ4QUUxOTE0QUJF RUQ4OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTg4NTNhYWItOGQ2Yy00NTdmLTlk NTctNDg0YWNhY2VhOWQ4LzEvQzhDNUI3ODFCN0Y0M0M2Mjc0QkRBQUMzRkQ4QUUx OTE0QUJFRUQ4OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEbaGthb7ssnWzwqa0VMVyTHQ6oXTjTlAlPv zTUC5PBW6NtGGBvSUGFa5df6LctAaIrKGYGZLoAifXJS/qWotlK+Xokcc9wjtK8v 7hNhlfG6DdbjfD3S2+RoeGps864Wlyb2wAoOknNTyuv4W3x/8eKdylZebofAVyi0 k1fi24me7dXADtpSAIPK2hBoaGNiJbevqPv4Rz+jvtpL/eTRI4+ndiOgCGpf4lYp S56oc+piB7WGS39UCGLa+YGfQGNtSJxnVg5L+f3KXpUHvHAlJIVrab8o8WqN2xZ8 U2S3GOL7uESkepOVQL4mDNOsEg08V4q6eUNe3C958BH4GZzsLgE= -----END CERTIFICATE-----Generated at Wed Dec 17 18:12:08 2025 by rpki-client