This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/c965dd39-48d0-4578-8fe5-66d953384e50/0/8902A1A2A87110119F8477271D6D224973A35F04.mft File: 8902A1A2A87110119F8477271D6D224973A35F04.mft (raw, json) Hash identifier: RERG/XbhBSUwQAiz2aounf2DSHzGQMJ3Lylgxvor/Pc= Subject key identifier: 29:EE:22:5F:1D:93:E5:9E:0F:57:E0:AC:8F:DD:84:21:2D:D3:AB:55 Authority key identifier: 89:02:A1:A2:A8:71:10:11:9F:84:77:27:1D:6D:22:49:73:A3:5F:04 Certificate issuer: /CN=8902A1A2A87110119F8477271D6D224973A35F04 Certificate serial: 4055DC9B26E112A8D087A3D6E7A62468B5EFBD4D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8902A1A2A87110119F8477271D6D224973A35F04.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c965dd39-48d0-4578-8fe5-66d953384e50/0/8902A1A2A87110119F8477271D6D224973A35F04.mft Manifest number: 02B5 Signing time: Tue 02 Dec 2025 20:30:03 +0000 Manifest this update: Tue 02 Dec 2025 20:25:03 +0000 Manifest next update: Sat 06 Dec 2025 04:14:03 +0000 Files and hashes: 1: 8902A1A2A87110119F8477271D6D224973A35F04.crl (hash: fZ2KyZz/jLy9Xf75x8RRVVzf4eZq2dVvovznhgWCsXo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c965dd39-48d0-4578-8fe5-66d953384e50/0/8902A1A2A87110119F8477271D6D224973A35F04.crl rsync://repo-rpki.idnic.net/repo/c965dd39-48d0-4578-8fe5-66d953384e50/0/8902A1A2A87110119F8477271D6D224973A35F04.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8902A1A2A87110119F8477271D6D224973A35F04.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 04:14:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:55:dc:9b:26:e1:12:a8:d0:87:a3:d6:e7:a6:24:68:b5:ef:bd:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8902A1A2A87110119F8477271D6D224973A35F04 Validity Not Before: Dec 2 20:25:03 2025 GMT Not After : Dec 6 04:14:03 2025 GMT Subject: CN=29EE225F1D93E59E0F57E0AC8FDD84212DD3AB55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:b5:9e:cf:4a:5b:db:3c:0c:dd:f2:54:4b:2f: 5b:7c:02:48:e1:aa:9f:10:25:c0:f3:dd:8e:07:42: 18:c9:1a:ce:fc:3b:34:c9:9e:38:de:a7:0f:87:4f: 16:ba:53:a6:ec:0b:d1:c8:98:ab:ee:1a:a6:bf:13: ff:b3:db:8c:c0:b6:e8:54:5a:e5:78:8b:9e:c5:cb: fe:74:f6:32:c7:f8:73:6d:2a:72:cb:cf:f2:74:88: a9:58:05:9c:98:19:da:50:3b:61:7a:56:85:15:f9: 48:20:2e:bd:9d:5b:a4:15:e6:1d:8b:2e:c3:4e:dc: 8e:0b:93:1d:0a:a1:e9:bc:4b:f9:01:1f:0f:e7:dd: b1:9a:66:5e:04:e8:1c:37:46:02:a9:ae:d8:54:c0: b3:35:f7:67:c1:8c:c0:8d:21:fb:54:6f:1a:bd:ed: 55:2a:38:1a:ba:53:44:b1:72:04:f5:40:03:80:86: ce:98:25:13:f0:22:2c:8f:d7:04:33:7a:0b:61:71: 28:6b:45:be:4f:23:e5:31:cd:c6:5a:0c:bf:1c:a0: 3b:c3:53:e9:91:ad:5e:a6:b0:68:4b:95:e5:76:50: ed:9e:df:30:ab:6c:a4:04:0a:c1:15:cc:31:37:69: 12:96:1b:55:b8:fc:ec:c6:24:f6:6a:b5:4e:cf:80: cf:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:EE:22:5F:1D:93:E5:9E:0F:57:E0:AC:8F:DD:84:21:2D:D3:AB:55 X509v3 Authority Key Identifier: keyid:89:02:A1:A2:A8:71:10:11:9F:84:77:27:1D:6D:22:49:73:A3:5F:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c965dd39-48d0-4578-8fe5-66d953384e50/0/8902A1A2A87110119F8477271D6D224973A35F04.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8902A1A2A87110119F8477271D6D224973A35F04.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c965dd39-48d0-4578-8fe5-66d953384e50/0/8902A1A2A87110119F8477271D6D224973A35F04.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:d2:8c:bb:d7:93:a1:3e:7a:e4:0d:2b:c7:15:dc:4f:4c:34: e8:ff:b6:72:c7:79:ff:b8:1d:61:8b:9e:f8:6a:3a:54:cb:43: a2:d4:94:f1:04:a3:be:83:55:09:de:c5:cf:cb:fa:b5:16:b7: 70:c5:be:be:28:01:5d:59:93:27:75:5b:fd:6a:d0:39:f6:62: 2c:65:e0:7c:40:37:c3:74:b8:8e:90:bc:6b:21:60:05:cd:d7: 9b:92:ba:a6:3c:58:5d:14:f6:cc:49:5e:85:93:93:4f:a8:44: 3c:12:4c:0e:c9:37:6e:a6:b0:e6:56:bc:cc:4f:cf:bd:cf:85: 68:57:1b:66:b1:2a:77:c8:fc:0d:e4:27:e1:b8:a7:13:e3:56: 76:84:82:1b:48:02:59:43:d9:7b:2f:5d:fb:06:19:a6:c7:18: 71:85:57:59:e7:18:62:d9:7a:d4:cd:e3:f2:d2:04:9e:2e:3e: 59:92:55:1c:75:e3:36:b7:f8:05:f6:b1:9d:7f:e1:db:7e:4b: 68:04:f2:dc:5e:67:57:38:8f:52:34:a0:e9:0b:d7:26:70:1c: 51:2b:fe:21:58:a8:d6:8a:4e:22:b8:92:ff:e6:21:4d:fd:9d: 5a:dc:62:66:36:76:a9:9c:6e:59:93:83:82:8a:ed:18:7e:15: cc:78:1b:ed -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQFXcmybhEqjQh6PW56YkaLXvvU0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODkwMkExQTJBODcxMTAxMTlGODQ3NzI3MUQ2RDIyNDk3 M0EzNUYwNDAeFw0yNTEyMDIyMDI1MDNaFw0yNTEyMDYwNDE0MDNaMDMxMTAvBgNV BAMTKDI5RUUyMjVGMUQ5M0U1OUUwRjU3RTBBQzhGREQ4NDIxMkREM0FCNTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmtZ7PSlvbPAzd8lRLL1t8Akjh qp8QJcDz3Y4HQhjJGs78OzTJnjjepw+HTxa6U6bsC9HImKvuGqa/E/+z24zAtuhU WuV4i57Fy/509jLH+HNtKnLLz/J0iKlYBZyYGdpQO2F6VoUV+UggLr2dW6QV5h2L LsNO3I4Lkx0Koem8S/kBHw/n3bGaZl4E6Bw3RgKprthUwLM192fBjMCNIftUbxq9 7VUqOBq6U0SxcgT1QAOAhs6YJRPwIiyP1wQzegthcShrRb5PI+UxzcZaDL8coDvD U+mRrV6msGhLleV2UO2e3zCrbKQECsEVzDE3aRKWG1W4/OzGJPZqtU7PgM8FAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKe4iXx2T5Z4PV+Csj92EIS3Tq1UwHwYDVR0j BBgwFoAUiQKhoqhxEBGfhHcnHW0iSXOjXwQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j OTY1ZGQzOS00OGQwLTQ1NzgtOGZlNS02NmQ5NTMzODRlNTAvMC84OTAyQTFBMkE4 NzExMDExOUY4NDc3MjcxRDZEMjI0OTczQTM1RjA0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODkwMkExQTJBODcxMTAxMTlGODQ3NzI3MUQ2RDIyNDk3M0Ez NUYwNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzk2NWRkMzktNDhkMC00NTc4LThm ZTUtNjZkOTUzMzg0ZTUwLzAvODkwMkExQTJBODcxMTAxMTlGODQ3NzI3MUQ2RDIy NDk3M0EzNUYwNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAETSjLvXk6E+euQNK8cV3E9MNOj/tnLHef+4 HWGLnvhqOlTLQ6LUlPEEo76DVQnexc/L+rUWt3DFvr4oAV1Zkyd1W/1q0Dn2Yixl 4HxAN8N0uI6QvGshYAXN15uSuqY8WF0U9sxJXoWTk0+oRDwSTA7JN26msOZWvMxP z73PhWhXG2axKnfI/A3kJ+G4pxPjVnaEghtIAllD2XsvXfsGGabHGHGFV1nnGGLZ etTN4/LSBJ4uPlmSVRx14za3+AX2sZ1/4dt+S2gE8txeZ1c4j1I0oOkL1yZwHFEr /iFYqNaKTiK4kv/mIU39nVrcYmY2dqmcblmTg4KK7Rh+Fcx4G+0= -----END CERTIFICATE-----Generated at Wed Dec 3 15:51:07 2025 by rpki-client