This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/1/C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88.mft File: C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88.mft (raw, json) Hash identifier: V3zV7MBrrJRFPvZrwqfgRtOSIf3C3pTO800AFkTjzbc= Subject key identifier: DD:D4:58:85:35:6B:8F:29:6B:F6:84:91:FE:7A:47:01:32:7D:8C:ED Authority key identifier: C8:C5:B7:81:B7:F4:3C:62:74:BD:AA:C3:FD:8A:E1:91:4A:BE:ED:88 Certificate issuer: /CN=C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88 Certificate serial: 2A071A11F886951A4EF25FC8ACCC08D07E1CC5E4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88.cer Subject info access: rsync://repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/1/C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88.mft Manifest number: B1 Signing time: Sat 06 Dec 2025 20:42:03 +0000 Manifest this update: Sat 06 Dec 2025 20:37:03 +0000 Manifest next update: Wed 10 Dec 2025 03:33:03 +0000 Files and hashes: 1: C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88.crl (hash: EvqBMwhv0vhz8VSoVnOYpWuymx/NzYdHaqdNE0vBO+0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/1/C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88.crl rsync://repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/1/C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:07:1a:11:f8:86:95:1a:4e:f2:5f:c8:ac:cc:08:d0:7e:1c:c5:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88 Validity Not Before: Dec 6 20:37:03 2025 GMT Not After : Dec 10 03:33:03 2025 GMT Subject: CN=DDD45885356B8F296BF68491FE7A4701327D8CED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:ab:5d:54:8f:84:7b:b0:d5:fb:84:60:62:93: bd:12:a4:42:5a:be:ed:b7:17:e7:f3:86:9b:28:b8: e4:9f:f0:63:b4:82:25:b2:7a:63:b6:f4:58:2d:cb: 3c:95:33:a5:d1:23:86:fd:04:a3:64:64:0e:b2:95: 61:ef:b9:e0:fe:c7:78:15:d5:71:89:cf:82:f8:f4: 45:ea:c9:59:9b:5d:30:9c:db:4a:5d:58:dd:5d:8c: 4a:ce:b9:b6:9c:42:3d:8c:67:e9:4c:a8:2a:d8:55: 78:e8:55:00:0f:08:d8:0b:71:10:a7:ac:80:ce:2f: a7:f8:cb:af:bb:e9:c0:79:f3:c0:ae:72:d8:74:fd: 6b:d9:92:f9:26:c6:1a:ad:83:aa:50:65:e8:bc:29: 13:67:2a:59:7d:26:49:f1:ae:94:6b:0e:7a:93:ae: de:40:11:2a:5d:7d:92:8d:fc:1a:66:f0:54:8f:cd: 66:4c:b7:d9:0f:d0:b3:e7:88:df:9a:11:02:01:e5: c2:f0:5e:b7:7a:4e:2a:99:28:08:d3:ca:86:12:58: 22:65:5e:ce:5d:b3:79:f6:92:ba:2f:f2:2b:36:86: 8b:9b:7e:04:6d:9b:e8:de:35:ca:2c:ea:5c:93:2d: e5:d2:fd:d5:04:73:f8:67:ef:0f:3d:d3:77:3a:e4: 71:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:D4:58:85:35:6B:8F:29:6B:F6:84:91:FE:7A:47:01:32:7D:8C:ED X509v3 Authority Key Identifier: keyid:C8:C5:B7:81:B7:F4:3C:62:74:BD:AA:C3:FD:8A:E1:91:4A:BE:ED:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/1/C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/1/C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:f7:cd:31:87:8c:64:68:d5:f4:ef:15:58:2b:a8:0b:be:d4: 74:0d:b5:ce:b8:ca:7c:d7:f3:f4:cd:61:ef:cc:4f:fe:3b:d3: 32:fb:af:60:62:16:d2:df:50:e5:8d:9e:1a:cb:12:22:e8:93: 7b:23:30:3e:0b:89:01:14:61:d1:72:9f:7f:13:0f:65:eb:73: 9e:c6:f8:40:f0:ea:ae:2f:e3:af:e7:e2:bc:ae:ba:12:b4:8d: ec:79:0a:d0:13:1b:f1:0b:0f:2f:60:6d:38:cf:dc:f0:17:65: 05:31:89:d7:6f:24:b5:04:3e:02:71:cc:29:81:8a:79:ec:a6: 36:ce:fe:6f:44:24:41:b0:71:6d:8a:cb:98:f4:f4:c0:53:6a: c4:2f:d9:3e:99:00:82:71:e2:69:11:cb:ae:a1:c0:77:fb:dc: 05:10:0f:0f:b5:84:10:2b:56:d7:e7:d0:df:b4:c4:ce:dd:5c: 7c:71:3f:83:eb:68:b8:12:7d:4c:9a:03:5a:20:c6:4f:50:ae: f2:c0:07:be:39:86:ef:43:61:b2:87:63:3c:82:63:c0:ab:a1: af:db:57:86:b3:a5:95:9e:c9:fd:18:f6:01:b0:44:cd:ea:b7: 76:4d:0f:53:b0:91:12:38:04:f2:31:d7:1b:82:41:56:86:48: a9:4c:32:9e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKgcaEfiGlRpO8l/IrMwI0H4cxeQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzhDNUI3ODFCN0Y0M0M2Mjc0QkRBQUMzRkQ4QUUxOTE0 QUJFRUQ4ODAeFw0yNTEyMDYyMDM3MDNaFw0yNTEyMTAwMzMzMDNaMDMxMTAvBgNV BAMTKERERDQ1ODg1MzU2QjhGMjk2QkY2ODQ5MUZFN0E0NzAxMzI3RDhDRUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnq11Uj4R7sNX7hGBik70SpEJa vu23F+fzhpsouOSf8GO0giWyemO29FgtyzyVM6XRI4b9BKNkZA6ylWHvueD+x3gV 1XGJz4L49EXqyVmbXTCc20pdWN1djErOubacQj2MZ+lMqCrYVXjoVQAPCNgLcRCn rIDOL6f4y6+76cB588Cucth0/WvZkvkmxhqtg6pQZei8KRNnKll9JknxrpRrDnqT rt5AESpdfZKN/Bpm8FSPzWZMt9kP0LPniN+aEQIB5cLwXrd6TiqZKAjTyoYSWCJl Xs5ds3n2krov8is2houbfgRtm+jeNcos6lyTLeXS/dUEc/hn7w8903c65HGHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3dRYhTVrjylr9oSR/npHATJ9jO0wHwYDVR0j BBgwFoAUyMW3gbf0PGJ0varD/YrhkUq+7YgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ODg1M2FhYi04ZDZjLTQ1N2YtOWQ1Ny00ODRhY2FjZWE5ZDgvMS9DOEM1Qjc4MUI3 RjQzQzYyNzRCREFBQzNGRDhBRTE5MTRBQkVFRDg4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzhDNUI3ODFCN0Y0M0M2Mjc0QkRBQUMzRkQ4QUUxOTE0QUJF RUQ4OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTg4NTNhYWItOGQ2Yy00NTdmLTlk NTctNDg0YWNhY2VhOWQ4LzEvQzhDNUI3ODFCN0Y0M0M2Mjc0QkRBQUMzRkQ4QUUx OTE0QUJFRUQ4OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE73zTGHjGRo1fTvFVgrqAu+1HQNtc64ynzX 8/TNYe/MT/470zL7r2BiFtLfUOWNnhrLEiLok3sjMD4LiQEUYdFyn38TD2Xrc57G +EDw6q4v46/n4ryuuhK0jex5CtATG/ELDy9gbTjP3PAXZQUxiddvJLUEPgJxzCmB innspjbO/m9EJEGwcW2Ky5j09MBTasQv2T6ZAIJx4mkRy66hwHf73AUQDw+1hBAr Vtfn0N+0xM7dXHxxP4PraLgSfUyaA1ogxk9QrvLAB745hu9DYbKHYzyCY8Croa/b V4azpZWeyf0Y9gGwRM3qt3ZND1OwkRI4BPIx1xuCQVaGSKlMMp4= -----END CERTIFICATE-----Generated at Sat Dec 6 22:53:00 2025 by rpki-client