This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/c965dd39-48d0-4578-8fe5-66d953384e50/0/8902A1A2A87110119F8477271D6D224973A35F04.mft File: 8902A1A2A87110119F8477271D6D224973A35F04.mft (raw, json) Hash identifier: jHlE7u5aZCV1++hKsxXS+VaLzo24TqejCcvgZ4DWT1M= Subject key identifier: DE:5A:0D:F0:0C:4D:FA:58:FD:3E:76:69:1A:0E:32:67:D1:2B:B6:86 Authority key identifier: 89:02:A1:A2:A8:71:10:11:9F:84:77:27:1D:6D:22:49:73:A3:5F:04 Certificate issuer: /CN=8902A1A2A87110119F8477271D6D224973A35F04 Certificate serial: 241829C79064858B2292304E05C120C6684AEACF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8902A1A2A87110119F8477271D6D224973A35F04.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c965dd39-48d0-4578-8fe5-66d953384e50/0/8902A1A2A87110119F8477271D6D224973A35F04.mft Manifest number: 02BB Signing time: Tue 16 Dec 2025 23:20:03 +0000 Manifest this update: Tue 16 Dec 2025 23:15:03 +0000 Manifest next update: Sat 20 Dec 2025 05:30:03 +0000 Files and hashes: 1: 8902A1A2A87110119F8477271D6D224973A35F04.crl (hash: v/CA3Onp1LQ+bBokLbV5pmwWwDPlaYpiqg+M2ApVzNY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c965dd39-48d0-4578-8fe5-66d953384e50/0/8902A1A2A87110119F8477271D6D224973A35F04.crl rsync://repo-rpki.idnic.net/repo/c965dd39-48d0-4578-8fe5-66d953384e50/0/8902A1A2A87110119F8477271D6D224973A35F04.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8902A1A2A87110119F8477271D6D224973A35F04.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 05:30:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:18:29:c7:90:64:85:8b:22:92:30:4e:05:c1:20:c6:68:4a:ea:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8902A1A2A87110119F8477271D6D224973A35F04 Validity Not Before: Dec 16 23:15:03 2025 GMT Not After : Dec 20 05:30:03 2025 GMT Subject: CN=DE5A0DF00C4DFA58FD3E76691A0E3267D12BB686 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:26:22:c3:91:2a:25:fc:3f:fe:33:9e:c1:92: 84:05:d0:60:c5:e9:30:8c:96:58:ef:ff:6b:22:1e: 3d:a4:9a:d4:6f:4c:fe:95:47:e5:72:78:0d:76:d5: 10:1b:9c:61:fa:08:b1:c5:cb:da:99:a5:6a:5d:5d: 6c:4a:f7:73:2f:f5:5b:08:d4:f5:5a:68:e1:05:5a: 18:4d:aa:65:07:50:c4:5e:f1:a4:bf:33:de:da:0f: 5b:d5:fe:12:d2:1a:12:bc:0f:5a:58:66:57:f7:5f: 3a:a3:53:82:82:6d:6d:b3:b7:31:66:81:48:14:95: 1d:7c:90:ea:73:f6:0d:c7:1d:bc:74:0d:82:c3:d8: d9:58:97:c0:f8:9e:7e:0c:ba:14:ae:75:6f:c7:89: 18:07:52:68:6e:aa:db:89:1f:c1:3c:3e:43:3e:2c: ab:d3:5e:94:ea:49:cf:5b:fc:7c:9c:52:2c:58:35: f5:1d:ad:c5:bc:db:1d:a3:10:6b:c5:e7:53:f1:b0: 59:9c:67:c9:2b:ae:39:17:69:f2:6c:fc:f2:36:23: 92:54:41:d7:17:ed:a0:24:55:e3:cf:23:43:2f:5a: 55:62:6b:db:95:5f:4c:1f:b7:2f:75:35:f2:42:89: 9f:06:21:38:75:3f:fb:99:2b:8e:c0:60:1a:16:9f: a1:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:5A:0D:F0:0C:4D:FA:58:FD:3E:76:69:1A:0E:32:67:D1:2B:B6:86 X509v3 Authority Key Identifier: keyid:89:02:A1:A2:A8:71:10:11:9F:84:77:27:1D:6D:22:49:73:A3:5F:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c965dd39-48d0-4578-8fe5-66d953384e50/0/8902A1A2A87110119F8477271D6D224973A35F04.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8902A1A2A87110119F8477271D6D224973A35F04.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c965dd39-48d0-4578-8fe5-66d953384e50/0/8902A1A2A87110119F8477271D6D224973A35F04.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:f0:d2:ef:35:fc:3d:a2:67:8e:ab:87:61:34:7c:33:1d:8d: c0:23:b3:5e:d4:16:78:de:8e:47:c0:77:69:f7:a8:fe:10:b4: b0:c1:04:b5:21:33:5a:13:7f:d7:87:88:97:f2:30:db:5e:30: 36:ef:3e:e5:cb:52:b5:c8:4a:b7:bd:79:d7:c9:ba:d0:73:ac: 28:e8:a7:cf:de:6c:b9:cd:ba:a3:ae:66:5a:b6:ba:50:dc:ae: 24:10:31:e7:26:28:c6:e8:ec:bc:92:50:21:62:c1:3c:ad:64: 5f:5a:c9:7d:62:8f:8e:cc:c1:55:5d:82:5f:eb:73:73:70:4c: 2e:79:84:d8:8b:88:51:78:98:39:04:19:c1:3c:36:15:e8:be: c3:15:85:b9:c4:82:c7:35:67:7f:15:42:70:62:4e:86:c1:36: 86:5e:f6:17:d9:13:af:7a:de:6c:6a:8f:ed:c2:5b:f0:c0:cc: f2:c8:80:cf:5e:6d:9e:c3:eb:96:08:86:a2:85:01:53:94:e8: 5c:ae:f3:10:34:22:ee:ba:be:e1:99:c0:78:2e:9d:f1:2d:0d: d2:5c:a4:69:e7:43:d5:9c:ab:56:7c:d5:0c:84:c2:a1:2d:6e: bb:57:a3:e6:53:67:fe:36:69:7f:da:e2:8e:c4:37:b7:7a:79: 00:07:aa:c7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJBgpx5BkhYsikjBOBcEgxmhK6s8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODkwMkExQTJBODcxMTAxMTlGODQ3NzI3MUQ2RDIyNDk3 M0EzNUYwNDAeFw0yNTEyMTYyMzE1MDNaFw0yNTEyMjAwNTMwMDNaMDMxMTAvBgNV BAMTKERFNUEwREYwMEM0REZBNThGRDNFNzY2OTFBMEUzMjY3RDEyQkI2ODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD3JiLDkSol/D/+M57BkoQF0GDF 6TCMlljv/2siHj2kmtRvTP6VR+VyeA121RAbnGH6CLHFy9qZpWpdXWxK93Mv9VsI 1PVaaOEFWhhNqmUHUMRe8aS/M97aD1vV/hLSGhK8D1pYZlf3XzqjU4KCbW2ztzFm gUgUlR18kOpz9g3HHbx0DYLD2NlYl8D4nn4MuhSudW/HiRgHUmhuqtuJH8E8PkM+ LKvTXpTqSc9b/HycUixYNfUdrcW82x2jEGvF51PxsFmcZ8krrjkXafJs/PI2I5JU QdcX7aAkVePPI0MvWlVia9uVX0wfty91NfJCiZ8GITh1P/uZK47AYBoWn6FDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3loN8AxN+lj9PnZpGg4yZ9ErtoYwHwYDVR0j BBgwFoAUiQKhoqhxEBGfhHcnHW0iSXOjXwQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j OTY1ZGQzOS00OGQwLTQ1NzgtOGZlNS02NmQ5NTMzODRlNTAvMC84OTAyQTFBMkE4 NzExMDExOUY4NDc3MjcxRDZEMjI0OTczQTM1RjA0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODkwMkExQTJBODcxMTAxMTlGODQ3NzI3MUQ2RDIyNDk3M0Ez NUYwNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzk2NWRkMzktNDhkMC00NTc4LThm ZTUtNjZkOTUzMzg0ZTUwLzAvODkwMkExQTJBODcxMTAxMTlGODQ3NzI3MUQ2RDIy NDk3M0EzNUYwNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG/w0u81/D2iZ46rh2E0fDMdjcAjs17UFnje jkfAd2n3qP4QtLDBBLUhM1oTf9eHiJfyMNteMDbvPuXLUrXISre9edfJutBzrCjo p8/ebLnNuqOuZlq2ulDcriQQMecmKMbo7LySUCFiwTytZF9ayX1ij47MwVVdgl/r c3NwTC55hNiLiFF4mDkEGcE8NhXovsMVhbnEgsc1Z38VQnBiTobBNoZe9hfZE696 3mxqj+3CW/DAzPLIgM9ebZ7D65YIhqKFAVOU6Fyu8xA0Iu66vuGZwHgunfEtDdJc pGnnQ9Wcq1Z81QyEwqEtbrtXo+ZTZ/42aX/a4o7EN7d6eQAHqsc= -----END CERTIFICATE-----Generated at Fri Dec 19 11:19:48 2025 by rpki-client