This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/54c77666-4c74-440d-9167-af63faa6eb9e/0/1A88815F25C9ADC8E68E2145CC20A00096657347.mft File: 1A88815F25C9ADC8E68E2145CC20A00096657347.mft (raw, json) Hash identifier: 6XokKmh2/ZnB58WZQebHTFAc3Q6xIGbHCxGJEwR1Gco= Subject key identifier: 01:8A:CE:6E:E7:63:27:27:7F:7F:83:D6:DB:D1:A1:1B:61:56:9B:50 Authority key identifier: 1A:88:81:5F:25:C9:AD:C8:E6:8E:21:45:CC:20:A0:00:96:65:73:47 Certificate issuer: /CN=1A88815F25C9ADC8E68E2145CC20A00096657347 Certificate serial: 13A39DFBE10DDA4C69F4904B7EB9FFF76129B736 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A88815F25C9ADC8E68E2145CC20A00096657347.cer Subject info access: rsync://repo-rpki.idnic.net/repo/54c77666-4c74-440d-9167-af63faa6eb9e/0/1A88815F25C9ADC8E68E2145CC20A00096657347.mft Manifest number: 0293 Signing time: Wed 17 Dec 2025 20:11:44 +0000 Manifest this update: Wed 17 Dec 2025 20:06:44 +0000 Manifest next update: Sat 20 Dec 2025 20:57:44 +0000 Files and hashes: 1: 3130332e3137352e38342e302f32332d3234203d3e20313437313137.roa (hash: sYuoPIutBM6UsTB74BSY1gl4de6W9HHMo31g7KdPOkQ=) 2: 1A88815F25C9ADC8E68E2145CC20A00096657347.crl (hash: VP5ZobZY9YUmZdG+46xFiHQ1oV1zvCDp2BfAOo1V1kA=) 3: 3130332e3137352e38352e302f32342d3234203d3e20313437313137.roa (hash: dQkihMhWzN2ARo3TbtERAeJ3TdDzeXt9eRFpYMTxe1s=) 4: 3130332e3137352e38342e302f32342d3234203d3e20313437313137.roa (hash: X7jlC8806cONOESjfeaSOO4BlCs60fPKPrtTWgAwSss=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/54c77666-4c74-440d-9167-af63faa6eb9e/0/1A88815F25C9ADC8E68E2145CC20A00096657347.crl rsync://repo-rpki.idnic.net/repo/54c77666-4c74-440d-9167-af63faa6eb9e/0/1A88815F25C9ADC8E68E2145CC20A00096657347.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A88815F25C9ADC8E68E2145CC20A00096657347.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 20:57:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:a3:9d:fb:e1:0d:da:4c:69:f4:90:4b:7e:b9:ff:f7:61:29:b7:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A88815F25C9ADC8E68E2145CC20A00096657347 Validity Not Before: Dec 17 20:06:44 2025 GMT Not After : Dec 20 20:57:44 2025 GMT Subject: CN=018ACE6EE76327277F7F83D6DBD1A11B61569B50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:14:fb:9c:b4:92:2f:00:de:a0:f9:47:44:8a: b9:7c:6a:3f:e8:eb:02:55:77:38:38:52:e0:6a:31: e4:08:c3:24:27:32:b8:d3:ea:ef:7e:af:51:4a:9f: 84:8d:ca:31:45:34:38:ac:fe:a1:43:2a:de:4b:4a: 10:c7:cd:79:e0:d5:94:6e:fe:20:c9:48:23:37:c5: 05:61:00:56:92:bd:8f:a8:d2:eb:6e:dd:d4:7b:79: 8e:5d:b6:71:53:a3:3d:19:41:df:6a:f3:3f:52:00: 1f:28:ab:32:b8:0c:97:31:73:b2:d5:87:f6:8f:4a: 53:40:e6:ed:d5:27:c1:89:3f:3e:0a:74:fd:c9:45: 2d:31:3b:07:4d:f6:a0:83:ce:68:82:bf:a7:6c:8d: 60:6a:60:41:b6:3e:bf:2a:67:72:f2:d2:46:bd:bb: 32:a6:40:bc:00:48:5c:45:55:1e:1c:1c:2d:48:43: ef:67:04:4f:8f:39:9f:39:15:25:d8:09:45:34:d6: 99:68:c9:2c:47:46:eb:33:d8:f1:e2:c5:71:10:e2: 7a:a6:5d:1c:da:c2:29:60:2a:ba:76:f7:69:ee:13: b4:7d:65:28:fd:95:ed:2a:e7:10:9f:e5:56:0a:f9: dc:1d:e0:ba:82:28:b3:52:e5:9d:50:bb:0d:83:68: 20:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:8A:CE:6E:E7:63:27:27:7F:7F:83:D6:DB:D1:A1:1B:61:56:9B:50 X509v3 Authority Key Identifier: keyid:1A:88:81:5F:25:C9:AD:C8:E6:8E:21:45:CC:20:A0:00:96:65:73:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/54c77666-4c74-440d-9167-af63faa6eb9e/0/1A88815F25C9ADC8E68E2145CC20A00096657347.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A88815F25C9ADC8E68E2145CC20A00096657347.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/54c77666-4c74-440d-9167-af63faa6eb9e/0/1A88815F25C9ADC8E68E2145CC20A00096657347.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:aa:b3:61:9f:1c:fb:61:22:b7:1d:55:4c:ae:c9:6e:82:61: 70:50:45:5c:cc:c9:41:a5:00:ef:85:32:c6:4c:65:84:a4:a4: 87:93:fc:3a:d5:87:66:0d:ea:55:58:dd:7d:8d:e5:7a:eb:7b: 30:2e:76:33:8b:7d:cb:20:32:88:c1:6e:55:cc:9a:54:f3:bc: aa:c3:b9:71:3e:65:a1:8d:16:e6:5c:cf:36:a5:7f:f2:c8:2e: 57:00:c9:da:43:e5:7d:d9:b8:0b:fd:79:03:27:c1:2d:02:e6: ac:82:85:82:ee:e8:a4:79:9d:77:de:84:0c:0f:e1:b2:65:2e: ef:90:ce:4a:b8:67:91:07:02:e0:92:59:f0:e6:e9:cf:06:e1: fe:e0:f5:2f:a6:93:be:09:08:fb:85:f4:02:9f:44:e9:30:77: c4:f0:e5:96:45:4b:8c:ac:99:07:b5:01:7a:32:41:52:c0:61: a2:2d:f3:13:23:36:fd:73:d0:54:51:06:64:4b:de:a3:78:c4: 87:fd:f3:69:5a:5f:7e:b0:0c:15:21:53:47:4e:d7:c0:cb:38: 70:2b:6c:1c:28:1c:5d:3b:75:00:67:8c:23:d1:03:8a:f4:06: 88:fd:42:de:fa:f5:d4:da:bc:02:06:b4:08:93:42:32:64:21: 89:46:b5:70 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE6Od++EN2kxp9JBLfrn/92EptzYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE4ODgxNUYyNUM5QURDOEU2OEUyMTQ1Q0MyMEEwMDA5 NjY1NzM0NzAeFw0yNTEyMTcyMDA2NDRaFw0yNTEyMjAyMDU3NDRaMDMxMTAvBgNV BAMTKDAxOEFDRTZFRTc2MzI3Mjc3RjdGODNENkRCRDFBMTFCNjE1NjlCNTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpFPuctJIvAN6g+UdEirl8aj/o 6wJVdzg4UuBqMeQIwyQnMrjT6u9+r1FKn4SNyjFFNDis/qFDKt5LShDHzXng1ZRu /iDJSCM3xQVhAFaSvY+o0utu3dR7eY5dtnFToz0ZQd9q8z9SAB8oqzK4DJcxc7LV h/aPSlNA5u3VJ8GJPz4KdP3JRS0xOwdN9qCDzmiCv6dsjWBqYEG2Pr8qZ3Ly0ka9 uzKmQLwASFxFVR4cHC1IQ+9nBE+POZ85FSXYCUU01ploySxHRusz2PHixXEQ4nqm XRzawilgKrp292nuE7R9ZSj9le0q5xCf5VYK+dwd4LqCKLNS5Z1Quw2DaCCvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAYrObudjJyd/f4PW29GhG2FWm1AwHwYDVR0j BBgwFoAUGoiBXyXJrcjmjiFFzCCgAJZlc0cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NGM3NzY2Ni00Yzc0LTQ0MGQtOTE2Ny1hZjYzZmFhNmViOWUvMC8xQTg4ODE1RjI1 QzlBREM4RTY4RTIxNDVDQzIwQTAwMDk2NjU3MzQ3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUE4ODgxNUYyNUM5QURDOEU2OEUyMTQ1Q0MyMEEwMDA5NjY1 NzM0Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTRjNzc2NjYtNGM3NC00NDBkLTkx NjctYWY2M2ZhYTZlYjllLzAvMUE4ODgxNUYyNUM5QURDOEU2OEUyMTQ1Q0MyMEEw MDA5NjY1NzM0Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJGqs2GfHPthIrcdVUyuyW6CYXBQRVzMyUGl AO+FMsZMZYSkpIeT/DrVh2YN6lVY3X2N5XrrezAudjOLfcsgMojBblXMmlTzvKrD uXE+ZaGNFuZczzalf/LILlcAydpD5X3ZuAv9eQMnwS0C5qyChYLu6KR5nXfehAwP 4bJlLu+Qzkq4Z5EHAuCSWfDm6c8G4f7g9S+mk74JCPuF9AKfROkwd8Tw5ZZFS4ys mQe1AXoyQVLAYaIt8xMjNv1z0FRRBmRL3qN4xIf982laX36wDBUhU0dO18DLOHAr bBwoHF07dQBnjCPRA4r0Boj9Qt769dTavAIGtAiTQjJkIYlGtXA= -----END CERTIFICATE-----Generated at Fri Dec 19 18:20:39 2025 by rpki-client