This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/0e96ed89-2a16-4151-bf83-59dce561460c/0/B88116E180F32C03362804A81CB0CF2EB0C261B6.mft File: B88116E180F32C03362804A81CB0CF2EB0C261B6.mft (raw, json) Hash identifier: jtgOvfDI1maHapwM+ItW01F4iFozGx0j7XZZPCxYr3A= Subject key identifier: 84:63:58:20:C7:74:04:17:D1:6F:29:50:54:94:72:FA:4B:5A:84:8C Authority key identifier: B8:81:16:E1:80:F3:2C:03:36:28:04:A8:1C:B0:CF:2E:B0:C2:61:B6 Certificate issuer: /CN=B88116E180F32C03362804A81CB0CF2EB0C261B6 Certificate serial: 1947EE9C0D14C27D0EFB6F5698E9178234130FE9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B88116E180F32C03362804A81CB0CF2EB0C261B6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0e96ed89-2a16-4151-bf83-59dce561460c/0/B88116E180F32C03362804A81CB0CF2EB0C261B6.mft Manifest number: 018B Signing time: Tue 02 Dec 2025 12:32:19 +0000 Manifest this update: Tue 02 Dec 2025 12:27:19 +0000 Manifest next update: Fri 05 Dec 2025 14:34:19 +0000 Files and hashes: 1: 3130332e3133322e35352e302f32342d3234203d3e20313338313233.roa (hash: CIgXNrGi+SDH5ijMaMYNAYeOpi7DzjTKmeB4Y5/uAfQ=) 2: B88116E180F32C03362804A81CB0CF2EB0C261B6.crl (hash: ZdDPlL/9eEA5y4HEtUOEkgY5hjJ4tYlFKIAN001gtgM=) 3: 3130332e3133322e35332e302f32342d3234203d3e20313338313233.roa (hash: 0WXWQlb4tMBzSZgjns1zengdeTcdVp1QSefZx39KHLE=) 4: 3130332e3133322e35322e302f32342d3234203d3e20313338313233.roa (hash: 61PqzbefMCe104GH4tvsaNnjc51GZYX3PE2lw6vf/AE=) 5: 3130332e3133322e35342e302f32342d3234203d3e20313338313233.roa (hash: xRhm+ztLVPsT2+vuoKMwBZMT/FF6d5r60ZpTwX3FlUw=) 6: 3130332e3133322e35322e302f32322d3234203d3e20313338313233.roa (hash: pzNE22UpG1Jt2+Owlsq87q7swwQXq2gUn384QTqpP2M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0e96ed89-2a16-4151-bf83-59dce561460c/0/B88116E180F32C03362804A81CB0CF2EB0C261B6.crl rsync://repo-rpki.idnic.net/repo/0e96ed89-2a16-4151-bf83-59dce561460c/0/B88116E180F32C03362804A81CB0CF2EB0C261B6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B88116E180F32C03362804A81CB0CF2EB0C261B6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 14:34:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:47:ee:9c:0d:14:c2:7d:0e:fb:6f:56:98:e9:17:82:34:13:0f:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B88116E180F32C03362804A81CB0CF2EB0C261B6 Validity Not Before: Dec 2 12:27:19 2025 GMT Not After : Dec 5 14:34:19 2025 GMT Subject: CN=84635820C7740417D16F2950549472FA4B5A848C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:db:0d:88:0b:16:01:c5:c9:ad:5a:76:e9:ff: f7:9e:5c:3f:4c:98:ef:2e:88:ef:65:7a:3d:0a:b7: 65:72:74:54:26:75:4f:14:26:21:ac:15:74:a3:ef: 81:03:61:d0:c2:4c:e3:ed:20:f1:2d:9e:65:c3:49: 1a:02:5c:59:9f:96:17:3f:ab:07:6a:90:43:58:dd: 54:f6:9a:02:89:3e:10:0f:c7:36:08:22:ed:54:f7: ae:33:58:80:dc:a1:28:1a:f1:78:1e:4f:96:3d:e2: c5:bd:77:32:6c:76:42:d7:6b:b7:e3:22:fb:10:8e: f9:bd:d0:dd:6d:39:87:d4:d0:a0:3f:f2:04:9f:5f: 03:a9:86:e6:da:3a:de:79:cd:da:d7:8d:bf:b2:38: 7e:c6:fb:b5:04:80:a7:2a:fe:23:47:55:2d:01:92: 1f:1d:eb:39:c3:c8:09:68:ac:be:cf:b3:17:cb:7a: 48:bd:4a:3f:43:b2:5c:86:14:4e:29:17:76:67:d7: d0:e2:fb:60:0a:79:cf:0b:da:84:0d:80:14:c6:06: e7:96:42:cc:fa:89:27:9f:fa:ea:c1:86:9b:6c:19: c0:e7:8a:70:5a:92:4e:24:16:8d:17:42:9d:80:17: b4:00:6a:c4:6a:bd:e2:36:20:42:ad:fd:8e:4e:12: 48:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:63:58:20:C7:74:04:17:D1:6F:29:50:54:94:72:FA:4B:5A:84:8C X509v3 Authority Key Identifier: keyid:B8:81:16:E1:80:F3:2C:03:36:28:04:A8:1C:B0:CF:2E:B0:C2:61:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0e96ed89-2a16-4151-bf83-59dce561460c/0/B88116E180F32C03362804A81CB0CF2EB0C261B6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B88116E180F32C03362804A81CB0CF2EB0C261B6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0e96ed89-2a16-4151-bf83-59dce561460c/0/B88116E180F32C03362804A81CB0CF2EB0C261B6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:57:0e:8d:98:f2:1a:2d:7a:69:c5:81:80:42:e6:5b:8a:c9: aa:95:81:3f:a4:fd:27:c6:e7:76:7d:4e:3a:f5:0f:12:8d:f7: 81:50:ac:a8:bd:3d:f1:be:c4:e9:fb:38:89:85:d3:08:9a:9f: 93:4d:77:42:cc:71:d4:99:fc:8f:dc:9c:d3:1a:7c:26:54:3c: 22:8a:7b:bd:a2:60:5d:e9:6d:bd:0f:a3:87:19:a2:40:f6:2f: 4c:ca:4a:08:b3:6b:ca:77:ea:07:49:ad:b1:fb:62:a8:04:e5: c3:93:1d:0c:d5:6f:2a:cf:eb:66:66:13:4f:5c:b0:ba:49:8b: fd:7d:64:90:a6:82:41:92:f7:2d:80:84:fd:9c:a1:6f:17:88: 66:8e:2e:af:c3:c3:3f:31:24:ac:7e:02:05:d0:87:49:d4:5e: ac:e9:71:5c:f8:7f:5f:c9:2b:48:0b:11:e4:80:1d:d8:12:97: f5:55:5d:58:2e:6e:f0:81:2c:2d:c9:92:cf:55:d7:af:aa:80: 4d:bb:63:74:7a:54:7e:e3:42:dc:9f:9d:7c:e0:fe:24:8b:38: f5:f0:d6:99:c3:3d:14:c8:d6:18:11:12:68:2e:2d:91:4d:6a: 4f:3e:35:ca:8b:ee:28:dc:da:e5:47:dd:cd:1b:92:1c:ad:45: 0b:86:07:9b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGUfunA0Uwn0O+29WmOkXgjQTD+kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjg4MTE2RTE4MEYzMkMwMzM2MjgwNEE4MUNCMENGMkVC MEMyNjFCNjAeFw0yNTEyMDIxMjI3MTlaFw0yNTEyMDUxNDM0MTlaMDMxMTAvBgNV BAMTKDg0NjM1ODIwQzc3NDA0MTdEMTZGMjk1MDU0OTQ3MkZBNEI1QTg0OEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv2w2ICxYBxcmtWnbp//eeXD9M mO8uiO9lej0Kt2VydFQmdU8UJiGsFXSj74EDYdDCTOPtIPEtnmXDSRoCXFmflhc/ qwdqkENY3VT2mgKJPhAPxzYIIu1U964zWIDcoSga8XgeT5Y94sW9dzJsdkLXa7fj IvsQjvm90N1tOYfU0KA/8gSfXwOphubaOt55zdrXjb+yOH7G+7UEgKcq/iNHVS0B kh8d6znDyAlorL7PsxfLeki9Sj9DslyGFE4pF3Zn19Di+2AKec8L2oQNgBTGBueW Qsz6iSef+urBhptsGcDninBakk4kFo0XQp2AF7QAasRqveI2IEKt/Y5OEkijAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhGNYIMd0BBfRbylQVJRy+ktahIwwHwYDVR0j BBgwFoAUuIEW4YDzLAM2KASoHLDPLrDCYbYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZTk2ZWQ4OS0yYTE2LTQxNTEtYmY4My01OWRjZTU2MTQ2MGMvMC9CODgxMTZFMTgw RjMyQzAzMzYyODA0QTgxQ0IwQ0YyRUIwQzI2MUI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjg4MTE2RTE4MEYzMkMwMzM2MjgwNEE4MUNCMENGMkVCMEMy NjFCNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGU5NmVkODktMmExNi00MTUxLWJm ODMtNTlkY2U1NjE0NjBjLzAvQjg4MTE2RTE4MEYzMkMwMzM2MjgwNEE4MUNCMENG MkVCMEMyNjFCNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAxXDo2Y8hotemnFgYBC5luKyaqVgT+k/SfG 53Z9Tjr1DxKN94FQrKi9PfG+xOn7OImF0wian5NNd0LMcdSZ/I/cnNMafCZUPCKK e72iYF3pbb0Po4cZokD2L0zKSgiza8p36gdJrbH7YqgE5cOTHQzVbyrP62ZmE09c sLpJi/19ZJCmgkGS9y2AhP2coW8XiGaOLq/Dwz8xJKx+AgXQh0nUXqzpcVz4f1/J K0gLEeSAHdgSl/VVXVgubvCBLC3Jks9V16+qgE27Y3R6VH7jQtyfnXzg/iSLOPXw 1pnDPRTI1hgREmguLZFNak8+NcqL7ijc2uVH3c0bkhytRQuGB5s= -----END CERTIFICATE-----Generated at Wed Dec 3 14:13:34 2025 by rpki-client