This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ecd251ca-a05e-4fbe-93bb-b5469aef96a2/0/8CC7E4A24627D011FC35B3FE8B6E9A25C993C6EC.mft File: 8CC7E4A24627D011FC35B3FE8B6E9A25C993C6EC.mft (raw, json) Hash identifier: KTOmGzotdIEDaWioHdwLycRsPmgFeC/nYxvbB2Qpbf4= Subject key identifier: 29:15:F2:9A:40:8E:3E:C6:32:BA:68:6A:85:45:19:C1:4A:E3:9D:40 Authority key identifier: 8C:C7:E4:A2:46:27:D0:11:FC:35:B3:FE:8B:6E:9A:25:C9:93:C6:EC Certificate issuer: /CN=8CC7E4A24627D011FC35B3FE8B6E9A25C993C6EC Certificate serial: 6A0594C0534B06134EAF2289644AB91915F61C1A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CC7E4A24627D011FC35B3FE8B6E9A25C993C6EC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ecd251ca-a05e-4fbe-93bb-b5469aef96a2/0/8CC7E4A24627D011FC35B3FE8B6E9A25C993C6EC.mft Manifest number: 52 Signing time: Wed 03 Dec 2025 07:21:15 +0000 Manifest this update: Wed 03 Dec 2025 07:16:15 +0000 Manifest next update: Sat 06 Dec 2025 16:28:15 +0000 Files and hashes: 1: 8CC7E4A24627D011FC35B3FE8B6E9A25C993C6EC.crl (hash: +nGJrW+ECzTXgC+V89fqm0oL6sNo+ybhmmXpY23s9q0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ecd251ca-a05e-4fbe-93bb-b5469aef96a2/0/8CC7E4A24627D011FC35B3FE8B6E9A25C993C6EC.crl rsync://repo-rpki.idnic.net/repo/ecd251ca-a05e-4fbe-93bb-b5469aef96a2/0/8CC7E4A24627D011FC35B3FE8B6E9A25C993C6EC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CC7E4A24627D011FC35B3FE8B6E9A25C993C6EC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 16:28:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:05:94:c0:53:4b:06:13:4e:af:22:89:64:4a:b9:19:15:f6:1c:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8CC7E4A24627D011FC35B3FE8B6E9A25C993C6EC Validity Not Before: Dec 3 07:16:15 2025 GMT Not After : Dec 6 16:28:15 2025 GMT Subject: CN=2915F29A408E3EC632BA686A854519C14AE39D40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:22:43:24:db:07:5f:ef:80:82:2c:1f:63:a8: 95:6d:6a:5e:b7:56:b5:77:c7:f0:83:21:bb:8f:93: 4e:b5:f7:92:b5:dd:a4:ca:50:e6:9a:39:91:f9:14: 92:e1:21:ec:aa:fe:0e:e4:0d:b1:10:ba:ce:f6:f6: 69:8c:c8:59:90:67:10:98:a9:f7:7f:06:08:d8:d9: 33:50:64:b8:91:75:89:ad:0f:7d:cd:73:4e:38:3d: 08:f2:69:12:a5:ff:a6:e8:34:07:0f:66:1c:a5:03: 16:30:d8:ae:73:04:7c:d9:76:f4:21:99:7c:1f:a5: 91:e1:13:5c:dd:82:9a:a7:43:f6:74:e8:af:b8:df: ad:9b:0d:8c:b3:5d:f0:ef:ea:c9:36:06:eb:bb:0c: c0:c6:cd:17:3f:e0:ce:6e:4e:1e:6b:8d:de:ae:b1: 57:e4:b7:11:80:d6:29:a4:c3:00:94:02:ee:0b:1e: 4e:a6:35:a4:6f:33:c4:95:d0:59:d5:8e:98:25:06: 0e:0f:34:a0:21:91:24:9c:bd:0f:f1:84:59:20:51: bd:c3:47:f1:19:37:f1:09:ea:77:69:3a:a8:bc:b1: e5:f2:ef:33:75:f3:50:b6:c1:f1:72:88:7b:8a:c9: 23:76:c0:1c:13:80:19:95:e7:71:43:e5:03:31:a3: 85:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:15:F2:9A:40:8E:3E:C6:32:BA:68:6A:85:45:19:C1:4A:E3:9D:40 X509v3 Authority Key Identifier: keyid:8C:C7:E4:A2:46:27:D0:11:FC:35:B3:FE:8B:6E:9A:25:C9:93:C6:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ecd251ca-a05e-4fbe-93bb-b5469aef96a2/0/8CC7E4A24627D011FC35B3FE8B6E9A25C993C6EC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CC7E4A24627D011FC35B3FE8B6E9A25C993C6EC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ecd251ca-a05e-4fbe-93bb-b5469aef96a2/0/8CC7E4A24627D011FC35B3FE8B6E9A25C993C6EC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c7:32:58:ff:5a:37:6c:6d:6e:e9:cb:38:a5:cc:76:f1:2e:cc: c5:5c:4a:a6:e6:f2:55:4c:5d:50:74:66:34:8a:28:57:dd:32: 2f:09:04:73:72:ab:d5:33:4b:02:31:c0:a7:95:a7:20:61:05: dd:75:fc:0d:c9:b0:7a:c5:61:67:64:80:61:9d:62:d9:55:fb: c9:0b:d4:96:65:8f:fe:9c:87:e8:6b:47:38:73:d6:a0:de:5a: 0f:ff:78:23:1e:98:22:fd:4e:e7:b1:24:97:d7:41:a7:0e:c1: 81:2c:b1:fd:66:df:d6:49:ce:2f:f9:b7:23:da:ae:cd:d7:89: d1:64:5a:bf:f2:e6:dd:ca:b0:02:3b:ec:c7:75:7a:a7:f6:d6: fe:c6:90:93:05:14:d1:1f:34:5b:3d:99:9b:82:28:6a:54:e6: 8e:68:41:df:ca:ed:b6:5c:33:55:9b:60:21:60:d7:0c:44:9c: 68:e8:c3:48:5f:d8:6f:29:06:48:c8:e3:a8:50:e6:34:1e:6e: 4c:d0:05:a8:2e:4b:38:eb:a1:84:df:30:a4:30:ea:04:ac:df: 8a:d0:ef:30:37:41:e2:7a:ed:6b:bd:6c:f9:9c:eb:d3:20:aa: ee:23:ee:f4:07:54:c4:a8:4e:2d:ef:79:32:d4:5f:8c:11:92: 07:ad:f7:58 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUagWUwFNLBhNOryKJZEq5GRX2HBowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOENDN0U0QTI0NjI3RDAxMUZDMzVCM0ZFOEI2RTlBMjVD OTkzQzZFQzAeFw0yNTEyMDMwNzE2MTVaFw0yNTEyMDYxNjI4MTVaMDMxMTAvBgNV BAMTKDI5MTVGMjlBNDA4RTNFQzYzMkJBNjg2QTg1NDUxOUMxNEFFMzlENDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzIkMk2wdf74CCLB9jqJVtal63 VrV3x/CDIbuPk06195K13aTKUOaaOZH5FJLhIeyq/g7kDbEQus729mmMyFmQZxCY qfd/BgjY2TNQZLiRdYmtD33Nc044PQjyaRKl/6boNAcPZhylAxYw2K5zBHzZdvQh mXwfpZHhE1zdgpqnQ/Z06K+4362bDYyzXfDv6sk2Buu7DMDGzRc/4M5uTh5rjd6u sVfktxGA1imkwwCUAu4LHk6mNaRvM8SV0FnVjpglBg4PNKAhkSScvQ/xhFkgUb3D R/EZN/EJ6ndpOqi8seXy7zN181C2wfFyiHuKySN2wBwTgBmV53FD5QMxo4UNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKRXymkCOPsYyumhqhUUZwUrjnUAwHwYDVR0j BBgwFoAUjMfkokYn0BH8NbP+i26aJcmTxuwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l Y2QyNTFjYS1hMDVlLTRmYmUtOTNiYi1iNTQ2OWFlZjk2YTIvMC84Q0M3RTRBMjQ2 MjdEMDExRkMzNUIzRkU4QjZFOUEyNUM5OTNDNkVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOENDN0U0QTI0NjI3RDAxMUZDMzVCM0ZFOEI2RTlBMjVDOTkz QzZFQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWNkMjUxY2EtYTA1ZS00ZmJlLTkz YmItYjU0NjlhZWY5NmEyLzAvOENDN0U0QTI0NjI3RDAxMUZDMzVCM0ZFOEI2RTlB MjVDOTkzQzZFQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMcyWP9aN2xtbunLOKXMdvEuzMVcSqbm8lVM XVB0ZjSKKFfdMi8JBHNyq9UzSwIxwKeVpyBhBd11/A3JsHrFYWdkgGGdYtlV+8kL 1JZlj/6ch+hrRzhz1qDeWg//eCMemCL9TuexJJfXQacOwYEssf1m39ZJzi/5tyPa rs3XidFkWr/y5t3KsAI77Md1eqf21v7GkJMFFNEfNFs9mZuCKGpU5o5oQd/K7bZc M1WbYCFg1wxEnGjow0hf2G8pBkjI46hQ5jQebkzQBaguSzjroYTfMKQw6gSs34rQ 7zA3QeJ67Wu9bPmc69Mgqu4j7vQHVMSoTi3veTLUX4wRkget91g= -----END CERTIFICATE-----Generated at Wed Dec 3 16:10:53 2025 by rpki-client