This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/1/88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.mft File: 88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.mft (raw, json) Hash identifier: 4CfFL7tMlQRlCZiKQMIUJBQ9yfaaflZK91FN8rj5/dg= Subject key identifier: C4:EF:53:A7:38:F6:3C:85:B5:EB:41:A9:76:37:AE:91:1B:84:06:5C Authority key identifier: 88:E1:28:87:FF:4C:1B:DD:31:B6:A1:B2:2A:29:3C:B9:1F:46:5A:A9 Certificate issuer: /CN=88E12887FF4C1BDD31B6A1B22A293CB91F465AA9 Certificate serial: 6B40DDA5F9B5E07A45EBE95AEF05A5F8DF100A57 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/1/88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.mft Manifest number: FD Signing time: Sun 28 Dec 2025 19:51:29 +0000 Manifest this update: Sun 28 Dec 2025 19:46:29 +0000 Manifest next update: Thu 01 Jan 2026 02:53:29 +0000 Files and hashes: 1: 88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.crl (hash: pNfrB3DvXa4B1E49bvNMN7S0xzy9O1bmi9rsP9aKLrg=) 2: 3130332e3137322e3137322e302f32342d3234203d3e20313437303838.roa (hash: JKkCiBj1Ft4d/bxCb4U2iXHDOP8sJDEhV8ZeubcbaQE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/1/88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.crl rsync://repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/1/88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 31 Dec 2025 20:09:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:40:dd:a5:f9:b5:e0:7a:45:eb:e9:5a:ef:05:a5:f8:df:10:0a:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88E12887FF4C1BDD31B6A1B22A293CB91F465AA9 Validity Not Before: Dec 28 19:46:29 2025 GMT Not After : Jan 1 02:53:29 2026 GMT Subject: CN=C4EF53A738F63C85B5EB41A97637AE911B84065C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:7a:aa:1e:70:ee:38:16:5c:a8:76:97:d0:e7: d0:74:de:6b:2e:6c:5d:90:5e:e2:d5:42:be:e7:a3: b7:a6:ee:69:db:06:cf:f9:5e:51:dc:f6:9c:e6:8b: 9e:c7:3a:c9:71:a5:4d:c0:52:29:4e:b8:a8:f0:55: dc:84:4a:de:9b:8b:83:e4:43:ac:00:cf:54:f0:1e: 30:fc:e8:a0:ee:5c:02:fb:a0:d7:78:90:2b:1f:1d: 4b:b6:3f:8e:71:5f:70:68:b3:56:f0:e1:14:a5:7a: 52:75:1c:e3:35:e6:e5:ec:3f:d1:fa:47:2d:83:18: 9f:06:0b:0d:7f:d7:c7:5f:13:6b:5f:24:8c:15:7f: 51:f6:4f:ee:22:48:1a:b5:71:dc:d2:cd:6e:46:4a: a8:07:29:3e:08:81:3f:1f:f8:34:5b:4d:4b:3f:4b: a6:65:41:79:99:92:8c:09:af:9f:f9:fe:e3:a4:e3: 90:d5:a7:fe:31:32:80:c2:3c:9e:90:8b:86:ae:38: 75:c2:30:2c:a9:8a:f6:1d:69:6f:cf:1f:15:5a:11: eb:92:80:96:00:8f:52:71:ee:a9:84:6c:13:db:19: 84:34:e3:96:7a:45:f3:30:98:d9:3b:04:df:23:73: d2:2a:ba:a6:22:b4:00:cb:1a:be:68:0b:40:ce:98: 18:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:EF:53:A7:38:F6:3C:85:B5:EB:41:A9:76:37:AE:91:1B:84:06:5C X509v3 Authority Key Identifier: keyid:88:E1:28:87:FF:4C:1B:DD:31:B6:A1:B2:2A:29:3C:B9:1F:46:5A:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/1/88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/1/88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:7c:37:e7:03:48:d1:44:78:a3:11:79:43:ed:7e:33:f7:82: ac:c0:46:49:58:19:7a:f4:77:f6:45:a9:93:3a:d2:27:72:bf: 31:06:e6:5e:62:e2:8e:fc:22:9f:4e:13:c5:f7:c2:03:fa:3c: 80:b9:4a:4a:83:19:c4:96:8d:7d:fc:96:1c:92:6a:f8:31:d3: ed:af:e9:cf:20:d2:a4:45:95:0f:3b:0a:31:de:01:2e:02:ec: d5:3e:40:1d:67:12:b6:02:e3:16:fd:4e:cd:c2:54:7f:fc:58: 57:66:57:06:75:62:11:0b:ba:b1:31:9a:cf:3c:02:a6:87:e1: 35:c5:11:1e:c1:9d:5c:21:fd:b2:79:96:68:ef:68:ff:b4:27: b5:24:29:61:88:53:7a:18:f3:b6:2a:22:b1:58:3d:e5:9f:6f: 2a:97:2f:2d:f7:55:b3:e8:4b:cc:da:ca:9a:67:7c:83:53:14: d6:3e:41:3a:3a:93:bf:82:43:ff:ee:2e:b4:3c:04:f9:d7:a7: a5:ee:04:73:c4:e7:36:3d:2a:27:87:7b:3e:7e:89:c9:e2:3a: 2c:18:87:09:f0:64:89:ca:31:f9:cf:32:dc:83:a5:28:05:ce: e0:70:20:26:c8:82:ee:d5:90:f0:ec:18:c8:0f:a0:d4:e4:78: f2:89:4c:8e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUa0Ddpfm14HpF6+la7wWl+N8QClcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODhFMTI4ODdGRjRDMUJERDMxQjZBMUIyMkEyOTNDQjkx RjQ2NUFBOTAeFw0yNTEyMjgxOTQ2MjlaFw0yNjAxMDEwMjUzMjlaMDMxMTAvBgNV BAMTKEM0RUY1M0E3MzhGNjNDODVCNUVCNDFBOTc2MzdBRTkxMUI4NDA2NUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCreqoecO44FlyodpfQ59B03msu bF2QXuLVQr7no7em7mnbBs/5XlHc9pzmi57HOslxpU3AUilOuKjwVdyESt6bi4Pk Q6wAz1TwHjD86KDuXAL7oNd4kCsfHUu2P45xX3Bos1bw4RSlelJ1HOM15uXsP9H6 Ry2DGJ8GCw1/18dfE2tfJIwVf1H2T+4iSBq1cdzSzW5GSqgHKT4IgT8f+DRbTUs/ S6ZlQXmZkowJr5/5/uOk45DVp/4xMoDCPJ6Qi4auOHXCMCypivYdaW/PHxVaEeuS gJYAj1Jx7qmEbBPbGYQ045Z6RfMwmNk7BN8jc9IquqYitADLGr5oC0DOmBjzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxO9Tpzj2PIW160GpdjeukRuEBlwwHwYDVR0j BBgwFoAUiOEoh/9MG90xtqGyKik8uR9GWqkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NGRhNDE1Yi01ZjE3LTQ2MDItOWJkOS1mZDg0YWMyY2FlODYvMS84OEUxMjg4N0ZG NEMxQkREMzFCNkExQjIyQTI5M0NCOTFGNDY1QUE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODhFMTI4ODdGRjRDMUJERDMxQjZBMUIyMkEyOTNDQjkxRjQ2 NUFBOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODRkYTQxNWItNWYxNy00NjAyLTli ZDktZmQ4NGFjMmNhZTg2LzEvODhFMTI4ODdGRjRDMUJERDMxQjZBMUIyMkEyOTND QjkxRjQ2NUFBOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHJ8N+cDSNFEeKMReUPtfjP3gqzARklYGXr0 d/ZFqZM60idyvzEG5l5i4o78Ip9OE8X3wgP6PIC5SkqDGcSWjX38lhySavgx0+2v 6c8g0qRFlQ87CjHeAS4C7NU+QB1nErYC4xb9Ts3CVH/8WFdmVwZ1YhELurExms88 AqaH4TXFER7BnVwh/bJ5lmjvaP+0J7UkKWGIU3oY87YqIrFYPeWfbyqXLy33VbPo S8zayppnfINTFNY+QTo6k7+CQ//uLrQ8BPnXp6XuBHPE5zY9KieHez5+icniOiwY hwnwZInKMfnPMtyDpSgFzuBwICbIgu7VkPDsGMgPoNTkePKJTI4= -----END CERTIFICATE-----Generated at Sun Dec 28 23:27:01 2025 by rpki-client