This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/c965dd39-48d0-4578-8fe5-66d953384e50/0/8902A1A2A87110119F8477271D6D224973A35F04.mft File: 8902A1A2A87110119F8477271D6D224973A35F04.mft (raw, json) Hash identifier: vWtw4giSBuitfrmRON3MlYCRP4+8gLQ1+V7/HFayMyA= Subject key identifier: AF:A1:06:41:13:7F:92:99:8B:83:FA:3F:86:F7:3B:05:B1:4B:80:B7 Authority key identifier: 89:02:A1:A2:A8:71:10:11:9F:84:77:27:1D:6D:22:49:73:A3:5F:04 Certificate issuer: /CN=8902A1A2A87110119F8477271D6D224973A35F04 Certificate serial: 0D624C2D27C3786F2D3DD585E2C1FE10D8CFFDD7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8902A1A2A87110119F8477271D6D224973A35F04.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c965dd39-48d0-4578-8fe5-66d953384e50/0/8902A1A2A87110119F8477271D6D224973A35F04.mft Manifest number: 02BE Signing time: Tue 23 Dec 2025 10:10:03 +0000 Manifest this update: Tue 23 Dec 2025 10:05:03 +0000 Manifest next update: Fri 26 Dec 2025 13:36:03 +0000 Files and hashes: 1: 8902A1A2A87110119F8477271D6D224973A35F04.crl (hash: EymCasbTLPfco3+tgQey2pWi7osc6O9EGymJaThRiwg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c965dd39-48d0-4578-8fe5-66d953384e50/0/8902A1A2A87110119F8477271D6D224973A35F04.crl rsync://repo-rpki.idnic.net/repo/c965dd39-48d0-4578-8fe5-66d953384e50/0/8902A1A2A87110119F8477271D6D224973A35F04.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8902A1A2A87110119F8477271D6D224973A35F04.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 13:36:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:62:4c:2d:27:c3:78:6f:2d:3d:d5:85:e2:c1:fe:10:d8:cf:fd:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8902A1A2A87110119F8477271D6D224973A35F04 Validity Not Before: Dec 23 10:05:03 2025 GMT Not After : Dec 26 13:36:03 2025 GMT Subject: CN=AFA10641137F92998B83FA3F86F73B05B14B80B7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:db:12:e9:7c:f4:fa:1b:53:6e:9b:30:86:01: 2d:47:0b:17:6d:fd:f3:cf:2a:5d:a2:54:d2:3f:c2: 10:1c:6b:78:44:38:2d:f0:87:2e:dc:56:20:ed:2d: a3:71:e9:4b:b9:1d:79:f9:3d:89:6e:af:53:41:77: f3:ac:58:8d:44:68:8f:08:fa:04:0b:9a:43:11:8c: 6f:d8:6d:03:30:88:23:40:20:4a:15:bb:cd:e7:df: b7:6d:c6:02:ae:db:ba:d7:fe:80:b4:b4:48:ab:36: 7f:bf:88:27:0d:71:0d:b8:4e:c8:47:50:93:9f:21: d1:f8:29:1d:f2:4c:55:96:ee:6c:21:5e:93:0b:92: 57:01:56:77:c7:6d:7f:00:5e:b4:db:07:d8:d1:90: bd:9f:7b:58:05:36:08:d9:a3:22:e1:0f:50:81:f2: 40:54:df:73:b5:a8:63:01:bc:6f:f7:73:ec:8a:09: 5b:f4:f6:69:2f:e0:83:d4:c0:dc:cb:71:d1:a4:fa: 48:e4:87:18:09:fd:30:02:f9:11:61:b9:97:f5:29: 21:6c:07:bf:27:22:fb:ec:13:b0:23:ee:93:c2:3d: 2d:b2:a2:92:0c:54:b7:6e:a4:da:4d:3a:0f:a6:66: da:20:fa:98:72:09:36:df:c2:cb:47:25:49:07:e6: 56:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:A1:06:41:13:7F:92:99:8B:83:FA:3F:86:F7:3B:05:B1:4B:80:B7 X509v3 Authority Key Identifier: keyid:89:02:A1:A2:A8:71:10:11:9F:84:77:27:1D:6D:22:49:73:A3:5F:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c965dd39-48d0-4578-8fe5-66d953384e50/0/8902A1A2A87110119F8477271D6D224973A35F04.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8902A1A2A87110119F8477271D6D224973A35F04.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c965dd39-48d0-4578-8fe5-66d953384e50/0/8902A1A2A87110119F8477271D6D224973A35F04.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:83:ff:a8:5f:3b:3b:86:6d:1b:07:b0:93:d1:4d:3c:a9:04: 7f:0a:5f:38:77:e2:9e:2c:56:2a:4a:52:33:a0:37:9b:6c:ef: 1a:3d:b7:96:47:f6:d1:06:bc:62:24:ec:f1:90:ff:83:e4:62: 44:14:87:a5:d9:69:e9:77:71:1a:c8:c4:2c:7f:0e:c1:53:8b: 26:3a:b3:73:6a:f6:8a:58:69:69:16:71:72:60:e8:9d:84:74: 84:75:3c:26:76:64:82:4c:59:a0:b9:43:e0:9a:1c:55:5d:0c: f0:7c:bb:b6:eb:f8:cc:a7:88:5a:72:87:9a:3b:19:e2:39:d1: e9:01:68:0d:da:1f:cd:3d:35:bd:9a:aa:61:79:72:4b:06:6c: 41:72:d3:f7:33:f6:f5:bd:de:5a:3b:71:77:6b:e8:b6:eb:f4: 91:71:3c:17:7b:15:17:21:6c:b0:ce:cb:f0:25:23:5a:3c:6e: 0b:9c:a4:31:e5:b2:7f:4e:fc:67:bf:27:41:6a:ec:4f:c7:2e: 8c:1a:fd:d7:db:ff:28:e1:6c:a8:0d:59:ce:26:ec:b0:67:12: 12:93:34:cb:1c:3e:2c:68:e5:6f:19:35:9b:7b:d3:27:9d:09: cd:df:85:09:2c:20:8f:fc:36:0d:66:5e:c2:4c:b7:c6:57:23: 95:e4:bf:03 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDWJMLSfDeG8tPdWF4sH+ENjP/dcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODkwMkExQTJBODcxMTAxMTlGODQ3NzI3MUQ2RDIyNDk3 M0EzNUYwNDAeFw0yNTEyMjMxMDA1MDNaFw0yNTEyMjYxMzM2MDNaMDMxMTAvBgNV BAMTKEFGQTEwNjQxMTM3RjkyOTk4QjgzRkEzRjg2RjczQjA1QjE0QjgwQjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC72xLpfPT6G1NumzCGAS1HCxdt /fPPKl2iVNI/whAca3hEOC3why7cViDtLaNx6Uu5HXn5PYlur1NBd/OsWI1EaI8I +gQLmkMRjG/YbQMwiCNAIEoVu83n37dtxgKu27rX/oC0tEirNn+/iCcNcQ24TshH UJOfIdH4KR3yTFWW7mwhXpMLklcBVnfHbX8AXrTbB9jRkL2fe1gFNgjZoyLhD1CB 8kBU33O1qGMBvG/3c+yKCVv09mkv4IPUwNzLcdGk+kjkhxgJ/TAC+RFhuZf1KSFs B78nIvvsE7Aj7pPCPS2yopIMVLdupNpNOg+mZtog+phyCTbfwstHJUkH5lbjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUr6EGQRN/kpmLg/o/hvc7BbFLgLcwHwYDVR0j BBgwFoAUiQKhoqhxEBGfhHcnHW0iSXOjXwQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j OTY1ZGQzOS00OGQwLTQ1NzgtOGZlNS02NmQ5NTMzODRlNTAvMC84OTAyQTFBMkE4 NzExMDExOUY4NDc3MjcxRDZEMjI0OTczQTM1RjA0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODkwMkExQTJBODcxMTAxMTlGODQ3NzI3MUQ2RDIyNDk3M0Ez NUYwNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzk2NWRkMzktNDhkMC00NTc4LThm ZTUtNjZkOTUzMzg0ZTUwLzAvODkwMkExQTJBODcxMTAxMTlGODQ3NzI3MUQ2RDIy NDk3M0EzNUYwNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAKD/6hfOzuGbRsHsJPRTTypBH8KXzh34p4s VipKUjOgN5ts7xo9t5ZH9tEGvGIk7PGQ/4PkYkQUh6XZael3cRrIxCx/DsFTiyY6 s3Nq9opYaWkWcXJg6J2EdIR1PCZ2ZIJMWaC5Q+CaHFVdDPB8u7br+MyniFpyh5o7 GeI50ekBaA3aH809Nb2aqmF5cksGbEFy0/cz9vW93lo7cXdr6Lbr9JFxPBd7FRch bLDOy/AlI1o8bgucpDHlsn9O/Ge/J0Fq7E/HLowa/dfb/yjhbKgNWc4m7LBnEhKT NMscPixo5W8ZNZt70yedCc3fhQksII/8Ng1mXsJMt8ZXI5XkvwM= -----END CERTIFICATE-----Generated at Wed Dec 24 18:30:18 2025 by rpki-client