This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/1/88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.mft File: 88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.mft (raw, json) Hash identifier: aOITkT3aZyuvBwojn+dqPYmoO10CWY271/aLwFO6/bs= Subject key identifier: 6B:06:50:AD:A6:26:CE:05:B5:6C:17:D5:D7:00:6B:14:52:85:C5:A6 Authority key identifier: 88:E1:28:87:FF:4C:1B:DD:31:B6:A1:B2:2A:29:3C:B9:1F:46:5A:A9 Certificate issuer: /CN=88E12887FF4C1BDD31B6A1B22A293CB91F465AA9 Certificate serial: 414C8CBF8C35542F6F9C5E838C2A6DB14D4DCB71 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/1/88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.mft Manifest number: 0109 Signing time: Sat 24 Jan 2026 06:11:28 +0000 Manifest this update: Sat 24 Jan 2026 06:06:28 +0000 Manifest next update: Tue 27 Jan 2026 07:24:28 +0000 Files and hashes: 1: 88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.crl (hash: 7KU63e4cDZgJu78VdzeoiTJpPNPNSi0x3TCZKcheIv8=) 2: 3130332e3137322e3137322e302f32342d3234203d3e20313437303838.roa (hash: JKkCiBj1Ft4d/bxCb4U2iXHDOP8sJDEhV8ZeubcbaQE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/1/88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.crl rsync://repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/1/88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 07:24:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:4c:8c:bf:8c:35:54:2f:6f:9c:5e:83:8c:2a:6d:b1:4d:4d:cb:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88E12887FF4C1BDD31B6A1B22A293CB91F465AA9 Validity Not Before: Jan 24 06:06:28 2026 GMT Not After : Jan 27 07:24:28 2026 GMT Subject: CN=6B0650ADA626CE05B56C17D5D7006B145285C5A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:c7:71:b2:3e:c0:65:74:92:95:88:4d:de:fd: 18:e0:54:eb:b2:0d:26:16:4e:7f:1e:f1:16:5f:a3: 6a:44:d7:5d:cb:fb:69:33:c2:22:44:af:f3:03:dc: 8c:d4:77:8a:00:97:2c:03:81:e8:8e:6d:e9:98:e5: af:5b:01:3e:39:08:4c:9a:e2:9b:a7:26:8a:96:84: 3e:9d:91:14:3a:7d:9e:8d:85:e4:7e:45:ee:bf:d1: 85:53:59:5c:c6:fb:27:ca:1f:66:2f:83:44:dc:b0: f8:e7:06:bd:19:af:ab:84:50:81:4f:97:62:6e:de: f6:5c:1a:db:df:d9:fb:9c:57:4c:ff:14:51:28:fc: f9:bc:6c:d8:90:7e:e5:c6:f5:c4:27:9c:fb:89:13: 8e:36:b3:df:00:a0:d2:bb:18:80:2d:75:99:7a:57: 39:ff:1c:27:83:5f:97:a2:35:65:75:2d:b5:56:a6: 83:28:11:4a:0c:95:3a:c3:ec:7b:62:15:12:dc:a7: 04:7c:c8:08:83:9c:dc:a4:1d:30:e4:4b:d6:78:4a: 71:c0:09:f7:fe:74:9f:82:44:30:8b:65:93:d3:c2: f6:f2:df:eb:33:ca:2c:ca:22:83:c7:15:26:4b:30: f5:bc:4b:bb:bb:bc:90:d5:73:2b:b6:7b:33:66:05: af:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:06:50:AD:A6:26:CE:05:B5:6C:17:D5:D7:00:6B:14:52:85:C5:A6 X509v3 Authority Key Identifier: keyid:88:E1:28:87:FF:4C:1B:DD:31:B6:A1:B2:2A:29:3C:B9:1F:46:5A:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/1/88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/1/88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:c3:5f:17:16:69:aa:24:60:90:27:33:b5:16:30:54:fe:c8: d6:7e:27:6e:f4:c6:65:eb:26:8b:64:63:68:af:36:5e:e4:ce: d0:a2:1f:e7:f3:d2:f5:52:d6:ac:6f:dd:7f:b6:fb:ff:98:e0: 59:d7:c8:34:8b:00:d9:8c:1b:f2:f1:02:37:71:99:58:d6:5e: 94:d3:98:e4:86:34:18:2b:a0:cb:24:63:58:0c:04:0a:8a:53: 53:c9:f3:33:7d:b4:e3:5a:6b:b4:ee:bd:20:24:4f:ec:26:3a: 68:62:1e:60:b1:09:58:7a:de:7b:e9:bb:b8:d7:2c:fc:6f:28: c9:ef:2c:f1:10:5f:ab:1c:30:fa:ff:05:3a:af:94:63:90:2d: 00:23:c5:1b:5e:cf:11:aa:28:d9:f8:cd:4b:da:27:c7:fd:eb: d8:8a:6c:49:3b:9b:d8:14:d3:d8:dc:61:c5:af:c7:57:9b:10: 80:c8:f2:ee:75:67:b4:ad:83:1f:f6:c6:5f:95:e8:0d:72:9f: cf:81:2b:d3:d7:1f:88:63:6c:46:49:3e:c8:ec:81:02:ab:8b: 33:76:b0:83:8c:2d:ef:57:53:3d:c5:c4:1c:e0:04:cd:6b:2c: fb:c1:8a:b3:3e:56:8f:f8:9e:68:84:7e:b9:2c:3e:de:95:29: 3c:71:a1:0b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQUyMv4w1VC9vnF6DjCptsU1Ny3EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODhFMTI4ODdGRjRDMUJERDMxQjZBMUIyMkEyOTNDQjkx RjQ2NUFBOTAeFw0yNjAxMjQwNjA2MjhaFw0yNjAxMjcwNzI0MjhaMDMxMTAvBgNV BAMTKDZCMDY1MEFEQTYyNkNFMDVCNTZDMTdENUQ3MDA2QjE0NTI4NUM1QTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnx3GyPsBldJKViE3e/RjgVOuy DSYWTn8e8RZfo2pE113L+2kzwiJEr/MD3IzUd4oAlywDgeiObemY5a9bAT45CEya 4punJoqWhD6dkRQ6fZ6NheR+Re6/0YVTWVzG+yfKH2Yvg0TcsPjnBr0Zr6uEUIFP l2Ju3vZcGtvf2fucV0z/FFEo/Pm8bNiQfuXG9cQnnPuJE442s98AoNK7GIAtdZl6 Vzn/HCeDX5eiNWV1LbVWpoMoEUoMlTrD7HtiFRLcpwR8yAiDnNykHTDkS9Z4SnHA Cff+dJ+CRDCLZZPTwvby3+szyizKIoPHFSZLMPW8S7u7vJDVcyu2ezNmBa8pAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUawZQraYmzgW1bBfV1wBrFFKFxaYwHwYDVR0j BBgwFoAUiOEoh/9MG90xtqGyKik8uR9GWqkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NGRhNDE1Yi01ZjE3LTQ2MDItOWJkOS1mZDg0YWMyY2FlODYvMS84OEUxMjg4N0ZG NEMxQkREMzFCNkExQjIyQTI5M0NCOTFGNDY1QUE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODhFMTI4ODdGRjRDMUJERDMxQjZBMUIyMkEyOTNDQjkxRjQ2 NUFBOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODRkYTQxNWItNWYxNy00NjAyLTli ZDktZmQ4NGFjMmNhZTg2LzEvODhFMTI4ODdGRjRDMUJERDMxQjZBMUIyMkEyOTND QjkxRjQ2NUFBOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJbDXxcWaaokYJAnM7UWMFT+yNZ+J270xmXr JotkY2ivNl7kztCiH+fz0vVS1qxv3X+2+/+Y4FnXyDSLANmMG/LxAjdxmVjWXpTT mOSGNBgroMskY1gMBAqKU1PJ8zN9tONaa7TuvSAkT+wmOmhiHmCxCVh63nvpu7jX LPxvKMnvLPEQX6scMPr/BTqvlGOQLQAjxRtezxGqKNn4zUvaJ8f969iKbEk7m9gU 09jcYcWvx1ebEIDI8u51Z7Stgx/2xl+V6A1yn8+BK9PXH4hjbEZJPsjsgQKrizN2 sIOMLe9XUz3FxBzgBM1rLPvBirM+Vo/4nmiEfrksPt6VKTxxoQs= -----END CERTIFICATE-----Generated at Sun Jan 25 23:57:20 2026 by rpki-client