This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/1ecfd3f5-85da-48a7-b502-f61a59796c33/0/889933E416F356762F7F72858168C9C8A2E241C7.mft File: 889933E416F356762F7F72858168C9C8A2E241C7.mft (raw, json) Hash identifier: ZJl5AmEvFN3BHvjiGl7ahpEUgMwokn4Sa+r60zDf0ww= Subject key identifier: 66:8C:1E:59:33:4C:B0:75:15:23:FC:FF:04:AE:0E:17:63:69:7C:FD Authority key identifier: 88:99:33:E4:16:F3:56:76:2F:7F:72:85:81:68:C9:C8:A2:E2:41:C7 Certificate issuer: /CN=889933E416F356762F7F72858168C9C8A2E241C7 Certificate serial: 451188EAB2C3F07C06E87A3CC9039C9B9AF31FE6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/889933E416F356762F7F72858168C9C8A2E241C7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1ecfd3f5-85da-48a7-b502-f61a59796c33/0/889933E416F356762F7F72858168C9C8A2E241C7.mft Manifest number: 0208 Signing time: Sat 06 Dec 2025 01:30:38 +0000 Manifest this update: Sat 06 Dec 2025 01:25:38 +0000 Manifest next update: Tue 09 Dec 2025 05:39:38 +0000 Files and hashes: 1: 889933E416F356762F7F72858168C9C8A2E241C7.crl (hash: /4Z27ZPdyl8OThjlNhMT6yp/ll0TExHWLjcTTNNsykg=) 2: 3130332e3136372e3233362e302f32342d3234203d3e20313432333038.roa (hash: 5GvdROYQ95okUa1oax+KkGlSNt0oNcXWExwR/dpYZcg=) 3: 3130332e3136372e3233372e302f32342d3234203d3e20313432333038.roa (hash: hhBm/QT4y8ib7FGAltONinYNWg1PiVjj/mn1RgecAFk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1ecfd3f5-85da-48a7-b502-f61a59796c33/0/889933E416F356762F7F72858168C9C8A2E241C7.crl rsync://repo-rpki.idnic.net/repo/1ecfd3f5-85da-48a7-b502-f61a59796c33/0/889933E416F356762F7F72858168C9C8A2E241C7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/889933E416F356762F7F72858168C9C8A2E241C7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 05:39:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:11:88:ea:b2:c3:f0:7c:06:e8:7a:3c:c9:03:9c:9b:9a:f3:1f:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=889933E416F356762F7F72858168C9C8A2E241C7 Validity Not Before: Dec 6 01:25:38 2025 GMT Not After : Dec 9 05:39:38 2025 GMT Subject: CN=668C1E59334CB0751523FCFF04AE0E1763697CFD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:f7:92:4c:7c:46:14:82:c2:ca:d3:73:ea:52: e2:25:d1:1e:d9:12:2f:03:5e:17:5b:b3:fe:00:96: 60:9d:e4:b3:56:3c:b1:e9:f3:d6:cf:91:c7:0c:af: 85:c2:9f:17:f0:31:18:9c:ae:1d:ea:ff:51:9f:20: c6:89:ae:18:d1:ab:3e:f0:9a:a9:3c:20:d7:4c:a6: 83:15:31:fa:23:21:52:4a:25:95:39:91:6c:36:4b: 5a:1e:08:2d:55:ba:f3:ec:5b:96:cd:be:4f:cb:20: 8b:90:0d:9b:f3:9c:52:d0:cb:ab:6e:a9:95:41:98: e5:20:d2:ff:75:c6:f1:9d:30:b1:3b:96:4e:6f:2b: a6:8f:eb:57:30:a1:4a:55:33:75:38:ee:e6:5a:f0: a7:46:c6:29:e0:94:e1:8a:2d:f5:4d:71:bb:46:0d: fb:ef:9f:bd:f8:12:9c:96:62:47:9d:36:bd:4d:f1: 16:d6:31:ec:8d:a4:9b:90:15:82:e5:c5:b6:d3:e6: 88:c3:74:80:88:40:26:ff:7f:a2:a5:92:26:c3:70: 5a:1b:e4:ef:7d:82:7e:e7:fe:1f:ba:45:3a:f4:6e: 7a:98:ce:e4:1b:5a:6d:21:d2:f4:b0:72:7a:66:c9: 3d:94:90:1a:a6:f4:e3:66:c7:9e:5a:64:98:76:ea: 89:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:8C:1E:59:33:4C:B0:75:15:23:FC:FF:04:AE:0E:17:63:69:7C:FD X509v3 Authority Key Identifier: keyid:88:99:33:E4:16:F3:56:76:2F:7F:72:85:81:68:C9:C8:A2:E2:41:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1ecfd3f5-85da-48a7-b502-f61a59796c33/0/889933E416F356762F7F72858168C9C8A2E241C7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/889933E416F356762F7F72858168C9C8A2E241C7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ecfd3f5-85da-48a7-b502-f61a59796c33/0/889933E416F356762F7F72858168C9C8A2E241C7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:bb:6b:4c:a0:46:6c:fc:09:57:00:59:90:aa:1a:3e:12:32: f1:ff:21:e3:8e:a5:8b:20:4f:70:20:a2:58:40:48:16:62:61: 3f:b2:56:31:c4:df:54:f3:7b:00:ab:14:60:43:36:16:42:ef: 05:0a:71:95:e7:96:10:53:12:74:bd:71:a3:49:e4:59:a0:98: 6d:6a:1d:95:1d:4e:cb:3b:20:6e:1c:17:f0:9b:e4:c4:08:b9: af:c6:fc:b9:75:ce:ae:bd:a0:2f:92:19:2a:1a:d1:3b:60:1d: 4b:b0:06:04:43:93:2e:3a:69:73:f6:7e:2a:09:33:a0:6a:b6: ba:cb:54:5b:bc:fc:65:bd:65:c1:08:2f:73:d0:2f:41:16:30: 52:08:b9:83:53:8e:70:d0:a6:83:1f:ee:81:68:6c:9c:81:4b: 40:f7:9b:e3:7e:9a:f6:c8:d6:bc:ab:81:0b:40:8f:5a:ae:61: c3:d0:0e:88:5f:8c:99:ef:48:bd:0c:48:30:ee:4f:15:bb:f0: cc:5d:9e:4c:83:83:b3:34:db:4e:fe:f4:96:45:f2:7d:e5:65: 05:18:ac:3c:f3:9c:5f:23:ff:2a:79:fd:ca:e7:60:f5:9e:ae: 37:29:c1:da:92:93:32:5a:6b:f2:a5:e2:21:84:84:41:53:ef: cc:23:16:a9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURRGI6rLD8HwG6Ho8yQOcm5rzH+YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODg5OTMzRTQxNkYzNTY3NjJGN0Y3Mjg1ODE2OEM5QzhB MkUyNDFDNzAeFw0yNTEyMDYwMTI1MzhaFw0yNTEyMDkwNTM5MzhaMDMxMTAvBgNV BAMTKDY2OEMxRTU5MzM0Q0IwNzUxNTIzRkNGRjA0QUUwRTE3NjM2OTdDRkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy95JMfEYUgsLK03PqUuIl0R7Z Ei8DXhdbs/4AlmCd5LNWPLHp89bPkccMr4XCnxfwMRicrh3q/1GfIMaJrhjRqz7w mqk8INdMpoMVMfojIVJKJZU5kWw2S1oeCC1VuvPsW5bNvk/LIIuQDZvznFLQy6tu qZVBmOUg0v91xvGdMLE7lk5vK6aP61cwoUpVM3U47uZa8KdGxinglOGKLfVNcbtG Dfvvn734EpyWYkedNr1N8RbWMeyNpJuQFYLlxbbT5ojDdICIQCb/f6KlkibDcFob 5O99gn7n/h+6RTr0bnqYzuQbWm0h0vSwcnpmyT2UkBqm9ONmx55aZJh26om/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZoweWTNMsHUVI/z/BK4OF2NpfP0wHwYDVR0j BBgwFoAUiJkz5BbzVnYvf3KFgWjJyKLiQccwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZWNmZDNmNS04NWRhLTQ4YTctYjUwMi1mNjFhNTk3OTZjMzMvMC84ODk5MzNFNDE2 RjM1Njc2MkY3RjcyODU4MTY4QzlDOEEyRTI0MUM3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODg5OTMzRTQxNkYzNTY3NjJGN0Y3Mjg1ODE2OEM5QzhBMkUy NDFDNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWVjZmQzZjUtODVkYS00OGE3LWI1 MDItZjYxYTU5Nzk2YzMzLzAvODg5OTMzRTQxNkYzNTY3NjJGN0Y3Mjg1ODE2OEM5 QzhBMkUyNDFDNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKK7a0ygRmz8CVcAWZCqGj4SMvH/IeOOpYsg T3AgolhASBZiYT+yVjHE31TzewCrFGBDNhZC7wUKcZXnlhBTEnS9caNJ5FmgmG1q HZUdTss7IG4cF/Cb5MQIua/G/Ll1zq69oC+SGSoa0TtgHUuwBgRDky46aXP2fioJ M6BqtrrLVFu8/GW9ZcEIL3PQL0EWMFIIuYNTjnDQpoMf7oFobJyBS0D3m+N+mvbI 1ryrgQtAj1quYcPQDohfjJnvSL0MSDDuTxW78MxdnkyDg7M0207+9JZF8n3lZQUY rDzznF8j/yp5/crnYPWerjcpwdqSkzJaa/Kl4iGEhEFT78wjFqk= -----END CERTIFICATE-----Generated at Sun Dec 7 07:29:54 2025 by rpki-client