This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.mft File: C88864DD3C1E6D0D5FA91467F03B266DF5F79255.mft (raw, json) Hash identifier: H80OxweTpb3d6oP96B+/l39ytOimGqbOtuCzgpeGy7Q= Subject key identifier: 84:32:6E:A6:18:97:F5:33:47:8C:B3:60:29:D4:FE:4E:D5:23:B8:7A Authority key identifier: C8:88:64:DD:3C:1E:6D:0D:5F:A9:14:67:F0:3B:26:6D:F5:F7:92:55 Certificate issuer: /CN=C88864DD3C1E6D0D5FA91467F03B266DF5F79255 Certificate serial: 64F28D9DFF3FDF115330C9FC5ECF72784987AA24 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.cer Subject info access: rsync://repo-rpki.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.mft Manifest number: 0137 Signing time: Wed 03 Dec 2025 03:01:47 +0000 Manifest this update: Wed 03 Dec 2025 02:56:47 +0000 Manifest next update: Sat 06 Dec 2025 11:53:47 +0000 Files and hashes: 1: 3135372e31302e38382e302f32342d3234203d3e20313532303832.roa (hash: iu1Dc54YlpkWXrRrlgFt9MyI1bbMWnH2lViKwPc2SC4=) 2: C88864DD3C1E6D0D5FA91467F03B266DF5F79255.crl (hash: 2ZhXsMuQ1EAgDDMH1XJC9KrtUEcVRuFTAazg5/axIIE=) 3: 3135372e31302e38392e302f32342d3234203d3e20313532303832.roa (hash: r0yQckJKHz7cgtDpBZ5DT3GZabnNshDA9NVYp4KqxPI=) 4: 3135372e31302e38382e302f32332d3233203d3e20313532303832.roa (hash: 2xXRATtqKTFJTL45kpKCrmgQ+OKbp2ZlcGtRfjkIZUg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.crl rsync://repo-rpki.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 11:07:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:f2:8d:9d:ff:3f:df:11:53:30:c9:fc:5e:cf:72:78:49:87:aa:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C88864DD3C1E6D0D5FA91467F03B266DF5F79255 Validity Not Before: Dec 3 02:56:47 2025 GMT Not After : Dec 6 11:53:47 2025 GMT Subject: CN=84326EA61897F533478CB36029D4FE4ED523B87A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:2f:ac:e4:c4:57:04:31:8a:0e:be:1b:47:66: 26:b1:a2:80:bc:d6:f4:b5:55:cd:22:cb:9b:88:65: 44:5a:8f:ca:e5:cd:78:c9:cd:03:96:28:0a:ab:c5: 33:38:ba:bb:ea:d7:5b:2a:2a:d9:bf:0f:4d:1b:a0: 29:63:a1:aa:1a:5b:a3:e2:c6:2c:4c:54:89:fb:8c: 9b:73:b2:a1:29:6c:5e:aa:02:ee:87:73:8b:b7:cc: e2:04:9f:ac:40:c2:7d:f3:5b:dd:2d:1b:79:bc:5f: cb:4b:18:08:ab:ee:9f:40:c2:fd:f2:35:c1:6b:38: c0:5f:11:71:94:0f:1c:ea:28:66:2f:67:d5:c1:98: e8:02:8e:2c:5c:5d:42:14:2e:53:44:38:d2:e3:e5: 6c:14:a5:c8:26:fb:47:f2:84:f7:c8:50:3b:4b:2c: 97:c3:6c:c1:49:59:77:59:c1:f6:e7:88:1c:89:7f: 2a:ee:16:9a:0e:62:4e:df:67:05:38:ae:bc:6e:c8: 84:87:c2:69:b3:bc:42:93:54:11:8d:71:15:9d:c8: 03:e9:ee:17:9e:cc:91:93:85:3f:89:0d:80:8a:16: e3:a0:02:64:6a:11:cd:ca:f7:cf:eb:b3:91:6e:7e: fa:ab:aa:a3:02:75:42:95:b2:ac:14:70:ce:a1:c5: 2a:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:32:6E:A6:18:97:F5:33:47:8C:B3:60:29:D4:FE:4E:D5:23:B8:7A X509v3 Authority Key Identifier: keyid:C8:88:64:DD:3C:1E:6D:0D:5F:A9:14:67:F0:3B:26:6D:F5:F7:92:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:70:ea:35:d8:34:ec:de:b0:2e:45:b3:09:01:12:cf:c7:94: b2:f9:b3:52:46:68:a8:d9:14:e9:62:94:2d:50:1b:c7:2f:99: 0c:76:b5:50:37:3f:20:4d:29:9f:62:28:31:69:44:f8:b5:67: d8:20:1a:aa:e0:4f:58:ce:ba:3e:43:f3:83:94:c2:3e:40:a0: b2:c9:11:e2:8e:57:49:ba:c1:9b:16:8d:89:6e:5c:70:df:48: e8:67:92:d3:2c:f6:98:bb:d3:8a:fc:96:fd:40:be:13:64:b0: 9e:81:dc:b0:3f:9c:c5:ca:1e:29:17:7e:e4:34:15:c2:0a:fe: eb:60:84:4c:89:28:16:6c:fe:b6:bc:c5:95:75:65:98:03:64: 90:3b:ed:b6:9c:39:79:bd:62:ae:4b:d3:2f:59:6d:2d:18:59: 87:c2:37:b5:c2:f9:9d:a0:f2:3e:26:0a:8f:d8:7b:c7:98:eb: 4b:07:28:ce:3c:32:f2:1e:06:3a:95:e5:ef:9b:f6:1d:90:86: e3:d8:8d:82:87:25:6f:8c:e6:cd:8a:91:3c:58:74:0f:d2:d1: ef:54:82:5b:91:19:f2:6f:e5:60:22:f4:b2:01:b0:d0:73:e6: 13:8e:d0:29:a1:77:08:f8:73:ff:a9:88:2a:5c:5c:4c:73:e5: 03:fc:9b:96 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZPKNnf8/3xFTMMn8Xs9yeEmHqiQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzg4ODY0REQzQzFFNkQwRDVGQTkxNDY3RjAzQjI2NkRG NUY3OTI1NTAeFw0yNTEyMDMwMjU2NDdaFw0yNTEyMDYxMTUzNDdaMDMxMTAvBgNV BAMTKDg0MzI2RUE2MTg5N0Y1MzM0NzhDQjM2MDI5RDRGRTRFRDUyM0I4N0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRL6zkxFcEMYoOvhtHZiaxooC8 1vS1Vc0iy5uIZURaj8rlzXjJzQOWKAqrxTM4urvq11sqKtm/D00boCljoaoaW6Pi xixMVIn7jJtzsqEpbF6qAu6Hc4u3zOIEn6xAwn3zW90tG3m8X8tLGAir7p9Awv3y NcFrOMBfEXGUDxzqKGYvZ9XBmOgCjixcXUIULlNEONLj5WwUpcgm+0fyhPfIUDtL LJfDbMFJWXdZwfbniByJfyruFpoOYk7fZwU4rrxuyISHwmmzvEKTVBGNcRWdyAPp 7heezJGThT+JDYCKFuOgAmRqEc3K98/rs5FufvqrqqMCdUKVsqwUcM6hxSqJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhDJuphiX9TNHjLNgKdT+TtUjuHowHwYDVR0j BBgwFoAUyIhk3TwebQ1fqRRn8DsmbfX3klUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MzJlNGY4Ni00OGU3LTQ4YzctYmE5MS1lMjU5NjgzNzhlOTUvMC9DODg4NjRERDND MUU2RDBENUZBOTE0NjdGMDNCMjY2REY1Rjc5MjU1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQzg4ODY0REQzQzFFNkQwRDVGQTkxNDY3RjAzQjI2NkRGNUY3 OTI1NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzMyZTRmODYtNDhlNy00OGM3LWJh OTEtZTI1OTY4Mzc4ZTk1LzAvQzg4ODY0REQzQzFFNkQwRDVGQTkxNDY3RjAzQjI2 NkRGNUY3OTI1NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAtw6jXYNOzesC5FswkBEs/HlLL5s1JGaKjZ FOlilC1QG8cvmQx2tVA3PyBNKZ9iKDFpRPi1Z9ggGqrgT1jOuj5D84OUwj5AoLLJ EeKOV0m6wZsWjYluXHDfSOhnktMs9pi704r8lv1AvhNksJ6B3LA/nMXKHikXfuQ0 FcIK/utghEyJKBZs/ra8xZV1ZZgDZJA77bacOXm9Yq5L0y9ZbS0YWYfCN7XC+Z2g 8j4mCo/Ye8eY60sHKM48MvIeBjqV5e+b9h2QhuPYjYKHJW+M5s2KkTxYdA/S0e9U gluRGfJv5WAi9LIBsNBz5hOO0Cmhdwj4c/+piCpcXExz5QP8m5Y= -----END CERTIFICATE-----Generated at Wed Dec 3 17:39:57 2025 by rpki-client