This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/1/C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88.mft File: C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88.mft (raw, json) Hash identifier: FUzT6zKsn4xwcOT1QfHEioxj3fbQnwyT708zcXYcO6Q= Subject key identifier: CE:F4:71:83:9B:33:D9:30:AA:DC:C6:A4:B4:72:3E:33:45:51:4F:19 Authority key identifier: C8:C5:B7:81:B7:F4:3C:62:74:BD:AA:C3:FD:8A:E1:91:4A:BE:ED:88 Certificate issuer: /CN=C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88 Certificate serial: 7014B148DD47241748F6237A19C22FC395230801 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88.cer Subject info access: rsync://repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/1/C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88.mft Manifest number: AF Signing time: Tue 02 Dec 2025 03:23:28 +0000 Manifest this update: Tue 02 Dec 2025 03:18:28 +0000 Manifest next update: Fri 05 Dec 2025 08:39:28 +0000 Files and hashes: 1: C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88.crl (hash: mg+bvxlUZ+ZGe4yrCQHN4nzU8MQDmO7ZwcoVIY/ool4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/1/C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88.crl rsync://repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/1/C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 08:39:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:14:b1:48:dd:47:24:17:48:f6:23:7a:19:c2:2f:c3:95:23:08:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88 Validity Not Before: Dec 2 03:18:28 2025 GMT Not After : Dec 5 08:39:28 2025 GMT Subject: CN=CEF471839B33D930AADCC6A4B4723E3345514F19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:47:7d:bd:b3:e9:0d:a0:da:b5:4b:e6:e6:cf: ef:06:eb:33:3f:d3:14:67:09:7b:f9:8c:11:49:b1: 71:75:e5:ca:26:bd:2c:c0:eb:9a:4a:e3:16:96:46: 7e:e5:12:f5:68:0e:23:75:69:b7:c5:d0:ef:fd:d9: 06:58:54:9f:0e:5f:f5:ef:c9:38:d7:e4:c3:2b:73: 78:76:9d:12:9e:b3:9f:49:b6:e5:66:4d:eb:97:2b: f3:59:89:5d:e8:ef:df:ff:a3:ef:89:8d:66:23:2c: 08:75:eb:12:e4:5a:f9:8e:48:33:1d:98:4a:92:2c: c2:93:d3:a2:26:f1:71:2b:a4:3d:83:71:02:83:ce: ce:1a:89:1e:0c:e4:0e:d2:29:b5:cd:e7:c7:91:97: 1b:7d:62:42:e5:14:19:d3:0d:4b:18:89:a4:e7:a9: e4:65:03:f7:93:8e:6e:3d:8d:aa:f4:59:b9:4c:8a: c7:6d:39:97:5d:76:f7:f0:14:b1:ac:4a:44:72:5a: de:58:b4:2f:77:c2:47:83:1a:95:a5:3d:50:a2:26: 73:fc:e6:4e:ca:11:e0:9e:90:05:fe:2a:02:fe:8d: 5f:59:c5:6a:b7:03:17:af:d8:2e:26:e3:00:94:20: da:52:d9:54:3e:1b:4c:43:07:30:eb:f5:2c:33:53: 09:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:F4:71:83:9B:33:D9:30:AA:DC:C6:A4:B4:72:3E:33:45:51:4F:19 X509v3 Authority Key Identifier: keyid:C8:C5:B7:81:B7:F4:3C:62:74:BD:AA:C3:FD:8A:E1:91:4A:BE:ED:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/1/C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/1/C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:9f:0b:40:ef:bc:50:cc:b9:b9:81:ac:79:52:f2:ea:55:51: 42:d9:91:90:a4:21:67:a9:1b:ce:e7:94:8f:14:0d:d0:ba:a2: 7e:9b:16:59:ac:b8:b1:ec:b9:01:24:20:1b:a5:60:40:7f:3a: 40:b4:2e:26:ea:ac:19:a1:5d:07:0a:e7:ae:9c:0e:e1:70:48: b6:c3:00:45:89:45:ee:ca:31:e9:1b:69:57:20:08:96:cd:2c: 83:dd:96:70:82:e7:b1:d4:87:1b:5a:24:76:0b:f3:da:3b:e7: fe:a9:59:8a:df:a7:2f:5f:18:8a:d7:51:9b:98:56:74:90:ae: 87:b7:3c:bf:70:7f:05:3a:f1:ed:79:56:9a:78:6a:d8:92:3f: 9d:60:b4:13:e8:95:eb:bd:4e:b4:06:ce:f0:28:05:7c:6e:63: 4f:11:00:0f:0c:9a:61:6a:f6:3f:ab:d8:ea:39:62:7e:7c:7a: 82:ce:38:28:75:71:0d:c6:30:96:ba:40:8c:b7:02:ae:13:ba: 48:b7:89:c2:7f:b7:83:a8:e0:bb:ac:83:6a:72:a0:48:a8:6a: 3d:f4:4f:3c:cb:07:14:a6:57:5b:b2:ff:ac:6c:92:f1:47:d8: 73:56:30:9d:4e:b8:b1:19:8e:39:90:fa:63:51:96:a2:b8:1c: a0:e8:34:2c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcBSxSN1HJBdI9iN6GcIvw5UjCAEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzhDNUI3ODFCN0Y0M0M2Mjc0QkRBQUMzRkQ4QUUxOTE0 QUJFRUQ4ODAeFw0yNTEyMDIwMzE4MjhaFw0yNTEyMDUwODM5MjhaMDMxMTAvBgNV BAMTKENFRjQ3MTgzOUIzM0Q5MzBBQURDQzZBNEI0NzIzRTMzNDU1MTRGMTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVR329s+kNoNq1S+bmz+8G6zM/ 0xRnCXv5jBFJsXF15comvSzA65pK4xaWRn7lEvVoDiN1abfF0O/92QZYVJ8OX/Xv yTjX5MMrc3h2nRKes59JtuVmTeuXK/NZiV3o79//o++JjWYjLAh16xLkWvmOSDMd mEqSLMKT06Im8XErpD2DcQKDzs4aiR4M5A7SKbXN58eRlxt9YkLlFBnTDUsYiaTn qeRlA/eTjm49jar0WblMisdtOZdddvfwFLGsSkRyWt5YtC93wkeDGpWlPVCiJnP8 5k7KEeCekAX+KgL+jV9ZxWq3Axev2C4m4wCUINpS2VQ+G0xDBzDr9SwzUwlzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzvRxg5sz2TCq3MaktHI+M0VRTxkwHwYDVR0j BBgwFoAUyMW3gbf0PGJ0varD/YrhkUq+7YgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ODg1M2FhYi04ZDZjLTQ1N2YtOWQ1Ny00ODRhY2FjZWE5ZDgvMS9DOEM1Qjc4MUI3 RjQzQzYyNzRCREFBQzNGRDhBRTE5MTRBQkVFRDg4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzhDNUI3ODFCN0Y0M0M2Mjc0QkRBQUMzRkQ4QUUxOTE0QUJF RUQ4OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTg4NTNhYWItOGQ2Yy00NTdmLTlk NTctNDg0YWNhY2VhOWQ4LzEvQzhDNUI3ODFCN0Y0M0M2Mjc0QkRBQUMzRkQ4QUUx OTE0QUJFRUQ4OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKefC0DvvFDMubmBrHlS8upVUULZkZCkIWep G87nlI8UDdC6on6bFlmsuLHsuQEkIBulYEB/OkC0LibqrBmhXQcK566cDuFwSLbD AEWJRe7KMekbaVcgCJbNLIPdlnCC57HUhxtaJHYL89o75/6pWYrfpy9fGIrXUZuY VnSQroe3PL9wfwU68e15Vpp4atiSP51gtBPoleu9TrQGzvAoBXxuY08RAA8MmmFq 9j+r2Oo5Yn58eoLOOCh1cQ3GMJa6QIy3Aq4Tuki3icJ/t4Oo4Lusg2pyoEioaj30 TzzLBxSmV1uy/6xskvFH2HNWMJ1OuLEZjjmQ+mNRlqK4HKDoNCw= -----END CERTIFICATE-----Generated at Wed Dec 3 14:43:49 2025 by rpki-client