This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/450633fc-fe23-4d82-ba64-bb7ee6dd6e06/0/88D56B9372987974D75D5FEB6C48FA491B771DE6.mft File: 88D56B9372987974D75D5FEB6C48FA491B771DE6.mft (raw, json) Hash identifier: 8MwoYqMyH5M8Ac6WXLz8U8mACKbxV2hlcMn+jDLdiLE= Subject key identifier: 28:AB:B3:EC:87:71:BB:84:AF:AF:50:7C:EB:6A:87:89:C1:9D:22:A1 Authority key identifier: 88:D5:6B:93:72:98:79:74:D7:5D:5F:EB:6C:48:FA:49:1B:77:1D:E6 Certificate issuer: /CN=88D56B9372987974D75D5FEB6C48FA491B771DE6 Certificate serial: 7CFBE866E1A889B4427A60CA3253113865E58250 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/88D56B9372987974D75D5FEB6C48FA491B771DE6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/450633fc-fe23-4d82-ba64-bb7ee6dd6e06/0/88D56B9372987974D75D5FEB6C48FA491B771DE6.mft Manifest number: 0134 Signing time: Fri 05 Dec 2025 01:52:42 +0000 Manifest this update: Fri 05 Dec 2025 01:47:42 +0000 Manifest next update: Mon 08 Dec 2025 13:34:42 +0000 Files and hashes: 1: 323430343a653134303a3a2f33322d3438203d3e20313338383632.roa (hash: s65ULf3kYPzmHhD/eaw4xa7fxStyJaVV06ikaxq29vc=) 2: 3130332e3133392e39382e302f32332d3234203d3e20313338383632.roa (hash: jBlPZ38x7fUq8L2OxFB/CipZgVFJBPwzL0K4wuU8V0I=) 3: 88D56B9372987974D75D5FEB6C48FA491B771DE6.crl (hash: TSSjQjh6iTA/Ph+YmkNzNroTmn0+1IoJf4ihuASfJIg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/450633fc-fe23-4d82-ba64-bb7ee6dd6e06/0/88D56B9372987974D75D5FEB6C48FA491B771DE6.crl rsync://repo-rpki.idnic.net/repo/450633fc-fe23-4d82-ba64-bb7ee6dd6e06/0/88D56B9372987974D75D5FEB6C48FA491B771DE6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/88D56B9372987974D75D5FEB6C48FA491B771DE6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 13:34:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:fb:e8:66:e1:a8:89:b4:42:7a:60:ca:32:53:11:38:65:e5:82:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88D56B9372987974D75D5FEB6C48FA491B771DE6 Validity Not Before: Dec 5 01:47:42 2025 GMT Not After : Dec 8 13:34:42 2025 GMT Subject: CN=28ABB3EC8771BB84AFAF507CEB6A8789C19D22A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:9d:c6:b9:f1:e7:87:c1:83:6c:97:37:7d:a1: 48:ed:d1:a4:90:ce:de:da:12:0a:91:61:b8:b8:2f: e3:8f:32:59:00:b2:63:ea:cf:d7:a0:b2:7a:58:f1: 78:3a:6c:f7:2f:3d:96:2d:1b:86:68:8d:9b:c8:01: 68:51:26:af:4f:09:51:90:33:4b:6f:8c:2a:79:94: 06:8f:9e:f6:d5:9e:9f:b6:6e:09:d8:1e:86:1a:19: 75:ea:c7:e9:f8:41:31:8b:fc:46:10:a4:25:ad:02: ed:1f:82:98:a9:a1:a0:af:c7:fc:77:c4:1c:13:71: 4c:38:c6:9d:0a:25:8f:d2:98:e5:6e:f7:c9:8e:52: 93:ef:5a:99:48:ea:a6:21:a5:0e:4f:f7:b2:ea:4f: 43:4c:92:a8:cc:88:fd:16:90:46:7b:ff:b4:b7:3c: ac:76:79:66:fb:f9:cb:1f:1c:5f:f1:8e:e1:3d:b6: f1:17:eb:3f:6d:a5:3f:1a:d9:ef:91:83:b1:6f:b2: 6c:f9:4a:5a:98:98:d0:39:52:61:4e:9c:0d:06:3c: 59:8a:9e:cc:4c:ad:50:33:0c:f7:b2:f7:a0:e7:0f: 11:c1:2d:f3:e2:37:0e:0e:f4:e4:ae:cd:57:19:6c: b9:fb:c9:8e:be:6e:97:0b:01:c3:e6:3b:cd:13:fa: 59:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:AB:B3:EC:87:71:BB:84:AF:AF:50:7C:EB:6A:87:89:C1:9D:22:A1 X509v3 Authority Key Identifier: keyid:88:D5:6B:93:72:98:79:74:D7:5D:5F:EB:6C:48:FA:49:1B:77:1D:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/450633fc-fe23-4d82-ba64-bb7ee6dd6e06/0/88D56B9372987974D75D5FEB6C48FA491B771DE6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/88D56B9372987974D75D5FEB6C48FA491B771DE6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/450633fc-fe23-4d82-ba64-bb7ee6dd6e06/0/88D56B9372987974D75D5FEB6C48FA491B771DE6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:ba:7c:6f:f3:27:22:73:15:16:11:45:5c:45:01:e9:2d:3b: 83:f7:19:fe:3a:2e:f1:5e:4e:3a:4b:f1:4e:34:16:87:99:fd: cf:fb:fd:2e:13:83:a8:a5:fa:dd:37:7a:56:ff:c4:2b:fd:79: 11:57:49:61:62:a4:40:62:9d:5d:d0:1f:46:8b:cd:f2:9e:ec: 65:03:6e:5f:d8:a5:06:98:58:03:db:ad:c4:d7:2e:7e:9c:cd: 18:71:6a:c4:43:3b:5c:b7:9b:91:35:08:4a:b4:56:cf:ef:53: e3:9b:5c:8b:9f:c1:80:f7:1b:2e:56:a1:a1:97:ee:0e:36:e1: 33:ee:99:96:75:d5:9d:f7:18:67:06:f3:32:bc:9c:6b:7f:a7: a2:c7:e0:ea:e6:2b:82:c9:5d:1e:9a:2d:b2:ef:b5:5a:82:96: a9:ae:8e:56:af:eb:68:57:07:83:9c:aa:f6:e4:b0:9b:71:c7: b2:01:05:5e:db:70:a3:96:84:36:03:27:25:9b:67:ad:56:7b: ca:fd:0d:37:26:4e:ec:53:38:a3:05:5e:34:1f:3c:14:39:39: dc:35:a4:f2:54:de:df:ce:ec:bc:df:84:75:ae:ac:27:74:ea: 05:14:d4:52:12:5b:2d:b2:7e:28:67:75:c8:48:5b:23:b1:a7: 25:de:40:f9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfPvoZuGoibRCemDKMlMROGXlglAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODhENTZCOTM3Mjk4Nzk3NEQ3NUQ1RkVCNkM0OEZBNDkx Qjc3MURFNjAeFw0yNTEyMDUwMTQ3NDJaFw0yNTEyMDgxMzM0NDJaMDMxMTAvBgNV BAMTKDI4QUJCM0VDODc3MUJCODRBRkFGNTA3Q0VCNkE4Nzg5QzE5RDIyQTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXnca58eeHwYNslzd9oUjt0aSQ zt7aEgqRYbi4L+OPMlkAsmPqz9egsnpY8Xg6bPcvPZYtG4ZojZvIAWhRJq9PCVGQ M0tvjCp5lAaPnvbVnp+2bgnYHoYaGXXqx+n4QTGL/EYQpCWtAu0fgpipoaCvx/x3 xBwTcUw4xp0KJY/SmOVu98mOUpPvWplI6qYhpQ5P97LqT0NMkqjMiP0WkEZ7/7S3 PKx2eWb7+csfHF/xjuE9tvEX6z9tpT8a2e+Rg7Fvsmz5SlqYmNA5UmFOnA0GPFmK nsxMrVAzDPey96DnDxHBLfPiNw4O9OSuzVcZbLn7yY6+bpcLAcPmO80T+lnZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKKuz7Idxu4Svr1B862qHicGdIqEwHwYDVR0j BBgwFoAUiNVrk3KYeXTXXV/rbEj6SRt3HeYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NTA2MzNmYy1mZTIzLTRkODItYmE2NC1iYjdlZTZkZDZlMDYvMC84OEQ1NkI5Mzcy OTg3OTc0RDc1RDVGRUI2QzQ4RkE0OTFCNzcxREU2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODhENTZCOTM3Mjk4Nzk3NEQ3NUQ1RkVCNkM0OEZBNDkxQjc3 MURFNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDUwNjMzZmMtZmUyMy00ZDgyLWJh NjQtYmI3ZWU2ZGQ2ZTA2LzAvODhENTZCOTM3Mjk4Nzk3NEQ3NUQ1RkVCNkM0OEZB NDkxQjc3MURFNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKq6fG/zJyJzFRYRRVxFAektO4P3Gf46LvFe TjpL8U40FoeZ/c/7/S4Tg6il+t03elb/xCv9eRFXSWFipEBinV3QH0aLzfKe7GUD bl/YpQaYWAPbrcTXLn6czRhxasRDO1y3m5E1CEq0Vs/vU+ObXIufwYD3Gy5WoaGX 7g424TPumZZ11Z33GGcG8zK8nGt/p6LH4OrmK4LJXR6aLbLvtVqClqmujlav62hX B4OcqvbksJtxx7IBBV7bcKOWhDYDJyWbZ61We8r9DTcmTuxTOKMFXjQfPBQ5Odw1 pPJU3t/O7LzfhHWurCd06gUU1FISWy2yfihndchIWyOxpyXeQPk= -----END CERTIFICATE-----Generated at Sun Dec 7 00:50:13 2025 by rpki-client