This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/1/88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.mft File: 88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.mft (raw, json) Hash identifier: rqeL9BC0+75KY1mZK+haxhOLXdLO6Lm61AMSld4J3A4= Subject key identifier: E8:DC:E5:25:CA:97:C2:EF:85:10:D7:D0:75:5F:C0:82:3C:25:54:62 Authority key identifier: 88:E1:28:87:FF:4C:1B:DD:31:B6:A1:B2:2A:29:3C:B9:1F:46:5A:A9 Certificate issuer: /CN=88E12887FF4C1BDD31B6A1B22A293CB91F465AA9 Certificate serial: 20E2CF3BC13B0B3604B624342AA2B6214AEE1BAB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/1/88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.mft Manifest number: F3 Signing time: Fri 05 Dec 2025 22:01:30 +0000 Manifest this update: Fri 05 Dec 2025 21:56:30 +0000 Manifest next update: Tue 09 Dec 2025 09:48:30 +0000 Files and hashes: 1: 88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.crl (hash: zKjMfSYYVbb4ZQHvRMEQiDs5lvbRAubHwPfBFHkzk6U=) 2: 3130332e3137322e3137322e302f32342d3234203d3e20313437303838.roa (hash: JKkCiBj1Ft4d/bxCb4U2iXHDOP8sJDEhV8ZeubcbaQE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/1/88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.crl rsync://repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/1/88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 09:48:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:e2:cf:3b:c1:3b:0b:36:04:b6:24:34:2a:a2:b6:21:4a:ee:1b:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88E12887FF4C1BDD31B6A1B22A293CB91F465AA9 Validity Not Before: Dec 5 21:56:30 2025 GMT Not After : Dec 9 09:48:30 2025 GMT Subject: CN=E8DCE525CA97C2EF8510D7D0755FC0823C255462 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:74:75:a9:5e:09:90:70:ab:a2:e9:cb:b0:4f: 4c:1e:eb:1f:8f:99:cd:a8:d9:e2:9a:82:ac:3a:bd: 26:ef:97:b5:2b:32:b4:e8:f0:07:9d:61:96:9e:e6: ee:0b:09:1f:a6:6e:b6:a5:bd:1a:28:c2:7c:05:8d: 5d:0d:39:0b:bb:98:3d:a9:d4:33:85:f5:a6:ef:1a: cc:ef:06:d8:c2:23:4a:09:08:3a:e0:20:41:3d:b2: 87:bd:02:25:35:35:68:74:a0:53:6f:fd:16:2d:49: 47:61:e5:4f:a5:5d:6a:8e:7c:0d:4c:a2:aa:42:a4: 1b:28:d2:90:b2:83:c8:88:f8:b8:08:89:d7:e9:7e: 23:2d:6b:48:80:e2:42:91:2d:31:6f:cd:0b:38:ba: 55:53:20:63:d2:0b:f3:d8:42:70:c5:14:5e:30:f2: c7:34:db:45:de:46:e8:89:0d:fe:b7:5e:2a:76:22: 9b:2d:64:1b:12:ed:01:19:6a:29:48:4d:74:a8:ae: 4a:ea:4e:df:e5:f1:1b:3b:67:fa:b5:d4:8a:06:bc: 7c:f0:7b:1f:17:f9:d5:4d:d5:32:07:14:d2:e9:23: 0c:63:c3:d3:91:1c:19:1f:14:cf:b4:2e:e5:27:c8: d6:e8:3f:76:c8:60:9e:7a:e8:e2:b0:11:11:ca:56: 2b:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:DC:E5:25:CA:97:C2:EF:85:10:D7:D0:75:5F:C0:82:3C:25:54:62 X509v3 Authority Key Identifier: keyid:88:E1:28:87:FF:4C:1B:DD:31:B6:A1:B2:2A:29:3C:B9:1F:46:5A:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/1/88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/1/88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:98:37:60:bf:a2:b2:ff:ab:3d:28:d0:0f:71:b6:d6:f4:e5: 8c:f8:26:eb:de:ef:ad:a4:86:ba:51:db:da:6c:ad:a3:d7:0f: ad:e2:98:c0:7c:df:01:61:e3:db:fb:a2:af:3b:f2:ba:5e:47: bf:7c:5c:6a:76:24:25:dd:ce:4c:e8:1c:f5:8b:6a:78:25:92: b8:f2:aa:40:d4:47:7a:3a:e1:d8:7a:be:71:98:cd:ec:b6:b5: 15:c3:a5:77:cf:65:01:c7:54:35:94:48:21:96:39:8d:3f:12: cd:90:9e:ea:cd:eb:8a:6a:0b:cc:68:69:63:6e:6b:9b:d8:45: f6:30:3f:b5:e4:29:ac:c7:1f:e7:24:78:06:80:75:85:ce:f5: fe:0c:aa:ef:a9:69:d8:55:a6:a6:7c:82:21:9d:c5:6f:8d:84: 6e:ac:4b:24:5d:76:a7:fb:d9:e2:79:13:91:19:7c:51:08:30: bd:87:a0:72:9c:bd:ca:b0:ce:d9:9d:86:21:fb:27:9d:d7:d1: b5:b8:71:98:a4:16:6b:d4:db:25:aa:42:6b:02:b2:80:53:5a: e5:ba:79:2d:f1:a3:72:7c:ec:5b:71:16:73:33:a0:25:ea:0c: a4:c3:92:39:98:20:59:43:2a:4f:2b:09:17:80:dd:ac:1c:4e: 07:61:4e:50 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIOLPO8E7CzYEtiQ0KqK2IUruG6swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODhFMTI4ODdGRjRDMUJERDMxQjZBMUIyMkEyOTNDQjkx RjQ2NUFBOTAeFw0yNTEyMDUyMTU2MzBaFw0yNTEyMDkwOTQ4MzBaMDMxMTAvBgNV BAMTKEU4RENFNTI1Q0E5N0MyRUY4NTEwRDdEMDc1NUZDMDgyM0MyNTU0NjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpdHWpXgmQcKui6cuwT0we6x+P mc2o2eKagqw6vSbvl7UrMrTo8AedYZae5u4LCR+mbralvRoownwFjV0NOQu7mD2p 1DOF9abvGszvBtjCI0oJCDrgIEE9soe9AiU1NWh0oFNv/RYtSUdh5U+lXWqOfA1M oqpCpBso0pCyg8iI+LgIidfpfiMta0iA4kKRLTFvzQs4ulVTIGPSC/PYQnDFFF4w 8sc020XeRuiJDf63Xip2IpstZBsS7QEZailITXSorkrqTt/l8Rs7Z/q11IoGvHzw ex8X+dVN1TIHFNLpIwxjw9ORHBkfFM+0LuUnyNboP3bIYJ566OKwERHKVisJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6NzlJcqXwu+FENfQdV/AgjwlVGIwHwYDVR0j BBgwFoAUiOEoh/9MG90xtqGyKik8uR9GWqkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NGRhNDE1Yi01ZjE3LTQ2MDItOWJkOS1mZDg0YWMyY2FlODYvMS84OEUxMjg4N0ZG NEMxQkREMzFCNkExQjIyQTI5M0NCOTFGNDY1QUE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODhFMTI4ODdGRjRDMUJERDMxQjZBMUIyMkEyOTNDQjkxRjQ2 NUFBOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODRkYTQxNWItNWYxNy00NjAyLTli ZDktZmQ4NGFjMmNhZTg2LzEvODhFMTI4ODdGRjRDMUJERDMxQjZBMUIyMkEyOTND QjkxRjQ2NUFBOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADOYN2C/orL/qz0o0A9xttb05Yz4Juve762k hrpR29psraPXD63imMB83wFh49v7oq878rpeR798XGp2JCXdzkzoHPWLanglkrjy qkDUR3o64dh6vnGYzey2tRXDpXfPZQHHVDWUSCGWOY0/Es2QnurN64pqC8xoaWNu a5vYRfYwP7XkKazHH+ckeAaAdYXO9f4Mqu+padhVpqZ8giGdxW+NhG6sSyRddqf7 2eJ5E5EZfFEIML2HoHKcvcqwztmdhiH7J53X0bW4cZikFmvU2yWqQmsCsoBTWuW6 eS3xo3J87FtxFnMzoCXqDKTDkjmYIFlDKk8rCReA3awcTgdhTlA= -----END CERTIFICATE-----Generated at Sat Dec 6 23:16:20 2025 by rpki-client