This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d8349cd4-c079-41ff-aa9e-36f3d4482645/0/C8B7605A76DBDD11CCD31F657A0DE454C979D939.mft File: C8B7605A76DBDD11CCD31F657A0DE454C979D939.mft (raw, json) Hash identifier: 4weNRRYUW1IE6ruRGU+gfiDhtaFkop3ncsP1z+BEJ1E= Subject key identifier: F8:48:E6:81:1C:B2:66:88:F1:0E:8C:AA:23:04:27:A1:04:2B:75:48 Authority key identifier: C8:B7:60:5A:76:DB:DD:11:CC:D3:1F:65:7A:0D:E4:54:C9:79:D9:39 Certificate issuer: /CN=C8B7605A76DBDD11CCD31F657A0DE454C979D939 Certificate serial: 19C385AEF806A3952346E69E45077C014E56AE51 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8B7605A76DBDD11CCD31F657A0DE454C979D939.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d8349cd4-c079-41ff-aa9e-36f3d4482645/0/C8B7605A76DBDD11CCD31F657A0DE454C979D939.mft Manifest number: 04C0 Signing time: Tue 02 Dec 2025 05:11:37 +0000 Manifest this update: Tue 02 Dec 2025 05:06:37 +0000 Manifest next update: Fri 05 Dec 2025 16:36:37 +0000 Files and hashes: 1: C8B7605A76DBDD11CCD31F657A0DE454C979D939.crl (hash: qi5desWEyB9I+Qv17ORBw9q+8N6kXWTSqLknF+f5/b4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d8349cd4-c079-41ff-aa9e-36f3d4482645/0/C8B7605A76DBDD11CCD31F657A0DE454C979D939.crl rsync://repo-rpki.idnic.net/repo/d8349cd4-c079-41ff-aa9e-36f3d4482645/0/C8B7605A76DBDD11CCD31F657A0DE454C979D939.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8B7605A76DBDD11CCD31F657A0DE454C979D939.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 16:36:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:c3:85:ae:f8:06:a3:95:23:46:e6:9e:45:07:7c:01:4e:56:ae:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C8B7605A76DBDD11CCD31F657A0DE454C979D939 Validity Not Before: Dec 2 05:06:37 2025 GMT Not After : Dec 5 16:36:37 2025 GMT Subject: CN=F848E6811CB26688F10E8CAA230427A1042B7548 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:43:67:fa:a3:db:f1:c7:72:a0:6f:85:b6:5b: c5:a3:31:4f:cf:b0:19:2d:d8:ef:f7:82:02:b5:0d: 30:21:fc:97:77:1d:cb:5b:ef:d2:b1:70:0e:0c:91: de:01:78:b5:6c:fa:3a:b4:20:d6:27:57:38:a4:38: 77:34:25:32:c5:17:ca:ab:72:bd:c6:8d:89:e9:da: a7:c5:e8:11:dd:1b:51:ff:8d:17:9b:06:79:d4:b5: 0e:86:f2:87:a2:0a:8c:5d:48:cd:27:b7:be:96:bc: b8:08:5c:75:02:c2:fe:d6:05:31:3c:8d:cb:d1:d2: d9:5f:4c:5c:48:a8:3a:ed:a9:2b:04:d1:d4:b2:2e: 53:59:9e:1f:dc:e4:06:a8:33:69:79:51:be:fc:30: 57:1a:77:d8:84:13:48:79:71:ea:54:80:86:05:59: 52:4c:2f:95:1a:1b:83:fb:be:05:d3:1b:d2:cc:df: f1:80:cd:7e:2a:ce:a9:f3:84:4f:70:d4:cf:b3:e0: 77:11:63:58:35:21:97:66:c1:cd:c4:2c:e8:07:98: 2f:73:cc:3c:a1:39:ff:a8:f5:52:55:a2:8a:08:9e: f1:25:21:c8:ff:6c:84:ed:5f:5d:36:4a:3a:34:02: 88:8d:dc:a6:e8:49:68:0b:4c:cd:06:74:fa:e2:a7: d3:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:48:E6:81:1C:B2:66:88:F1:0E:8C:AA:23:04:27:A1:04:2B:75:48 X509v3 Authority Key Identifier: keyid:C8:B7:60:5A:76:DB:DD:11:CC:D3:1F:65:7A:0D:E4:54:C9:79:D9:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d8349cd4-c079-41ff-aa9e-36f3d4482645/0/C8B7605A76DBDD11CCD31F657A0DE454C979D939.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8B7605A76DBDD11CCD31F657A0DE454C979D939.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d8349cd4-c079-41ff-aa9e-36f3d4482645/0/C8B7605A76DBDD11CCD31F657A0DE454C979D939.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:a7:94:29:f5:2d:e1:6d:b8:70:57:76:36:d2:42:10:af:ae: 50:f2:ee:77:3a:c5:53:68:0b:4e:ce:57:f8:50:e7:00:ba:66: 97:8e:3c:1a:f6:70:0a:33:9d:6b:e2:4c:20:b2:62:89:f1:93: be:7d:0a:b4:b8:2d:10:ef:55:83:64:89:15:52:e8:ea:c3:13: a9:d4:0b:55:0f:b8:fc:9f:b2:b6:f3:5d:ab:d0:e7:fa:7d:a9: 61:c1:23:33:4e:43:4d:1f:b2:49:ce:fe:7c:15:54:7e:22:4b: 97:02:ba:ba:8f:ba:bb:d1:72:04:0b:a0:36:fb:9c:18:01:25: d9:91:37:7a:f6:6b:d0:b3:15:7a:89:1b:24:61:8b:c0:f1:86: de:b9:8e:f1:a0:02:3c:62:2f:d1:5f:10:9a:65:b6:44:9e:8f: d6:a0:5a:3e:51:19:05:a4:c0:a3:47:4a:c1:c7:3d:1f:a1:ab: 8d:ca:fe:0a:75:f1:09:ff:b6:56:63:2d:42:d7:8d:37:41:d1: e1:10:28:48:fb:a4:b5:78:ec:ee:0e:09:1f:a2:d3:8b:20:8b: 72:a0:a6:11:6a:f6:58:ca:16:9b:5c:ed:f6:96:0c:90:1c:f5: 29:97:01:25:78:49:d4:ff:58:2f:11:bc:58:03:86:65:14:a3: 06:4b:e9:af -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGcOFrvgGo5UjRuaeRQd8AU5WrlEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzhCNzYwNUE3NkRCREQxMUNDRDMxRjY1N0EwREU0NTRD OTc5RDkzOTAeFw0yNTEyMDIwNTA2MzdaFw0yNTEyMDUxNjM2MzdaMDMxMTAvBgNV BAMTKEY4NDhFNjgxMUNCMjY2ODhGMTBFOENBQTIzMDQyN0ExMDQyQjc1NDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwQ2f6o9vxx3Kgb4W2W8WjMU/P sBkt2O/3ggK1DTAh/Jd3Hctb79KxcA4Mkd4BeLVs+jq0INYnVzikOHc0JTLFF8qr cr3GjYnp2qfF6BHdG1H/jRebBnnUtQ6G8oeiCoxdSM0nt76WvLgIXHUCwv7WBTE8 jcvR0tlfTFxIqDrtqSsE0dSyLlNZnh/c5AaoM2l5Ub78MFcad9iEE0h5cepUgIYF WVJML5UaG4P7vgXTG9LM3/GAzX4qzqnzhE9w1M+z4HcRY1g1IZdmwc3ELOgHmC9z zDyhOf+o9VJVoooInvElIcj/bITtX102Sjo0AoiN3KboSWgLTM0GdPrip9PVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+EjmgRyyZojxDoyqIwQnoQQrdUgwHwYDVR0j BBgwFoAUyLdgWnbb3RHM0x9leg3kVMl52TkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ODM0OWNkNC1jMDc5LTQxZmYtYWE5ZS0zNmYzZDQ0ODI2NDUvMC9DOEI3NjA1QTc2 REJERDExQ0NEMzFGNjU3QTBERTQ1NEM5NzlEOTM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzhCNzYwNUE3NkRCREQxMUNDRDMxRjY1N0EwREU0NTRDOTc5 RDkzOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDgzNDljZDQtYzA3OS00MWZmLWFh OWUtMzZmM2Q0NDgyNjQ1LzAvQzhCNzYwNUE3NkRCREQxMUNDRDMxRjY1N0EwREU0 NTRDOTc5RDkzOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJenlCn1LeFtuHBXdjbSQhCvrlDy7nc6xVNo C07OV/hQ5wC6ZpeOPBr2cAoznWviTCCyYonxk759CrS4LRDvVYNkiRVS6OrDE6nU C1UPuPyfsrbzXavQ5/p9qWHBIzNOQ00fsknO/nwVVH4iS5cCurqPurvRcgQLoDb7 nBgBJdmRN3r2a9CzFXqJGyRhi8Dxht65jvGgAjxiL9FfEJpltkSej9agWj5RGQWk wKNHSsHHPR+hq43K/gp18Qn/tlZjLULXjTdB0eEQKEj7pLV47O4OCR+i04sgi3Kg phFq9ljKFptc7faWDJAc9SmXASV4SdT/WC8RvFgDhmUUowZL6a8= -----END CERTIFICATE-----Generated at Wed Dec 3 16:39:41 2025 by rpki-client