This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/9338bdad-d2dd-4f07-ae84-c540612baf6a/0/8C3462809943E9E8E8E89052BF9B9C3DDC60EE22.mft File: 8C3462809943E9E8E8E89052BF9B9C3DDC60EE22.mft (raw, json) Hash identifier: E178ZQ/TVqrzEIaCFXHny30ipzOkM1iLkNAgaMVrwjQ= Subject key identifier: 35:94:EE:CF:EF:E0:9E:AD:98:08:55:55:89:84:FF:B3:8D:E5:3A:13 Authority key identifier: 8C:34:62:80:99:43:E9:E8:E8:E8:90:52:BF:9B:9C:3D:DC:60:EE:22 Certificate issuer: /CN=8C3462809943E9E8E8E89052BF9B9C3DDC60EE22 Certificate serial: 38592A0A9649AD795F70C360C3BDD19526C77BD5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C3462809943E9E8E8E89052BF9B9C3DDC60EE22.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9338bdad-d2dd-4f07-ae84-c540612baf6a/0/8C3462809943E9E8E8E89052BF9B9C3DDC60EE22.mft Manifest number: 0270 Signing time: Tue 02 Dec 2025 21:00:49 +0000 Manifest this update: Tue 02 Dec 2025 20:55:49 +0000 Manifest next update: Sat 06 Dec 2025 03:28:49 +0000 Files and hashes: 1: 8C3462809943E9E8E8E89052BF9B9C3DDC60EE22.crl (hash: iMqkZ1alvxVwLV9m/Kn5cg45n2p0KoHI/vYTQgiWoNc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9338bdad-d2dd-4f07-ae84-c540612baf6a/0/8C3462809943E9E8E8E89052BF9B9C3DDC60EE22.crl rsync://repo-rpki.idnic.net/repo/9338bdad-d2dd-4f07-ae84-c540612baf6a/0/8C3462809943E9E8E8E89052BF9B9C3DDC60EE22.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C3462809943E9E8E8E89052BF9B9C3DDC60EE22.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 03:28:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:59:2a:0a:96:49:ad:79:5f:70:c3:60:c3:bd:d1:95:26:c7:7b:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8C3462809943E9E8E8E89052BF9B9C3DDC60EE22 Validity Not Before: Dec 2 20:55:49 2025 GMT Not After : Dec 6 03:28:49 2025 GMT Subject: CN=3594EECFEFE09EAD980855558984FFB38DE53A13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:27:09:17:5c:03:1c:23:b1:e5:12:63:d4:bb: 91:11:eb:95:24:37:bb:0d:dc:ce:81:44:d0:56:85: fa:70:e0:00:91:77:49:3c:7e:3d:55:73:27:0d:a5: cd:21:53:a6:4d:90:06:c2:aa:52:03:de:36:ff:1e: 8b:b6:28:bd:36:c8:18:85:aa:b5:d0:e3:8e:4d:31: e7:18:59:3b:05:b9:46:08:1d:b6:a0:07:1b:0d:c2: d3:18:12:ba:17:5c:d0:3d:28:12:82:03:c3:85:63: c0:1c:83:e2:33:c7:e7:67:4d:3d:cb:53:c9:3c:06: dd:89:24:0c:47:da:e9:82:60:d5:06:69:3c:bd:62: e6:47:5f:a2:5d:3e:44:d8:71:1f:c7:b4:c5:15:de: b5:ce:1f:d0:90:9c:18:f2:c7:27:4c:ff:26:cb:92: 71:da:1b:6c:c7:bc:fa:e4:9f:79:89:ee:3e:65:8d: e5:d5:63:01:f0:62:86:71:9b:83:30:31:34:22:ef: 4d:16:b5:f2:50:1b:d0:22:e4:1f:31:d0:4d:42:ab: e4:11:d7:3f:4b:eb:be:e6:70:44:ee:61:b0:b5:d3: 7e:e6:f7:06:d9:a4:de:1e:d9:f9:9d:93:b5:d4:cd: c4:48:4a:5b:e3:34:71:b4:29:e8:ef:08:8f:8d:2b: 71:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:94:EE:CF:EF:E0:9E:AD:98:08:55:55:89:84:FF:B3:8D:E5:3A:13 X509v3 Authority Key Identifier: keyid:8C:34:62:80:99:43:E9:E8:E8:E8:90:52:BF:9B:9C:3D:DC:60:EE:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9338bdad-d2dd-4f07-ae84-c540612baf6a/0/8C3462809943E9E8E8E89052BF9B9C3DDC60EE22.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C3462809943E9E8E8E89052BF9B9C3DDC60EE22.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9338bdad-d2dd-4f07-ae84-c540612baf6a/0/8C3462809943E9E8E8E89052BF9B9C3DDC60EE22.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:16:01:89:2c:68:a4:89:38:5c:a4:a9:0f:81:79:58:c9:3c: 4f:74:af:60:b8:5f:d5:84:18:ef:6e:91:c4:bd:f9:ca:a4:d9: 7c:cc:c8:f2:59:ea:0b:04:92:b2:66:78:42:52:34:ea:bc:e1: 89:83:76:e2:f2:be:65:bf:7c:9c:d2:a6:d1:2e:24:08:68:e5: b0:9d:9a:30:1a:7f:3c:81:ee:4e:27:b1:5e:7a:d7:b1:fe:58: b5:c6:06:83:8f:b4:95:23:53:e9:c8:51:b5:b0:fa:be:48:7f: 5c:4a:a9:e9:8e:10:45:cd:81:b4:9e:64:74:e9:4c:b4:82:db: 37:8e:67:07:e2:53:af:86:ff:2b:0d:68:08:95:92:50:b5:c5: 60:77:8e:58:dc:81:66:15:35:03:f2:4e:4b:70:13:2f:82:b5: ab:d0:94:a9:7e:6d:7a:44:6f:46:b3:1f:ad:db:ca:97:9a:03: 6e:de:79:20:e5:a5:14:8f:c1:29:bb:6d:dc:5a:80:27:21:8a: b2:40:c5:0f:d8:09:eb:b0:31:82:16:f5:ce:21:c2:35:5b:9d: 82:9c:66:1f:3d:d2:23:57:c4:73:f1:91:8a:54:45:2d:64:0f: c8:20:8e:0c:86:b6:38:c7:8e:6f:67:3c:75:75:eb:83:a6:02: d8:d3:4f:9c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOFkqCpZJrXlfcMNgw73RlSbHe9UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEMzNDYyODA5OTQzRTlFOEU4RTg5MDUyQkY5QjlDM0RE QzYwRUUyMjAeFw0yNTEyMDIyMDU1NDlaFw0yNTEyMDYwMzI4NDlaMDMxMTAvBgNV BAMTKDM1OTRFRUNGRUZFMDlFQUQ5ODA4NTU1NTg5ODRGRkIzOERFNTNBMTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHJwkXXAMcI7HlEmPUu5ER65Uk N7sN3M6BRNBWhfpw4ACRd0k8fj1VcycNpc0hU6ZNkAbCqlID3jb/Hou2KL02yBiF qrXQ445NMecYWTsFuUYIHbagBxsNwtMYEroXXNA9KBKCA8OFY8Acg+Izx+dnTT3L U8k8Bt2JJAxH2umCYNUGaTy9YuZHX6JdPkTYcR/HtMUV3rXOH9CQnBjyxydM/ybL knHaG2zHvPrkn3mJ7j5ljeXVYwHwYoZxm4MwMTQi700WtfJQG9Ai5B8x0E1Cq+QR 1z9L677mcETuYbC1037m9wbZpN4e2fmdk7XUzcRISlvjNHG0KejvCI+NK3G7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNZTuz+/gnq2YCFVViYT/s43lOhMwHwYDVR0j BBgwFoAUjDRigJlD6ejo6JBSv5ucPdxg7iIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MzM4YmRhZC1kMmRkLTRmMDctYWU4NC1jNTQwNjEyYmFmNmEvMC84QzM0NjI4MDk5 NDNFOUU4RThFODkwNTJCRjlCOUMzRERDNjBFRTIyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEMzNDYyODA5OTQzRTlFOEU4RTg5MDUyQkY5QjlDM0REQzYw RUUyMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTMzOGJkYWQtZDJkZC00ZjA3LWFl ODQtYzU0MDYxMmJhZjZhLzAvOEMzNDYyODA5OTQzRTlFOEU4RTg5MDUyQkY5QjlD M0REQzYwRUUyMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADkWAYksaKSJOFykqQ+BeVjJPE90r2C4X9WE GO9ukcS9+cqk2XzMyPJZ6gsEkrJmeEJSNOq84YmDduLyvmW/fJzSptEuJAho5bCd mjAafzyB7k4nsV5617H+WLXGBoOPtJUjU+nIUbWw+r5If1xKqemOEEXNgbSeZHTp TLSC2zeOZwfiU6+G/ysNaAiVklC1xWB3jljcgWYVNQPyTktwEy+CtavQlKl+bXpE b0azH63bypeaA27eeSDlpRSPwSm7bdxagCchirJAxQ/YCeuwMYIW9c4hwjVbnYKc Zh890iNXxHPxkYpURS1kD8ggjgyGtjjHjm9nPHV164OmAtjTT5w= -----END CERTIFICATE-----Generated at Wed Dec 3 14:47:37 2025 by rpki-client