This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.mft File: C88864DD3C1E6D0D5FA91467F03B266DF5F79255.mft (raw, json) Hash identifier: OG/HWSuQGRnBe3ex28xRW+3L8OUMpTvtkaiAtxVKUaE= Subject key identifier: 2A:4F:C4:21:76:6E:5A:01:3D:82:D8:83:6D:70:B7:4F:24:93:E0:C6 Authority key identifier: C8:88:64:DD:3C:1E:6D:0D:5F:A9:14:67:F0:3B:26:6D:F5:F7:92:55 Certificate issuer: /CN=C88864DD3C1E6D0D5FA91467F03B266DF5F79255 Certificate serial: 5BFB14099622346A96A8CBE37602EE6CE0753C54 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.cer Subject info access: rsync://repo-rpki.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.mft Manifest number: 0138 Signing time: Fri 05 Dec 2025 12:01:48 +0000 Manifest this update: Fri 05 Dec 2025 11:56:48 +0000 Manifest next update: Mon 08 Dec 2025 21:24:48 +0000 Files and hashes: 1: 3135372e31302e38382e302f32332d3233203d3e20313532303832.roa (hash: 2xXRATtqKTFJTL45kpKCrmgQ+OKbp2ZlcGtRfjkIZUg=) 2: 3135372e31302e38382e302f32342d3234203d3e20313532303832.roa (hash: iu1Dc54YlpkWXrRrlgFt9MyI1bbMWnH2lViKwPc2SC4=) 3: C88864DD3C1E6D0D5FA91467F03B266DF5F79255.crl (hash: WuV6AlduxnoB/GpbIzqd5mkRsgzolhh73jX1us2Q/Cs=) 4: 3135372e31302e38392e302f32342d3234203d3e20313532303832.roa (hash: r0yQckJKHz7cgtDpBZ5DT3GZabnNshDA9NVYp4KqxPI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.crl rsync://repo-rpki.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 21:24:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:fb:14:09:96:22:34:6a:96:a8:cb:e3:76:02:ee:6c:e0:75:3c:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C88864DD3C1E6D0D5FA91467F03B266DF5F79255 Validity Not Before: Dec 5 11:56:48 2025 GMT Not After : Dec 8 21:24:48 2025 GMT Subject: CN=2A4FC421766E5A013D82D8836D70B74F2493E0C6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:1f:5d:75:2e:03:6b:00:37:18:8e:16:69:1c: 47:26:9c:36:ac:c2:c2:a5:ef:0c:98:a4:3d:0e:db: 31:67:5d:87:32:50:c2:2b:72:87:0a:d3:82:13:1f: 54:72:1a:d7:1a:92:17:85:b3:19:e1:22:ca:aa:fc: b1:7c:9c:37:d3:c8:bc:08:36:76:f4:b4:ee:c2:4e: 01:51:bc:55:ab:61:e7:89:de:d5:22:08:09:be:59: 53:3f:e8:8d:ca:90:e5:1c:f4:49:e6:2c:e1:b8:a0: 47:ee:75:6b:94:a6:1e:0a:1a:07:6c:65:98:fd:bc: dd:fa:d5:9f:3e:ca:d5:cc:e1:b0:4f:d0:2f:02:db: da:e0:b5:91:6c:19:b0:1a:02:87:26:45:45:fe:a2: 12:f1:ac:f0:97:70:57:ac:f3:d3:27:09:c7:25:35: 64:ca:6a:fc:a4:d5:f2:cd:e2:88:ce:e8:9c:af:34: e8:67:93:50:b0:fc:44:d5:00:83:b6:b1:ca:0a:1e: 2b:10:32:c6:77:64:8a:f1:98:d0:57:40:73:21:df: 18:73:06:53:03:af:6c:48:af:8e:3c:ad:ed:94:17: 94:6a:99:32:c1:f2:a5:b8:42:1a:cc:e9:df:dd:67: 90:47:d6:0d:b2:c0:7f:cf:a5:ec:29:fa:43:f1:90: 6c:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:4F:C4:21:76:6E:5A:01:3D:82:D8:83:6D:70:B7:4F:24:93:E0:C6 X509v3 Authority Key Identifier: keyid:C8:88:64:DD:3C:1E:6D:0D:5F:A9:14:67:F0:3B:26:6D:F5:F7:92:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:54:94:0c:a2:44:bc:0d:65:e5:38:7a:40:c8:10:6b:0c:de: bf:f9:0f:a3:75:23:33:9a:d2:d7:c0:d2:98:7b:d3:06:a2:cf: 9a:0d:4f:c3:c6:fb:69:be:2c:32:7d:52:46:cf:f5:a3:59:25: 49:f6:3d:c0:28:e3:33:93:0a:45:a0:d7:f7:61:13:4f:41:c6: b4:43:62:a3:90:c9:11:0e:f1:5b:54:65:81:93:b8:94:94:60: b2:b5:39:a3:7a:17:a6:7b:b4:29:3c:cc:8c:52:a0:84:e1:7d: fc:b4:4d:02:e5:4d:7b:8c:77:f0:28:1b:36:31:24:61:31:61: 4b:6d:79:eb:22:8e:0c:fa:2f:b1:e0:0e:80:31:39:8b:02:54: bd:02:56:ed:d6:71:f7:d7:a7:68:0a:c4:f9:6f:7f:4b:c2:61: 67:7c:01:de:b8:5d:f9:49:29:67:3a:11:39:dd:09:b0:3f:96: c7:5d:e4:1d:ba:45:c4:63:fc:0b:6f:bc:07:07:85:88:3b:d5: d1:61:a4:fa:a6:28:a9:22:b3:17:de:a3:32:13:7d:02:3e:cf: 67:09:67:ad:32:cb:3d:bf:b4:33:80:ad:d1:f4:a4:60:c8:a6: 8e:73:3b:99:40:c9:35:90:7e:88:a4:00:65:91:02:15:18:36: 29:97:c3:22 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUW/sUCZYiNGqWqMvjdgLubOB1PFQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzg4ODY0REQzQzFFNkQwRDVGQTkxNDY3RjAzQjI2NkRG NUY3OTI1NTAeFw0yNTEyMDUxMTU2NDhaFw0yNTEyMDgyMTI0NDhaMDMxMTAvBgNV BAMTKDJBNEZDNDIxNzY2RTVBMDEzRDgyRDg4MzZENzBCNzRGMjQ5M0UwQzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrH111LgNrADcYjhZpHEcmnDas wsKl7wyYpD0O2zFnXYcyUMIrcocK04ITH1RyGtcakheFsxnhIsqq/LF8nDfTyLwI Nnb0tO7CTgFRvFWrYeeJ3tUiCAm+WVM/6I3KkOUc9EnmLOG4oEfudWuUph4KGgds ZZj9vN361Z8+ytXM4bBP0C8C29rgtZFsGbAaAocmRUX+ohLxrPCXcFes89MnCccl NWTKavyk1fLN4ojO6JyvNOhnk1Cw/ETVAIO2scoKHisQMsZ3ZIrxmNBXQHMh3xhz BlMDr2xIr448re2UF5RqmTLB8qW4QhrM6d/dZ5BH1g2ywH/Ppewp+kPxkGyNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKk/EIXZuWgE9gtiDbXC3TyST4MYwHwYDVR0j BBgwFoAUyIhk3TwebQ1fqRRn8DsmbfX3klUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MzJlNGY4Ni00OGU3LTQ4YzctYmE5MS1lMjU5NjgzNzhlOTUvMC9DODg4NjRERDND MUU2RDBENUZBOTE0NjdGMDNCMjY2REY1Rjc5MjU1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQzg4ODY0REQzQzFFNkQwRDVGQTkxNDY3RjAzQjI2NkRGNUY3 OTI1NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzMyZTRmODYtNDhlNy00OGM3LWJh OTEtZTI1OTY4Mzc4ZTk1LzAvQzg4ODY0REQzQzFFNkQwRDVGQTkxNDY3RjAzQjI2 NkRGNUY3OTI1NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ1UlAyiRLwNZeU4ekDIEGsM3r/5D6N1IzOa 0tfA0ph70waiz5oNT8PG+2m+LDJ9UkbP9aNZJUn2PcAo4zOTCkWg1/dhE09BxrRD YqOQyREO8VtUZYGTuJSUYLK1OaN6F6Z7tCk8zIxSoIThffy0TQLlTXuMd/AoGzYx JGExYUtteesijgz6L7HgDoAxOYsCVL0CVu3WcffXp2gKxPlvf0vCYWd8Ad64XflJ KWc6ETndCbA/lsdd5B26RcRj/AtvvAcHhYg71dFhpPqmKKkisxfeozITfQI+z2cJ Z60yyz2/tDOArdH0pGDIpo5zO5lAyTWQfoikAGWRAhUYNimXwyI= -----END CERTIFICATE-----Generated at Sat Dec 6 23:36:37 2025 by rpki-client