This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/0a75d371-18c7-48df-8f61-1d404b646413/0/8EEE0584B224A95915512EA70FE012A4AF134C7A.mft
File: 8EEE0584B224A95915512EA70FE012A4AF134C7A.mft (raw, json)
Hash identifier: /C+NJZZ3+mNy+MCS47dY8GnNNt/xIv3Tyh5kiTSeKj4=
Subject key identifier: 26:05:5E:26:F4:22:AF:B1:C9:07:C4:93:95:1B:5E:36:70:D9:F7:59
Authority key identifier: 8E:EE:05:84:B2:24:A9:59:15:51:2E:A7:0F:E0:12:A4:AF:13:4C:7A
Certificate issuer: /CN=8EEE0584B224A95915512EA70FE012A4AF134C7A
Certificate serial: 1873B8F891397F29BB7F53B5D1209A46A7B9CBF5
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8EEE0584B224A95915512EA70FE012A4AF134C7A.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/0a75d371-18c7-48df-8f61-1d404b646413/0/8EEE0584B224A95915512EA70FE012A4AF134C7A.mft
Manifest number: 0533
Signing time: Thu 18 Dec 2025 06:52:37 +0000
Manifest this update: Thu 18 Dec 2025 06:47:37 +0000
Manifest next update: Sun 21 Dec 2025 07:33:37 +0000
Files and hashes: 1: 8EEE0584B224A95915512EA70FE012A4AF134C7A.crl (hash: AajF2DIF/kQ37BPwV1F9kEvp9b/RdRH2kI0xjNZWMlg=)
2: 3130332e39352e3136302e302f32332d3234203d3e20313336313236.roa (hash: KD7T4Ue/VEXioee+nFto/OfNIEmRxJwHxyIAd7JKH2Q=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/0a75d371-18c7-48df-8f61-1d404b646413/0/8EEE0584B224A95915512EA70FE012A4AF134C7A.crl
rsync://repo-rpki.idnic.net/repo/0a75d371-18c7-48df-8f61-1d404b646413/0/8EEE0584B224A95915512EA70FE012A4AF134C7A.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8EEE0584B224A95915512EA70FE012A4AF134C7A.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 21 Dec 2025 07:33:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:73:b8:f8:91:39:7f:29:bb:7f:53:b5:d1:20:9a:46:a7:b9:cb:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8EEE0584B224A95915512EA70FE012A4AF134C7A
Validity
Not Before: Dec 18 06:47:37 2025 GMT
Not After : Dec 21 07:33:37 2025 GMT
Subject: CN=26055E26F422AFB1C907C493951B5E3670D9F759
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:10:51:d6:7f:f4:87:14:25:0a:75:c6:3f:5c:
71:16:95:36:a2:6b:41:f7:bc:da:18:ec:03:fe:af:
93:1f:b8:62:19:87:f7:fa:d4:cf:1d:2b:ee:0c:ba:
4e:2b:7b:ce:7a:31:42:3d:12:37:2e:e0:24:9f:b8:
cb:5e:3e:71:f8:b2:29:69:58:39:5f:c6:74:cb:1b:
87:2d:88:04:7f:50:b4:b8:1e:5e:6b:d9:09:f9:5b:
fe:45:93:39:0c:76:2c:ba:ca:98:88:c4:dc:99:5a:
13:f7:0f:6a:ba:87:74:32:c3:0f:0f:8c:1a:1f:8a:
4a:3c:bd:40:6a:88:59:f5:c1:83:44:ad:ba:c8:d2:
db:9c:1d:dc:24:b4:3a:15:c8:f0:63:00:ad:d5:8b:
74:51:a5:4c:9c:a2:37:64:cd:dc:99:06:e5:a7:08:
86:6d:2e:97:18:a1:9b:09:14:4b:e3:65:9f:1a:d8:
21:00:fa:67:f7:20:e4:d2:ba:f4:22:c2:d1:28:98:
49:a1:6a:39:f7:04:f1:31:c0:cc:e7:da:41:47:fd:
89:35:f5:d7:7d:13:90:e7:e0:86:82:fa:c0:37:64:
84:8a:63:55:e6:bf:dc:f3:c4:37:70:bf:92:38:2c:
a6:57:62:0a:46:48:97:9a:bc:1c:a1:b8:dd:9d:04:
8c:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:05:5E:26:F4:22:AF:B1:C9:07:C4:93:95:1B:5E:36:70:D9:F7:59
X509v3 Authority Key Identifier:
keyid:8E:EE:05:84:B2:24:A9:59:15:51:2E:A7:0F:E0:12:A4:AF:13:4C:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/0a75d371-18c7-48df-8f61-1d404b646413/0/8EEE0584B224A95915512EA70FE012A4AF134C7A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8EEE0584B224A95915512EA70FE012A4AF134C7A.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0a75d371-18c7-48df-8f61-1d404b646413/0/8EEE0584B224A95915512EA70FE012A4AF134C7A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:61:2e:04:8e:7a:ee:ce:36:fb:a4:c7:82:d8:3e:15:6f:b2:
7e:d6:46:17:67:73:02:3a:4d:08:81:02:87:55:b7:28:a3:4e:
04:02:7e:23:9f:11:ae:b7:a5:49:ce:9c:2b:00:05:25:d5:6f:
bc:07:0c:08:3e:f0:5d:91:dc:a0:cf:b2:10:4a:0c:97:de:59:
6c:fe:9e:85:06:c0:04:36:12:fb:80:1f:de:40:b6:fd:da:9f:
fc:8a:aa:48:e0:41:6b:3f:96:9b:9e:88:f1:47:9b:6a:c4:47:
21:32:63:48:9b:ca:71:b5:52:ec:0e:82:02:ed:c5:a3:cb:dd:
2d:3a:10:f3:bd:d5:23:a6:d1:88:af:42:d1:f1:68:c4:ff:7d:
90:6d:15:a8:8f:59:07:ff:d0:1a:8a:39:0d:15:5a:17:94:5b:
b9:13:5b:6b:a3:f2:c9:cc:db:35:92:d7:1f:1a:68:48:58:f6:
cd:42:da:97:b2:c2:03:93:e2:6c:b0:44:76:91:e6:ec:0c:48:
e6:74:63:65:dc:3a:e2:02:e5:4b:24:07:15:38:df:95:91:4f:
b1:b1:9d:c4:b4:ab:a3:1c:07:58:7e:49:be:6e:7b:c8:3c:5b:
be:68:ce:0b:9c:24:7a:04:89:a1:72:0d:4d:29:68:5b:80:6a:
e4:3d:30:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 19:35:35 2025 by rpki-client