This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/f504e4c7-7a2d-4d66-8fb4-205565787f24/0/8E87AB0332210D864175F7A371230D7C6099AE30.mft File: 8E87AB0332210D864175F7A371230D7C6099AE30.mft (raw, json) Hash identifier: cG/whroC3Uq/QToXuLJT2fFbkcENf9tOxbo7nPsiAoA= Subject key identifier: 6C:66:53:26:C7:34:A0:9B:6A:EE:C0:3B:81:7F:34:75:09:9D:E4:8F Authority key identifier: 8E:87:AB:03:32:21:0D:86:41:75:F7:A3:71:23:0D:7C:60:99:AE:30 Certificate issuer: /CN=8E87AB0332210D864175F7A371230D7C6099AE30 Certificate serial: 400640B02C504DBE903308479F7E77EB1A82140B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8E87AB0332210D864175F7A371230D7C6099AE30.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f504e4c7-7a2d-4d66-8fb4-205565787f24/0/8E87AB0332210D864175F7A371230D7C6099AE30.mft Manifest number: 023F Signing time: Wed 03 Dec 2025 03:51:49 +0000 Manifest this update: Wed 03 Dec 2025 03:46:49 +0000 Manifest next update: Sat 06 Dec 2025 12:21:49 +0000 Files and hashes: 1: 8E87AB0332210D864175F7A371230D7C6099AE30.crl (hash: nOzP5/Gi9y5YR7syOBmGi3T+NjMpTxXfTuE4h9q4K0k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f504e4c7-7a2d-4d66-8fb4-205565787f24/0/8E87AB0332210D864175F7A371230D7C6099AE30.crl rsync://repo-rpki.idnic.net/repo/f504e4c7-7a2d-4d66-8fb4-205565787f24/0/8E87AB0332210D864175F7A371230D7C6099AE30.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8E87AB0332210D864175F7A371230D7C6099AE30.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:21:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:06:40:b0:2c:50:4d:be:90:33:08:47:9f:7e:77:eb:1a:82:14:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8E87AB0332210D864175F7A371230D7C6099AE30 Validity Not Before: Dec 3 03:46:49 2025 GMT Not After : Dec 6 12:21:49 2025 GMT Subject: CN=6C665326C734A09B6AEEC03B817F3475099DE48F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:c6:07:37:78:65:07:34:f9:1a:2a:47:75:74: 0c:c9:dc:a3:ae:42:e7:ab:48:c1:2e:ac:eb:60:8d: 0a:72:37:f5:42:0c:65:3d:ed:0b:da:53:bb:f0:36: 10:20:93:69:21:fc:7c:dc:7c:4b:1c:c2:2c:20:a4: a4:f8:00:1f:48:3e:78:69:41:cf:e2:25:91:07:8a: cc:ef:d5:3a:34:67:62:74:b5:92:ab:c8:22:35:6b: b2:87:59:42:82:67:ac:5b:72:66:5f:26:80:35:00: d3:ce:90:47:e7:48:b8:46:5c:ca:0c:5a:e9:ab:48: 4d:c5:89:a4:3c:f2:46:cf:4f:9f:d3:79:e2:46:9e: 15:9b:aa:74:98:7b:2f:86:78:73:ab:12:d3:21:5e: 15:30:33:f2:15:c8:8e:ef:ee:43:66:ac:40:7a:f1: 09:d9:bc:4b:4b:a0:7e:bc:ab:ac:ea:0a:11:d4:08: 7d:74:9b:28:b0:4f:c5:c9:bb:78:86:6f:d3:6b:ab: e7:d3:fd:5e:08:b7:56:05:22:14:b4:a3:ef:9c:0a: 8c:23:a4:77:7b:4a:ec:a4:a5:35:34:5a:ee:e7:22: 10:30:58:0d:bf:59:aa:11:d8:20:bc:8e:9f:f8:33: 45:0b:03:2f:19:2d:38:8f:94:1d:4e:67:74:0a:0f: 1c:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:66:53:26:C7:34:A0:9B:6A:EE:C0:3B:81:7F:34:75:09:9D:E4:8F X509v3 Authority Key Identifier: keyid:8E:87:AB:03:32:21:0D:86:41:75:F7:A3:71:23:0D:7C:60:99:AE:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f504e4c7-7a2d-4d66-8fb4-205565787f24/0/8E87AB0332210D864175F7A371230D7C6099AE30.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8E87AB0332210D864175F7A371230D7C6099AE30.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f504e4c7-7a2d-4d66-8fb4-205565787f24/0/8E87AB0332210D864175F7A371230D7C6099AE30.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:54:e7:57:d6:4a:fd:05:2b:a9:3c:f0:49:f5:a6:8c:9a:dc: 90:27:6e:d1:1c:ad:51:49:8a:52:ee:2d:e5:b5:9c:98:4d:14: 1b:90:c2:14:2a:f8:ae:41:55:b5:81:40:88:be:0c:78:dd:06: 38:d6:cc:5b:7f:4a:6b:11:45:7c:8e:cf:b3:8e:5e:0c:00:35: f2:ea:9b:61:02:0a:ac:10:c4:ef:d9:1d:c7:aa:3d:25:2a:f4: 7a:47:59:43:a9:cc:2a:12:72:db:a1:d7:c3:13:5f:96:19:79: b8:16:67:19:42:a5:3b:d4:56:8a:70:77:36:fb:7e:bb:c1:6d: 6c:ec:7e:c0:e0:63:5a:09:ee:1f:6d:9e:24:60:5e:49:e8:e9: ff:73:99:2c:b8:33:46:ab:95:f2:07:c0:17:6e:3d:38:8d:d0: cb:16:70:c5:ec:bd:74:7b:5f:7f:a9:3c:48:81:ce:6f:f9:6b: 7a:2f:84:20:80:27:e2:84:82:7d:db:6f:77:5a:f9:af:7b:3c: 9e:eb:cd:08:77:98:79:57:e7:e4:9b:38:1e:82:06:4b:93:c2: 77:b0:ce:61:ad:a5:54:d4:8b:82:3d:72:2f:bc:c9:65:43:8c: 2c:45:cd:c9:8c:bd:85:3d:9c:d1:b3:07:75:2f:36:11:bb:dd: 5b:f8:d5:31 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQAZAsCxQTb6QMwhHn3536xqCFAswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEU4N0FCMDMzMjIxMEQ4NjQxNzVGN0EzNzEyMzBEN0M2 MDk5QUUzMDAeFw0yNTEyMDMwMzQ2NDlaFw0yNTEyMDYxMjIxNDlaMDMxMTAvBgNV BAMTKDZDNjY1MzI2QzczNEEwOUI2QUVFQzAzQjgxN0YzNDc1MDk5REU0OEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVxgc3eGUHNPkaKkd1dAzJ3KOu QuerSMEurOtgjQpyN/VCDGU97QvaU7vwNhAgk2kh/HzcfEscwiwgpKT4AB9IPnhp Qc/iJZEHiszv1To0Z2J0tZKryCI1a7KHWUKCZ6xbcmZfJoA1ANPOkEfnSLhGXMoM WumrSE3FiaQ88kbPT5/TeeJGnhWbqnSYey+GeHOrEtMhXhUwM/IVyI7v7kNmrEB6 8QnZvEtLoH68q6zqChHUCH10myiwT8XJu3iGb9Nrq+fT/V4It1YFIhS0o++cCowj pHd7SuykpTU0Wu7nIhAwWA2/WaoR2CC8jp/4M0ULAy8ZLTiPlB1OZ3QKDxxtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbGZTJsc0oJtq7sA7gX80dQmd5I8wHwYDVR0j BBgwFoAUjoerAzIhDYZBdfejcSMNfGCZrjAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NTA0ZTRjNy03YTJkLTRkNjYtOGZiNC0yMDU1NjU3ODdmMjQvMC84RTg3QUIwMzMy MjEwRDg2NDE3NUY3QTM3MTIzMEQ3QzYwOTlBRTMwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEU4N0FCMDMzMjIxMEQ4NjQxNzVGN0EzNzEyMzBEN0M2MDk5 QUUzMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjUwNGU0YzctN2EyZC00ZDY2LThm YjQtMjA1NTY1Nzg3ZjI0LzAvOEU4N0FCMDMzMjIxMEQ4NjQxNzVGN0EzNzEyMzBE N0M2MDk5QUUzMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIlU51fWSv0FK6k88En1poya3JAnbtEcrVFJ ilLuLeW1nJhNFBuQwhQq+K5BVbWBQIi+DHjdBjjWzFt/SmsRRXyOz7OOXgwANfLq m2ECCqwQxO/ZHceqPSUq9HpHWUOpzCoSctuh18MTX5YZebgWZxlCpTvUVopwdzb7 frvBbWzsfsDgY1oJ7h9tniRgXkno6f9zmSy4M0arlfIHwBduPTiN0MsWcMXsvXR7 X3+pPEiBzm/5a3ovhCCAJ+KEgn3bb3da+a97PJ7rzQh3mHlX5+SbOB6CBkuTwnew zmGtpVTUi4I9ci+8yWVDjCxFzcmMvYU9nNGzB3UvNhG73Vv41TE= -----END CERTIFICATE-----Generated at Wed Dec 3 16:52:47 2025 by rpki-client