This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/f504e4c7-7a2d-4d66-8fb4-205565787f24/0/8E87AB0332210D864175F7A371230D7C6099AE30.mft File: 8E87AB0332210D864175F7A371230D7C6099AE30.mft (raw, json) Hash identifier: Gcxg5HEHhMk8l7Z28DKe0/gW0+G0z1R4DI3vk1imf0k= Subject key identifier: 52:2B:DD:79:FF:CD:85:38:55:DF:9A:3A:DF:EB:BC:A0:03:0B:89:8D Authority key identifier: 8E:87:AB:03:32:21:0D:86:41:75:F7:A3:71:23:0D:7C:60:99:AE:30 Certificate issuer: /CN=8E87AB0332210D864175F7A371230D7C6099AE30 Certificate serial: 166B70F20EEEF667B8B8FF73890A907601F9F910 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8E87AB0332210D864175F7A371230D7C6099AE30.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f504e4c7-7a2d-4d66-8fb4-205565787f24/0/8E87AB0332210D864175F7A371230D7C6099AE30.mft Manifest number: 0240 Signing time: Fri 05 Dec 2025 12:21:50 +0000 Manifest this update: Fri 05 Dec 2025 12:16:50 +0000 Manifest next update: Mon 08 Dec 2025 21:41:50 +0000 Files and hashes: 1: 8E87AB0332210D864175F7A371230D7C6099AE30.crl (hash: Q8q+m6ac/PSchjJPyzT1p3L7tHv7VD2JYFD9xbusDEE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f504e4c7-7a2d-4d66-8fb4-205565787f24/0/8E87AB0332210D864175F7A371230D7C6099AE30.crl rsync://repo-rpki.idnic.net/repo/f504e4c7-7a2d-4d66-8fb4-205565787f24/0/8E87AB0332210D864175F7A371230D7C6099AE30.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8E87AB0332210D864175F7A371230D7C6099AE30.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 21:41:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:6b:70:f2:0e:ee:f6:67:b8:b8:ff:73:89:0a:90:76:01:f9:f9:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8E87AB0332210D864175F7A371230D7C6099AE30 Validity Not Before: Dec 5 12:16:50 2025 GMT Not After : Dec 8 21:41:50 2025 GMT Subject: CN=522BDD79FFCD853855DF9A3ADFEBBCA0030B898D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:e9:4d:89:8f:0f:21:f4:f8:39:2b:ca:14:15: c9:70:69:80:d9:cc:5a:b1:f9:a2:92:27:ef:05:7d: 23:77:72:0f:2b:bc:a3:d6:5e:02:ee:2f:9b:82:8b: 6d:b4:fa:1a:71:fa:69:c2:b1:00:e8:f5:f4:63:a3: 56:e2:bd:b3:97:25:2b:58:e4:e2:27:d8:84:b1:2e: 32:42:06:66:ba:80:b1:0d:07:01:28:76:b8:ee:8a: d9:c0:4d:8d:7c:c9:72:e0:fa:09:e4:a0:ee:a7:81: 3d:6c:cf:d4:4f:cc:c3:43:d8:77:0f:8e:29:57:5a: a2:e9:d3:d6:4f:84:2d:04:d6:98:a7:da:9e:7f:0a: 5b:06:5c:8c:9a:2b:b3:fb:4f:5f:df:93:5b:7f:7c: cb:ff:f8:1d:34:e9:1a:6e:ec:51:f4:16:f0:4f:00: ce:22:7d:83:af:9f:aa:52:27:ec:65:f7:bb:65:85: bf:51:c8:46:db:2e:74:d4:10:d0:3e:31:4c:33:0b: f9:86:44:dd:c0:ac:c2:2b:4a:a2:95:7f:13:50:8e: 38:6d:5e:6b:d6:95:b8:ac:bf:75:0d:3c:20:d6:fa: 79:69:a5:33:67:4e:67:5d:4a:4b:1d:5e:e9:c1:35: 3e:0a:d4:b4:99:fb:ce:e1:e5:9e:08:74:57:1e:1c: 4c:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:2B:DD:79:FF:CD:85:38:55:DF:9A:3A:DF:EB:BC:A0:03:0B:89:8D X509v3 Authority Key Identifier: keyid:8E:87:AB:03:32:21:0D:86:41:75:F7:A3:71:23:0D:7C:60:99:AE:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f504e4c7-7a2d-4d66-8fb4-205565787f24/0/8E87AB0332210D864175F7A371230D7C6099AE30.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8E87AB0332210D864175F7A371230D7C6099AE30.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f504e4c7-7a2d-4d66-8fb4-205565787f24/0/8E87AB0332210D864175F7A371230D7C6099AE30.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:b3:98:81:9e:1c:90:f1:26:6b:2c:d1:37:7a:4f:0f:b7:49: 85:1d:8a:54:39:f1:0c:ed:17:d0:06:d8:4c:81:b6:7b:6b:c3: 68:46:42:a9:6f:48:d9:ed:97:64:eb:f7:82:62:ce:13:8a:0c: 55:c6:fa:51:3f:c4:8f:cf:80:f3:23:dd:20:86:f4:71:19:3f: 02:be:6d:4f:19:83:b7:64:2f:19:44:42:d8:05:6d:f9:31:fe: 17:7d:97:af:f6:e8:9d:6c:ff:d0:cf:f2:25:5b:00:7b:38:3e: 4b:7f:c8:50:93:50:5a:68:22:e2:a1:85:71:02:18:85:96:57: 8c:37:d9:01:71:2a:81:84:01:84:d4:98:f1:1e:c3:4e:91:1f: db:46:e2:6d:5d:6e:b8:e7:90:1b:6d:a2:cc:1a:ae:82:61:a2: 2f:2b:5b:75:99:5e:4c:8c:25:3e:bd:2e:14:87:2b:0b:95:5d: b3:96:92:b4:7a:00:8d:9a:c0:6b:1d:80:d3:45:cc:57:d3:9c: 51:cb:e8:4f:90:8c:5f:22:35:80:5a:44:0f:76:a8:5f:62:af: 60:82:76:01:9d:38:3a:be:2a:2d:4e:8b:3e:d5:87:71:c8:3d: a0:89:05:e0:3f:16:7c:cc:fc:31:d9:33:13:b4:d3:a5:bc:ca: 23:2c:7d:a3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFmtw8g7u9me4uP9ziQqQdgH5+RAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEU4N0FCMDMzMjIxMEQ4NjQxNzVGN0EzNzEyMzBEN0M2 MDk5QUUzMDAeFw0yNTEyMDUxMjE2NTBaFw0yNTEyMDgyMTQxNTBaMDMxMTAvBgNV BAMTKDUyMkJERDc5RkZDRDg1Mzg1NURGOUEzQURGRUJCQ0EwMDMwQjg5OEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH6U2Jjw8h9Pg5K8oUFclwaYDZ zFqx+aKSJ+8FfSN3cg8rvKPWXgLuL5uCi220+hpx+mnCsQDo9fRjo1bivbOXJStY 5OIn2ISxLjJCBma6gLENBwEodrjuitnATY18yXLg+gnkoO6ngT1sz9RPzMND2HcP jilXWqLp09ZPhC0E1pin2p5/ClsGXIyaK7P7T1/fk1t/fMv/+B006Rpu7FH0FvBP AM4ifYOvn6pSJ+xl97tlhb9RyEbbLnTUENA+MUwzC/mGRN3ArMIrSqKVfxNQjjht XmvWlbisv3UNPCDW+nlppTNnTmddSksdXunBNT4K1LSZ+87h5Z4IdFceHEwRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUivdef/NhThV35o63+u8oAMLiY0wHwYDVR0j BBgwFoAUjoerAzIhDYZBdfejcSMNfGCZrjAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NTA0ZTRjNy03YTJkLTRkNjYtOGZiNC0yMDU1NjU3ODdmMjQvMC84RTg3QUIwMzMy MjEwRDg2NDE3NUY3QTM3MTIzMEQ3QzYwOTlBRTMwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEU4N0FCMDMzMjIxMEQ4NjQxNzVGN0EzNzEyMzBEN0M2MDk5 QUUzMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjUwNGU0YzctN2EyZC00ZDY2LThm YjQtMjA1NTY1Nzg3ZjI0LzAvOEU4N0FCMDMzMjIxMEQ4NjQxNzVGN0EzNzEyMzBE N0M2MDk5QUUzMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKCzmIGeHJDxJmss0Td6Tw+3SYUdilQ58Qzt F9AG2EyBtntrw2hGQqlvSNntl2Tr94JizhOKDFXG+lE/xI/PgPMj3SCG9HEZPwK+ bU8Zg7dkLxlEQtgFbfkx/hd9l6/26J1s/9DP8iVbAHs4Pkt/yFCTUFpoIuKhhXEC GIWWV4w32QFxKoGEAYTUmPEew06RH9tG4m1dbrjnkBttoswaroJhoi8rW3WZXkyM JT69LhSHKwuVXbOWkrR6AI2awGsdgNNFzFfTnFHL6E+QjF8iNYBaRA92qF9ir2CC dgGdODq+Ki1Oiz7Vh3HIPaCJBeA/FnzM/DHZMxO006W8yiMsfaM= -----END CERTIFICATE-----Generated at Sun Dec 7 07:25:27 2025 by rpki-client