This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/54c77666-4c74-440d-9167-af63faa6eb9e/0/1A88815F25C9ADC8E68E2145CC20A00096657347.mft File: 1A88815F25C9ADC8E68E2145CC20A00096657347.mft (raw, json) Hash identifier: Qv4+RRYbN5BtFdmBy9ykapX3iXXNrkB0rzFBN7hlb2c= Subject key identifier: 01:04:B4:B4:20:D7:0A:FD:0E:4D:93:60:C2:93:15:1A:4D:28:FA:8D Authority key identifier: 1A:88:81:5F:25:C9:AD:C8:E6:8E:21:45:CC:20:A0:00:96:65:73:47 Certificate issuer: /CN=1A88815F25C9ADC8E68E2145CC20A00096657347 Certificate serial: 3200B5966D80483DBF1409779CFEC4B408D5845B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A88815F25C9ADC8E68E2145CC20A00096657347.cer Subject info access: rsync://repo-rpki.idnic.net/repo/54c77666-4c74-440d-9167-af63faa6eb9e/0/1A88815F25C9ADC8E68E2145CC20A00096657347.mft Manifest number: 028E Signing time: Sat 06 Dec 2025 03:41:46 +0000 Manifest this update: Sat 06 Dec 2025 03:36:46 +0000 Manifest next update: Tue 09 Dec 2025 07:32:46 +0000 Files and hashes: 1: 3130332e3137352e38342e302f32342d3234203d3e20313437313137.roa (hash: X7jlC8806cONOESjfeaSOO4BlCs60fPKPrtTWgAwSss=) 2: 3130332e3137352e38342e302f32332d3234203d3e20313437313137.roa (hash: sYuoPIutBM6UsTB74BSY1gl4de6W9HHMo31g7KdPOkQ=) 3: 1A88815F25C9ADC8E68E2145CC20A00096657347.crl (hash: dZmJWPHVqQcx+ReNxhjQa93iKbF40qfI55b4MYTCKA4=) 4: 3130332e3137352e38352e302f32342d3234203d3e20313437313137.roa (hash: dQkihMhWzN2ARo3TbtERAeJ3TdDzeXt9eRFpYMTxe1s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/54c77666-4c74-440d-9167-af63faa6eb9e/0/1A88815F25C9ADC8E68E2145CC20A00096657347.crl rsync://repo-rpki.idnic.net/repo/54c77666-4c74-440d-9167-af63faa6eb9e/0/1A88815F25C9ADC8E68E2145CC20A00096657347.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A88815F25C9ADC8E68E2145CC20A00096657347.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 07:32:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:00:b5:96:6d:80:48:3d:bf:14:09:77:9c:fe:c4:b4:08:d5:84:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A88815F25C9ADC8E68E2145CC20A00096657347 Validity Not Before: Dec 6 03:36:46 2025 GMT Not After : Dec 9 07:32:46 2025 GMT Subject: CN=0104B4B420D70AFD0E4D9360C293151A4D28FA8D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:3d:25:35:84:5b:58:54:2f:5b:1b:0f:b7:7a: 54:1c:79:bd:0b:d3:54:47:61:2f:ca:77:77:af:26: e5:12:aa:e5:79:3f:5f:df:63:11:0a:7b:59:27:c5: ed:e1:24:fa:4e:01:2b:39:44:45:fa:a0:8d:f1:c8: ab:1d:8f:dd:a0:9d:89:7c:1b:56:5d:54:a7:34:bb: 53:40:98:f8:5b:44:e7:07:04:c4:8f:dc:b6:0f:26: b1:6d:d8:44:e9:97:09:2e:02:af:22:23:82:8d:f2: 80:80:69:14:cd:5f:22:29:2a:84:28:6c:88:25:23: c1:ab:25:b5:b8:51:c5:13:86:42:ce:0a:5a:b6:63: 0a:a6:3a:e8:b9:d4:7d:59:70:7b:03:1e:f3:2c:47: da:0a:24:99:33:7b:c2:28:0e:e3:f2:e6:c4:a1:33: 7e:e2:0a:93:67:48:5b:8c:6d:e2:a6:50:6c:35:3c: 49:d2:19:f2:de:12:ce:38:95:fd:1f:d2:e4:75:9c: f0:a9:86:5a:ad:02:c7:f5:ba:f4:9a:23:b1:49:68: 9b:82:f0:21:d4:e8:35:ba:ed:e9:ae:4f:25:74:eb: bf:be:b2:d2:7e:3c:db:5b:ba:b6:83:8b:17:da:58: a8:53:13:26:7a:14:90:f0:21:a9:f7:cb:3c:e8:a0: 5e:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:04:B4:B4:20:D7:0A:FD:0E:4D:93:60:C2:93:15:1A:4D:28:FA:8D X509v3 Authority Key Identifier: keyid:1A:88:81:5F:25:C9:AD:C8:E6:8E:21:45:CC:20:A0:00:96:65:73:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/54c77666-4c74-440d-9167-af63faa6eb9e/0/1A88815F25C9ADC8E68E2145CC20A00096657347.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A88815F25C9ADC8E68E2145CC20A00096657347.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/54c77666-4c74-440d-9167-af63faa6eb9e/0/1A88815F25C9ADC8E68E2145CC20A00096657347.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:4a:d7:3d:c5:cb:2f:a6:4f:a2:a2:48:6c:e1:ca:95:e5:66: b5:f3:07:23:1b:8c:55:28:25:9a:e5:52:20:e2:0e:99:07:bd: 7b:93:6d:91:43:c5:b6:42:b9:f7:04:c4:40:5b:42:d0:88:c0: ae:92:df:3a:b0:d4:6b:ad:50:b9:3e:8f:ab:5b:8b:a4:3b:8d: 9a:6b:99:6f:e9:28:9d:6c:1f:1c:4c:32:c2:0f:a5:b8:50:c3: ad:45:f5:dd:10:3b:d3:b8:f2:9d:24:8f:ee:94:fc:92:76:ff: 96:a3:d8:64:85:6a:d9:78:1f:3e:89:73:57:bc:58:8d:2c:da: b7:bb:53:77:85:ac:9b:40:f9:b3:7d:f4:d0:ae:2f:a2:0b:2b: 35:53:c9:46:3a:fb:33:16:b7:e5:b5:64:0c:eb:92:d9:ad:c3: 21:25:b2:12:93:61:4b:7d:58:32:46:17:65:6e:8f:9c:59:a7: a8:4e:15:66:25:83:01:9d:e9:6b:2c:4b:78:cc:92:9c:d5:2f: ec:9a:c0:ca:1b:6e:31:cc:4d:bb:37:4e:cd:76:c5:22:ea:02: 3a:14:55:57:10:a6:0d:3a:1e:dd:90:b8:1d:eb:12:90:1f:66: 42:56:7a:82:a3:45:f9:37:94:1f:b8:7f:57:e9:10:5a:dd:e2: 91:d6:44:76 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMgC1lm2ASD2/FAl3nP7EtAjVhFswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE4ODgxNUYyNUM5QURDOEU2OEUyMTQ1Q0MyMEEwMDA5 NjY1NzM0NzAeFw0yNTEyMDYwMzM2NDZaFw0yNTEyMDkwNzMyNDZaMDMxMTAvBgNV BAMTKDAxMDRCNEI0MjBENzBBRkQwRTREOTM2MEMyOTMxNTFBNEQyOEZBOEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdPSU1hFtYVC9bGw+3elQceb0L 01RHYS/Kd3evJuUSquV5P1/fYxEKe1knxe3hJPpOASs5REX6oI3xyKsdj92gnYl8 G1ZdVKc0u1NAmPhbROcHBMSP3LYPJrFt2ETplwkuAq8iI4KN8oCAaRTNXyIpKoQo bIglI8GrJbW4UcUThkLOClq2YwqmOui51H1ZcHsDHvMsR9oKJJkze8IoDuPy5sSh M37iCpNnSFuMbeKmUGw1PEnSGfLeEs44lf0f0uR1nPCphlqtAsf1uvSaI7FJaJuC 8CHU6DW67emuTyV067++stJ+PNtburaDixfaWKhTEyZ6FJDwIan3yzzooF5RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAQS0tCDXCv0OTZNgwpMVGk0o+o0wHwYDVR0j BBgwFoAUGoiBXyXJrcjmjiFFzCCgAJZlc0cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NGM3NzY2Ni00Yzc0LTQ0MGQtOTE2Ny1hZjYzZmFhNmViOWUvMC8xQTg4ODE1RjI1 QzlBREM4RTY4RTIxNDVDQzIwQTAwMDk2NjU3MzQ3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUE4ODgxNUYyNUM5QURDOEU2OEUyMTQ1Q0MyMEEwMDA5NjY1 NzM0Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTRjNzc2NjYtNGM3NC00NDBkLTkx NjctYWY2M2ZhYTZlYjllLzAvMUE4ODgxNUYyNUM5QURDOEU2OEUyMTQ1Q0MyMEEw MDA5NjY1NzM0Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGVK1z3Fyy+mT6KiSGzhypXlZrXzByMbjFUo JZrlUiDiDpkHvXuTbZFDxbZCufcExEBbQtCIwK6S3zqw1GutULk+j6tbi6Q7jZpr mW/pKJ1sHxxMMsIPpbhQw61F9d0QO9O48p0kj+6U/JJ2/5aj2GSFatl4Hz6Jc1e8 WI0s2re7U3eFrJtA+bN99NCuL6ILKzVTyUY6+zMWt+W1ZAzrktmtwyElshKTYUt9 WDJGF2Vuj5xZp6hOFWYlgwGd6WssS3jMkpzVL+yawMobbjHMTbs3Ts12xSLqAjoU VVcQpg06Ht2QuB3rEpAfZkJWeoKjRfk3lB+4f1fpEFrd4pHWRHY= -----END CERTIFICATE-----Generated at Sun Dec 7 07:47:13 2025 by rpki-client