This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/88a8ea7f-2f61-446b-8b51-51945b082faa/0/8539E127E16B793EFD92AE6EFC2BFB5879008FAD.mft File: 8539E127E16B793EFD92AE6EFC2BFB5879008FAD.mft (raw, json) Hash identifier: q7q9nEccgg5xGACZDwgTBxJcneVUfZj4OVJZH5GAxkk= Subject key identifier: 8B:0F:8A:4E:39:17:EA:A5:31:32:B5:3B:46:88:A6:4E:46:92:BC:37 Authority key identifier: 85:39:E1:27:E1:6B:79:3E:FD:92:AE:6E:FC:2B:FB:58:79:00:8F:AD Certificate issuer: /CN=8539E127E16B793EFD92AE6EFC2BFB5879008FAD Certificate serial: 4A5847D997A3907D637526F0D6BA23FFFFF90CC8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8539E127E16B793EFD92AE6EFC2BFB5879008FAD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/88a8ea7f-2f61-446b-8b51-51945b082faa/0/8539E127E16B793EFD92AE6EFC2BFB5879008FAD.mft Manifest number: E8 Signing time: Mon 15 Dec 2025 17:11:56 +0000 Manifest this update: Mon 15 Dec 2025 17:06:56 +0000 Manifest next update: Thu 18 Dec 2025 21:10:56 +0000 Files and hashes: 1: 8539E127E16B793EFD92AE6EFC2BFB5879008FAD.crl (hash: Dyg17SWwYPpq98SGZbUHT2D/a96O+K/eiaCH80iN/Co=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/88a8ea7f-2f61-446b-8b51-51945b082faa/0/8539E127E16B793EFD92AE6EFC2BFB5879008FAD.crl rsync://repo-rpki.idnic.net/repo/88a8ea7f-2f61-446b-8b51-51945b082faa/0/8539E127E16B793EFD92AE6EFC2BFB5879008FAD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8539E127E16B793EFD92AE6EFC2BFB5879008FAD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Dec 2025 21:10:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:58:47:d9:97:a3:90:7d:63:75:26:f0:d6:ba:23:ff:ff:f9:0c:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8539E127E16B793EFD92AE6EFC2BFB5879008FAD Validity Not Before: Dec 15 17:06:56 2025 GMT Not After : Dec 18 21:10:56 2025 GMT Subject: CN=8B0F8A4E3917EAA53132B53B4688A64E4692BC37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:40:e4:0a:0d:af:99:0e:8b:69:32:83:61:d0: 37:75:57:ce:bb:b5:73:ab:bb:c3:64:5e:10:eb:7f: ad:20:6c:2d:d5:de:be:2f:0e:3a:46:06:69:f9:12: 4f:2d:09:d3:65:62:63:18:e7:b9:75:88:4b:64:7b: 76:81:f9:6f:d0:7a:be:79:12:37:34:e5:f3:13:b9: 39:c7:3c:d9:e9:e0:92:34:d4:9e:58:f6:c3:01:57: b6:d2:42:fe:ef:2e:a9:53:34:98:14:4f:2d:33:26: 59:5f:86:3d:ad:4b:5e:dd:3a:9b:42:78:12:5c:07: 77:c9:10:64:76:65:d1:1b:2a:13:5a:ff:c2:66:22: 9a:76:ce:66:fe:be:b8:7c:77:3a:66:86:e3:71:95: e4:30:57:71:83:5a:af:0e:2b:51:b1:6f:8c:b8:78: 35:5f:34:ef:8e:0d:2d:be:97:1a:2f:48:a9:5a:c1: 26:fb:d7:9a:27:71:63:2c:0a:20:0e:95:05:d6:a3: 06:cd:d3:05:cb:df:29:4b:4f:2f:ec:c5:41:4f:ca: 33:12:99:d8:b8:19:ac:d9:bd:fe:d7:6d:34:d2:69: 94:a3:80:e1:a3:09:7b:3e:9c:c4:1c:cd:2d:5c:2f: 76:f7:82:89:57:5d:9f:76:57:6e:c1:f8:10:d8:e0: 2c:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:0F:8A:4E:39:17:EA:A5:31:32:B5:3B:46:88:A6:4E:46:92:BC:37 X509v3 Authority Key Identifier: keyid:85:39:E1:27:E1:6B:79:3E:FD:92:AE:6E:FC:2B:FB:58:79:00:8F:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/88a8ea7f-2f61-446b-8b51-51945b082faa/0/8539E127E16B793EFD92AE6EFC2BFB5879008FAD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8539E127E16B793EFD92AE6EFC2BFB5879008FAD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/88a8ea7f-2f61-446b-8b51-51945b082faa/0/8539E127E16B793EFD92AE6EFC2BFB5879008FAD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:36:d7:e4:9f:4b:64:47:20:c8:9d:b1:55:ba:2b:b7:57:25: 25:8c:5a:03:43:f2:e2:c3:9e:6b:fe:a5:97:8d:9b:54:19:97: f3:25:c1:2c:ce:be:75:48:08:14:69:07:c2:4a:6c:60:dd:0a: 69:1a:c8:4a:40:e8:61:6f:bb:e2:f7:33:94:2f:27:d9:f5:f6: 21:ca:e0:43:22:df:e3:69:20:19:53:9a:b6:63:f9:60:5e:43: bf:15:41:98:ad:01:98:55:ee:95:4a:46:a2:33:bc:24:3e:88: 66:38:a0:f4:f4:56:88:b4:dc:b1:4a:6d:f0:28:21:5c:4f:e8: 72:c6:d2:24:26:3b:e7:9a:d9:47:d7:d5:41:ea:7e:e8:d3:14: 9f:ef:78:46:4d:81:f3:a9:09:70:e5:7b:62:8d:de:bb:13:c5: 07:40:59:ab:86:90:c2:23:21:f4:04:54:2b:e7:f1:83:12:6d: d2:1c:18:ac:1f:77:b4:27:64:43:c1:10:4a:2f:c7:3d:79:86: a2:be:a5:33:60:79:35:98:d9:85:35:4e:d8:2b:87:06:8d:b5: b2:1f:10:59:cc:99:e1:e0:71:07:14:5b:18:b3:f8:20:ed:b2: 70:34:94:c8:e0:98:1b:61:c4:ba:25:42:bd:bf:6e:13:de:9b: 06:ea:c9:92 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSlhH2ZejkH1jdSbw1roj///5DMgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODUzOUUxMjdFMTZCNzkzRUZEOTJBRTZFRkMyQkZCNTg3 OTAwOEZBRDAeFw0yNTEyMTUxNzA2NTZaFw0yNTEyMTgyMTEwNTZaMDMxMTAvBgNV BAMTKDhCMEY4QTRFMzkxN0VBQTUzMTMyQjUzQjQ2ODhBNjRFNDY5MkJDMzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYQOQKDa+ZDotpMoNh0Dd1V867 tXOru8NkXhDrf60gbC3V3r4vDjpGBmn5Ek8tCdNlYmMY57l1iEtke3aB+W/Qer55 Ejc05fMTuTnHPNnp4JI01J5Y9sMBV7bSQv7vLqlTNJgUTy0zJllfhj2tS17dOptC eBJcB3fJEGR2ZdEbKhNa/8JmIpp2zmb+vrh8dzpmhuNxleQwV3GDWq8OK1Gxb4y4 eDVfNO+ODS2+lxovSKlawSb715oncWMsCiAOlQXWowbN0wXL3ylLTy/sxUFPyjMS mdi4GazZvf7XbTTSaZSjgOGjCXs+nMQczS1cL3b3golXXZ92V27B+BDY4Cy5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiw+KTjkX6qUxMrU7RoimTkaSvDcwHwYDVR0j BBgwFoAUhTnhJ+FreT79kq5u/Cv7WHkAj60wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 OGE4ZWE3Zi0yZjYxLTQ0NmItOGI1MS01MTk0NWIwODJmYWEvMC84NTM5RTEyN0Ux NkI3OTNFRkQ5MkFFNkVGQzJCRkI1ODc5MDA4RkFELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODUzOUUxMjdFMTZCNzkzRUZEOTJBRTZFRkMyQkZCNTg3OTAw OEZBRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODhhOGVhN2YtMmY2MS00NDZiLThi NTEtNTE5NDViMDgyZmFhLzAvODUzOUUxMjdFMTZCNzkzRUZEOTJBRTZFRkMyQkZC NTg3OTAwOEZBRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAw21+SfS2RHIMidsVW6K7dXJSWMWgND8uLD nmv+pZeNm1QZl/MlwSzOvnVICBRpB8JKbGDdCmkayEpA6GFvu+L3M5QvJ9n19iHK 4EMi3+NpIBlTmrZj+WBeQ78VQZitAZhV7pVKRqIzvCQ+iGY4oPT0Voi03LFKbfAo IVxP6HLG0iQmO+ea2UfX1UHqfujTFJ/veEZNgfOpCXDle2KN3rsTxQdAWauGkMIj IfQEVCvn8YMSbdIcGKwfd7QnZEPBEEovxz15hqK+pTNgeTWY2YU1TtgrhwaNtbIf EFnMmeHgcQcUWxiz+CDtsnA0lMjgmBthxLolQr2/bhPemwbqyZI= -----END CERTIFICATE-----Generated at Wed Dec 17 13:30:10 2025 by rpki-client