This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/42f39c17-6725-42be-bed4-f0ebbba2d4fd/0/988E0377882A4782CADFC665BEA75BF64BFBAF8E.mft File: 988E0377882A4782CADFC665BEA75BF64BFBAF8E.mft (raw, json) Hash identifier: Rb9zy4d0gnR3VZX2gYO5UipFUlBB9LWXMwEqJbKDxyg= Subject key identifier: 89:66:36:9A:8E:51:26:C3:B2:05:2E:1A:7F:8F:5C:E0:81:60:65:02 Authority key identifier: 98:8E:03:77:88:2A:47:82:CA:DF:C6:65:BE:A7:5B:F6:4B:FB:AF:8E Certificate issuer: /CN=988E0377882A4782CADFC665BEA75BF64BFBAF8E Certificate serial: 2C95A959844AD264D1490D08C8A2FA5B461FB703 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/988E0377882A4782CADFC665BEA75BF64BFBAF8E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/42f39c17-6725-42be-bed4-f0ebbba2d4fd/0/988E0377882A4782CADFC665BEA75BF64BFBAF8E.mft Manifest number: 02FE Signing time: Sat 24 Jan 2026 09:50:43 +0000 Manifest this update: Sat 24 Jan 2026 09:45:43 +0000 Manifest next update: Tue 27 Jan 2026 11:26:43 +0000 Files and hashes: 1: 988E0377882A4782CADFC665BEA75BF64BFBAF8E.crl (hash: LOwgJVuCM+Va/aCE+GcYw9J3C8JFLwTHSypfbxFp6Js=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/42f39c17-6725-42be-bed4-f0ebbba2d4fd/0/988E0377882A4782CADFC665BEA75BF64BFBAF8E.crl rsync://repo-rpki.idnic.net/repo/42f39c17-6725-42be-bed4-f0ebbba2d4fd/0/988E0377882A4782CADFC665BEA75BF64BFBAF8E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/988E0377882A4782CADFC665BEA75BF64BFBAF8E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 11:26:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:95:a9:59:84:4a:d2:64:d1:49:0d:08:c8:a2:fa:5b:46:1f:b7:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=988E0377882A4782CADFC665BEA75BF64BFBAF8E Validity Not Before: Jan 24 09:45:43 2026 GMT Not After : Jan 27 11:26:43 2026 GMT Subject: CN=8966369A8E5126C3B2052E1A7F8F5CE081606502 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ef:9e:f0:29:90:23:67:66:c6:8d:9b:48:62: 3d:8d:23:9d:10:cc:2b:9c:33:d7:d3:0c:21:22:97: 7b:b9:ba:aa:6b:e3:2d:79:f1:fc:63:41:8d:56:32: b8:0e:da:0c:40:7e:81:14:49:01:e8:22:88:fa:8b: 24:65:5c:8e:67:9f:9c:86:be:81:c8:cd:95:f2:74: ca:7d:f0:fe:4a:06:70:1c:23:a7:12:93:cb:a5:33: e8:be:ca:28:fd:16:22:00:99:09:ae:a1:5d:3f:a7: bb:8e:55:b0:19:ed:98:97:f5:48:fe:5e:6f:15:a7: 63:88:3d:b5:9f:db:85:d7:25:9a:37:23:92:ae:1c: 67:32:88:61:51:61:5b:d3:25:f7:de:d4:5a:82:cc: ac:59:d9:42:21:67:ec:32:ab:d8:12:22:54:b0:e2: 01:cb:7c:b5:93:9f:fb:e6:4d:f0:44:e8:ee:fa:76: 19:0d:3e:30:db:11:95:99:4b:ce:3e:b6:20:dc:ed: 75:86:29:c1:e0:00:a9:9e:e9:31:ed:e7:85:f8:16: 4d:52:c1:00:74:cc:1b:c1:75:13:ec:a6:d0:49:a7: b9:2e:37:40:bd:75:f0:ae:66:55:11:9e:3c:a6:6d: 23:19:a3:92:4c:0f:1f:5d:7a:8d:d6:92:1b:18:53: d0:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:66:36:9A:8E:51:26:C3:B2:05:2E:1A:7F:8F:5C:E0:81:60:65:02 X509v3 Authority Key Identifier: keyid:98:8E:03:77:88:2A:47:82:CA:DF:C6:65:BE:A7:5B:F6:4B:FB:AF:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/42f39c17-6725-42be-bed4-f0ebbba2d4fd/0/988E0377882A4782CADFC665BEA75BF64BFBAF8E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/988E0377882A4782CADFC665BEA75BF64BFBAF8E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/42f39c17-6725-42be-bed4-f0ebbba2d4fd/0/988E0377882A4782CADFC665BEA75BF64BFBAF8E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:c3:79:6b:07:9c:b7:14:32:16:47:be:ff:88:20:30:78:5c: 2e:ab:a5:e5:15:cf:84:ac:e2:75:7b:c3:49:80:d5:8e:04:d4: 79:60:9e:3b:15:bc:40:73:5e:86:4a:8e:00:a1:7b:e9:d0:e5: 8e:03:e4:7c:81:d3:cd:9f:b5:6e:ab:91:70:7f:ea:89:93:1a: 0d:2f:6a:e8:81:ce:75:6a:c3:a2:69:ef:b0:bc:11:e6:b3:cc: 17:31:9e:fd:e7:09:b7:7b:47:5e:1e:a3:7e:0f:94:62:a3:7c: 40:30:95:cc:c1:21:f2:c3:cd:b7:6c:a9:6c:fb:55:06:c2:18: 7d:b0:d3:87:3f:b1:72:e7:09:60:db:90:39:4f:36:dd:fd:4a: 52:e7:1f:0b:a1:f3:d2:4f:a3:8b:14:08:81:7c:98:81:6a:e7: 00:80:b9:44:b8:db:fb:c8:4c:c9:b3:d0:99:f7:5e:40:2e:9a: 7f:0a:d4:75:af:58:39:eb:c9:ff:d1:d5:0e:4d:92:fc:eb:04: ab:e0:22:40:13:c5:23:1f:27:35:9b:25:b1:61:6d:88:c3:8c: 3e:46:e6:61:09:e6:16:dc:5b:84:42:f3:8b:22:24:63:c6:68: 95:65:0f:1c:5a:b2:67:56:ab:bd:05:18:d2:34:3c:36:d0:8d: 98:10:ca:be -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULJWpWYRK0mTRSQ0IyKL6W0YftwMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTg4RTAzNzc4ODJBNDc4MkNBREZDNjY1QkVBNzVCRjY0 QkZCQUY4RTAeFw0yNjAxMjQwOTQ1NDNaFw0yNjAxMjcxMTI2NDNaMDMxMTAvBgNV BAMTKDg5NjYzNjlBOEU1MTI2QzNCMjA1MkUxQTdGOEY1Q0UwODE2MDY1MDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+757wKZAjZ2bGjZtIYj2NI50Q zCucM9fTDCEil3u5uqpr4y158fxjQY1WMrgO2gxAfoEUSQHoIoj6iyRlXI5nn5yG voHIzZXydMp98P5KBnAcI6cSk8ulM+i+yij9FiIAmQmuoV0/p7uOVbAZ7ZiX9Uj+ Xm8Vp2OIPbWf24XXJZo3I5KuHGcyiGFRYVvTJffe1FqCzKxZ2UIhZ+wyq9gSIlSw 4gHLfLWTn/vmTfBE6O76dhkNPjDbEZWZS84+tiDc7XWGKcHgAKme6THt54X4Fk1S wQB0zBvBdRPsptBJp7kuN0C9dfCuZlURnjymbSMZo5JMDx9deo3WkhsYU9C9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiWY2mo5RJsOyBS4af49c4IFgZQIwHwYDVR0j BBgwFoAUmI4Dd4gqR4LK38Zlvqdb9kv7r44wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MmYzOWMxNy02NzI1LTQyYmUtYmVkNC1mMGViYmJhMmQ0ZmQvMC85ODhFMDM3Nzg4 MkE0NzgyQ0FERkM2NjVCRUE3NUJGNjRCRkJBRjhFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTg4RTAzNzc4ODJBNDc4MkNBREZDNjY1QkVBNzVCRjY0QkZC QUY4RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDJmMzljMTctNjcyNS00MmJlLWJl ZDQtZjBlYmJiYTJkNGZkLzAvOTg4RTAzNzc4ODJBNDc4MkNBREZDNjY1QkVBNzVC RjY0QkZCQUY4RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJnDeWsHnLcUMhZHvv+IIDB4XC6rpeUVz4Ss 4nV7w0mA1Y4E1HlgnjsVvEBzXoZKjgChe+nQ5Y4D5HyB082ftW6rkXB/6omTGg0v auiBznVqw6Jp77C8EeazzBcxnv3nCbd7R14eo34PlGKjfEAwlczBIfLDzbdsqWz7 VQbCGH2w04c/sXLnCWDbkDlPNt39SlLnHwuh89JPo4sUCIF8mIFq5wCAuUS42/vI TMmz0Jn3XkAumn8K1HWvWDnryf/R1Q5NkvzrBKvgIkATxSMfJzWbJbFhbYjDjD5G 5mEJ5hbcW4RC84siJGPGaJVlDxxasmdWq70FGNI0PDbQjZgQyr4= -----END CERTIFICATE-----Generated at Sun Jan 25 22:22:58 2026 by rpki-client