This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/88a8ea7f-2f61-446b-8b51-51945b082faa/0/8539E127E16B793EFD92AE6EFC2BFB5879008FAD.mft File: 8539E127E16B793EFD92AE6EFC2BFB5879008FAD.mft (raw, json) Hash identifier: Qs3aeBtdqGsz/K7lnJcT9yQ/ZLCcqBpdqb9rTt/0pJ4= Subject key identifier: 0B:ED:69:2A:77:C3:74:CF:C1:F9:54:62:96:48:10:82:0D:B7:D5:55 Authority key identifier: 85:39:E1:27:E1:6B:79:3E:FD:92:AE:6E:FC:2B:FB:58:79:00:8F:AD Certificate issuer: /CN=8539E127E16B793EFD92AE6EFC2BFB5879008FAD Certificate serial: 7EFDCB7B609849A41D60836EF74356F36FFEE122 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8539E127E16B793EFD92AE6EFC2BFB5879008FAD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/88a8ea7f-2f61-446b-8b51-51945b082faa/0/8539E127E16B793EFD92AE6EFC2BFB5879008FAD.mft Manifest number: E9 Signing time: Wed 17 Dec 2025 21:11:53 +0000 Manifest this update: Wed 17 Dec 2025 21:06:53 +0000 Manifest next update: Sun 21 Dec 2025 04:07:53 +0000 Files and hashes: 1: 8539E127E16B793EFD92AE6EFC2BFB5879008FAD.crl (hash: 81xG/K5QnJVGQmKRdXZZsajTGVKjEK+xHs6mIA5Ny7A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/88a8ea7f-2f61-446b-8b51-51945b082faa/0/8539E127E16B793EFD92AE6EFC2BFB5879008FAD.crl rsync://repo-rpki.idnic.net/repo/88a8ea7f-2f61-446b-8b51-51945b082faa/0/8539E127E16B793EFD92AE6EFC2BFB5879008FAD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8539E127E16B793EFD92AE6EFC2BFB5879008FAD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 04:07:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:fd:cb:7b:60:98:49:a4:1d:60:83:6e:f7:43:56:f3:6f:fe:e1:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8539E127E16B793EFD92AE6EFC2BFB5879008FAD Validity Not Before: Dec 17 21:06:53 2025 GMT Not After : Dec 21 04:07:53 2025 GMT Subject: CN=0BED692A77C374CFC1F95462964810820DB7D555 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:64:84:f0:44:11:61:26:47:2e:4e:1b:e3:7a: 28:e4:b2:7e:e8:ce:5f:ce:9a:c9:18:77:f2:ca:97: 6b:b6:aa:95:14:8a:58:8a:70:dd:87:04:1e:39:6a: 3f:02:fa:a4:76:d6:b4:46:57:7b:3d:26:48:4b:b2: ba:0b:0e:71:b3:59:32:36:fe:fa:8d:4c:82:50:f5: 23:9f:99:00:19:36:26:e3:94:94:a9:07:6b:6d:2b: 28:92:2a:54:28:74:0a:c7:3c:35:5e:4e:d8:b9:d4: 06:99:c1:f7:20:95:7a:7d:3c:9e:a9:64:63:4e:19: 07:5d:e6:67:6d:6e:96:12:c4:fe:d9:7e:0b:a6:2e: 28:b0:5d:77:05:4e:63:11:8e:bc:fc:1d:34:12:ba: c6:0a:83:d8:af:47:a2:97:56:55:77:8d:e3:54:bd: e6:46:d1:3d:bf:03:a6:db:7b:75:dc:88:96:e2:b1: cd:c7:2f:09:82:32:41:2b:e9:a4:c3:61:a5:5d:75: d5:a6:64:41:15:d8:f6:2d:fb:e7:39:ec:1d:da:18: a3:0f:7b:4d:c3:4d:91:15:d5:ec:97:24:76:fe:22: 11:30:24:07:c3:ca:eb:b2:53:34:84:c2:55:42:2f: 15:bc:54:49:75:6b:a2:45:0a:57:0a:1d:f1:f9:a6: 7e:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:ED:69:2A:77:C3:74:CF:C1:F9:54:62:96:48:10:82:0D:B7:D5:55 X509v3 Authority Key Identifier: keyid:85:39:E1:27:E1:6B:79:3E:FD:92:AE:6E:FC:2B:FB:58:79:00:8F:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/88a8ea7f-2f61-446b-8b51-51945b082faa/0/8539E127E16B793EFD92AE6EFC2BFB5879008FAD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8539E127E16B793EFD92AE6EFC2BFB5879008FAD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/88a8ea7f-2f61-446b-8b51-51945b082faa/0/8539E127E16B793EFD92AE6EFC2BFB5879008FAD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:97:6f:a3:d6:8f:98:84:51:bf:6e:11:e4:27:af:82:ed:eb: 6c:88:bb:97:b0:49:19:c3:20:ce:fd:4f:37:73:ac:c6:38:24: d1:93:f2:b4:8c:9e:82:bc:ee:e7:a8:62:66:ce:a6:39:dc:83: 30:be:6a:3f:4a:db:4b:51:cc:ae:ad:20:f9:56:ba:f2:2e:da: 59:c9:7c:92:36:3e:d4:2d:7e:f3:c4:76:e4:b5:72:c4:29:7a: 40:1d:69:bd:e2:22:cc:b7:f9:54:93:fd:9b:f2:97:7d:7f:78: 64:ba:c4:fb:71:b0:d9:da:6b:a6:e4:02:9f:2e:27:bc:4c:8b: 91:19:5f:41:29:03:88:c9:0e:24:2b:c5:fc:3a:39:ba:38:64: dd:a7:0c:10:76:d5:e2:d1:64:5f:80:9f:45:86:60:cc:05:be: de:0e:87:4b:88:71:54:3c:46:d9:0e:51:00:c9:93:a5:f8:26: 94:2d:52:d5:2e:14:aa:41:ab:5a:2c:b3:3d:f4:35:c7:8c:26: 69:48:28:2c:c7:c2:3d:28:4e:dd:1a:c2:89:72:da:90:23:bd: 07:19:42:96:bb:b0:76:77:52:99:ea:d0:c7:33:20:29:53:04: 9c:de:96:d3:38:fe:3f:b0:f8:61:04:4f:73:8d:e1:da:87:9c: 81:47:84:88 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfv3Le2CYSaQdYINu90NW82/+4SIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODUzOUUxMjdFMTZCNzkzRUZEOTJBRTZFRkMyQkZCNTg3 OTAwOEZBRDAeFw0yNTEyMTcyMTA2NTNaFw0yNTEyMjEwNDA3NTNaMDMxMTAvBgNV BAMTKDBCRUQ2OTJBNzdDMzc0Q0ZDMUY5NTQ2Mjk2NDgxMDgyMERCN0Q1NTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwZITwRBFhJkcuThvjeijksn7o zl/OmskYd/LKl2u2qpUUiliKcN2HBB45aj8C+qR21rRGV3s9JkhLsroLDnGzWTI2 /vqNTIJQ9SOfmQAZNibjlJSpB2ttKyiSKlQodArHPDVeTti51AaZwfcglXp9PJ6p ZGNOGQdd5mdtbpYSxP7ZfgumLiiwXXcFTmMRjrz8HTQSusYKg9ivR6KXVlV3jeNU veZG0T2/A6bbe3XciJbisc3HLwmCMkEr6aTDYaVdddWmZEEV2PYt++c57B3aGKMP e03DTZEV1eyXJHb+IhEwJAfDyuuyUzSEwlVCLxW8VEl1a6JFClcKHfH5pn4dAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUC+1pKnfDdM/B+VRilkgQgg231VUwHwYDVR0j BBgwFoAUhTnhJ+FreT79kq5u/Cv7WHkAj60wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 OGE4ZWE3Zi0yZjYxLTQ0NmItOGI1MS01MTk0NWIwODJmYWEvMC84NTM5RTEyN0Ux NkI3OTNFRkQ5MkFFNkVGQzJCRkI1ODc5MDA4RkFELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODUzOUUxMjdFMTZCNzkzRUZEOTJBRTZFRkMyQkZCNTg3OTAw OEZBRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODhhOGVhN2YtMmY2MS00NDZiLThi NTEtNTE5NDViMDgyZmFhLzAvODUzOUUxMjdFMTZCNzkzRUZEOTJBRTZFRkMyQkZC NTg3OTAwOEZBRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAqXb6PWj5iEUb9uEeQnr4Lt62yIu5ewSRnD IM79TzdzrMY4JNGT8rSMnoK87ueoYmbOpjncgzC+aj9K20tRzK6tIPlWuvIu2lnJ fJI2PtQtfvPEduS1csQpekAdab3iIsy3+VST/Zvyl31/eGS6xPtxsNnaa6bkAp8u J7xMi5EZX0EpA4jJDiQrxfw6Obo4ZN2nDBB21eLRZF+An0WGYMwFvt4Oh0uIcVQ8 RtkOUQDJk6X4JpQtUtUuFKpBq1ossz30NceMJmlIKCzHwj0oTt0awoly2pAjvQcZ Qpa7sHZ3Upnq0MczIClTBJzeltM4/j+w+GEET3ON4dqHnIFHhIg= -----END CERTIFICATE-----Generated at Fri Dec 19 09:41:56 2025 by rpki-client