This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/c965dd39-48d0-4578-8fe5-66d953384e50/0/8902A1A2A87110119F8477271D6D224973A35F04.mft File: 8902A1A2A87110119F8477271D6D224973A35F04.mft (raw, json) Hash identifier: AvAC+1Lp6T9uKylTMRhVAzXlc0d10ycylae39Tlfq3Y= Subject key identifier: F4:00:CA:6A:92:1F:37:75:A1:17:7A:18:04:A5:93:0B:67:71:C4:88 Authority key identifier: 89:02:A1:A2:A8:71:10:11:9F:84:77:27:1D:6D:22:49:73:A3:5F:04 Certificate issuer: /CN=8902A1A2A87110119F8477271D6D224973A35F04 Certificate serial: 492E5AC6AAB8AA4BC19131386C80931964416D4F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8902A1A2A87110119F8477271D6D224973A35F04.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c965dd39-48d0-4578-8fe5-66d953384e50/0/8902A1A2A87110119F8477271D6D224973A35F04.mft Manifest number: 02B6 Signing time: Fri 05 Dec 2025 04:20:03 +0000 Manifest this update: Fri 05 Dec 2025 04:15:03 +0000 Manifest next update: Mon 08 Dec 2025 07:16:03 +0000 Files and hashes: 1: 8902A1A2A87110119F8477271D6D224973A35F04.crl (hash: g4q2JlASTTDpE7V/CcHUgFqKjll6sSH6tI2tcA7Ny68=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c965dd39-48d0-4578-8fe5-66d953384e50/0/8902A1A2A87110119F8477271D6D224973A35F04.crl rsync://repo-rpki.idnic.net/repo/c965dd39-48d0-4578-8fe5-66d953384e50/0/8902A1A2A87110119F8477271D6D224973A35F04.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8902A1A2A87110119F8477271D6D224973A35F04.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 07:16:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:2e:5a:c6:aa:b8:aa:4b:c1:91:31:38:6c:80:93:19:64:41:6d:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8902A1A2A87110119F8477271D6D224973A35F04 Validity Not Before: Dec 5 04:15:03 2025 GMT Not After : Dec 8 07:16:03 2025 GMT Subject: CN=F400CA6A921F3775A1177A1804A5930B6771C488 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:76:05:17:86:62:4c:c7:6d:e6:53:ee:11:ab: cf:a8:fe:31:40:fd:42:ff:7f:f6:92:57:58:b3:19: 9a:1f:d4:2b:d5:fd:27:a9:9e:fc:bc:ec:99:ef:69: 2a:ea:c2:a0:67:ae:e8:2e:68:21:bb:0f:13:5b:e4: ac:f2:51:80:e4:00:96:43:15:d0:41:c5:08:8b:a2: 2e:e5:c1:7b:67:d4:48:90:c3:5b:40:13:25:c2:61: 5b:7d:0f:d1:21:6e:15:c6:81:12:bd:ab:28:c4:79: 64:b3:cc:9a:9b:b4:54:e0:c5:32:d8:92:85:80:d3: ad:03:11:bd:b2:c8:b7:bf:8b:a9:d6:ca:84:bf:f7: e6:56:ac:1e:53:e3:9a:0d:4d:37:a7:68:f8:77:b8: 26:5c:8c:0f:fa:f5:ad:c1:a8:44:79:3b:ce:9c:85: 18:bd:58:7e:ae:10:2c:11:cb:f9:c0:9d:7a:72:67: 4a:ee:e1:a5:ca:88:36:93:6c:bd:af:1e:88:25:b5: a0:8a:b4:e2:01:34:4d:9a:7a:bd:5f:06:90:45:fd: 97:88:57:e6:54:43:c3:61:0a:6a:17:07:b1:64:df: 2b:fe:34:c6:e8:fe:2c:c7:e0:47:81:50:45:63:7d: 0d:ed:b5:25:4d:98:60:23:8d:aa:db:a1:9f:6c:41: c5:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:00:CA:6A:92:1F:37:75:A1:17:7A:18:04:A5:93:0B:67:71:C4:88 X509v3 Authority Key Identifier: keyid:89:02:A1:A2:A8:71:10:11:9F:84:77:27:1D:6D:22:49:73:A3:5F:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c965dd39-48d0-4578-8fe5-66d953384e50/0/8902A1A2A87110119F8477271D6D224973A35F04.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8902A1A2A87110119F8477271D6D224973A35F04.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c965dd39-48d0-4578-8fe5-66d953384e50/0/8902A1A2A87110119F8477271D6D224973A35F04.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:55:c1:a3:96:ec:c7:4c:eb:a5:87:29:55:3b:2b:57:02:39: 02:24:75:67:aa:5a:c4:8a:d2:52:2a:0d:d9:c6:4b:30:94:38: 46:88:5a:5f:df:ac:9a:fb:90:8c:2d:ab:e8:27:13:7c:0a:67: 6d:3c:6b:e4:f8:51:0a:ed:57:2a:71:48:d7:8c:51:be:8f:75: 07:7d:7c:62:fa:de:54:3f:19:7b:c4:66:21:23:73:c6:47:bb: 50:81:29:92:3d:eb:87:bc:03:19:6e:2e:03:df:bf:e1:ee:a3: f1:42:18:a1:a0:a1:f2:b5:71:6a:7a:4e:99:58:6a:88:ac:2b: a6:66:42:85:f4:a9:ad:52:55:66:ab:ca:e6:93:97:a8:e2:e9: b4:25:ed:21:84:44:f2:1e:b7:bb:b2:cd:ca:0e:f0:b2:d6:35: c2:76:18:58:c4:f9:8a:53:02:fc:4e:f5:35:ee:c9:37:b6:66: 01:6e:4f:21:c0:1d:0b:95:18:0d:15:d6:27:b8:12:33:45:62: 4b:b1:10:bb:65:a3:4a:f8:bd:95:c4:ca:77:e8:b6:b0:f2:ea: c5:72:42:17:53:b1:ea:8f:44:9f:2b:c0:3c:57:98:27:bb:f0: c4:39:e5:a3:74:df:80:cf:31:52:7c:d5:78:3c:a1:15:ef:78: b0:c3:83:d9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSS5axqq4qkvBkTE4bICTGWRBbU8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODkwMkExQTJBODcxMTAxMTlGODQ3NzI3MUQ2RDIyNDk3 M0EzNUYwNDAeFw0yNTEyMDUwNDE1MDNaFw0yNTEyMDgwNzE2MDNaMDMxMTAvBgNV BAMTKEY0MDBDQTZBOTIxRjM3NzVBMTE3N0ExODA0QTU5MzBCNjc3MUM0ODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzdgUXhmJMx23mU+4Rq8+o/jFA /UL/f/aSV1izGZof1CvV/Sepnvy87JnvaSrqwqBnruguaCG7DxNb5KzyUYDkAJZD FdBBxQiLoi7lwXtn1EiQw1tAEyXCYVt9D9EhbhXGgRK9qyjEeWSzzJqbtFTgxTLY koWA060DEb2yyLe/i6nWyoS/9+ZWrB5T45oNTTenaPh3uCZcjA/69a3BqER5O86c hRi9WH6uECwRy/nAnXpyZ0ru4aXKiDaTbL2vHogltaCKtOIBNE2aer1fBpBF/ZeI V+ZUQ8NhCmoXB7Fk3yv+NMbo/izH4EeBUEVjfQ3ttSVNmGAjjarboZ9sQcUXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9ADKapIfN3WhF3oYBKWTC2dxxIgwHwYDVR0j BBgwFoAUiQKhoqhxEBGfhHcnHW0iSXOjXwQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j OTY1ZGQzOS00OGQwLTQ1NzgtOGZlNS02NmQ5NTMzODRlNTAvMC84OTAyQTFBMkE4 NzExMDExOUY4NDc3MjcxRDZEMjI0OTczQTM1RjA0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODkwMkExQTJBODcxMTAxMTlGODQ3NzI3MUQ2RDIyNDk3M0Ez NUYwNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzk2NWRkMzktNDhkMC00NTc4LThm ZTUtNjZkOTUzMzg0ZTUwLzAvODkwMkExQTJBODcxMTAxMTlGODQ3NzI3MUQ2RDIy NDk3M0EzNUYwNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALJVwaOW7MdM66WHKVU7K1cCOQIkdWeqWsSK 0lIqDdnGSzCUOEaIWl/frJr7kIwtq+gnE3wKZ208a+T4UQrtVypxSNeMUb6PdQd9 fGL63lQ/GXvEZiEjc8ZHu1CBKZI964e8AxluLgPfv+Huo/FCGKGgofK1cWp6TplY aoisK6ZmQoX0qa1SVWaryuaTl6ji6bQl7SGERPIet7uyzcoO8LLWNcJ2GFjE+YpT AvxO9TXuyTe2ZgFuTyHAHQuVGA0V1ie4EjNFYkuxELtlo0r4vZXEynfotrDy6sVy QhdTseqPRJ8rwDxXmCe78MQ55aN034DPMVJ81Xg8oRXveLDDg9k= -----END CERTIFICATE-----Generated at Sun Dec 7 04:57:13 2025 by rpki-client