This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/42f39c17-6725-42be-bed4-f0ebbba2d4fd/0/988E0377882A4782CADFC665BEA75BF64BFBAF8E.mft File: 988E0377882A4782CADFC665BEA75BF64BFBAF8E.mft (raw, json) Hash identifier: YPpW7unZ8vNTi+LbEv+hn43zqMe1wUAwOn9dZgkdKEo= Subject key identifier: 6D:2E:02:38:EB:67:83:17:11:BA:63:0E:9F:B8:80:DB:4C:11:C4:21 Authority key identifier: 98:8E:03:77:88:2A:47:82:CA:DF:C6:65:BE:A7:5B:F6:4B:FB:AF:8E Certificate issuer: /CN=988E0377882A4782CADFC665BEA75BF64BFBAF8E Certificate serial: 725F2F5C3F357400225BD719342C316643DAF381 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/988E0377882A4782CADFC665BEA75BF64BFBAF8E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/42f39c17-6725-42be-bed4-f0ebbba2d4fd/0/988E0377882A4782CADFC665BEA75BF64BFBAF8E.mft Manifest number: 02E8 Signing time: Sat 06 Dec 2025 12:10:41 +0000 Manifest this update: Sat 06 Dec 2025 12:05:41 +0000 Manifest next update: Tue 09 Dec 2025 19:23:41 +0000 Files and hashes: 1: 988E0377882A4782CADFC665BEA75BF64BFBAF8E.crl (hash: uVrXMQOfaq6/njgSP0LTiD+vFStJ6L65dXLiPJysXCA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/42f39c17-6725-42be-bed4-f0ebbba2d4fd/0/988E0377882A4782CADFC665BEA75BF64BFBAF8E.crl rsync://repo-rpki.idnic.net/repo/42f39c17-6725-42be-bed4-f0ebbba2d4fd/0/988E0377882A4782CADFC665BEA75BF64BFBAF8E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/988E0377882A4782CADFC665BEA75BF64BFBAF8E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:5f:2f:5c:3f:35:74:00:22:5b:d7:19:34:2c:31:66:43:da:f3:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=988E0377882A4782CADFC665BEA75BF64BFBAF8E Validity Not Before: Dec 6 12:05:41 2025 GMT Not After : Dec 9 19:23:41 2025 GMT Subject: CN=6D2E0238EB67831711BA630E9FB880DB4C11C421 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:59:de:96:95:30:fa:b3:68:93:28:1a:fc:2f: ea:6a:bd:92:d7:2f:bf:6e:39:a9:4d:20:d7:23:ea: 4e:a1:3c:5d:f3:36:88:d4:ec:0f:36:fa:3f:7f:fb: 65:7d:fb:95:55:57:15:f4:50:73:f4:d0:ac:55:aa: 10:8d:c0:44:2e:c3:57:46:01:f8:b2:ee:db:08:df: c0:08:2f:10:9e:01:1a:e4:cb:38:65:97:5d:c8:f8: 0b:37:36:d3:b5:bc:3b:3f:69:a1:e3:7c:a7:b7:39: 11:5b:85:52:17:29:3e:47:e4:5b:0e:d6:1b:85:2b: cd:55:fb:54:6c:c9:df:de:d5:8c:2f:0f:e4:71:cf: ad:3f:69:a3:01:bd:2c:c9:a6:fa:24:88:77:a0:e7: 0e:55:b9:5e:99:7e:5f:d5:4a:54:a9:74:71:76:b6: 90:84:33:c6:bf:88:c8:c0:b6:08:4a:b2:fb:47:4b: a3:a9:c1:c7:d5:8a:a6:92:31:aa:bd:53:47:af:40: a0:35:73:7b:19:2c:2d:d4:b0:c7:17:b4:bd:92:12: f1:f0:11:fb:09:56:7a:c0:0c:25:71:fe:5e:3e:34: 09:b7:cb:c5:07:f4:3e:44:94:75:16:b2:f2:9c:b4: 02:56:86:7d:30:0b:a8:91:1b:6a:10:2d:07:e9:ac: be:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:2E:02:38:EB:67:83:17:11:BA:63:0E:9F:B8:80:DB:4C:11:C4:21 X509v3 Authority Key Identifier: keyid:98:8E:03:77:88:2A:47:82:CA:DF:C6:65:BE:A7:5B:F6:4B:FB:AF:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/42f39c17-6725-42be-bed4-f0ebbba2d4fd/0/988E0377882A4782CADFC665BEA75BF64BFBAF8E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/988E0377882A4782CADFC665BEA75BF64BFBAF8E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/42f39c17-6725-42be-bed4-f0ebbba2d4fd/0/988E0377882A4782CADFC665BEA75BF64BFBAF8E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:0b:da:a3:ef:f1:63:ba:91:0f:61:d5:3f:17:f4:60:14:db: 98:02:39:3d:01:b6:5e:5e:10:22:3e:fa:9c:c6:1e:57:3d:1e: f8:9c:3d:97:b8:28:63:ac:6a:9d:4b:3e:d7:e8:3a:9f:3d:53: c4:1e:87:49:b7:20:9b:aa:2e:89:e8:87:c5:c3:53:ba:33:20: aa:cc:77:80:5e:1b:41:cd:2d:98:b0:b2:94:ea:81:a4:e2:a5: 78:98:a9:8f:47:ca:ea:75:4a:fa:64:8f:44:18:5b:84:e6:13: f5:7e:d4:ea:5b:90:0e:f5:85:73:7d:20:7b:03:60:a1:54:d1: 88:20:79:94:29:74:f3:37:28:1d:f0:93:be:25:ac:52:66:54: 44:58:30:b7:f7:ab:b2:fb:e6:6e:1d:49:e6:5b:7f:83:aa:9e: f6:57:b7:6b:91:6c:87:20:eb:53:ac:fe:22:50:41:ba:a6:05: b7:ed:e8:3d:ef:b8:94:8d:4d:73:a1:a8:7c:d9:41:61:a8:17: 5c:34:b9:d4:2d:1e:7b:d7:c7:b3:50:23:0d:ce:6c:f8:e6:cc: 30:e6:10:25:c4:8d:c7:f3:3a:35:d1:92:94:40:df:eb:ea:6e: 13:18:f9:e5:8c:39:b9:66:fc:d6:f5:5b:1d:15:6d:25:ca:de: 10:4d:78:a0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcl8vXD81dAAiW9cZNCwxZkPa84EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTg4RTAzNzc4ODJBNDc4MkNBREZDNjY1QkVBNzVCRjY0 QkZCQUY4RTAeFw0yNTEyMDYxMjA1NDFaFw0yNTEyMDkxOTIzNDFaMDMxMTAvBgNV BAMTKDZEMkUwMjM4RUI2NzgzMTcxMUJBNjMwRTlGQjg4MERCNEMxMUM0MjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTWd6WlTD6s2iTKBr8L+pqvZLX L79uOalNINcj6k6hPF3zNojU7A82+j9/+2V9+5VVVxX0UHP00KxVqhCNwEQuw1dG Afiy7tsI38AILxCeARrkyzhll13I+As3NtO1vDs/aaHjfKe3ORFbhVIXKT5H5FsO 1huFK81V+1Rsyd/e1YwvD+Rxz60/aaMBvSzJpvokiHeg5w5VuV6Zfl/VSlSpdHF2 tpCEM8a/iMjAtghKsvtHS6OpwcfViqaSMaq9U0evQKA1c3sZLC3UsMcXtL2SEvHw EfsJVnrADCVx/l4+NAm3y8UH9D5ElHUWsvKctAJWhn0wC6iRG2oQLQfprL5LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbS4COOtngxcRumMOn7iA20wRxCEwHwYDVR0j BBgwFoAUmI4Dd4gqR4LK38Zlvqdb9kv7r44wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MmYzOWMxNy02NzI1LTQyYmUtYmVkNC1mMGViYmJhMmQ0ZmQvMC85ODhFMDM3Nzg4 MkE0NzgyQ0FERkM2NjVCRUE3NUJGNjRCRkJBRjhFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTg4RTAzNzc4ODJBNDc4MkNBREZDNjY1QkVBNzVCRjY0QkZC QUY4RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDJmMzljMTctNjcyNS00MmJlLWJl ZDQtZjBlYmJiYTJkNGZkLzAvOTg4RTAzNzc4ODJBNDc4MkNBREZDNjY1QkVBNzVC RjY0QkZCQUY4RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ0L2qPv8WO6kQ9h1T8X9GAU25gCOT0Btl5e ECI++pzGHlc9HvicPZe4KGOsap1LPtfoOp89U8Qeh0m3IJuqLonoh8XDU7ozIKrM d4BeG0HNLZiwspTqgaTipXiYqY9Hyup1Svpkj0QYW4TmE/V+1OpbkA71hXN9IHsD YKFU0YggeZQpdPM3KB3wk74lrFJmVERYMLf3q7L75m4dSeZbf4OqnvZXt2uRbIcg 61Os/iJQQbqmBbft6D3vuJSNTXOhqHzZQWGoF1w0udQtHnvXx7NQIw3ObPjmzDDm ECXEjcfzOjXRkpRA3+vqbhMY+eWMOblm/Nb1Wx0VbSXK3hBNeKA= -----END CERTIFICATE-----Generated at Sun Dec 7 06:06:37 2025 by rpki-client