This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/1/8920EB690658C013C7B4AAC28EC6B511B39DAE3E.mft File: 8920EB690658C013C7B4AAC28EC6B511B39DAE3E.mft (raw, json) Hash identifier: Q0/PPIjkBu/FdXT6C1QTe1SWFTYMUkYAR4hl0kEMBNY= Subject key identifier: F3:65:83:5B:7D:F4:E4:79:63:78:8B:DE:6C:9A:8A:1D:27:17:DA:0E Authority key identifier: 89:20:EB:69:06:58:C0:13:C7:B4:AA:C2:8E:C6:B5:11:B3:9D:AE:3E Certificate issuer: /CN=8920EB690658C013C7B4AAC28EC6B511B39DAE3E Certificate serial: 6BEE001B65BF1B26BBC3683C2698148176E5CBBC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8920EB690658C013C7B4AAC28EC6B511B39DAE3E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/1/8920EB690658C013C7B4AAC28EC6B511B39DAE3E.mft Manifest number: BD Signing time: Wed 17 Dec 2025 13:50:05 +0000 Manifest this update: Wed 17 Dec 2025 13:45:05 +0000 Manifest next update: Sat 20 Dec 2025 18:58:05 +0000 Files and hashes: 1: 8920EB690658C013C7B4AAC28EC6B511B39DAE3E.crl (hash: NB9TchbJqGlrKwLhyywtn9vqMvEfLJPrsLxt2A/izNI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/1/8920EB690658C013C7B4AAC28EC6B511B39DAE3E.crl rsync://repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/1/8920EB690658C013C7B4AAC28EC6B511B39DAE3E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8920EB690658C013C7B4AAC28EC6B511B39DAE3E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 18:58:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:ee:00:1b:65:bf:1b:26:bb:c3:68:3c:26:98:14:81:76:e5:cb:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8920EB690658C013C7B4AAC28EC6B511B39DAE3E Validity Not Before: Dec 17 13:45:05 2025 GMT Not After : Dec 20 18:58:05 2025 GMT Subject: CN=F365835B7DF4E47963788BDE6C9A8A1D2717DA0E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:96:7d:20:16:bc:a0:cb:d5:b7:ee:46:5c:cc: fa:8b:42:b8:24:1c:cb:c9:30:7f:ca:e4:c2:30:5c: 36:c3:81:ce:1e:5d:09:ce:19:1c:78:50:82:7a:2d: 2b:e1:fb:13:db:06:13:6b:bd:3c:31:3d:28:a9:56: 6a:4a:20:9c:5a:62:0c:e6:d6:e0:77:2d:fb:7d:4e: 50:06:39:0e:d6:b9:e4:e4:5c:c6:26:90:8f:0a:cd: 85:e1:7c:0b:0c:86:23:e6:b7:c7:50:24:91:07:48: 61:64:ec:ee:09:06:92:a9:d0:98:d4:67:32:02:41: f5:12:f9:6e:98:e1:22:0c:75:b8:d6:5a:c1:ea:0d: 72:09:09:14:be:fb:28:a6:41:b6:9e:fb:89:6f:27: cb:46:14:aa:9c:86:47:69:98:2b:af:a1:21:68:a5: d8:ea:5f:81:d2:65:3b:64:0e:8d:d1:af:25:c3:6c: e1:ed:2d:a3:de:90:39:02:8d:c9:49:fe:0c:ae:89: 25:23:27:e4:4c:cd:8e:99:4b:6a:d2:4c:bc:e6:d4: 26:6b:0f:4b:c4:a9:ea:90:87:c2:71:83:e9:c8:3f: 04:b3:e8:fc:21:c7:26:6d:9f:93:be:be:48:4c:34: 39:ca:4e:e6:5f:01:e6:d9:0d:ff:b1:c7:cc:af:b3: 63:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:65:83:5B:7D:F4:E4:79:63:78:8B:DE:6C:9A:8A:1D:27:17:DA:0E X509v3 Authority Key Identifier: keyid:89:20:EB:69:06:58:C0:13:C7:B4:AA:C2:8E:C6:B5:11:B3:9D:AE:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/1/8920EB690658C013C7B4AAC28EC6B511B39DAE3E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8920EB690658C013C7B4AAC28EC6B511B39DAE3E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/1/8920EB690658C013C7B4AAC28EC6B511B39DAE3E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:d9:8b:57:27:06:94:86:5f:38:b4:75:be:ee:5c:67:7d:8d: 95:4c:44:6c:db:cf:dd:9b:e8:28:6d:9d:1d:a3:96:5c:de:32: c5:8a:8f:ed:81:3a:d5:7f:9e:26:82:3a:84:86:54:7e:8d:60: 62:aa:5f:76:6c:30:84:c7:c9:8a:3d:e4:74:13:4a:f0:9e:56: df:95:f5:ee:65:9a:c7:b3:92:ca:de:40:4d:ea:47:ff:92:a7: 77:0b:51:87:65:10:c7:70:1b:2b:ba:34:e1:1f:8d:2b:f4:b4: de:cd:84:15:07:7c:47:c0:2a:94:35:61:5d:de:76:a9:28:c1: f8:96:e4:99:21:3f:d7:c0:c8:88:d0:b6:96:4d:fd:72:cc:26: 1b:16:6b:2d:17:a7:02:6d:41:2a:6e:2b:78:aa:de:ff:56:3b: 2c:c8:0f:dc:8a:9b:07:80:43:6c:fe:82:19:6e:0c:f3:f9:6d: 6b:3d:5a:d7:08:03:6e:ee:f4:88:52:10:db:5e:13:0a:c3:4d: 27:5a:86:c8:2b:1e:98:69:c3:43:08:7d:cc:94:5a:6b:ea:0e: 9b:c4:8b:f0:72:27:ed:64:05:46:17:ea:26:a4:55:c8:09:7b: 6b:30:97:02:5e:ed:f1:9d:4a:30:1e:8c:15:a2:7f:a3:4e:65: 82:85:54:e5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUa+4AG2W/Gya7w2g8JpgUgXbly7wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODkyMEVCNjkwNjU4QzAxM0M3QjRBQUMyOEVDNkI1MTFC MzlEQUUzRTAeFw0yNTEyMTcxMzQ1MDVaFw0yNTEyMjAxODU4MDVaMDMxMTAvBgNV BAMTKEYzNjU4MzVCN0RGNEU0Nzk2Mzc4OEJERTZDOUE4QTFEMjcxN0RBMEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUln0gFrygy9W37kZczPqLQrgk HMvJMH/K5MIwXDbDgc4eXQnOGRx4UIJ6LSvh+xPbBhNrvTwxPSipVmpKIJxaYgzm 1uB3Lft9TlAGOQ7WueTkXMYmkI8KzYXhfAsMhiPmt8dQJJEHSGFk7O4JBpKp0JjU ZzICQfUS+W6Y4SIMdbjWWsHqDXIJCRS++yimQbae+4lvJ8tGFKqchkdpmCuvoSFo pdjqX4HSZTtkDo3RryXDbOHtLaPekDkCjclJ/gyuiSUjJ+RMzY6ZS2rSTLzm1CZr D0vEqeqQh8Jxg+nIPwSz6PwhxyZtn5O+vkhMNDnKTuZfAebZDf+xx8yvs2OZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU82WDW3305HljeIvebJqKHScX2g4wHwYDVR0j BBgwFoAUiSDraQZYwBPHtKrCjsa1EbOdrj4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MDM5NjM4OC0yZDZiLTQ3NmUtOTYzZC0xY2MzODEzNzRiMWMvMS84OTIwRUI2OTA2 NThDMDEzQzdCNEFBQzI4RUM2QjUxMUIzOURBRTNFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODkyMEVCNjkwNjU4QzAxM0M3QjRBQUMyOEVDNkI1MTFCMzlE QUUzRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjAzOTYzODgtMmQ2Yi00NzZlLTk2 M2QtMWNjMzgxMzc0YjFjLzEvODkyMEVCNjkwNjU4QzAxM0M3QjRBQUMyOEVDNkI1 MTFCMzlEQUUzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF/Zi1cnBpSGXzi0db7uXGd9jZVMRGzbz92b 6ChtnR2jllzeMsWKj+2BOtV/niaCOoSGVH6NYGKqX3ZsMITHyYo95HQTSvCeVt+V 9e5lmsezksreQE3qR/+Sp3cLUYdlEMdwGyu6NOEfjSv0tN7NhBUHfEfAKpQ1YV3e dqkowfiW5JkhP9fAyIjQtpZN/XLMJhsWay0XpwJtQSpuK3iq3v9WOyzID9yKmweA Q2z+ghluDPP5bWs9WtcIA27u9IhSENteEwrDTSdahsgrHphpw0MIfcyUWmvqDpvE i/ByJ+1kBUYX6iakVcgJe2swlwJe7fGdSjAejBWif6NOZYKFVOU= -----END CERTIFICATE-----Generated at Fri Dec 19 10:53:17 2025 by rpki-client