This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/42f39c17-6725-42be-bed4-f0ebbba2d4fd/0/988E0377882A4782CADFC665BEA75BF64BFBAF8E.mft File: 988E0377882A4782CADFC665BEA75BF64BFBAF8E.mft (raw, json) Hash identifier: iTdPypSvQiyhda9G0+w06ylQmhbOyEN0Drs1AP329BI= Subject key identifier: AE:84:86:72:57:29:63:5A:CC:7A:50:5A:28:DC:9B:72:FE:2C:86:E8 Authority key identifier: 98:8E:03:77:88:2A:47:82:CA:DF:C6:65:BE:A7:5B:F6:4B:FB:AF:8E Certificate issuer: /CN=988E0377882A4782CADFC665BEA75BF64BFBAF8E Certificate serial: 2AB159AFFB7D4C567047E78E8EA8365940C393C6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/988E0377882A4782CADFC665BEA75BF64BFBAF8E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/42f39c17-6725-42be-bed4-f0ebbba2d4fd/0/988E0377882A4782CADFC665BEA75BF64BFBAF8E.mft Manifest number: 02F0 Signing time: Wed 24 Dec 2025 08:10:43 +0000 Manifest this update: Wed 24 Dec 2025 08:05:43 +0000 Manifest next update: Sat 27 Dec 2025 09:32:43 +0000 Files and hashes: 1: 988E0377882A4782CADFC665BEA75BF64BFBAF8E.crl (hash: 6eoYxM1dEe4/i6Qvj1mRpIOZpUJ5cYs6Fon+pqpwsO0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/42f39c17-6725-42be-bed4-f0ebbba2d4fd/0/988E0377882A4782CADFC665BEA75BF64BFBAF8E.crl rsync://repo-rpki.idnic.net/repo/42f39c17-6725-42be-bed4-f0ebbba2d4fd/0/988E0377882A4782CADFC665BEA75BF64BFBAF8E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/988E0377882A4782CADFC665BEA75BF64BFBAF8E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 09:32:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:b1:59:af:fb:7d:4c:56:70:47:e7:8e:8e:a8:36:59:40:c3:93:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=988E0377882A4782CADFC665BEA75BF64BFBAF8E Validity Not Before: Dec 24 08:05:43 2025 GMT Not After : Dec 27 09:32:43 2025 GMT Subject: CN=AE8486725729635ACC7A505A28DC9B72FE2C86E8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:cc:d9:b9:96:40:9a:8e:50:0e:46:1f:ff:55: 5f:67:d9:ab:89:6c:39:66:eb:c7:84:fd:e0:ab:75: af:c1:f7:a4:ca:87:67:d6:5c:52:bc:eb:33:05:df: 60:b9:ab:98:6f:1e:2f:7d:d2:9c:ca:56:38:69:b4: dd:f6:d2:f9:30:a2:05:f6:74:86:2a:e7:83:2b:77: cd:be:82:16:50:83:ef:a7:87:19:1e:e2:77:df:ba: dc:f2:4b:69:1a:0d:0a:f4:a1:c3:c9:16:6c:05:8e: 7d:46:d7:1d:9c:53:d3:df:2a:92:78:2c:fc:95:a5: ca:86:6c:e8:14:6f:4f:af:7e:26:cc:d8:d7:54:43: b9:7c:b4:e6:61:1c:d6:d1:58:5a:9f:11:c3:59:a5: c4:cc:6e:d5:39:99:d3:48:15:09:b0:ff:66:f5:1b: 43:fa:02:d9:7b:d7:be:cb:22:10:54:cf:38:3d:25: 71:3d:3e:fc:5b:71:42:d1:05:5d:80:6c:9a:21:f4: b9:f2:73:5e:d6:58:28:49:8c:fe:cf:02:24:e1:0b: 39:9f:a0:bd:3c:59:45:bf:7f:e0:43:c1:9b:df:e2: 46:9a:37:17:c0:a5:74:fc:97:c7:ea:a3:bb:f6:50: f2:ca:f3:56:95:db:59:9c:b8:af:5a:f4:29:40:e9: a0:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:84:86:72:57:29:63:5A:CC:7A:50:5A:28:DC:9B:72:FE:2C:86:E8 X509v3 Authority Key Identifier: keyid:98:8E:03:77:88:2A:47:82:CA:DF:C6:65:BE:A7:5B:F6:4B:FB:AF:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/42f39c17-6725-42be-bed4-f0ebbba2d4fd/0/988E0377882A4782CADFC665BEA75BF64BFBAF8E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/988E0377882A4782CADFC665BEA75BF64BFBAF8E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/42f39c17-6725-42be-bed4-f0ebbba2d4fd/0/988E0377882A4782CADFC665BEA75BF64BFBAF8E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:c6:94:a0:fb:83:67:31:75:9d:b5:01:75:78:83:8c:de:a4: 0c:74:d8:d4:8d:a6:0a:fb:66:8e:a0:c3:f3:30:08:a6:5e:21: dc:6c:62:33:48:ab:4a:3a:85:c1:8e:c8:df:e9:a5:e0:04:77: 18:77:6f:35:e2:88:a0:db:db:28:d6:f3:ee:08:75:bf:05:1f: e8:42:a0:c3:5d:cd:72:42:3e:34:2d:76:90:0a:b2:7f:e4:7f: bf:de:22:49:ae:1a:bf:70:7c:bc:d1:99:9a:02:6b:15:f4:d1: 61:b5:3a:d1:4f:92:11:fe:f4:80:81:78:1f:2d:c4:71:03:53: 14:fa:58:47:a1:7a:b5:6e:a5:81:e6:c2:41:4d:5e:32:2b:7c: 51:c8:d3:f9:79:db:f3:b7:45:8d:64:da:49:a4:f8:70:91:a4: da:f7:44:5c:0e:18:e8:c1:14:d1:ab:00:d8:90:ab:0e:97:8d: c1:58:ff:14:8b:23:e7:1a:86:89:be:49:a9:48:3b:6d:ef:92: f9:c1:20:4d:8c:75:b6:17:f0:2a:d0:05:df:bf:5b:a2:c7:16: 11:ef:61:42:5e:7a:cc:c6:0d:ea:8c:a1:80:6f:4c:19:af:a3: d7:2f:45:d0:5c:59:b5:d4:5e:82:56:12:cb:c3:7f:c8:ce:cf: fb:91:23:72 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKrFZr/t9TFZwR+eOjqg2WUDDk8YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTg4RTAzNzc4ODJBNDc4MkNBREZDNjY1QkVBNzVCRjY0 QkZCQUY4RTAeFw0yNTEyMjQwODA1NDNaFw0yNTEyMjcwOTMyNDNaMDMxMTAvBgNV BAMTKEFFODQ4NjcyNTcyOTYzNUFDQzdBNTA1QTI4REM5QjcyRkUyQzg2RTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDuzNm5lkCajlAORh//VV9n2auJ bDlm68eE/eCrda/B96TKh2fWXFK86zMF32C5q5hvHi990pzKVjhptN320vkwogX2 dIYq54Mrd82+ghZQg++nhxke4nffutzyS2kaDQr0ocPJFmwFjn1G1x2cU9PfKpJ4 LPyVpcqGbOgUb0+vfibM2NdUQ7l8tOZhHNbRWFqfEcNZpcTMbtU5mdNIFQmw/2b1 G0P6Atl7177LIhBUzzg9JXE9PvxbcULRBV2AbJoh9Lnyc17WWChJjP7PAiThCzmf oL08WUW/f+BDwZvf4kaaNxfApXT8l8fqo7v2UPLK81aV21mcuK9a9ClA6aCrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUroSGclcpY1rMelBaKNybcv4shugwHwYDVR0j BBgwFoAUmI4Dd4gqR4LK38Zlvqdb9kv7r44wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MmYzOWMxNy02NzI1LTQyYmUtYmVkNC1mMGViYmJhMmQ0ZmQvMC85ODhFMDM3Nzg4 MkE0NzgyQ0FERkM2NjVCRUE3NUJGNjRCRkJBRjhFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTg4RTAzNzc4ODJBNDc4MkNBREZDNjY1QkVBNzVCRjY0QkZC QUY4RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDJmMzljMTctNjcyNS00MmJlLWJl ZDQtZjBlYmJiYTJkNGZkLzAvOTg4RTAzNzc4ODJBNDc4MkNBREZDNjY1QkVBNzVC RjY0QkZCQUY4RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADLGlKD7g2cxdZ21AXV4g4zepAx02NSNpgr7 Zo6gw/MwCKZeIdxsYjNIq0o6hcGOyN/ppeAEdxh3bzXiiKDb2yjW8+4Idb8FH+hC oMNdzXJCPjQtdpAKsn/kf7/eIkmuGr9wfLzRmZoCaxX00WG1OtFPkhH+9ICBeB8t xHEDUxT6WEeherVupYHmwkFNXjIrfFHI0/l52/O3RY1k2kmk+HCRpNr3RFwOGOjB FNGrANiQqw6XjcFY/xSLI+cahom+SalIO23vkvnBIE2MdbYX8CrQBd+/W6LHFhHv YUJeeszGDeqMoYBvTBmvo9cvRdBcWbXUXoJWEsvDf8jOz/uRI3I= -----END CERTIFICATE-----Generated at Wed Dec 24 22:07:20 2025 by rpki-client