This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/450633fc-fe23-4d82-ba64-bb7ee6dd6e06/0/88D56B9372987974D75D5FEB6C48FA491B771DE6.mft File: 88D56B9372987974D75D5FEB6C48FA491B771DE6.mft (raw, json) Hash identifier: ceXsr4KVIih+lgm/E0Rmw2XKkUovcBjBZ1YCYF193fU= Subject key identifier: A0:E2:6B:58:B0:4B:81:29:7D:07:24:9D:48:08:21:71:61:68:4D:95 Authority key identifier: 88:D5:6B:93:72:98:79:74:D7:5D:5F:EB:6C:48:FA:49:1B:77:1D:E6 Certificate issuer: /CN=88D56B9372987974D75D5FEB6C48FA491B771DE6 Certificate serial: 134EAE113A90EA4C86FC7B4AAB8452B6277059E4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/88D56B9372987974D75D5FEB6C48FA491B771DE6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/450633fc-fe23-4d82-ba64-bb7ee6dd6e06/0/88D56B9372987974D75D5FEB6C48FA491B771DE6.mft Manifest number: 014B Signing time: Sun 25 Jan 2026 12:32:09 +0000 Manifest this update: Sun 25 Jan 2026 12:27:09 +0000 Manifest next update: Wed 28 Jan 2026 15:19:09 +0000 Files and hashes: 1: 323430343a653134303a3a2f33322d3438203d3e20313338383632.roa (hash: s65ULf3kYPzmHhD/eaw4xa7fxStyJaVV06ikaxq29vc=) 2: 88D56B9372987974D75D5FEB6C48FA491B771DE6.crl (hash: PmdFP+mTs6fOzhC9i1f+dWdbIawwre3X7HX3TOMhdeU=) 3: 3130332e3133392e39382e302f32332d3234203d3e20313338383632.roa (hash: jBlPZ38x7fUq8L2OxFB/CipZgVFJBPwzL0K4wuU8V0I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/450633fc-fe23-4d82-ba64-bb7ee6dd6e06/0/88D56B9372987974D75D5FEB6C48FA491B771DE6.crl rsync://repo-rpki.idnic.net/repo/450633fc-fe23-4d82-ba64-bb7ee6dd6e06/0/88D56B9372987974D75D5FEB6C48FA491B771DE6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/88D56B9372987974D75D5FEB6C48FA491B771DE6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 14:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:4e:ae:11:3a:90:ea:4c:86:fc:7b:4a:ab:84:52:b6:27:70:59:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88D56B9372987974D75D5FEB6C48FA491B771DE6 Validity Not Before: Jan 25 12:27:09 2026 GMT Not After : Jan 28 15:19:09 2026 GMT Subject: CN=A0E26B58B04B81297D07249D4808217161684D95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:04:ad:2e:e2:5a:da:fc:4c:e7:dc:80:a7:18: e7:ab:d8:ef:1c:b7:58:24:93:73:ef:da:b2:da:14: bb:4c:1c:1a:b2:c0:03:67:27:b4:52:7d:99:3a:ac: 8d:c5:10:85:97:09:d6:d2:a1:b3:4c:f2:7b:bf:3b: a8:82:81:33:cb:18:0a:ff:35:2d:b2:dd:25:2d:53: 10:84:e3:3f:28:28:e4:fc:88:cd:25:c6:0b:a7:b2: 84:67:cb:42:32:0f:70:e2:bd:f5:cf:3f:4a:aa:41: 54:31:9d:37:0e:54:4b:8c:b7:52:0c:50:78:a2:cb: 6f:cf:04:24:c1:00:44:5c:a4:46:f4:80:f0:b8:90: 43:54:e1:40:1f:c0:70:a4:58:9e:38:72:6d:fd:25: 08:32:fc:b2:53:29:ee:f6:68:32:21:cd:81:9f:17: 55:50:dc:8b:24:b7:78:62:c3:89:02:2b:61:a4:40: 64:0f:18:81:b8:07:de:48:a4:1c:6b:19:bc:12:b0: f2:5c:e0:9f:a5:d9:d1:73:a1:f0:30:bc:e3:b2:cb: 8a:25:96:bb:1b:c5:84:84:2c:48:54:6e:c5:36:a1: 4b:40:53:91:5f:51:21:f7:f6:ac:1a:72:33:16:96: 64:a2:65:81:ce:f0:46:71:87:3b:e0:88:40:da:3e: b6:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:E2:6B:58:B0:4B:81:29:7D:07:24:9D:48:08:21:71:61:68:4D:95 X509v3 Authority Key Identifier: keyid:88:D5:6B:93:72:98:79:74:D7:5D:5F:EB:6C:48:FA:49:1B:77:1D:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/450633fc-fe23-4d82-ba64-bb7ee6dd6e06/0/88D56B9372987974D75D5FEB6C48FA491B771DE6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/88D56B9372987974D75D5FEB6C48FA491B771DE6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/450633fc-fe23-4d82-ba64-bb7ee6dd6e06/0/88D56B9372987974D75D5FEB6C48FA491B771DE6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:d1:68:e0:3a:00:b0:54:6d:3b:ea:9c:84:3e:3f:56:20:8b: bd:de:29:32:09:67:27:f2:26:59:3c:23:85:a0:06:1c:49:ca: 14:91:e5:f2:4d:eb:00:05:6c:0b:e9:4c:e3:4f:68:f7:4b:50: 58:97:7a:b0:7c:cc:d9:0d:71:c4:9b:44:3f:4a:fc:db:52:2a: dc:8c:06:34:3d:b9:59:ad:f1:34:4d:0f:c0:52:24:27:62:31: 4a:2f:57:f7:98:0c:0a:9e:80:94:72:d1:a5:37:1b:7c:72:02: f8:60:63:e7:0e:34:79:bd:0d:1a:df:15:6c:ee:65:cb:ca:7d: 31:65:b0:61:68:67:cf:a6:49:79:cb:cd:90:fc:08:d8:cf:c1: 04:33:51:2a:4b:85:e5:9d:6f:e0:24:e7:6e:5a:c4:37:65:47: 1d:75:e1:fa:02:69:d4:ee:16:34:02:4b:01:58:47:a0:58:15: d8:a8:ff:f3:08:e5:4b:1a:43:fd:e4:76:83:80:1f:3e:e7:19: 27:c9:f3:a5:3b:ab:47:65:d6:de:62:2c:6d:ce:72:10:0e:29: b9:38:ec:a6:e3:11:48:d6:2c:a0:e6:5c:55:fd:52:df:87:71: 6b:8b:54:b6:de:6e:f9:1c:ef:59:95:ba:a5:c4:77:6b:d5:c0: 35:34:a3:13 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE06uETqQ6kyG/HtKq4RStidwWeQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODhENTZCOTM3Mjk4Nzk3NEQ3NUQ1RkVCNkM0OEZBNDkx Qjc3MURFNjAeFw0yNjAxMjUxMjI3MDlaFw0yNjAxMjgxNTE5MDlaMDMxMTAvBgNV BAMTKEEwRTI2QjU4QjA0QjgxMjk3RDA3MjQ5RDQ4MDgyMTcxNjE2ODREOTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtBK0u4lra/Ezn3ICnGOer2O8c t1gkk3Pv2rLaFLtMHBqywANnJ7RSfZk6rI3FEIWXCdbSobNM8nu/O6iCgTPLGAr/ NS2y3SUtUxCE4z8oKOT8iM0lxgunsoRny0IyD3DivfXPP0qqQVQxnTcOVEuMt1IM UHiiy2/PBCTBAERcpEb0gPC4kENU4UAfwHCkWJ44cm39JQgy/LJTKe72aDIhzYGf F1VQ3Iskt3hiw4kCK2GkQGQPGIG4B95IpBxrGbwSsPJc4J+l2dFzofAwvOOyy4ol lrsbxYSELEhUbsU2oUtAU5FfUSH39qwacjMWlmSiZYHO8EZxhzvgiEDaPrbjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoOJrWLBLgSl9BySdSAghcWFoTZUwHwYDVR0j BBgwFoAUiNVrk3KYeXTXXV/rbEj6SRt3HeYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NTA2MzNmYy1mZTIzLTRkODItYmE2NC1iYjdlZTZkZDZlMDYvMC84OEQ1NkI5Mzcy OTg3OTc0RDc1RDVGRUI2QzQ4RkE0OTFCNzcxREU2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODhENTZCOTM3Mjk4Nzk3NEQ3NUQ1RkVCNkM0OEZBNDkxQjc3 MURFNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDUwNjMzZmMtZmUyMy00ZDgyLWJh NjQtYmI3ZWU2ZGQ2ZTA2LzAvODhENTZCOTM3Mjk4Nzk3NEQ3NUQ1RkVCNkM0OEZB NDkxQjc3MURFNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAITRaOA6ALBUbTvqnIQ+P1Ygi73eKTIJZyfy Jlk8I4WgBhxJyhSR5fJN6wAFbAvpTONPaPdLUFiXerB8zNkNccSbRD9K/NtSKtyM BjQ9uVmt8TRND8BSJCdiMUovV/eYDAqegJRy0aU3G3xyAvhgY+cONHm9DRrfFWzu ZcvKfTFlsGFoZ8+mSXnLzZD8CNjPwQQzUSpLheWdb+Ak525axDdlRx114foCadTu FjQCSwFYR6BYFdio//MI5UsaQ/3kdoOAHz7nGSfJ86U7q0dl1t5iLG3OchAOKbk4 7KbjEUjWLKDmXFX9Ut+HcWuLVLbebvkc71mVuqXEd2vVwDU0oxM= -----END CERTIFICATE-----Generated at Sun Jan 25 22:11:11 2026 by rpki-client