This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/9338bdad-d2dd-4f07-ae84-c540612baf6a/0/8C3462809943E9E8E8E89052BF9B9C3DDC60EE22.mft File: 8C3462809943E9E8E8E89052BF9B9C3DDC60EE22.mft (raw, json) Hash identifier: pfblJXD4zWGdeZurPy3wJ3F25CI71UGWRofI4Xe/ldI= Subject key identifier: 54:6D:5A:11:8D:8B:13:3E:47:01:28:67:10:C1:09:67:45:4A:34:68 Authority key identifier: 8C:34:62:80:99:43:E9:E8:E8:E8:90:52:BF:9B:9C:3D:DC:60:EE:22 Certificate issuer: /CN=8C3462809943E9E8E8E89052BF9B9C3DDC60EE22 Certificate serial: 0ED0506557FE27F648C2366EB0E947D2372A461F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C3462809943E9E8E8E89052BF9B9C3DDC60EE22.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9338bdad-d2dd-4f07-ae84-c540612baf6a/0/8C3462809943E9E8E8E89052BF9B9C3DDC60EE22.mft Manifest number: 027A Signing time: Wed 24 Dec 2025 21:50:49 +0000 Manifest this update: Wed 24 Dec 2025 21:45:49 +0000 Manifest next update: Sun 28 Dec 2025 00:47:49 +0000 Files and hashes: 1: 8C3462809943E9E8E8E89052BF9B9C3DDC60EE22.crl (hash: RpDkNpq1NwsTolI8uCU1XgZfxyNAiRp1bBtlbkrlHzs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9338bdad-d2dd-4f07-ae84-c540612baf6a/0/8C3462809943E9E8E8E89052BF9B9C3DDC60EE22.crl rsync://repo-rpki.idnic.net/repo/9338bdad-d2dd-4f07-ae84-c540612baf6a/0/8C3462809943E9E8E8E89052BF9B9C3DDC60EE22.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C3462809943E9E8E8E89052BF9B9C3DDC60EE22.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 00:47:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:d0:50:65:57:fe:27:f6:48:c2:36:6e:b0:e9:47:d2:37:2a:46:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8C3462809943E9E8E8E89052BF9B9C3DDC60EE22 Validity Not Before: Dec 24 21:45:49 2025 GMT Not After : Dec 28 00:47:49 2025 GMT Subject: CN=546D5A118D8B133E4701286710C10967454A3468 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:86:91:9b:e2:3a:b3:86:f3:f2:a3:fc:cc:7f: 1b:dd:d9:55:b1:c2:f9:ed:81:60:4f:39:73:d4:70: 8c:25:f7:c7:e1:38:99:8c:00:82:5e:76:00:d1:47: 8f:0c:fd:70:dd:ff:11:3f:a0:54:ec:1b:e6:33:78: 80:54:73:33:a8:db:96:84:90:0f:2b:94:86:07:f7: 03:44:ce:63:55:a9:87:65:88:db:97:57:30:c9:69: 28:e0:0e:57:9e:f7:e6:76:be:56:12:6d:ff:63:e2: 79:17:8a:61:bd:70:83:76:ba:82:66:a3:5f:1c:1e: 51:09:42:65:84:d0:2f:5a:ed:37:bf:28:1d:68:98: 5e:35:10:22:f3:e8:bf:30:e5:d4:9f:3b:0e:cf:f4: 57:41:ff:a2:e9:95:06:2f:49:40:0a:a0:e4:b6:11: ed:db:8e:f8:5d:a6:81:f5:b9:79:7c:2b:a1:62:da: 6a:d6:d6:19:43:1d:71:0d:c4:5f:14:e2:c1:6a:e2: 05:82:c7:de:aa:e9:d6:a5:3f:3c:bd:f2:6e:47:10: 1a:b6:e3:7e:8c:6a:6b:80:02:ad:a1:5a:05:8b:15: 51:c1:b5:82:16:43:6e:b2:b2:34:91:c6:a3:92:53: c5:7f:2d:a2:bd:17:62:2b:92:ac:36:dc:84:20:3d: 10:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:6D:5A:11:8D:8B:13:3E:47:01:28:67:10:C1:09:67:45:4A:34:68 X509v3 Authority Key Identifier: keyid:8C:34:62:80:99:43:E9:E8:E8:E8:90:52:BF:9B:9C:3D:DC:60:EE:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9338bdad-d2dd-4f07-ae84-c540612baf6a/0/8C3462809943E9E8E8E89052BF9B9C3DDC60EE22.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C3462809943E9E8E8E89052BF9B9C3DDC60EE22.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9338bdad-d2dd-4f07-ae84-c540612baf6a/0/8C3462809943E9E8E8E89052BF9B9C3DDC60EE22.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:ff:2b:d9:f1:83:51:88:d5:84:e8:80:75:b4:93:c6:19:4f: 2e:f7:0b:cb:0b:89:65:25:57:8c:18:9e:f3:b0:72:f4:ae:5d: fc:2d:2c:b6:86:a2:44:82:8b:03:26:33:ca:1e:7e:79:cd:e1: b2:64:54:e0:b4:12:36:da:65:c3:5e:8b:82:59:16:5d:fe:4e: fd:66:68:de:52:60:5a:a7:7b:fc:5f:1b:df:48:05:8c:0f:a1: e8:6a:d0:83:5f:f5:a0:4b:93:6f:e9:2f:1d:dc:51:6a:98:fb: bb:ed:6a:8e:e1:03:b1:08:5e:f3:3a:af:70:67:ee:99:7b:bf: 1f:20:40:b6:1b:68:5d:16:45:e2:5d:77:c0:33:83:62:5a:4e: 40:86:03:69:a4:99:f4:e9:c4:17:fe:fc:bd:92:2c:2b:7c:31: ef:e8:6f:ea:05:8f:5e:26:08:76:d8:ff:df:1c:5a:d0:c5:79: 1b:cd:d0:84:58:fd:07:88:01:bb:c3:ac:98:de:54:14:b6:1d: bf:79:25:5d:f0:e4:85:a7:31:97:63:dd:88:85:63:06:23:f8: c3:4d:d1:ba:e7:46:36:ab:ef:62:22:a0:de:25:bd:76:b3:9f: f5:47:c2:e2:18:d4:09:b5:58:4b:33:e9:83:c9:16:6d:5a:d8: 54:0f:11:55 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDtBQZVf+J/ZIwjZusOlH0jcqRh8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEMzNDYyODA5OTQzRTlFOEU4RTg5MDUyQkY5QjlDM0RE QzYwRUUyMjAeFw0yNTEyMjQyMTQ1NDlaFw0yNTEyMjgwMDQ3NDlaMDMxMTAvBgNV BAMTKDU0NkQ1QTExOEQ4QjEzM0U0NzAxMjg2NzEwQzEwOTY3NDU0QTM0NjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGhpGb4jqzhvPyo/zMfxvd2VWx wvntgWBPOXPUcIwl98fhOJmMAIJedgDRR48M/XDd/xE/oFTsG+YzeIBUczOo25aE kA8rlIYH9wNEzmNVqYdliNuXVzDJaSjgDlee9+Z2vlYSbf9j4nkXimG9cIN2uoJm o18cHlEJQmWE0C9a7Te/KB1omF41ECLz6L8w5dSfOw7P9FdB/6LplQYvSUAKoOS2 Ee3bjvhdpoH1uXl8K6Fi2mrW1hlDHXENxF8U4sFq4gWCx96q6dalPzy98m5HEBq2 436MamuAAq2hWgWLFVHBtYIWQ26ysjSRxqOSU8V/LaK9F2Irkqw23IQgPRC3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVG1aEY2LEz5HAShnEMEJZ0VKNGgwHwYDVR0j BBgwFoAUjDRigJlD6ejo6JBSv5ucPdxg7iIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MzM4YmRhZC1kMmRkLTRmMDctYWU4NC1jNTQwNjEyYmFmNmEvMC84QzM0NjI4MDk5 NDNFOUU4RThFODkwNTJCRjlCOUMzRERDNjBFRTIyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEMzNDYyODA5OTQzRTlFOEU4RTg5MDUyQkY5QjlDM0REQzYw RUUyMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTMzOGJkYWQtZDJkZC00ZjA3LWFl ODQtYzU0MDYxMmJhZjZhLzAvOEMzNDYyODA5OTQzRTlFOEU4RTg5MDUyQkY5QjlD M0REQzYwRUUyMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAr/K9nxg1GI1YTogHW0k8YZTy73C8sLiWUl V4wYnvOwcvSuXfwtLLaGokSCiwMmM8oefnnN4bJkVOC0EjbaZcNei4JZFl3+Tv1m aN5SYFqne/xfG99IBYwPoehq0INf9aBLk2/pLx3cUWqY+7vtao7hA7EIXvM6r3Bn 7pl7vx8gQLYbaF0WReJdd8Azg2JaTkCGA2mkmfTpxBf+/L2SLCt8Me/ob+oFj14m CHbY/98cWtDFeRvN0IRY/QeIAbvDrJjeVBS2Hb95JV3w5IWnMZdj3YiFYwYj+MNN 0brnRjar72IioN4lvXazn/VHwuIY1Am1WEsz6YPJFm1a2FQPEVU= -----END CERTIFICATE-----Generated at Thu Dec 25 00:41:46 2025 by rpki-client