This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d8349cd4-c079-41ff-aa9e-36f3d4482645/0/C8B7605A76DBDD11CCD31F657A0DE454C979D939.mft File: C8B7605A76DBDD11CCD31F657A0DE454C979D939.mft (raw, json) Hash identifier: HN5NfAuEiaWaMlXZoTbPHyYAccLrJs3LUX5pCEqkeCY= Subject key identifier: F0:FA:41:46:AF:90:12:3A:BB:5A:01:9F:47:76:AE:91:8E:54:C5:8C Authority key identifier: C8:B7:60:5A:76:DB:DD:11:CC:D3:1F:65:7A:0D:E4:54:C9:79:D9:39 Certificate issuer: /CN=C8B7605A76DBDD11CCD31F657A0DE454C979D939 Certificate serial: 1CBD628F22DD60E4BF49E161043F4CFFF3E96518 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8B7605A76DBDD11CCD31F657A0DE454C979D939.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d8349cd4-c079-41ff-aa9e-36f3d4482645/0/C8B7605A76DBDD11CCD31F657A0DE454C979D939.mft Manifest number: 04C7 Signing time: Thu 18 Dec 2025 03:21:35 +0000 Manifest this update: Thu 18 Dec 2025 03:16:35 +0000 Manifest next update: Sun 21 Dec 2025 09:27:35 +0000 Files and hashes: 1: C8B7605A76DBDD11CCD31F657A0DE454C979D939.crl (hash: +ubUPZn6YV6La+jV/ipOQJFggu33svg+njHCWKCNthI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d8349cd4-c079-41ff-aa9e-36f3d4482645/0/C8B7605A76DBDD11CCD31F657A0DE454C979D939.crl rsync://repo-rpki.idnic.net/repo/d8349cd4-c079-41ff-aa9e-36f3d4482645/0/C8B7605A76DBDD11CCD31F657A0DE454C979D939.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8B7605A76DBDD11CCD31F657A0DE454C979D939.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 09:27:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:bd:62:8f:22:dd:60:e4:bf:49:e1:61:04:3f:4c:ff:f3:e9:65:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C8B7605A76DBDD11CCD31F657A0DE454C979D939 Validity Not Before: Dec 18 03:16:35 2025 GMT Not After : Dec 21 09:27:35 2025 GMT Subject: CN=F0FA4146AF90123ABB5A019F4776AE918E54C58C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:a1:5a:f6:1a:a1:f4:66:c9:da:1e:22:d9:82: 58:a6:66:f3:41:54:14:11:d1:37:fd:d4:d7:a8:06: 11:1a:c8:2c:76:b9:bc:e2:a0:54:bb:cc:5d:f4:c1: 0a:9f:4e:91:d4:c1:0f:97:55:ad:05:15:cc:9d:f8: 3f:98:53:72:ee:b0:e4:96:7b:5a:64:5b:46:f5:a5: 51:fb:f9:97:0c:16:c4:a6:c8:b4:85:6b:0b:c1:42: 79:a5:55:1e:da:d6:a8:ac:08:76:79:5a:f5:88:5e: 7d:c2:f0:87:96:53:0c:13:7a:90:51:eb:69:9e:a9: 62:bd:05:b6:92:d9:df:ac:46:ab:5d:72:84:6a:72: 64:33:23:ca:3d:4e:e4:da:f2:ee:3e:0e:38:28:c1: 8a:6a:01:47:c5:6d:ba:3f:c6:e6:a8:d8:a3:2d:49: 84:9f:4d:76:c9:bf:f9:e0:aa:57:bb:6a:8f:af:ce: b9:bc:52:b8:ab:4f:82:c4:3b:82:60:65:89:9a:f5: fe:db:ac:f5:30:69:09:3c:a2:60:27:93:b2:29:26: ee:52:c8:c2:a2:8b:ed:38:f1:8e:8e:42:bd:db:50: ac:f2:30:1d:bf:7f:4d:43:2d:05:55:7a:4a:64:77: 88:fc:00:39:3d:90:cf:61:df:a2:64:0d:cf:6c:61: a2:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:FA:41:46:AF:90:12:3A:BB:5A:01:9F:47:76:AE:91:8E:54:C5:8C X509v3 Authority Key Identifier: keyid:C8:B7:60:5A:76:DB:DD:11:CC:D3:1F:65:7A:0D:E4:54:C9:79:D9:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d8349cd4-c079-41ff-aa9e-36f3d4482645/0/C8B7605A76DBDD11CCD31F657A0DE454C979D939.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8B7605A76DBDD11CCD31F657A0DE454C979D939.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d8349cd4-c079-41ff-aa9e-36f3d4482645/0/C8B7605A76DBDD11CCD31F657A0DE454C979D939.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:2f:a6:3a:c5:8d:bf:5a:74:d1:4b:29:b5:3a:e2:44:c2:26: f8:25:9c:3e:57:04:2a:dc:d9:ad:41:de:c5:c3:39:b8:1c:56: d7:99:18:c2:ff:58:0a:56:a5:a4:e5:43:d2:0c:1f:a4:c2:5b: d7:fb:f3:10:7f:b4:e5:10:31:64:70:23:53:72:99:12:e3:f1: c7:55:3d:11:19:01:42:dc:b5:27:52:97:f9:bc:e8:fd:fb:22: 67:b5:97:8b:60:e8:c9:54:22:f6:08:cd:a2:3c:28:4a:88:8a: bb:e2:4b:20:84:5b:6f:99:be:bb:14:f9:af:ec:96:99:b1:3a: 31:73:0a:b5:39:78:70:2e:fb:d5:1d:83:43:e9:e1:10:6c:75: 8d:cd:ac:43:3c:cc:79:a7:ae:71:62:09:b7:7b:f1:59:42:25: c5:9f:e9:71:33:4d:a7:79:a7:2f:20:ec:99:ac:eb:63:c9:f9: d3:5a:84:4b:72:6d:8b:4f:24:5c:14:cd:31:29:7d:61:bd:64: 0d:d0:81:a1:05:97:16:f7:f0:97:6b:d8:2d:e8:48:2e:51:ed: 2d:1a:ee:11:f3:69:7b:5d:34:d3:9e:79:18:75:f5:5e:e8:24: 8b:85:49:05:80:ec:02:a7:d9:fb:47:74:6a:19:17:6e:ca:7d: 97:5f:f0:89 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHL1ijyLdYOS/SeFhBD9M//PpZRgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzhCNzYwNUE3NkRCREQxMUNDRDMxRjY1N0EwREU0NTRD OTc5RDkzOTAeFw0yNTEyMTgwMzE2MzVaFw0yNTEyMjEwOTI3MzVaMDMxMTAvBgNV BAMTKEYwRkE0MTQ2QUY5MDEyM0FCQjVBMDE5RjQ3NzZBRTkxOEU1NEM1OEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEoVr2GqH0ZsnaHiLZglimZvNB VBQR0Tf91NeoBhEayCx2ubzioFS7zF30wQqfTpHUwQ+XVa0FFcyd+D+YU3LusOSW e1pkW0b1pVH7+ZcMFsSmyLSFawvBQnmlVR7a1qisCHZ5WvWIXn3C8IeWUwwTepBR 62meqWK9BbaS2d+sRqtdcoRqcmQzI8o9TuTa8u4+DjgowYpqAUfFbbo/xuao2KMt SYSfTXbJv/ngqle7ao+vzrm8UrirT4LEO4JgZYma9f7brPUwaQk8omAnk7IpJu5S yMKii+048Y6OQr3bUKzyMB2/f01DLQVVekpkd4j8ADk9kM9h36JkDc9sYaL3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8PpBRq+QEjq7WgGfR3aukY5UxYwwHwYDVR0j BBgwFoAUyLdgWnbb3RHM0x9leg3kVMl52TkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ODM0OWNkNC1jMDc5LTQxZmYtYWE5ZS0zNmYzZDQ0ODI2NDUvMC9DOEI3NjA1QTc2 REJERDExQ0NEMzFGNjU3QTBERTQ1NEM5NzlEOTM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzhCNzYwNUE3NkRCREQxMUNDRDMxRjY1N0EwREU0NTRDOTc5 RDkzOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDgzNDljZDQtYzA3OS00MWZmLWFh OWUtMzZmM2Q0NDgyNjQ1LzAvQzhCNzYwNUE3NkRCREQxMUNDRDMxRjY1N0EwREU0 NTRDOTc5RDkzOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC0vpjrFjb9adNFLKbU64kTCJvglnD5XBCrc 2a1B3sXDObgcVteZGML/WApWpaTlQ9IMH6TCW9f78xB/tOUQMWRwI1NymRLj8cdV PREZAULctSdSl/m86P37Ime1l4tg6MlUIvYIzaI8KEqIirviSyCEW2+ZvrsU+a/s lpmxOjFzCrU5eHAu+9Udg0Pp4RBsdY3NrEM8zHmnrnFiCbd78VlCJcWf6XEzTad5 py8g7Jms62PJ+dNahEtybYtPJFwUzTEpfWG9ZA3QgaEFlxb38Jdr2C3oSC5R7S0a 7hHzaXtdNNOeeRh19V7oJIuFSQWA7AKn2ftHdGoZF27KfZdf8Ik= -----END CERTIFICATE-----Generated at Fri Dec 19 03:06:20 2025 by rpki-client