This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/42f39c17-6725-42be-bed4-f0ebbba2d4fd/0/988E0377882A4782CADFC665BEA75BF64BFBAF8E.mft File: 988E0377882A4782CADFC665BEA75BF64BFBAF8E.mft (raw, json) Hash identifier: YtfgBeHBWBE//KO/kCCz+eF0Uw5k/QE3s0IIl2mx9tA= Subject key identifier: 01:2A:86:FD:70:0F:05:ED:21:D9:C1:CD:FA:8A:0C:C3:AF:98:F3:2E Authority key identifier: 98:8E:03:77:88:2A:47:82:CA:DF:C6:65:BE:A7:5B:F6:4B:FB:AF:8E Certificate issuer: /CN=988E0377882A4782CADFC665BEA75BF64BFBAF8E Certificate serial: 6E15B1987125B8D046ECFE2AAED526865980C99C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/988E0377882A4782CADFC665BEA75BF64BFBAF8E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/42f39c17-6725-42be-bed4-f0ebbba2d4fd/0/988E0377882A4782CADFC665BEA75BF64BFBAF8E.mft Manifest number: 02E6 Signing time: Mon 01 Dec 2025 23:50:42 +0000 Manifest this update: Mon 01 Dec 2025 23:45:42 +0000 Manifest next update: Fri 05 Dec 2025 06:40:42 +0000 Files and hashes: 1: 988E0377882A4782CADFC665BEA75BF64BFBAF8E.crl (hash: BL6ctPsZ2jIPxK6TtJAyMIk3cHafNupvVmHC0Y14EPI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/42f39c17-6725-42be-bed4-f0ebbba2d4fd/0/988E0377882A4782CADFC665BEA75BF64BFBAF8E.crl rsync://repo-rpki.idnic.net/repo/42f39c17-6725-42be-bed4-f0ebbba2d4fd/0/988E0377882A4782CADFC665BEA75BF64BFBAF8E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/988E0377882A4782CADFC665BEA75BF64BFBAF8E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 06:40:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:15:b1:98:71:25:b8:d0:46:ec:fe:2a:ae:d5:26:86:59:80:c9:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=988E0377882A4782CADFC665BEA75BF64BFBAF8E Validity Not Before: Dec 1 23:45:42 2025 GMT Not After : Dec 5 06:40:42 2025 GMT Subject: CN=012A86FD700F05ED21D9C1CDFA8A0CC3AF98F32E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ea:91:ae:b0:29:e1:c8:37:f6:50:9b:5d:1c: c9:e7:be:5e:ed:8a:04:4f:c4:d3:00:a4:77:72:b9: 07:74:f6:bf:64:b2:1d:73:a4:11:f5:56:54:85:35: 0d:52:a6:e2:83:4c:a0:5b:b8:08:c8:31:12:83:74: 4a:6a:2c:ad:e4:ae:7f:fa:1d:50:80:b3:1f:2a:f8: ff:2c:0a:2b:b5:59:57:95:3c:97:ca:39:ab:61:fa: 01:b8:e2:a0:9b:82:8b:d4:d9:00:bc:20:8e:d1:7f: d2:ad:d2:59:46:86:43:b9:cd:b5:2a:cc:f0:32:4a: f2:16:61:c7:56:a2:93:11:d4:19:e0:23:9f:99:09: 6d:ac:39:07:26:d4:b7:21:60:72:17:a5:1f:11:15: 56:0f:a2:12:44:11:11:4d:80:e7:88:f4:c1:37:13: c0:78:9b:04:e3:86:4a:9f:64:08:31:d1:72:08:30: 71:82:90:03:b4:ed:8d:27:f7:c1:1d:4f:fa:a7:7e: 18:e2:4c:e9:fc:5b:b7:de:24:7c:a7:ba:4d:e9:1c: e3:d8:f6:44:6a:e8:98:81:99:76:f8:c1:8c:fd:8f: dd:cc:84:96:3b:b1:a7:81:85:3b:1d:80:5d:3a:04: 1c:7e:ca:b9:4d:93:61:c5:37:85:79:1e:a3:1b:0b: 1f:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:2A:86:FD:70:0F:05:ED:21:D9:C1:CD:FA:8A:0C:C3:AF:98:F3:2E X509v3 Authority Key Identifier: keyid:98:8E:03:77:88:2A:47:82:CA:DF:C6:65:BE:A7:5B:F6:4B:FB:AF:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/42f39c17-6725-42be-bed4-f0ebbba2d4fd/0/988E0377882A4782CADFC665BEA75BF64BFBAF8E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/988E0377882A4782CADFC665BEA75BF64BFBAF8E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/42f39c17-6725-42be-bed4-f0ebbba2d4fd/0/988E0377882A4782CADFC665BEA75BF64BFBAF8E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:f5:e6:dd:b9:44:e3:5e:50:a8:e9:dc:8c:10:b0:20:b7:0b: 2a:4c:9f:03:db:5b:2e:95:75:e5:7b:54:db:b4:f1:a5:9c:60: 88:32:0c:e7:72:ae:12:59:2c:03:20:8c:ef:26:fb:8c:80:ba: ad:55:0b:11:10:10:80:a0:40:21:c5:33:a2:91:67:e9:a4:20: 6c:fa:46:f3:59:72:2f:f4:6e:03:af:b8:39:ac:b7:5f:b7:e8: fe:8f:0c:4e:a7:b5:f0:82:a7:af:4a:a4:84:3d:68:58:50:a4: 73:84:67:60:7d:6d:b0:46:3a:c1:0e:90:af:1d:1f:95:74:7a: bd:e2:d8:a6:98:8a:91:ad:91:ab:89:28:07:d7:53:70:ba:ea: e8:9f:78:63:07:bb:81:7d:2c:d5:70:13:a9:ff:a0:c5:a0:6c: 32:cc:82:b5:3c:72:be:55:91:2b:99:97:a5:5c:df:91:bc:2a: 3b:89:57:c5:fa:91:b7:db:89:b4:81:36:ab:5b:67:9c:21:55: 33:c1:5d:b0:c8:9e:da:01:be:6e:5c:c3:78:c7:92:2d:53:10: 0a:b3:50:a3:2c:0d:21:c5:dc:47:aa:8d:f2:f8:94:34:84:ed: 68:cb:70:12:8e:a1:f2:39:04:0a:92:1d:c5:19:6d:24:80:4e: fe:66:1e:6e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbhWxmHEluNBG7P4qrtUmhlmAyZwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTg4RTAzNzc4ODJBNDc4MkNBREZDNjY1QkVBNzVCRjY0 QkZCQUY4RTAeFw0yNTEyMDEyMzQ1NDJaFw0yNTEyMDUwNjQwNDJaMDMxMTAvBgNV BAMTKDAxMkE4NkZENzAwRjA1RUQyMUQ5QzFDREZBOEEwQ0MzQUY5OEYzMkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu6pGusCnhyDf2UJtdHMnnvl7t igRPxNMApHdyuQd09r9ksh1zpBH1VlSFNQ1SpuKDTKBbuAjIMRKDdEpqLK3krn/6 HVCAsx8q+P8sCiu1WVeVPJfKOath+gG44qCbgovU2QC8II7Rf9Kt0llGhkO5zbUq zPAySvIWYcdWopMR1BngI5+ZCW2sOQcm1LchYHIXpR8RFVYPohJEERFNgOeI9ME3 E8B4mwTjhkqfZAgx0XIIMHGCkAO07Y0n98EdT/qnfhjiTOn8W7feJHynuk3pHOPY 9kRq6JiBmXb4wYz9j93MhJY7saeBhTsdgF06BBx+yrlNk2HFN4V5HqMbCx8NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUASqG/XAPBe0h2cHN+ooMw6+Y8y4wHwYDVR0j BBgwFoAUmI4Dd4gqR4LK38Zlvqdb9kv7r44wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MmYzOWMxNy02NzI1LTQyYmUtYmVkNC1mMGViYmJhMmQ0ZmQvMC85ODhFMDM3Nzg4 MkE0NzgyQ0FERkM2NjVCRUE3NUJGNjRCRkJBRjhFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTg4RTAzNzc4ODJBNDc4MkNBREZDNjY1QkVBNzVCRjY0QkZC QUY4RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDJmMzljMTctNjcyNS00MmJlLWJl ZDQtZjBlYmJiYTJkNGZkLzAvOTg4RTAzNzc4ODJBNDc4MkNBREZDNjY1QkVBNzVC RjY0QkZCQUY4RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAr15t25RONeUKjp3IwQsCC3CypMnwPbWy6V deV7VNu08aWcYIgyDOdyrhJZLAMgjO8m+4yAuq1VCxEQEICgQCHFM6KRZ+mkIGz6 RvNZci/0bgOvuDmst1+36P6PDE6ntfCCp69KpIQ9aFhQpHOEZ2B9bbBGOsEOkK8d H5V0er3i2KaYipGtkauJKAfXU3C66uifeGMHu4F9LNVwE6n/oMWgbDLMgrU8cr5V kSuZl6Vc35G8KjuJV8X6kbfbibSBNqtbZ5whVTPBXbDIntoBvm5cw3jHki1TEAqz UKMsDSHF3EeqjfL4lDSE7WjLcBKOofI5BAqSHcUZbSSATv5mHm4= -----END CERTIFICATE-----Generated at Wed Dec 3 13:59:38 2025 by rpki-client