This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/1/88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.mft File: 88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.mft (raw, json) Hash identifier: 4pL5JWO1XfS5eE5LeGKR17xbqhXolqQLmErMtdiCNTI= Subject key identifier: 72:D9:FA:A3:1F:DB:A1:9C:A0:66:19:0C:24:33:37:E0:C4:F1:B1:BA Authority key identifier: 88:E1:28:87:FF:4C:1B:DD:31:B6:A1:B2:2A:29:3C:B9:1F:46:5A:A9 Certificate issuer: /CN=88E12887FF4C1BDD31B6A1B22A293CB91F465AA9 Certificate serial: 0A1479684C81F540927130A0CAC29653DD10D574 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/1/88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.mft Manifest number: F1 Signing time: Mon 01 Dec 2025 13:41:29 +0000 Manifest this update: Mon 01 Dec 2025 13:36:29 +0000 Manifest next update: Thu 04 Dec 2025 20:28:29 +0000 Files and hashes: 1: 88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.crl (hash: EiO0aPYWKCg3pOzg/yyAn6kh0QrySX+N3BS84JcMgrY=) 2: 3130332e3137322e3137322e302f32342d3234203d3e20313437303838.roa (hash: JKkCiBj1Ft4d/bxCb4U2iXHDOP8sJDEhV8ZeubcbaQE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/1/88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.crl rsync://repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/1/88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Dec 2025 20:28:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:14:79:68:4c:81:f5:40:92:71:30:a0:ca:c2:96:53:dd:10:d5:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88E12887FF4C1BDD31B6A1B22A293CB91F465AA9 Validity Not Before: Dec 1 13:36:29 2025 GMT Not After : Dec 4 20:28:29 2025 GMT Subject: CN=72D9FAA31FDBA19CA066190C243337E0C4F1B1BA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:1a:70:aa:3c:08:d0:1d:90:12:4f:c3:ce:bd: af:08:c6:07:2b:97:38:a3:cc:83:cc:a2:1c:67:26: 15:e8:a9:d8:5d:f4:99:b6:6a:af:ad:18:01:07:e0: 2c:77:a3:6e:57:94:93:8c:9c:4e:30:b7:a2:81:9b: 2f:ea:38:03:82:77:e3:34:e5:fa:b4:4d:75:9f:9f: ff:a3:85:40:1e:b7:4f:11:17:01:11:9e:2d:64:41: 63:14:1b:f3:b6:8d:7e:84:91:96:66:4e:3e:79:d6: 0c:5a:36:08:1b:69:7d:dd:ae:c5:56:f5:5a:20:7e: 97:0a:96:e0:94:be:fb:25:3e:ef:9f:5e:ac:bc:23: 67:5b:8d:88:1f:5f:af:df:6b:fc:bb:63:f1:c5:02: ba:31:b7:e5:47:3f:f5:81:e9:fa:49:d9:db:30:b3: 31:d8:f4:52:2f:cb:bf:b4:53:b9:20:95:59:22:41: 79:9e:a5:6e:62:b9:aa:6f:38:f8:fd:f8:74:2a:70: bc:cd:39:2e:b4:6e:e5:5c:e6:1f:88:ea:da:f2:c3: 7f:f9:2a:8e:3a:ea:db:20:d9:aa:43:9b:ac:73:6f: 27:cd:56:bd:93:71:1c:8b:64:1a:09:70:47:b4:29: 3a:25:f8:cf:82:d6:da:d2:2e:43:58:1d:31:8c:fd: f9:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:D9:FA:A3:1F:DB:A1:9C:A0:66:19:0C:24:33:37:E0:C4:F1:B1:BA X509v3 Authority Key Identifier: keyid:88:E1:28:87:FF:4C:1B:DD:31:B6:A1:B2:2A:29:3C:B9:1F:46:5A:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/1/88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/1/88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:55:40:99:3e:78:18:67:b0:8e:f3:e0:42:3f:0a:23:58:9a: a3:81:e5:ab:a5:e6:e9:b9:d3:16:89:d2:88:02:ea:47:a5:6e: d1:3f:bd:18:36:dd:e8:d4:6d:a9:27:13:36:22:55:cc:8f:8c: 5b:57:1b:3b:c1:df:cd:a7:bb:be:23:55:10:a3:ce:dc:e1:51: d8:40:98:0e:3e:6d:0d:3f:78:ca:ab:a7:fc:84:a4:72:13:39: 3d:3b:3b:42:09:c2:db:c5:c5:6c:9c:eb:f2:47:72:25:72:8b: 27:a4:bc:7f:95:2f:9d:59:6a:c5:a4:64:c6:8d:20:aa:ea:17: 43:e8:d7:74:22:f7:c2:6c:6c:9a:ca:52:40:96:95:4c:53:a7: ac:a2:01:a7:15:f9:c2:ff:08:63:0e:2e:f3:b7:7c:40:a0:cd: 32:3a:18:7f:41:2a:5b:b7:43:e4:72:8a:f0:9c:78:e9:e8:6d: 3a:3c:75:28:b8:97:b2:40:0e:77:38:dd:58:78:e0:75:89:3a: 05:f1:dd:22:28:76:db:08:48:8a:6a:1f:db:5b:b5:2f:dc:0c: fe:98:e9:ff:e1:6c:8a:db:02:ce:c3:93:0e:89:4f:42:4b:90: c3:3e:2d:e2:ef:c9:eb:b6:40:d3:25:74:f3:42:e4:a7:1c:97: 29:89:77:45 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUChR5aEyB9UCScTCgysKWU90Q1XQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODhFMTI4ODdGRjRDMUJERDMxQjZBMUIyMkEyOTNDQjkx RjQ2NUFBOTAeFw0yNTEyMDExMzM2MjlaFw0yNTEyMDQyMDI4MjlaMDMxMTAvBgNV BAMTKDcyRDlGQUEzMUZEQkExOUNBMDY2MTkwQzI0MzMzN0UwQzRGMUIxQkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8GnCqPAjQHZAST8POva8Ixgcr lzijzIPMohxnJhXoqdhd9Jm2aq+tGAEH4Cx3o25XlJOMnE4wt6KBmy/qOAOCd+M0 5fq0TXWfn/+jhUAet08RFwERni1kQWMUG/O2jX6EkZZmTj551gxaNggbaX3drsVW 9VogfpcKluCUvvslPu+fXqy8I2dbjYgfX6/fa/y7Y/HFAroxt+VHP/WB6fpJ2dsw szHY9FIvy7+0U7kglVkiQXmepW5iuapvOPj9+HQqcLzNOS60buVc5h+I6tryw3/5 Ko466tsg2apDm6xzbyfNVr2TcRyLZBoJcEe0KTol+M+C1trSLkNYHTGM/fmXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUctn6ox/boZygZhkMJDM34MTxsbowHwYDVR0j BBgwFoAUiOEoh/9MG90xtqGyKik8uR9GWqkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NGRhNDE1Yi01ZjE3LTQ2MDItOWJkOS1mZDg0YWMyY2FlODYvMS84OEUxMjg4N0ZG NEMxQkREMzFCNkExQjIyQTI5M0NCOTFGNDY1QUE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODhFMTI4ODdGRjRDMUJERDMxQjZBMUIyMkEyOTNDQjkxRjQ2 NUFBOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODRkYTQxNWItNWYxNy00NjAyLTli ZDktZmQ4NGFjMmNhZTg2LzEvODhFMTI4ODdGRjRDMUJERDMxQjZBMUIyMkEyOTND QjkxRjQ2NUFBOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGpVQJk+eBhnsI7z4EI/CiNYmqOB5aul5um5 0xaJ0ogC6kelbtE/vRg23ejUbaknEzYiVcyPjFtXGzvB382nu74jVRCjztzhUdhA mA4+bQ0/eMqrp/yEpHITOT07O0IJwtvFxWyc6/JHciVyiyekvH+VL51ZasWkZMaN IKrqF0Po13Qi98JsbJrKUkCWlUxTp6yiAacV+cL/CGMOLvO3fECgzTI6GH9BKlu3 Q+RyivCceOnobTo8dSi4l7JADnc43Vh44HWJOgXx3SIodtsISIpqH9tbtS/cDP6Y 6f/hbIrbAs7Dkw6JT0JLkMM+LeLvyeu2QNMldPNC5KcclymJd0U= -----END CERTIFICATE-----Generated at Wed Dec 3 13:59:54 2025 by rpki-client