This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/1/88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.mft File: 88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.mft (raw, json) Hash identifier: 6ZG1fKofl6JVpyWq8jkeGvcRsC1I5KRtCfSUy0aJF4k= Subject key identifier: 83:4A:0B:AC:66:AF:FD:B7:BE:AD:9F:60:0B:F6:54:DE:02:A3:60:C0 Authority key identifier: 88:E1:28:87:FF:4C:1B:DD:31:B6:A1:B2:2A:29:3C:B9:1F:46:5A:A9 Certificate issuer: /CN=88E12887FF4C1BDD31B6A1B22A293CB91F465AA9 Certificate serial: 5C39597CB70CCDB87D1C93E814B98E96C5241E71 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/1/88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.mft Manifest number: FB Signing time: Wed 24 Dec 2025 07:33:33 +0000 Manifest this update: Wed 24 Dec 2025 07:28:33 +0000 Manifest next update: Sat 27 Dec 2025 15:35:33 +0000 Files and hashes: 1: 3130332e3137322e3137322e302f32342d3234203d3e20313437303838.roa (hash: JKkCiBj1Ft4d/bxCb4U2iXHDOP8sJDEhV8ZeubcbaQE=) 2: 88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.crl (hash: 4FSLoYC8r+IRsTSq++Cr7vO4wFYDTW6fGn4EBWVPX0w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/1/88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.crl rsync://repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/1/88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 15:35:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:39:59:7c:b7:0c:cd:b8:7d:1c:93:e8:14:b9:8e:96:c5:24:1e:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88E12887FF4C1BDD31B6A1B22A293CB91F465AA9 Validity Not Before: Dec 24 07:28:33 2025 GMT Not After : Dec 27 15:35:33 2025 GMT Subject: CN=834A0BAC66AFFDB7BEAD9F600BF654DE02A360C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:24:58:d3:22:0e:81:d9:21:40:ef:df:ba:85: bf:a4:69:6f:e9:9b:f7:08:93:53:be:07:cc:9e:e1: 01:08:4b:c4:93:1f:58:b7:57:c2:84:3d:39:9e:f3: 14:38:53:f3:9d:d3:ef:19:93:41:b6:e0:ad:4e:ba: ee:ef:55:e5:26:76:ed:f2:4c:fc:53:2c:df:b2:d6: 5e:80:f9:48:38:c2:5d:cf:46:da:92:f5:d1:28:11: bb:74:32:9b:1e:b7:64:75:d0:b5:15:4c:9e:4a:45: 81:2d:6a:69:47:71:fc:c6:f7:28:3a:c0:62:87:78: 0b:d3:7c:1e:e0:83:4d:de:fd:42:cc:54:3a:54:3b: f0:d4:7d:52:09:5b:46:c8:56:7c:ee:ac:7d:4a:9a: c8:fe:99:af:a8:70:83:b9:36:c8:9a:40:a0:d7:7a: ce:96:c1:2d:47:fd:96:1b:8d:8c:be:c9:77:e0:b1: 8d:1f:79:9a:ea:98:e1:29:40:98:32:bc:fe:3a:b1: 38:a5:08:a5:be:cf:63:95:16:d7:af:60:6e:c1:2a: cf:d2:01:2c:bb:f0:19:cc:a6:f5:e0:5f:e5:82:a0: 53:c2:a9:d1:c6:80:60:a8:e5:3a:31:4a:7b:5c:5c: 4f:60:e4:41:40:e2:d0:15:ea:a1:61:88:ca:dd:42: f9:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:4A:0B:AC:66:AF:FD:B7:BE:AD:9F:60:0B:F6:54:DE:02:A3:60:C0 X509v3 Authority Key Identifier: keyid:88:E1:28:87:FF:4C:1B:DD:31:B6:A1:B2:2A:29:3C:B9:1F:46:5A:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/1/88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/1/88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:c3:9e:ed:48:92:10:cb:a5:df:32:6e:c1:25:fe:93:32:d6: b7:f5:12:06:14:e7:34:e3:b1:b4:e0:27:77:55:b6:74:a4:21: 22:04:ff:bd:8e:c0:2b:3c:33:21:0a:fa:fb:63:2e:18:c0:8f: 49:74:69:6a:09:a2:61:41:ee:58:c2:78:f8:4e:68:13:17:01: f5:9a:a6:9d:8d:db:6d:38:0c:4a:96:d7:f7:c5:f2:02:bc:22: fb:67:92:f3:02:a1:97:51:39:f9:f9:60:03:2f:80:44:bc:48: 67:31:74:c9:5f:f9:35:0d:f8:f3:4e:5a:ae:fd:33:d3:0d:06: 53:5e:6f:07:65:76:36:12:9e:63:c1:42:64:9d:12:41:37:fd: cd:31:44:f1:f6:79:f2:c8:41:58:61:66:4f:a2:f8:42:5d:17: 91:7b:17:dc:ac:a3:6c:5d:32:8e:28:a8:d5:08:02:4f:25:6f: 91:84:b8:78:6a:9d:c1:1d:8b:61:c1:95:d4:0a:f8:a9:ab:b3: df:12:ac:af:b3:0c:1b:87:67:63:34:ea:38:d7:4a:75:87:a8: 17:8f:59:16:17:11:17:4f:d8:a8:3c:ec:5e:51:99:00:51:1c: 72:c6:87:b2:52:58:ec:76:60:a3:9d:c7:ef:43:79:f1:1b:19: 0d:c0:d4:42 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXDlZfLcMzbh9HJPoFLmOlsUkHnEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODhFMTI4ODdGRjRDMUJERDMxQjZBMUIyMkEyOTNDQjkx RjQ2NUFBOTAeFw0yNTEyMjQwNzI4MzNaFw0yNTEyMjcxNTM1MzNaMDMxMTAvBgNV BAMTKDgzNEEwQkFDNjZBRkZEQjdCRUFEOUY2MDBCRjY1NERFMDJBMzYwQzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbJFjTIg6B2SFA79+6hb+kaW/p m/cIk1O+B8ye4QEIS8STH1i3V8KEPTme8xQ4U/Od0+8Zk0G24K1Ouu7vVeUmdu3y TPxTLN+y1l6A+Ug4wl3PRtqS9dEoEbt0Mpset2R10LUVTJ5KRYEtamlHcfzG9yg6 wGKHeAvTfB7gg03e/ULMVDpUO/DUfVIJW0bIVnzurH1Kmsj+ma+ocIO5NsiaQKDX es6WwS1H/ZYbjYy+yXfgsY0feZrqmOEpQJgyvP46sTilCKW+z2OVFtevYG7BKs/S ASy78BnMpvXgX+WCoFPCqdHGgGCo5ToxSntcXE9g5EFA4tAV6qFhiMrdQvnfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUg0oLrGav/be+rZ9gC/ZU3gKjYMAwHwYDVR0j BBgwFoAUiOEoh/9MG90xtqGyKik8uR9GWqkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NGRhNDE1Yi01ZjE3LTQ2MDItOWJkOS1mZDg0YWMyY2FlODYvMS84OEUxMjg4N0ZG NEMxQkREMzFCNkExQjIyQTI5M0NCOTFGNDY1QUE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODhFMTI4ODdGRjRDMUJERDMxQjZBMUIyMkEyOTNDQjkxRjQ2 NUFBOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODRkYTQxNWItNWYxNy00NjAyLTli ZDktZmQ4NGFjMmNhZTg2LzEvODhFMTI4ODdGRjRDMUJERDMxQjZBMUIyMkEyOTND QjkxRjQ2NUFBOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA/Dnu1IkhDLpd8ybsEl/pMy1rf1EgYU5zTj sbTgJ3dVtnSkISIE/72OwCs8MyEK+vtjLhjAj0l0aWoJomFB7ljCePhOaBMXAfWa pp2N2204DEqW1/fF8gK8IvtnkvMCoZdROfn5YAMvgES8SGcxdMlf+TUN+PNOWq79 M9MNBlNebwdldjYSnmPBQmSdEkE3/c0xRPH2efLIQVhhZk+i+EJdF5F7F9yso2xd Mo4oqNUIAk8lb5GEuHhqncEdi2HBldQK+Kmrs98SrK+zDBuHZ2M06jjXSnWHqBeP WRYXERdP2Kg87F5RmQBRHHLGh7JSWOx2YKOdx+9DefEbGQ3A1EI= -----END CERTIFICATE-----Generated at Wed Dec 24 22:09:41 2025 by rpki-client