This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d8349cd4-c079-41ff-aa9e-36f3d4482645/0/C8B7605A76DBDD11CCD31F657A0DE454C979D939.mft File: C8B7605A76DBDD11CCD31F657A0DE454C979D939.mft (raw, json) Hash identifier: T4UdjLI9w/yLgueIneDCSV/9hQlB5xcOgWnwE0XEbCo= Subject key identifier: DE:52:54:55:72:86:A5:E2:7B:38:60:78:55:67:DC:B9:97:90:8A:19 Authority key identifier: C8:B7:60:5A:76:DB:DD:11:CC:D3:1F:65:7A:0D:E4:54:C9:79:D9:39 Certificate issuer: /CN=C8B7605A76DBDD11CCD31F657A0DE454C979D939 Certificate serial: 5A486E70CCDEE3A8059A8264DCAC9759993E6468 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8B7605A76DBDD11CCD31F657A0DE454C979D939.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d8349cd4-c079-41ff-aa9e-36f3d4482645/0/C8B7605A76DBDD11CCD31F657A0DE454C979D939.mft Manifest number: 04C2 Signing time: Sat 06 Dec 2025 16:51:38 +0000 Manifest this update: Sat 06 Dec 2025 16:46:38 +0000 Manifest next update: Tue 09 Dec 2025 22:35:38 +0000 Files and hashes: 1: C8B7605A76DBDD11CCD31F657A0DE454C979D939.crl (hash: JOW8UOx6hwaueCP1rUM9txAggBgRTiHqMo5Fuczl4fk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d8349cd4-c079-41ff-aa9e-36f3d4482645/0/C8B7605A76DBDD11CCD31F657A0DE454C979D939.crl rsync://repo-rpki.idnic.net/repo/d8349cd4-c079-41ff-aa9e-36f3d4482645/0/C8B7605A76DBDD11CCD31F657A0DE454C979D939.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8B7605A76DBDD11CCD31F657A0DE454C979D939.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:48:6e:70:cc:de:e3:a8:05:9a:82:64:dc:ac:97:59:99:3e:64:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C8B7605A76DBDD11CCD31F657A0DE454C979D939 Validity Not Before: Dec 6 16:46:38 2025 GMT Not After : Dec 9 22:35:38 2025 GMT Subject: CN=DE5254557286A5E27B3860785567DCB997908A19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:51:6e:76:1e:d4:03:01:88:b5:37:a9:56:00: 99:7b:6f:57:e2:b6:e7:75:18:1a:1f:89:e4:5e:81: dc:9d:85:6d:d3:35:29:40:69:dd:ff:7e:c0:dc:40: 2b:1f:96:f9:3d:0a:2d:1e:71:94:b1:b0:3d:14:6a: c4:19:42:92:7a:cd:95:5a:0f:11:f5:9f:71:c6:ff: ad:0e:59:4b:b9:17:25:63:50:94:93:11:4e:4c:aa: 08:55:73:28:70:8d:0f:f7:62:8d:7c:e4:20:6f:95: 24:8c:a3:59:b3:9a:5e:d2:63:69:02:24:41:72:ac: 97:85:26:c2:91:c3:0b:43:bc:9a:35:e1:2c:bc:6c: 8b:6b:52:7c:32:37:6c:1a:d1:8f:b9:37:3c:f7:a8: 85:7b:23:5f:97:21:bc:2d:c3:01:77:0f:5e:5e:01: 15:0d:ca:83:02:5a:3c:08:bc:ed:35:c6:e4:59:01: 63:f9:a0:d8:2e:52:46:d4:f1:6a:3d:2d:8e:be:a1: 6d:f4:2e:89:ea:a4:13:c9:3d:d7:82:db:e0:7f:36: 60:af:1c:06:d3:f6:56:1c:3a:9a:b7:2f:17:5e:34: 7a:8a:e6:a2:01:82:8b:a7:b6:40:36:25:6c:0e:6a: 6c:c8:84:ec:3c:ac:05:65:d6:dc:04:46:e4:ca:6c: f2:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:52:54:55:72:86:A5:E2:7B:38:60:78:55:67:DC:B9:97:90:8A:19 X509v3 Authority Key Identifier: keyid:C8:B7:60:5A:76:DB:DD:11:CC:D3:1F:65:7A:0D:E4:54:C9:79:D9:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d8349cd4-c079-41ff-aa9e-36f3d4482645/0/C8B7605A76DBDD11CCD31F657A0DE454C979D939.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8B7605A76DBDD11CCD31F657A0DE454C979D939.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d8349cd4-c079-41ff-aa9e-36f3d4482645/0/C8B7605A76DBDD11CCD31F657A0DE454C979D939.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:84:c4:30:35:8b:f9:ea:2c:a7:cc:40:30:1e:60:a3:f2:3e: 3f:3d:72:89:54:0f:36:30:df:77:50:fd:e7:d6:5b:97:1c:78: b9:76:25:13:c9:db:cb:e7:d3:ac:70:24:db:6d:23:cf:7b:c9: a5:8e:18:38:70:da:73:37:13:e9:91:b6:86:0b:c3:9a:60:fb: c6:27:c3:f5:3e:68:5a:77:23:ca:fc:bc:ea:12:56:c1:dd:b8: 00:cd:37:99:12:63:a4:80:e0:5f:5a:09:11:a4:4d:f7:14:f4: e4:b4:fc:63:76:97:db:ce:db:04:c3:3c:ef:13:89:11:74:8a: e2:d0:52:18:34:31:0b:37:8c:5d:14:84:ef:ff:2e:e1:ee:1e: 2e:9e:ec:d8:8b:ce:83:25:1a:0b:ee:42:bd:fe:22:7c:cf:13: ed:4c:df:62:ff:b8:56:82:37:dc:62:22:8d:2f:59:3a:68:6b: 45:3a:62:10:cd:72:c1:cb:01:aa:42:e3:8e:d7:9f:9c:14:16: cb:ad:9d:e8:3a:e6:07:b0:0c:13:e0:e3:ce:4f:b6:58:ba:3c: 5b:64:48:d9:c6:8c:9d:67:7b:e3:0e:15:e1:98:d5:26:46:fb: d8:23:0a:c2:bc:6e:8f:3a:29:98:d5:77:18:52:7d:f7:bc:95: 50:16:3a:47 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWkhucMze46gFmoJk3KyXWZk+ZGgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzhCNzYwNUE3NkRCREQxMUNDRDMxRjY1N0EwREU0NTRD OTc5RDkzOTAeFw0yNTEyMDYxNjQ2MzhaFw0yNTEyMDkyMjM1MzhaMDMxMTAvBgNV BAMTKERFNTI1NDU1NzI4NkE1RTI3QjM4NjA3ODU1NjdEQ0I5OTc5MDhBMTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0UW52HtQDAYi1N6lWAJl7b1fi tud1GBofieRegdydhW3TNSlAad3/fsDcQCsflvk9Ci0ecZSxsD0UasQZQpJ6zZVa DxH1n3HG/60OWUu5FyVjUJSTEU5MqghVcyhwjQ/3Yo185CBvlSSMo1mzml7SY2kC JEFyrJeFJsKRwwtDvJo14Sy8bItrUnwyN2wa0Y+5Nzz3qIV7I1+XIbwtwwF3D15e ARUNyoMCWjwIvO01xuRZAWP5oNguUkbU8Wo9LY6+oW30LonqpBPJPdeC2+B/NmCv HAbT9lYcOpq3LxdeNHqK5qIBgountkA2JWwOamzIhOw8rAVl1twERuTKbPLnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3lJUVXKGpeJ7OGB4VWfcuZeQihkwHwYDVR0j BBgwFoAUyLdgWnbb3RHM0x9leg3kVMl52TkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ODM0OWNkNC1jMDc5LTQxZmYtYWE5ZS0zNmYzZDQ0ODI2NDUvMC9DOEI3NjA1QTc2 REJERDExQ0NEMzFGNjU3QTBERTQ1NEM5NzlEOTM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzhCNzYwNUE3NkRCREQxMUNDRDMxRjY1N0EwREU0NTRDOTc5 RDkzOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDgzNDljZDQtYzA3OS00MWZmLWFh OWUtMzZmM2Q0NDgyNjQ1LzAvQzhCNzYwNUE3NkRCREQxMUNDRDMxRjY1N0EwREU0 NTRDOTc5RDkzOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKKExDA1i/nqLKfMQDAeYKPyPj89colUDzYw 33dQ/efWW5cceLl2JRPJ28vn06xwJNttI897yaWOGDhw2nM3E+mRtoYLw5pg+8Yn w/U+aFp3I8r8vOoSVsHduADNN5kSY6SA4F9aCRGkTfcU9OS0/GN2l9vO2wTDPO8T iRF0iuLQUhg0MQs3jF0UhO//LuHuHi6e7NiLzoMlGgvuQr3+InzPE+1M32L/uFaC N9xiIo0vWTpoa0U6YhDNcsHLAapC447Xn5wUFsutneg65gewDBPg485Ptli6PFtk SNnGjJ1ne+MOFeGY1SZG+9gjCsK8bo86KZjVdxhSffe8lVAWOkc= -----END CERTIFICATE-----Generated at Sun Dec 7 01:02:45 2025 by rpki-client