This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/8fd6eaca-f5fd-4acb-85a5-eb8d370823af/0/DE5F8F89EA2857719125EA6666F593A8279B3CD9.mft File: DE5F8F89EA2857719125EA6666F593A8279B3CD9.mft (raw, json) Hash identifier: QJtKF6MViSrXo1Yqs5vQNeeHsER4qXEe9bLttZkJRUI= Subject key identifier: 0F:C5:24:AB:C7:51:B9:C0:41:0A:B8:EE:F6:5E:FF:D7:15:33:B0:C6 Authority key identifier: DE:5F:8F:89:EA:28:57:71:91:25:EA:66:66:F5:93:A8:27:9B:3C:D9 Certificate issuer: /CN=DE5F8F89EA2857719125EA6666F593A8279B3CD9 Certificate serial: 3E6D2C55DD9270FA7FDAA78719E410D84E19FB56 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE5F8F89EA2857719125EA6666F593A8279B3CD9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8fd6eaca-f5fd-4acb-85a5-eb8d370823af/0/DE5F8F89EA2857719125EA6666F593A8279B3CD9.mft Manifest number: E8 Signing time: Thu 18 Dec 2025 20:11:27 +0000 Manifest this update: Thu 18 Dec 2025 20:06:27 +0000 Manifest next update: Sun 21 Dec 2025 23:05:27 +0000 Files and hashes: 1: DE5F8F89EA2857719125EA6666F593A8279B3CD9.crl (hash: PaMn0ng7mljstBcc/wGEkbeNLs6Jt8Jqfwxaf7hWkpg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8fd6eaca-f5fd-4acb-85a5-eb8d370823af/0/DE5F8F89EA2857719125EA6666F593A8279B3CD9.crl rsync://repo-rpki.idnic.net/repo/8fd6eaca-f5fd-4acb-85a5-eb8d370823af/0/DE5F8F89EA2857719125EA6666F593A8279B3CD9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE5F8F89EA2857719125EA6666F593A8279B3CD9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 23:05:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:6d:2c:55:dd:92:70:fa:7f:da:a7:87:19:e4:10:d8:4e:19:fb:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DE5F8F89EA2857719125EA6666F593A8279B3CD9 Validity Not Before: Dec 18 20:06:27 2025 GMT Not After : Dec 21 23:05:27 2025 GMT Subject: CN=0FC524ABC751B9C0410AB8EEF65EFFD71533B0C6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:98:4f:6c:a4:be:c5:21:84:9f:92:2a:46:3a: 56:81:53:74:b4:2a:03:77:20:98:09:ea:72:44:6e: af:cc:b1:2f:76:7d:a6:1e:51:a5:d8:27:47:35:6a: 6b:73:6a:0a:4f:4e:02:1b:d8:35:d0:dd:4f:8f:a2: 4a:e3:91:02:ee:1c:18:02:a2:91:0b:76:cd:94:e3: 3c:a9:b1:e3:93:52:c8:8d:06:22:11:74:85:36:45: 7d:32:af:6e:68:6c:ad:ce:b5:47:9e:7e:da:fc:8e: 72:6d:36:ad:c7:0e:76:a4:d3:de:e2:28:89:a0:ad: 73:51:3f:33:4e:b1:6c:cb:a8:92:6d:93:58:79:38: 7a:94:e3:e7:a5:63:76:63:b9:c2:2a:a6:9e:a9:16: 1c:ad:c0:72:93:73:21:83:79:01:7c:00:cd:19:2c: 12:fd:1b:fd:c7:6d:8d:e2:03:c6:b1:60:12:22:0e: 14:60:57:1a:df:f5:38:0f:21:55:a3:bb:31:8a:6d: a7:21:0a:29:0b:2b:58:6b:5d:eb:16:25:13:80:c5: 97:f6:3e:85:88:c6:19:cf:74:7f:d8:9d:b2:c0:74: 11:88:a6:b6:4f:46:05:08:9a:4f:36:f0:38:60:64: d8:bc:85:12:3c:80:3a:82:fe:33:ab:c7:ab:7f:5f: ee:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:C5:24:AB:C7:51:B9:C0:41:0A:B8:EE:F6:5E:FF:D7:15:33:B0:C6 X509v3 Authority Key Identifier: keyid:DE:5F:8F:89:EA:28:57:71:91:25:EA:66:66:F5:93:A8:27:9B:3C:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8fd6eaca-f5fd-4acb-85a5-eb8d370823af/0/DE5F8F89EA2857719125EA6666F593A8279B3CD9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE5F8F89EA2857719125EA6666F593A8279B3CD9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8fd6eaca-f5fd-4acb-85a5-eb8d370823af/0/DE5F8F89EA2857719125EA6666F593A8279B3CD9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:c0:7a:d9:b1:b5:bf:94:dd:7f:97:71:b1:f2:80:7b:11:93: 7e:57:38:1f:9f:f1:ae:87:90:8d:3d:96:fe:f0:0a:ff:20:e0: 3a:b9:fe:00:35:5f:f2:c7:e9:e8:00:91:d2:d0:3d:38:54:3a: 61:db:c6:50:ef:93:cf:3d:77:dd:40:aa:7a:31:6c:85:e3:72: 56:05:0a:c6:55:95:78:53:09:f3:6f:62:21:11:54:05:65:37: e3:59:bf:a1:b2:77:85:92:01:f6:ac:72:b4:a1:6f:4e:4f:31: b4:c9:1c:16:33:37:9c:b5:d2:f9:23:31:82:5e:36:82:88:ec: 96:fb:0f:ad:cf:f2:70:bb:1b:27:bd:6b:9f:f5:00:43:37:36: 68:b3:02:a4:0c:54:fd:e3:db:db:da:8a:95:27:33:e8:cf:5d: 24:98:ea:3d:76:ff:93:74:a0:2a:cc:19:a3:90:55:11:96:82: c1:5a:90:00:6a:5c:d2:de:5f:74:0a:99:37:14:fd:fb:bb:68: 26:1e:df:00:36:96:f2:f2:ce:dc:72:28:b4:ad:24:f3:b5:7c: 4b:fb:fa:2f:24:16:69:44:45:92:21:3c:cf:e3:f2:cb:e9:5a: 32:4f:d1:9e:33:17:e9:4f:07:e0:ab:32:10:bd:bf:54:69:16: c3:eb:36:4d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPm0sVd2ScPp/2qeHGeQQ2E4Z+1YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREU1RjhGODlFQTI4NTc3MTkxMjVFQTY2NjZGNTkzQTgy NzlCM0NEOTAeFw0yNTEyMTgyMDA2MjdaFw0yNTEyMjEyMzA1MjdaMDMxMTAvBgNV BAMTKDBGQzUyNEFCQzc1MUI5QzA0MTBBQjhFRUY2NUVGRkQ3MTUzM0IwQzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCmE9spL7FIYSfkipGOlaBU3S0 KgN3IJgJ6nJEbq/MsS92faYeUaXYJ0c1amtzagpPTgIb2DXQ3U+PokrjkQLuHBgC opELds2U4zypseOTUsiNBiIRdIU2RX0yr25obK3OtUeeftr8jnJtNq3HDnak097i KImgrXNRPzNOsWzLqJJtk1h5OHqU4+elY3ZjucIqpp6pFhytwHKTcyGDeQF8AM0Z LBL9G/3HbY3iA8axYBIiDhRgVxrf9TgPIVWjuzGKbachCikLK1hrXesWJROAxZf2 PoWIxhnPdH/YnbLAdBGIprZPRgUImk828DhgZNi8hRI8gDqC/jOrx6t/X+4zAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUD8Ukq8dRucBBCrju9l7/1xUzsMYwHwYDVR0j BBgwFoAU3l+PieooV3GRJepmZvWTqCebPNkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZmQ2ZWFjYS1mNWZkLTRhY2ItODVhNS1lYjhkMzcwODIzYWYvMC9ERTVGOEY4OUVB Mjg1NzcxOTEyNUVBNjY2NkY1OTNBODI3OUIzQ0Q5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREU1RjhGODlFQTI4NTc3MTkxMjVFQTY2NjZGNTkzQTgyNzlC M0NEOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGZkNmVhY2EtZjVmZC00YWNiLTg1 YTUtZWI4ZDM3MDgyM2FmLzAvREU1RjhGODlFQTI4NTc3MTkxMjVFQTY2NjZGNTkz QTgyNzlCM0NEOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALLAetmxtb+U3X+XcbHygHsRk35XOB+f8a6H kI09lv7wCv8g4Dq5/gA1X/LH6egAkdLQPThUOmHbxlDvk889d91AqnoxbIXjclYF CsZVlXhTCfNvYiERVAVlN+NZv6Gyd4WSAfascrShb05PMbTJHBYzN5y10vkjMYJe NoKI7Jb7D63P8nC7Gye9a5/1AEM3NmizAqQMVP3j29vaipUnM+jPXSSY6j12/5N0 oCrMGaOQVRGWgsFakABqXNLeX3QKmTcU/fu7aCYe3wA2lvLyztxyKLStJPO1fEv7 +i8kFmlERZIhPM/j8svpWjJP0Z4zF+lPB+CrMhC9v1RpFsPrNk0= -----END CERTIFICATE-----Generated at Fri Dec 19 11:22:17 2025 by rpki-client