This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/1/C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88.mft File: C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88.mft (raw, json) Hash identifier: XomBc/GxRomHCreODXrR5IeP2P/XAKf+MeaFw09LjvU= Subject key identifier: C4:6C:A0:1D:02:4D:EF:81:2E:E5:E0:4E:7E:A3:A9:27:39:95:D1:41 Authority key identifier: C8:C5:B7:81:B7:F4:3C:62:74:BD:AA:C3:FD:8A:E1:91:4A:BE:ED:88 Certificate issuer: /CN=C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88 Certificate serial: 20235A668DDF5435D672792D4597BBF78413D4BE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88.cer Subject info access: rsync://repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/1/C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88.mft Manifest number: B9 Signing time: Wed 24 Dec 2025 16:32:51 +0000 Manifest this update: Wed 24 Dec 2025 16:27:51 +0000 Manifest next update: Sun 28 Dec 2025 00:33:51 +0000 Files and hashes: 1: C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88.crl (hash: OF8zpMqbgILW49VuJmM+LxE0cvXH/V2/Z2waYI4cVGU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/1/C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88.crl rsync://repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/1/C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 17:20:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:23:5a:66:8d:df:54:35:d6:72:79:2d:45:97:bb:f7:84:13:d4:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88 Validity Not Before: Dec 24 16:27:51 2025 GMT Not After : Dec 28 00:33:51 2025 GMT Subject: CN=C46CA01D024DEF812EE5E04E7EA3A9273995D141 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:72:5e:26:04:44:17:b8:3d:b9:57:05:11:26: 94:84:65:df:db:c0:7d:0d:d4:9a:18:df:b1:0a:88: 74:46:6d:37:1c:e1:1a:2a:92:96:bc:4d:e8:ec:d3: 26:bf:2e:82:1b:4b:de:04:07:45:5d:71:c4:d2:b8: d1:c9:c5:fe:e5:83:a4:79:57:e7:09:a1:67:ef:ab: f4:62:a3:4d:1a:70:7e:58:93:10:38:74:48:c4:8e: ca:ff:52:d7:74:cd:84:81:8d:67:50:09:56:9c:dc: 1b:84:47:1c:01:29:5b:bd:7d:64:43:25:77:c9:29: 03:1f:fe:59:1b:e2:ca:63:a3:c9:8f:bf:ba:9e:d8: 0d:ef:b5:cc:f3:96:ec:29:90:1e:0e:78:a5:99:db: 48:ea:ed:90:12:e8:51:dc:07:67:a1:37:82:59:a9: e2:82:80:be:a6:f4:d2:9e:4d:8d:4c:b2:19:1e:75: ae:39:2a:b1:3f:81:00:83:cf:c8:bd:7a:6d:2b:ab: 57:99:9d:c0:b2:87:bc:f5:1d:03:ca:cb:c1:35:ab: 72:f0:68:df:bc:63:49:77:3e:32:1a:01:c1:62:b7: 3e:5c:33:be:65:bb:e2:2a:72:97:9c:8e:fd:85:38: da:19:02:11:2f:bd:2a:be:71:8d:43:72:27:63:b8: af:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:6C:A0:1D:02:4D:EF:81:2E:E5:E0:4E:7E:A3:A9:27:39:95:D1:41 X509v3 Authority Key Identifier: keyid:C8:C5:B7:81:B7:F4:3C:62:74:BD:AA:C3:FD:8A:E1:91:4A:BE:ED:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/1/C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/1/C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:e1:cc:29:f8:67:26:5e:56:fa:08:f7:62:53:28:0a:cf:3b: da:7f:04:11:0e:db:d5:0b:1f:f2:56:de:9b:ad:66:6f:9d:95: bb:d4:3f:07:f9:3d:6d:dd:82:9e:c1:1e:00:36:29:9f:37:42: 98:6c:4e:bb:f3:d0:8e:21:a9:fe:48:c3:d2:1d:4d:07:aa:e0: c5:c4:ef:53:18:3c:1b:46:fa:f1:1d:e5:d2:e6:5c:20:8d:6f: bb:b4:86:b2:9b:36:d3:e7:15:31:3f:24:2c:e2:72:46:92:41: 1e:10:f4:b9:5f:02:1d:4c:fd:33:ad:00:af:f0:b6:78:ae:99: 8f:59:63:43:c9:95:2c:7d:cf:5f:ed:66:6f:39:29:a7:20:2c: 92:ac:59:bd:fb:91:32:98:d0:a9:b6:c8:27:5e:0f:77:6c:33: a5:78:bb:2c:f8:0b:0c:08:d2:c4:98:86:72:49:f5:3f:4d:5d: 45:6d:33:a0:d6:e2:90:14:de:cb:90:46:76:c4:70:ff:3d:03: 73:99:91:c8:3d:3a:4e:23:1f:66:66:93:a3:9c:74:cf:67:cc: 55:0c:a5:04:e9:44:8b:7d:40:28:b7:51:f3:c9:85:44:1d:55: ce:8f:7a:f5:04:68:3a:ce:2d:30:c5:f7:7e:6a:f4:91:28:a6: 41:ae:03:8e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUICNaZo3fVDXWcnktRZe794QT1L4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzhDNUI3ODFCN0Y0M0M2Mjc0QkRBQUMzRkQ4QUUxOTE0 QUJFRUQ4ODAeFw0yNTEyMjQxNjI3NTFaFw0yNTEyMjgwMDMzNTFaMDMxMTAvBgNV BAMTKEM0NkNBMDFEMDI0REVGODEyRUU1RTA0RTdFQTNBOTI3Mzk5NUQxNDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNcl4mBEQXuD25VwURJpSEZd/b wH0N1JoY37EKiHRGbTcc4Roqkpa8Tejs0ya/LoIbS94EB0VdccTSuNHJxf7lg6R5 V+cJoWfvq/Rio00acH5YkxA4dEjEjsr/Utd0zYSBjWdQCVac3BuERxwBKVu9fWRD JXfJKQMf/lkb4spjo8mPv7qe2A3vtczzluwpkB4OeKWZ20jq7ZAS6FHcB2ehN4JZ qeKCgL6m9NKeTY1Mshkeda45KrE/gQCDz8i9em0rq1eZncCyh7z1HQPKy8E1q3Lw aN+8Y0l3PjIaAcFitz5cM75lu+Iqcpecjv2FONoZAhEvvSq+cY1DcidjuK/VAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxGygHQJN74Eu5eBOfqOpJzmV0UEwHwYDVR0j BBgwFoAUyMW3gbf0PGJ0varD/YrhkUq+7YgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ODg1M2FhYi04ZDZjLTQ1N2YtOWQ1Ny00ODRhY2FjZWE5ZDgvMS9DOEM1Qjc4MUI3 RjQzQzYyNzRCREFBQzNGRDhBRTE5MTRBQkVFRDg4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzhDNUI3ODFCN0Y0M0M2Mjc0QkRBQUMzRkQ4QUUxOTE0QUJF RUQ4OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTg4NTNhYWItOGQ2Yy00NTdmLTlk NTctNDg0YWNhY2VhOWQ4LzEvQzhDNUI3ODFCN0Y0M0M2Mjc0QkRBQUMzRkQ4QUUx OTE0QUJFRUQ4OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF/hzCn4ZyZeVvoI92JTKArPO9p/BBEO29UL H/JW3putZm+dlbvUPwf5PW3dgp7BHgA2KZ83QphsTrvz0I4hqf5Iw9IdTQeq4MXE 71MYPBtG+vEd5dLmXCCNb7u0hrKbNtPnFTE/JCzickaSQR4Q9LlfAh1M/TOtAK/w tniumY9ZY0PJlSx9z1/tZm85KacgLJKsWb37kTKY0Km2yCdeD3dsM6V4uyz4CwwI 0sSYhnJJ9T9NXUVtM6DW4pAU3suQRnbEcP89A3OZkcg9Ok4jH2Zmk6OcdM9nzFUM pQTpRIt9QCi3UfPJhUQdVc6PevUEaDrOLTDF935q9JEopkGuA44= -----END CERTIFICATE-----Generated at Wed Dec 24 20:23:53 2025 by rpki-client