This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/8fd6eaca-f5fd-4acb-85a5-eb8d370823af/0/DE5F8F89EA2857719125EA6666F593A8279B3CD9.mft File: DE5F8F89EA2857719125EA6666F593A8279B3CD9.mft (raw, json) Hash identifier: B7gw265QOBFybD5rUxjesCK2vEcN8m7302wCcn1VV8I= Subject key identifier: 17:D6:FC:8C:86:8A:2A:B3:86:26:E1:9A:2D:2C:CD:1A:83:09:26:42 Authority key identifier: DE:5F:8F:89:EA:28:57:71:91:25:EA:66:66:F5:93:A8:27:9B:3C:D9 Certificate issuer: /CN=DE5F8F89EA2857719125EA6666F593A8279B3CD9 Certificate serial: 7AA22DF1661C70497B3B869BA17BCA6454CFEA6E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE5F8F89EA2857719125EA6666F593A8279B3CD9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8fd6eaca-f5fd-4acb-85a5-eb8d370823af/0/DE5F8F89EA2857719125EA6666F593A8279B3CD9.mft Manifest number: EA Signing time: Tue 23 Dec 2025 09:21:09 +0000 Manifest this update: Tue 23 Dec 2025 09:16:09 +0000 Manifest next update: Fri 26 Dec 2025 20:50:09 +0000 Files and hashes: 1: DE5F8F89EA2857719125EA6666F593A8279B3CD9.crl (hash: r24k9QBqDUaiaMGkVSz1MUQiEPIUPQOCBRnDNY4a6HA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8fd6eaca-f5fd-4acb-85a5-eb8d370823af/0/DE5F8F89EA2857719125EA6666F593A8279B3CD9.crl rsync://repo-rpki.idnic.net/repo/8fd6eaca-f5fd-4acb-85a5-eb8d370823af/0/DE5F8F89EA2857719125EA6666F593A8279B3CD9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE5F8F89EA2857719125EA6666F593A8279B3CD9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 20:50:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:a2:2d:f1:66:1c:70:49:7b:3b:86:9b:a1:7b:ca:64:54:cf:ea:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DE5F8F89EA2857719125EA6666F593A8279B3CD9 Validity Not Before: Dec 23 09:16:09 2025 GMT Not After : Dec 26 20:50:09 2025 GMT Subject: CN=17D6FC8C868A2AB38626E19A2D2CCD1A83092642 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:c0:85:e2:7e:0d:66:ff:5a:f8:d5:02:ce:70: 04:98:d8:f9:a1:84:5b:b5:90:93:6e:27:f9:09:0a: 74:03:27:0f:ad:9a:82:9d:30:fc:1b:f9:96:86:8f: af:7e:bd:20:76:f5:63:e7:67:7e:c3:f4:da:7f:a6: b1:c5:60:e0:02:e2:75:46:d9:50:27:2b:4b:90:19: 19:42:2d:64:ad:8d:be:ae:69:ac:3e:c9:c4:e4:e7: d5:43:6e:f7:91:ca:0f:45:47:2a:ac:24:a1:3c:dc: 8c:20:33:81:69:9a:30:f0:ce:59:1b:34:ff:2d:59: 83:c3:58:88:1d:21:fb:c7:64:cf:93:21:3d:bc:5d: 1b:eb:4c:5b:01:3f:5c:62:df:2c:93:e7:ce:2f:6e: 47:ba:61:4c:d1:a3:9d:c7:9d:c7:15:73:5e:72:07: d6:ea:2d:93:9a:31:74:87:e7:de:46:f3:a2:4d:a3: 46:d5:85:35:24:87:70:be:8c:4d:bd:65:a0:83:b1: 9c:df:3c:ec:35:a5:fc:79:22:bf:dc:04:b7:b2:2a: 9e:0f:8c:43:71:a1:8e:ad:63:25:ee:17:3c:f9:d4: 52:be:45:de:6d:1a:f5:01:fe:d2:98:88:28:c6:88: 81:a9:fd:07:21:2f:23:84:39:44:ef:e3:ec:fd:79: 25:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:D6:FC:8C:86:8A:2A:B3:86:26:E1:9A:2D:2C:CD:1A:83:09:26:42 X509v3 Authority Key Identifier: keyid:DE:5F:8F:89:EA:28:57:71:91:25:EA:66:66:F5:93:A8:27:9B:3C:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8fd6eaca-f5fd-4acb-85a5-eb8d370823af/0/DE5F8F89EA2857719125EA6666F593A8279B3CD9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE5F8F89EA2857719125EA6666F593A8279B3CD9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8fd6eaca-f5fd-4acb-85a5-eb8d370823af/0/DE5F8F89EA2857719125EA6666F593A8279B3CD9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:97:fa:e1:8c:ef:62:0b:ce:3d:23:7e:01:91:ad:3d:2f:14: d9:48:2d:f4:ed:0d:c0:2f:29:ed:d2:74:10:8c:71:7e:b1:e2: 88:c5:17:ee:87:17:2b:f3:24:3e:39:4a:94:1a:80:52:af:9b: db:7e:ee:10:fe:dc:cf:6d:eb:4c:04:a4:18:18:c4:f3:ff:eb: 0a:6a:f0:d7:49:91:a0:1a:37:2f:92:ff:c9:b5:c1:45:06:9e: 68:76:46:24:4c:f1:23:b5:02:ba:91:b6:39:57:40:3b:0b:73: b3:81:b2:52:df:d8:bb:78:a5:55:18:64:12:78:3f:7f:17:18: 50:4c:85:30:99:32:01:98:56:29:92:b5:27:51:52:ed:27:23: 36:84:20:04:b0:4d:69:98:29:dc:c4:48:77:f2:4b:42:75:cf: aa:35:5e:90:0f:40:83:8b:08:f8:b4:cd:75:89:4e:04:f9:33: 14:c1:f3:2b:8d:0d:5f:f8:c4:b2:00:11:6b:ba:c6:2c:70:56: 94:69:59:b7:27:fb:ac:66:da:eb:60:28:e8:0a:52:ec:38:b1: 14:87:f9:c8:0e:c2:9d:9a:a8:19:92:ba:c8:1e:06:8d:59:3d: 96:e6:07:80:ec:03:51:2a:37:27:fb:bd:da:ea:b5:6b:a6:3b: b9:48:b5:f1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeqIt8WYccEl7O4aboXvKZFTP6m4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREU1RjhGODlFQTI4NTc3MTkxMjVFQTY2NjZGNTkzQTgy NzlCM0NEOTAeFw0yNTEyMjMwOTE2MDlaFw0yNTEyMjYyMDUwMDlaMDMxMTAvBgNV BAMTKDE3RDZGQzhDODY4QTJBQjM4NjI2RTE5QTJEMkNDRDFBODMwOTI2NDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOwIXifg1m/1r41QLOcASY2Pmh hFu1kJNuJ/kJCnQDJw+tmoKdMPwb+ZaGj69+vSB29WPnZ37D9Np/prHFYOAC4nVG 2VAnK0uQGRlCLWStjb6uaaw+ycTk59VDbveRyg9FRyqsJKE83IwgM4FpmjDwzlkb NP8tWYPDWIgdIfvHZM+TIT28XRvrTFsBP1xi3yyT584vbke6YUzRo53HnccVc15y B9bqLZOaMXSH595G86JNo0bVhTUkh3C+jE29ZaCDsZzfPOw1pfx5Ir/cBLeyKp4P jENxoY6tYyXuFzz51FK+Rd5tGvUB/tKYiCjGiIGp/QchLyOEOUTv4+z9eSWvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUF9b8jIaKKrOGJuGaLSzNGoMJJkIwHwYDVR0j BBgwFoAU3l+PieooV3GRJepmZvWTqCebPNkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZmQ2ZWFjYS1mNWZkLTRhY2ItODVhNS1lYjhkMzcwODIzYWYvMC9ERTVGOEY4OUVB Mjg1NzcxOTEyNUVBNjY2NkY1OTNBODI3OUIzQ0Q5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREU1RjhGODlFQTI4NTc3MTkxMjVFQTY2NjZGNTkzQTgyNzlC M0NEOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGZkNmVhY2EtZjVmZC00YWNiLTg1 YTUtZWI4ZDM3MDgyM2FmLzAvREU1RjhGODlFQTI4NTc3MTkxMjVFQTY2NjZGNTkz QTgyNzlCM0NEOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABWX+uGM72ILzj0jfgGRrT0vFNlILfTtDcAv Ke3SdBCMcX6x4ojFF+6HFyvzJD45SpQagFKvm9t+7hD+3M9t60wEpBgYxPP/6wpq 8NdJkaAaNy+S/8m1wUUGnmh2RiRM8SO1ArqRtjlXQDsLc7OBslLf2Lt4pVUYZBJ4 P38XGFBMhTCZMgGYVimStSdRUu0nIzaEIASwTWmYKdzESHfyS0J1z6o1XpAPQIOL CPi0zXWJTgT5MxTB8yuNDV/4xLIAEWu6xixwVpRpWbcn+6xm2utgKOgKUuw4sRSH +cgOwp2aqBmSusgeBo1ZPZbmB4DsA1EqNyf7vdrqtWumO7lItfE= -----END CERTIFICATE-----Generated at Wed Dec 24 20:25:18 2025 by rpki-client