This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/f504e4c7-7a2d-4d66-8fb4-205565787f24/0/8E87AB0332210D864175F7A371230D7C6099AE30.mft File: 8E87AB0332210D864175F7A371230D7C6099AE30.mft (raw, json) Hash identifier: haLaonQVU4oP+BMFJEYw24T2mCYpfrfi+4Lo4FiG81c= Subject key identifier: B4:53:91:9F:1A:39:50:35:CC:8D:FE:44:6D:53:1D:A8:06:04:98:27 Authority key identifier: 8E:87:AB:03:32:21:0D:86:41:75:F7:A3:71:23:0D:7C:60:99:AE:30 Certificate issuer: /CN=8E87AB0332210D864175F7A371230D7C6099AE30 Certificate serial: 5351ABF4B69840A0EA03E2BAEF873A3881C1A39B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8E87AB0332210D864175F7A371230D7C6099AE30.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f504e4c7-7a2d-4d66-8fb4-205565787f24/0/8E87AB0332210D864175F7A371230D7C6099AE30.mft Manifest number: 0248 Signing time: Tue 23 Dec 2025 21:12:27 +0000 Manifest this update: Tue 23 Dec 2025 21:07:27 +0000 Manifest next update: Sat 27 Dec 2025 02:07:27 +0000 Files and hashes: 1: 8E87AB0332210D864175F7A371230D7C6099AE30.crl (hash: s+8X+Fhi6pcvY9VvHw9xefk0wQOfnXk5yPuo8sEnCsE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f504e4c7-7a2d-4d66-8fb4-205565787f24/0/8E87AB0332210D864175F7A371230D7C6099AE30.crl rsync://repo-rpki.idnic.net/repo/f504e4c7-7a2d-4d66-8fb4-205565787f24/0/8E87AB0332210D864175F7A371230D7C6099AE30.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8E87AB0332210D864175F7A371230D7C6099AE30.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 02:07:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:51:ab:f4:b6:98:40:a0:ea:03:e2:ba:ef:87:3a:38:81:c1:a3:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8E87AB0332210D864175F7A371230D7C6099AE30 Validity Not Before: Dec 23 21:07:27 2025 GMT Not After : Dec 27 02:07:27 2025 GMT Subject: CN=B453919F1A395035CC8DFE446D531DA806049827 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:01:c4:31:1d:d6:85:b5:2c:71:ab:3d:19:92: 64:18:13:7e:95:76:dd:72:f6:e5:85:82:45:d0:47: bd:e2:7c:b2:26:b0:20:90:e8:eb:77:a8:9a:20:69: 7b:e3:dc:19:ad:f1:e1:d0:69:f5:5a:f7:9d:47:00: 87:5a:a7:db:0b:df:0e:76:a3:35:a3:b7:0a:1f:78: 6d:a2:22:b4:dd:60:74:8c:70:c6:71:a8:61:c4:54: 9e:b6:c3:c5:d4:13:f3:46:80:cb:50:b5:6c:99:55: 78:f8:ec:30:b2:2e:12:c1:a7:80:e4:7d:c8:40:33: 4b:99:c2:0c:de:e0:8d:9d:4c:12:c2:cd:3a:4a:0f: 89:e4:3d:47:9d:93:ca:8f:6c:ff:67:30:ea:01:b0: 60:37:b8:2b:7a:98:e9:54:70:0d:a4:0d:4f:17:c6: 1c:db:8a:be:bd:55:27:b1:38:18:e1:9e:dd:21:49: c3:df:fe:b6:90:2b:93:27:0c:76:5e:81:6f:dc:96: 20:5c:16:d9:11:8b:e1:95:b7:15:7b:da:a0:cc:21: 24:8e:43:78:e7:ec:bc:60:db:c5:c9:f4:e7:03:1e: 0f:30:c4:60:db:4c:b9:01:80:c0:ee:fb:ac:21:9a: 1c:5a:0a:c3:c2:b0:7b:f2:12:4c:c1:e5:0e:08:fc: bd:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:53:91:9F:1A:39:50:35:CC:8D:FE:44:6D:53:1D:A8:06:04:98:27 X509v3 Authority Key Identifier: keyid:8E:87:AB:03:32:21:0D:86:41:75:F7:A3:71:23:0D:7C:60:99:AE:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f504e4c7-7a2d-4d66-8fb4-205565787f24/0/8E87AB0332210D864175F7A371230D7C6099AE30.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8E87AB0332210D864175F7A371230D7C6099AE30.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f504e4c7-7a2d-4d66-8fb4-205565787f24/0/8E87AB0332210D864175F7A371230D7C6099AE30.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:ae:17:e2:ae:16:35:d4:87:b3:e6:50:48:02:41:97:8f:1f: 2e:cd:f1:f7:c5:fc:7b:3e:a1:ba:77:92:67:9b:c8:a7:3b:20: a9:22:4a:86:48:8e:ff:51:99:a0:b4:d2:9c:24:f3:55:d6:4f: 0f:01:ff:c7:a9:4d:d2:47:b2:65:2b:3e:0b:35:7a:65:0d:ad: 42:2f:62:79:2e:3c:b8:7f:d2:b3:57:8c:7e:5c:b1:8c:f2:cc: 9e:d0:2b:5d:b0:d4:12:cc:45:57:a5:d6:76:ad:56:5c:8c:57: 4e:ea:7b:4b:27:89:cc:34:42:60:2a:72:81:a9:bc:56:9b:f3: 25:a7:81:83:57:4d:f1:f7:5e:c6:0a:fa:aa:4a:33:34:9c:1f: 9e:d4:09:9b:e6:66:d4:16:c4:06:0b:50:bf:df:17:9a:3f:72: 8b:fc:f6:51:62:ca:0c:d7:b0:00:da:a2:02:d3:a1:fb:68:a5: db:b9:f1:f3:0a:42:dc:67:1e:9a:c2:a5:28:9b:05:c7:fc:c5: bf:63:11:0d:8e:32:f9:1c:7f:cf:ea:8c:52:ca:51:f0:48:86: 89:56:6d:fa:f0:13:89:86:38:c7:b7:70:03:00:26:cb:17:4d: a3:49:a9:55:98:96:2e:e1:c1:f8:e2:d8:e7:46:5b:1e:f3:8a: 03:29:70:61 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUU1Gr9LaYQKDqA+K674c6OIHBo5swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEU4N0FCMDMzMjIxMEQ4NjQxNzVGN0EzNzEyMzBEN0M2 MDk5QUUzMDAeFw0yNTEyMjMyMTA3MjdaFw0yNTEyMjcwMjA3MjdaMDMxMTAvBgNV BAMTKEI0NTM5MTlGMUEzOTUwMzVDQzhERkU0NDZENTMxREE4MDYwNDk4MjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNAcQxHdaFtSxxqz0ZkmQYE36V dt1y9uWFgkXQR73ifLImsCCQ6Ot3qJogaXvj3Bmt8eHQafVa951HAIdap9sL3w52 ozWjtwofeG2iIrTdYHSMcMZxqGHEVJ62w8XUE/NGgMtQtWyZVXj47DCyLhLBp4Dk fchAM0uZwgze4I2dTBLCzTpKD4nkPUedk8qPbP9nMOoBsGA3uCt6mOlUcA2kDU8X xhzbir69VSexOBjhnt0hScPf/raQK5MnDHZegW/cliBcFtkRi+GVtxV72qDMISSO Q3jn7Lxg28XJ9OcDHg8wxGDbTLkBgMDu+6whmhxaCsPCsHvyEkzB5Q4I/L2TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtFORnxo5UDXMjf5EbVMdqAYEmCcwHwYDVR0j BBgwFoAUjoerAzIhDYZBdfejcSMNfGCZrjAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NTA0ZTRjNy03YTJkLTRkNjYtOGZiNC0yMDU1NjU3ODdmMjQvMC84RTg3QUIwMzMy MjEwRDg2NDE3NUY3QTM3MTIzMEQ3QzYwOTlBRTMwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEU4N0FCMDMzMjIxMEQ4NjQxNzVGN0EzNzEyMzBEN0M2MDk5 QUUzMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjUwNGU0YzctN2EyZC00ZDY2LThm YjQtMjA1NTY1Nzg3ZjI0LzAvOEU4N0FCMDMzMjIxMEQ4NjQxNzVGN0EzNzEyMzBE N0M2MDk5QUUzMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALGuF+KuFjXUh7PmUEgCQZePHy7N8ffF/Hs+ obp3kmebyKc7IKkiSoZIjv9RmaC00pwk81XWTw8B/8epTdJHsmUrPgs1emUNrUIv YnkuPLh/0rNXjH5csYzyzJ7QK12w1BLMRVel1natVlyMV07qe0snicw0QmAqcoGp vFab8yWngYNXTfH3XsYK+qpKMzScH57UCZvmZtQWxAYLUL/fF5o/cov89lFiygzX sADaogLToftopdu58fMKQtxnHprCpSibBcf8xb9jEQ2OMvkcf8/qjFLKUfBIholW bfrwE4mGOMe3cAMAJssXTaNJqVWYli7hwfji2OdGWx7zigMpcGE= -----END CERTIFICATE-----Generated at Wed Dec 24 22:07:21 2025 by rpki-client