This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.mft File: C88864DD3C1E6D0D5FA91467F03B266DF5F79255.mft (raw, json) Hash identifier: 617VXGVpIMhVJOhMjmuU4IIv08NmSaAzR2BSdFULGXM= Subject key identifier: 15:BA:AD:D6:44:84:93:8F:69:B0:2E:E7:6A:C5:23:20:AF:D7:27:7D Authority key identifier: C8:88:64:DD:3C:1E:6D:0D:5F:A9:14:67:F0:3B:26:6D:F5:F7:92:55 Certificate issuer: /CN=C88864DD3C1E6D0D5FA91467F03B266DF5F79255 Certificate serial: 587F7560DC179D2F497F144663ADEC13BDE989A3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.cer Subject info access: rsync://repo-rpki.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.mft Manifest number: 013E Signing time: Thu 18 Dec 2025 22:12:55 +0000 Manifest this update: Thu 18 Dec 2025 22:07:55 +0000 Manifest next update: Mon 22 Dec 2025 00:50:55 +0000 Files and hashes: 1: 3135372e31302e38382e302f32332d3233203d3e20313532303832.roa (hash: 2xXRATtqKTFJTL45kpKCrmgQ+OKbp2ZlcGtRfjkIZUg=) 2: C88864DD3C1E6D0D5FA91467F03B266DF5F79255.crl (hash: yR58teDmCseod8R/xvG+N+rynr4eIMI1YWo5zGjk6YY=) 3: 3135372e31302e38382e302f32342d3234203d3e20313532303832.roa (hash: iu1Dc54YlpkWXrRrlgFt9MyI1bbMWnH2lViKwPc2SC4=) 4: 3135372e31302e38392e302f32342d3234203d3e20313532303832.roa (hash: r0yQckJKHz7cgtDpBZ5DT3GZabnNshDA9NVYp4KqxPI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.crl rsync://repo-rpki.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 00:50:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:7f:75:60:dc:17:9d:2f:49:7f:14:46:63:ad:ec:13:bd:e9:89:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C88864DD3C1E6D0D5FA91467F03B266DF5F79255 Validity Not Before: Dec 18 22:07:55 2025 GMT Not After : Dec 22 00:50:55 2025 GMT Subject: CN=15BAADD64484938F69B02EE76AC52320AFD7277D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:95:7d:8d:94:e5:68:81:00:38:93:9c:a9:70: 84:10:bc:04:1a:0b:e0:97:18:7c:4e:44:60:c3:66: d8:7e:25:12:f3:0e:f5:35:bb:da:a5:d5:4f:67:66: f1:ce:b6:30:0e:55:64:a7:7e:e3:3e:b2:d0:83:51: 54:a9:b5:5c:1e:7e:13:3f:45:aa:47:f9:cf:52:38: 78:4d:9f:68:86:ca:3c:43:2a:0d:87:41:03:8d:5b: f0:85:95:6c:28:f4:db:05:6c:75:1f:bf:a1:19:77: 59:4d:6e:55:74:a9:33:5a:a7:09:e4:f4:e8:0f:f7: 7e:34:e3:02:51:a3:dc:71:91:20:05:40:9c:91:41: 1f:b0:fd:e0:bb:17:76:1b:a5:01:9b:fa:00:c6:c5: f3:cf:8c:33:e8:b7:ef:ae:e3:1f:93:a3:57:dd:7f: 73:c6:1f:01:fd:6c:3c:65:0e:01:cb:36:3f:99:5d: 1e:95:7a:68:a2:32:48:22:f2:f7:b7:6b:e9:9e:4e: a8:5c:a9:87:e7:bb:cb:f0:f3:1d:bb:cb:61:e4:26: c6:ee:27:1e:bb:7f:1d:b4:81:ed:d0:44:86:b2:a6: e9:8f:5a:4b:bc:da:fd:78:c6:e9:e8:30:61:9d:92: 73:e4:29:94:3c:e7:8f:cb:ba:70:c2:2f:76:a4:f2: 03:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:BA:AD:D6:44:84:93:8F:69:B0:2E:E7:6A:C5:23:20:AF:D7:27:7D X509v3 Authority Key Identifier: keyid:C8:88:64:DD:3C:1E:6D:0D:5F:A9:14:67:F0:3B:26:6D:F5:F7:92:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:d1:fc:4c:85:64:d0:e0:ff:83:4c:1d:4e:f0:c6:5d:db:5a: b6:03:3b:f3:9f:93:4b:63:02:aa:ee:c8:4c:d4:d4:61:e3:ff: 93:de:15:7e:40:e7:e9:c6:3e:95:3c:56:fc:30:90:1d:6b:a5: 23:46:33:05:f2:4f:9c:9d:1b:62:e3:79:41:37:ac:4b:81:2e: 87:40:02:68:c1:50:1c:04:c8:e9:d6:0a:17:37:ae:19:71:7f: 1e:d1:3f:18:69:7a:7f:1e:b8:a7:a2:8d:c2:df:a9:80:7e:96: bc:e4:fd:11:a7:43:7d:a2:cd:9a:ca:ef:a0:10:f8:17:83:32: 7f:6c:0c:3b:17:f5:f6:a5:30:53:7f:51:63:d0:40:26:b6:ad: 7f:9f:d1:2a:19:3d:f3:de:c5:b5:a6:5a:53:83:66:60:2b:ce: ce:b3:1d:5b:8b:c2:a5:db:4e:f0:9e:58:f9:1f:6a:b7:ff:b2: 53:23:15:80:31:f5:d4:d7:88:d4:8a:a5:01:c1:29:71:da:a1: 97:51:b1:4a:e5:60:d9:de:07:ab:d2:71:83:07:67:b7:58:e4: ba:a3:34:47:e5:03:14:64:42:d6:de:55:b9:dc:45:27:41:f0: ad:54:c7:1b:a9:21:16:19:6f:8e:34:2f:57:96:62:17:81:48: bc:ab:5a:7e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWH91YNwXnS9JfxRGY63sE73piaMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzg4ODY0REQzQzFFNkQwRDVGQTkxNDY3RjAzQjI2NkRG NUY3OTI1NTAeFw0yNTEyMTgyMjA3NTVaFw0yNTEyMjIwMDUwNTVaMDMxMTAvBgNV BAMTKDE1QkFBREQ2NDQ4NDkzOEY2OUIwMkVFNzZBQzUyMzIwQUZENzI3N0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjlX2NlOVogQA4k5ypcIQQvAQa C+CXGHxORGDDZth+JRLzDvU1u9ql1U9nZvHOtjAOVWSnfuM+stCDUVSptVwefhM/ RapH+c9SOHhNn2iGyjxDKg2HQQONW/CFlWwo9NsFbHUfv6EZd1lNblV0qTNapwnk 9OgP93404wJRo9xxkSAFQJyRQR+w/eC7F3YbpQGb+gDGxfPPjDPot++u4x+To1fd f3PGHwH9bDxlDgHLNj+ZXR6VemiiMkgi8ve3a+meTqhcqYfnu8vw8x27y2HkJsbu Jx67fx20ge3QRIaypumPWku82v14xunoMGGdknPkKZQ854/LunDCL3ak8gNBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFbqt1kSEk49psC7nasUjIK/XJ30wHwYDVR0j BBgwFoAUyIhk3TwebQ1fqRRn8DsmbfX3klUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MzJlNGY4Ni00OGU3LTQ4YzctYmE5MS1lMjU5NjgzNzhlOTUvMC9DODg4NjRERDND MUU2RDBENUZBOTE0NjdGMDNCMjY2REY1Rjc5MjU1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQzg4ODY0REQzQzFFNkQwRDVGQTkxNDY3RjAzQjI2NkRGNUY3 OTI1NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzMyZTRmODYtNDhlNy00OGM3LWJh OTEtZTI1OTY4Mzc4ZTk1LzAvQzg4ODY0REQzQzFFNkQwRDVGQTkxNDY3RjAzQjI2 NkRGNUY3OTI1NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH/R/EyFZNDg/4NMHU7wxl3bWrYDO/Ofk0tj AqruyEzU1GHj/5PeFX5A5+nGPpU8VvwwkB1rpSNGMwXyT5ydG2LjeUE3rEuBLodA AmjBUBwEyOnWChc3rhlxfx7RPxhpen8euKeijcLfqYB+lrzk/RGnQ32izZrK76AQ +BeDMn9sDDsX9falMFN/UWPQQCa2rX+f0SoZPfPexbWmWlODZmArzs6zHVuLwqXb TvCeWPkfarf/slMjFYAx9dTXiNSKpQHBKXHaoZdRsUrlYNneB6vScYMHZ7dY5Lqj NEflAxRkQtbeVbncRSdB8K1UxxupIRYZb440L1eWYheBSLyrWn4= -----END CERTIFICATE-----Generated at Sat Dec 20 21:33:38 2025 by rpki-client