This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/1/8920EB690658C013C7B4AAC28EC6B511B39DAE3E.mft File: 8920EB690658C013C7B4AAC28EC6B511B39DAE3E.mft (raw, json) Hash identifier: M5cwW6ZAlVzISDp7B6KNgwNprT4/jST76awYGPWnIsM= Subject key identifier: E2:DD:A8:5A:F5:CF:44:43:9A:71:55:64:AB:92:6C:CA:64:CD:02:F0 Authority key identifier: 89:20:EB:69:06:58:C0:13:C7:B4:AA:C2:8E:C6:B5:11:B3:9D:AE:3E Certificate issuer: /CN=8920EB690658C013C7B4AAC28EC6B511B39DAE3E Certificate serial: 1EDCD508E91ABEFFE141B07076F3E9845F871881 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8920EB690658C013C7B4AAC28EC6B511B39DAE3E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/1/8920EB690658C013C7B4AAC28EC6B511B39DAE3E.mft Manifest number: B6 Signing time: Mon 01 Dec 2025 04:00:05 +0000 Manifest this update: Mon 01 Dec 2025 03:55:05 +0000 Manifest next update: Thu 04 Dec 2025 14:46:05 +0000 Files and hashes: 1: 8920EB690658C013C7B4AAC28EC6B511B39DAE3E.crl (hash: Nw1KicOUugVE1o6qlSxMyoNkfEi/xTry2sr6jJFChxs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/1/8920EB690658C013C7B4AAC28EC6B511B39DAE3E.crl rsync://repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/1/8920EB690658C013C7B4AAC28EC6B511B39DAE3E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8920EB690658C013C7B4AAC28EC6B511B39DAE3E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Dec 2025 14:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:dc:d5:08:e9:1a:be:ff:e1:41:b0:70:76:f3:e9:84:5f:87:18:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8920EB690658C013C7B4AAC28EC6B511B39DAE3E Validity Not Before: Dec 1 03:55:05 2025 GMT Not After : Dec 4 14:46:05 2025 GMT Subject: CN=E2DDA85AF5CF44439A715564AB926CCA64CD02F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:86:73:8c:57:a9:70:52:cd:be:80:1b:5c:6d: c7:d4:3c:4c:d7:74:d7:d0:86:72:af:ae:0d:af:aa: 9f:c3:42:a3:02:6c:74:5d:46:cd:ba:2b:54:e9:ce: ca:86:49:43:97:79:ae:61:60:ca:16:ba:8c:06:1a: 23:db:92:82:14:6a:cf:73:cb:1a:60:6c:8a:bb:c8: b6:eb:e4:e3:98:64:7d:b3:2d:dc:69:9f:63:15:5c: 66:06:d7:c7:c4:dc:77:ee:39:09:21:88:e7:c2:84: 9f:ca:9e:e1:8e:cc:0f:d3:81:f5:2d:a4:2d:cd:93: f1:18:f5:97:3a:31:77:e6:8b:60:81:18:8a:dc:90: 15:f7:62:b8:2d:ac:7e:90:10:74:71:74:6e:f1:91: be:e1:b3:2b:0e:cc:58:1d:91:78:58:48:ce:74:f1: 66:ea:45:9e:14:5e:e4:60:c8:b9:31:0c:0f:3c:92: 75:7f:a6:67:b0:a5:1c:ef:bf:01:b7:14:b4:2e:0e: 9e:f1:5d:71:b9:1d:7e:83:1c:a9:2f:3d:9b:54:7d: 35:3a:b6:0b:50:55:6a:79:21:3b:8d:93:c1:23:bf: cc:86:c6:ca:90:14:cf:a1:c2:0a:f5:5d:3c:ad:6a: d3:7a:59:f8:28:71:b2:e5:40:07:a2:bf:df:2d:51: bb:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:DD:A8:5A:F5:CF:44:43:9A:71:55:64:AB:92:6C:CA:64:CD:02:F0 X509v3 Authority Key Identifier: keyid:89:20:EB:69:06:58:C0:13:C7:B4:AA:C2:8E:C6:B5:11:B3:9D:AE:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/1/8920EB690658C013C7B4AAC28EC6B511B39DAE3E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8920EB690658C013C7B4AAC28EC6B511B39DAE3E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/1/8920EB690658C013C7B4AAC28EC6B511B39DAE3E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:8c:ba:e7:8a:a7:d3:70:8d:be:46:95:a8:c7:f1:55:2c:1c: af:56:11:83:9d:30:16:b5:bc:5c:6a:68:9d:44:6e:01:d5:df: 6e:43:32:fd:8f:fb:cc:0b:ca:d8:4a:de:05:45:6a:c2:87:2a: 2b:70:07:08:be:70:f1:51:7e:dc:0f:9c:f8:c9:f2:fb:ef:de: bc:3b:78:48:f9:63:fc:93:da:f1:a6:99:65:58:5a:9d:d9:62: e5:22:1f:62:12:c9:fa:96:d3:b5:d5:ff:a5:9a:ba:0a:b3:0b: c2:bc:c3:1b:60:0a:9f:4d:8c:bc:2c:77:33:70:c3:b5:47:07: 25:e7:14:e3:05:07:62:0e:a7:0c:9c:2f:d9:67:64:57:db:9d: 4d:6d:72:5c:1d:36:04:f4:56:0c:5c:27:04:13:bf:64:76:a5: ef:5a:20:18:99:99:a5:ac:df:52:ce:c7:e0:68:1f:a9:4a:f7: d0:e2:20:3c:c5:5e:69:8c:bc:16:10:0a:6e:ff:ae:0c:0f:a1: 16:32:84:4c:93:7d:c1:d5:4f:3c:93:d6:97:62:5f:32:3b:b4: fa:49:ce:9a:36:ce:5a:96:eb:2a:8c:94:fd:2b:a3:3e:60:20: 8a:ee:1e:18:2c:b8:89:c7:a7:fc:99:44:6e:47:a3:aa:c7:3b: 61:98:b4:eb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHtzVCOkavv/hQbBwdvPphF+HGIEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODkyMEVCNjkwNjU4QzAxM0M3QjRBQUMyOEVDNkI1MTFC MzlEQUUzRTAeFw0yNTEyMDEwMzU1MDVaFw0yNTEyMDQxNDQ2MDVaMDMxMTAvBgNV BAMTKEUyRERBODVBRjVDRjQ0NDM5QTcxNTU2NEFCOTI2Q0NBNjRDRDAyRjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8hnOMV6lwUs2+gBtcbcfUPEzX dNfQhnKvrg2vqp/DQqMCbHRdRs26K1TpzsqGSUOXea5hYMoWuowGGiPbkoIUas9z yxpgbIq7yLbr5OOYZH2zLdxpn2MVXGYG18fE3HfuOQkhiOfChJ/KnuGOzA/TgfUt pC3Nk/EY9Zc6MXfmi2CBGIrckBX3YrgtrH6QEHRxdG7xkb7hsysOzFgdkXhYSM50 8WbqRZ4UXuRgyLkxDA88knV/pmewpRzvvwG3FLQuDp7xXXG5HX6DHKkvPZtUfTU6 tgtQVWp5ITuNk8Ejv8yGxsqQFM+hwgr1XTytatN6WfgocbLlQAeiv98tUbvLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4t2oWvXPREOacVVkq5JsymTNAvAwHwYDVR0j BBgwFoAUiSDraQZYwBPHtKrCjsa1EbOdrj4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MDM5NjM4OC0yZDZiLTQ3NmUtOTYzZC0xY2MzODEzNzRiMWMvMS84OTIwRUI2OTA2 NThDMDEzQzdCNEFBQzI4RUM2QjUxMUIzOURBRTNFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODkyMEVCNjkwNjU4QzAxM0M3QjRBQUMyOEVDNkI1MTFCMzlE QUUzRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjAzOTYzODgtMmQ2Yi00NzZlLTk2 M2QtMWNjMzgxMzc0YjFjLzEvODkyMEVCNjkwNjU4QzAxM0M3QjRBQUMyOEVDNkI1 MTFCMzlEQUUzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFaMuueKp9Nwjb5GlajH8VUsHK9WEYOdMBa1 vFxqaJ1EbgHV325DMv2P+8wLythK3gVFasKHKitwBwi+cPFRftwPnPjJ8vvv3rw7 eEj5Y/yT2vGmmWVYWp3ZYuUiH2ISyfqW07XV/6WaugqzC8K8wxtgCp9NjLwsdzNw w7VHByXnFOMFB2IOpwycL9lnZFfbnU1tclwdNgT0VgxcJwQTv2R2pe9aIBiZmaWs 31LOx+BoH6lK99DiIDzFXmmMvBYQCm7/rgwPoRYyhEyTfcHVTzyT1pdiXzI7tPpJ zpo2zlqW6yqMlP0roz5gIIruHhgsuInHp/yZRG5Ho6rHO2GYtOs= -----END CERTIFICATE-----Generated at Wed Dec 3 14:41:37 2025 by rpki-client