This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/42f39c17-6725-42be-bed4-f0ebbba2d4fd/0/988E0377882A4782CADFC665BEA75BF64BFBAF8E.mft File: 988E0377882A4782CADFC665BEA75BF64BFBAF8E.mft (raw, json) Hash identifier: hYVEwUxf1hrzrtxy41x6TQCx8Qz+p+L7jBK4kYaBi+U= Subject key identifier: 96:CF:79:CD:FF:57:61:D2:1B:50:D6:D0:5B:CB:AE:BF:B5:B3:95:0B Authority key identifier: 98:8E:03:77:88:2A:47:82:CA:DF:C6:65:BE:A7:5B:F6:4B:FB:AF:8E Certificate issuer: /CN=988E0377882A4782CADFC665BEA75BF64BFBAF8E Certificate serial: 1AEFBD9BCD01D3578F9EAB01163DD7CF144912C6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/988E0377882A4782CADFC665BEA75BF64BFBAF8E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/42f39c17-6725-42be-bed4-f0ebbba2d4fd/0/988E0377882A4782CADFC665BEA75BF64BFBAF8E.mft Manifest number: 02F2 Signing time: Sun 28 Dec 2025 18:10:41 +0000 Manifest this update: Sun 28 Dec 2025 18:05:41 +0000 Manifest next update: Wed 31 Dec 2025 22:01:41 +0000 Files and hashes: 1: 988E0377882A4782CADFC665BEA75BF64BFBAF8E.crl (hash: hn6kAfi9NoVFnvohILMx5+IVkcFYx/rAg8Ja9gdqewo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/42f39c17-6725-42be-bed4-f0ebbba2d4fd/0/988E0377882A4782CADFC665BEA75BF64BFBAF8E.crl rsync://repo-rpki.idnic.net/repo/42f39c17-6725-42be-bed4-f0ebbba2d4fd/0/988E0377882A4782CADFC665BEA75BF64BFBAF8E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/988E0377882A4782CADFC665BEA75BF64BFBAF8E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 31 Dec 2025 22:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:ef:bd:9b:cd:01:d3:57:8f:9e:ab:01:16:3d:d7:cf:14:49:12:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=988E0377882A4782CADFC665BEA75BF64BFBAF8E Validity Not Before: Dec 28 18:05:41 2025 GMT Not After : Dec 31 22:01:41 2025 GMT Subject: CN=96CF79CDFF5761D21B50D6D05BCBAEBFB5B3950B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:f0:08:42:3c:32:97:78:a5:15:42:86:9c:ee: 2c:42:ad:01:4d:23:db:8b:6a:56:07:ca:79:55:0b: 52:20:8f:b8:7f:5f:df:4d:bb:b9:a2:d8:61:cb:1f: 4e:ac:c5:0a:d2:bb:de:90:f0:9e:5e:f5:f2:97:20: 37:12:7a:95:a8:c4:18:65:f3:6a:13:43:43:1f:fe: 7c:b4:3f:4b:9c:f9:14:4e:17:df:9c:56:89:f2:3e: 66:9b:23:a2:b9:c0:7b:d8:51:b0:3b:f2:8f:a0:89: 8d:7f:c7:9f:93:0b:9a:c0:10:9b:f9:78:d0:9d:24: 21:5c:dd:25:bd:02:13:ba:f0:0b:97:e7:03:eb:44: bc:05:a6:48:0a:47:35:7a:35:47:8c:74:a7:20:d1: 9b:0d:1a:9e:4b:f2:a2:59:14:0b:f8:9c:f1:21:4b: dd:28:54:02:51:97:8f:a5:ca:5c:c8:21:94:28:ac: cc:fa:59:00:02:08:ca:88:ca:ff:cc:6f:14:98:66: aa:d7:ba:a7:0c:76:7f:e8:08:4c:ac:6e:d6:17:d9: e3:17:93:66:fb:20:2c:72:b1:40:e7:88:17:aa:80: 06:a5:24:ce:38:69:b0:24:32:03:28:08:80:cd:35: 1a:e8:c2:5d:e4:25:db:14:e0:ca:dd:cd:03:74:bb: 1f:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:CF:79:CD:FF:57:61:D2:1B:50:D6:D0:5B:CB:AE:BF:B5:B3:95:0B X509v3 Authority Key Identifier: keyid:98:8E:03:77:88:2A:47:82:CA:DF:C6:65:BE:A7:5B:F6:4B:FB:AF:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/42f39c17-6725-42be-bed4-f0ebbba2d4fd/0/988E0377882A4782CADFC665BEA75BF64BFBAF8E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/988E0377882A4782CADFC665BEA75BF64BFBAF8E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/42f39c17-6725-42be-bed4-f0ebbba2d4fd/0/988E0377882A4782CADFC665BEA75BF64BFBAF8E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:0e:25:95:d5:b4:7f:8b:83:b8:c5:2a:61:0f:74:eb:0d:ce: cb:ff:db:56:2b:98:39:75:a2:8c:5a:7b:36:6e:c5:75:bb:b3: 33:0f:6f:a4:8e:de:10:ea:6a:32:b9:f5:2c:19:51:0d:3d:0b: 50:a5:01:d7:a9:2e:67:e5:13:3f:24:b9:2e:53:48:c9:cf:e4: 9f:ed:f4:cf:40:fd:46:b2:76:5d:04:83:ed:04:7c:79:50:7b: b5:23:0e:31:ec:4e:34:87:f6:0d:2b:ff:ad:47:79:5a:8f:80: 2a:1d:06:0f:f7:18:e7:78:24:79:89:73:eb:05:2f:a7:15:ae: 4f:ca:e5:e9:31:35:72:63:c3:49:c4:54:d8:d7:10:fb:33:7e: f2:4b:53:d0:f0:8b:dc:2c:4b:84:b2:07:4e:06:94:e5:ab:59: e0:df:8a:e5:5b:de:2e:c3:1c:47:8d:62:ec:37:d6:e3:1c:f2: 8b:3c:9d:8f:a4:26:ae:a6:d1:ec:48:1c:3b:75:69:00:e9:32: 4e:4d:6c:71:f5:46:f7:d3:e5:1d:f3:20:38:a7:a4:e3:9d:c7: 14:45:cd:a0:92:a7:8b:3e:a3:db:2f:5e:34:65:ad:46:b2:eb: 38:66:79:74:40:26:8d:6d:f9:61:84:2e:9c:21:6e:02:2b:fd: 9c:30:c3:f9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGu+9m80B01ePnqsBFj3XzxRJEsYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTg4RTAzNzc4ODJBNDc4MkNBREZDNjY1QkVBNzVCRjY0 QkZCQUY4RTAeFw0yNTEyMjgxODA1NDFaFw0yNTEyMzEyMjAxNDFaMDMxMTAvBgNV BAMTKDk2Q0Y3OUNERkY1NzYxRDIxQjUwRDZEMDVCQ0JBRUJGQjVCMzk1MEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDl8AhCPDKXeKUVQoac7ixCrQFN I9uLalYHynlVC1Igj7h/X99Nu7mi2GHLH06sxQrSu96Q8J5e9fKXIDcSepWoxBhl 82oTQ0Mf/ny0P0uc+RROF9+cVonyPmabI6K5wHvYUbA78o+giY1/x5+TC5rAEJv5 eNCdJCFc3SW9AhO68AuX5wPrRLwFpkgKRzV6NUeMdKcg0ZsNGp5L8qJZFAv4nPEh S90oVAJRl4+lylzIIZQorMz6WQACCMqIyv/MbxSYZqrXuqcMdn/oCEysbtYX2eMX k2b7ICxysUDniBeqgAalJM44abAkMgMoCIDNNRrowl3kJdsU4MrdzQN0ux8VAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUls95zf9XYdIbUNbQW8uuv7WzlQswHwYDVR0j BBgwFoAUmI4Dd4gqR4LK38Zlvqdb9kv7r44wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MmYzOWMxNy02NzI1LTQyYmUtYmVkNC1mMGViYmJhMmQ0ZmQvMC85ODhFMDM3Nzg4 MkE0NzgyQ0FERkM2NjVCRUE3NUJGNjRCRkJBRjhFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTg4RTAzNzc4ODJBNDc4MkNBREZDNjY1QkVBNzVCRjY0QkZC QUY4RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDJmMzljMTctNjcyNS00MmJlLWJl ZDQtZjBlYmJiYTJkNGZkLzAvOTg4RTAzNzc4ODJBNDc4MkNBREZDNjY1QkVBNzVC RjY0QkZCQUY4RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADUOJZXVtH+Lg7jFKmEPdOsNzsv/21YrmDl1 ooxaezZuxXW7szMPb6SO3hDqajK59SwZUQ09C1ClAdepLmflEz8kuS5TSMnP5J/t 9M9A/Uaydl0Eg+0EfHlQe7UjDjHsTjSH9g0r/61HeVqPgCodBg/3GOd4JHmJc+sF L6cVrk/K5ekxNXJjw0nEVNjXEPszfvJLU9Dwi9wsS4SyB04GlOWrWeDfiuVb3i7D HEeNYuw31uMc8os8nY+kJq6m0exIHDt1aQDpMk5NbHH1RvfT5R3zIDinpOOdxxRF zaCSp4s+o9svXjRlrUay6zhmeXRAJo1t+WGELpwhbgIr/Zwww/k= -----END CERTIFICATE-----Generated at Tue Dec 30 01:36:37 2025 by rpki-client