This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/b20c6d69-6290-402f-a84e-d289c6e93a73/0/88BD1AAEA16D8A24550416CDB95E232152249B3E.mft File: 88BD1AAEA16D8A24550416CDB95E232152249B3E.mft (raw, json) Hash identifier: PTbaYlh+c6DG3ml0lbtMUHgRz4f93ohl+rK9klbKJxk= Subject key identifier: 5E:8B:39:90:D7:DC:5A:19:DD:0D:E5:39:19:A5:DC:F5:FB:AC:AE:09 Authority key identifier: 88:BD:1A:AE:A1:6D:8A:24:55:04:16:CD:B9:5E:23:21:52:24:9B:3E Certificate issuer: /CN=88BD1AAEA16D8A24550416CDB95E232152249B3E Certificate serial: 439FD62DECE8FD710372FB05C0F7B73527F76E65 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/88BD1AAEA16D8A24550416CDB95E232152249B3E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b20c6d69-6290-402f-a84e-d289c6e93a73/0/88BD1AAEA16D8A24550416CDB95E232152249B3E.mft Manifest number: 0320 Signing time: Sat 06 Dec 2025 19:52:29 +0000 Manifest this update: Sat 06 Dec 2025 19:47:29 +0000 Manifest next update: Wed 10 Dec 2025 07:32:29 +0000 Files and hashes: 1: 88BD1AAEA16D8A24550416CDB95E232152249B3E.crl (hash: XZBDJiAd8hBz4XIZwtuErJZCfEJHu6CikCuW23OEgxs=) 2: 323430343a636534303a333a3a2f34382d3438203d3e20313338383834.roa (hash: 8AOTqJ8wKe1VrrD+kHmDVYLYfYVsdRhBzkd1nXnFves=) 3: 323430343a636534303a3a2f33322d3332203d3e20313338383834.roa (hash: DcgpR3dumYc3Eoce65U1RiuqJ3FJu3j4JD+CZ1GSu4U=) 4: 323430343a636534303a3a2f34382d3438203d3e20313338383834.roa (hash: 7RaKUkFBeMAENsKDT1lo2zKa045TKNeXWhBxokU48NQ=) 5: 323430343a636534303a323a3a2f34382d3438203d3e20313338383834.roa (hash: m0iy4uxEorD8+ndIDexanwH0s76m+P4rdZZH08lw8gk=) 6: 3130332e3133382e37302e302f32342d3234203d3e20313338383834.roa (hash: k0M2XXKfU9k9Nif7dWEUq5fC7OBAzB0Ygp6xrywPUqs=) 7: 323430343a636534303a313a3a2f34382d3438203d3e20313338383834.roa (hash: Svxu0NqHa+wHzLIVUZs9pIJtQr2JGvA1Prp0dp6pQO8=) 8: 323430343a636534303a313030303a3a2f33362d3336203d3e20313338383834.roa (hash: Y5QaBXK/Lu/qym2uqPJsRL5ONo2Cq+L5YI+KATzLWJk=) 9: 323430343a636534303a3a2f33362d3336203d3e20313338383834.roa (hash: Qn8e6r99j+EuTQtrHbDbOQqJz+jY/ebvh6ZX3n1vOEk=) 10: 3130332e3133382e37302e302f32332d3233203d3e20313338383834.roa (hash: 0oC6hCIX4duxQdOJVzVwn+akSK/l98G+66CJXryC3ns=) 11: 3130332e3133382e37312e302f32342d3234203d3e20313338383834.roa (hash: fYqB3hAfKrlAMalkQPBsDTPyMiJqV+nU7PcLz8QhSAc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b20c6d69-6290-402f-a84e-d289c6e93a73/0/88BD1AAEA16D8A24550416CDB95E232152249B3E.crl rsync://repo-rpki.idnic.net/repo/b20c6d69-6290-402f-a84e-d289c6e93a73/0/88BD1AAEA16D8A24550416CDB95E232152249B3E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/88BD1AAEA16D8A24550416CDB95E232152249B3E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:9f:d6:2d:ec:e8:fd:71:03:72:fb:05:c0:f7:b7:35:27:f7:6e:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88BD1AAEA16D8A24550416CDB95E232152249B3E Validity Not Before: Dec 6 19:47:29 2025 GMT Not After : Dec 10 07:32:29 2025 GMT Subject: CN=5E8B3990D7DC5A19DD0DE53919A5DCF5FBACAE09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:06:c5:f4:16:a6:78:ca:9a:a6:ec:44:1b:43: 0f:f6:81:45:c9:a7:8e:3f:a3:3a:9e:21:60:7c:a0: 29:3f:32:33:5e:d2:a9:24:78:8d:22:6d:df:b5:df: 7a:64:f8:ee:ea:ca:f2:c1:e9:ae:5b:f0:01:ba:42: 72:ad:22:95:f2:55:f8:d9:90:ed:15:a2:19:95:75: 73:db:5e:ea:db:08:0e:e4:64:54:85:e2:b3:5a:08: 21:a0:cb:03:14:9e:3b:99:04:85:28:d0:af:d6:7b: aa:90:db:28:74:e8:73:10:04:41:17:88:05:af:09: e4:3e:5e:dd:d4:da:be:52:bb:29:22:6e:11:ab:25: c1:93:78:6a:21:8b:75:43:8a:85:0b:93:2e:57:ba: 05:c8:42:ca:2c:e0:7b:49:be:82:6c:77:1f:e9:67: 04:00:f4:79:61:1d:71:6a:ee:66:dd:2e:0c:9b:d2: ed:ec:bd:70:f5:cd:ac:65:9b:d1:9a:47:20:d9:7f: 48:22:52:94:e1:01:ab:20:6b:44:d3:1f:de:84:71: d8:91:18:d0:83:81:fa:08:2e:72:74:ed:7a:3c:c2: e3:72:2a:ef:2a:8b:86:17:1f:ec:71:4d:79:9e:12: 89:d6:e8:c4:92:bb:18:d2:e8:50:da:1d:5b:2e:4b: a5:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:8B:39:90:D7:DC:5A:19:DD:0D:E5:39:19:A5:DC:F5:FB:AC:AE:09 X509v3 Authority Key Identifier: keyid:88:BD:1A:AE:A1:6D:8A:24:55:04:16:CD:B9:5E:23:21:52:24:9B:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b20c6d69-6290-402f-a84e-d289c6e93a73/0/88BD1AAEA16D8A24550416CDB95E232152249B3E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/88BD1AAEA16D8A24550416CDB95E232152249B3E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b20c6d69-6290-402f-a84e-d289c6e93a73/0/88BD1AAEA16D8A24550416CDB95E232152249B3E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption dd:4b:84:c0:51:91:e9:de:e6:a9:0f:2d:76:43:1c:7a:27:e2: 39:02:16:1d:97:12:1f:4c:7a:e1:e8:74:bd:20:4f:d3:18:03: 6a:e4:5d:97:00:23:53:f6:0f:7f:a7:7a:c5:e2:ea:11:ce:62: ff:ef:96:dc:3d:ac:c4:ae:96:69:48:51:e7:65:50:59:f1:a4: 41:ee:63:7e:69:6e:55:80:7c:ee:b0:27:3c:c0:49:cf:58:f1: d3:a5:a4:1a:60:07:dc:87:6c:bc:c7:89:fd:e5:24:76:79:e6: 07:75:90:ea:93:16:62:fb:5d:b8:6d:bb:fe:8e:db:63:85:fe: 16:85:8b:43:16:4a:89:b8:e6:c0:4e:25:63:6c:f3:02:06:df: e8:06:ae:6e:dc:be:f9:bd:fa:2f:fe:bc:72:68:36:41:30:75: 69:91:fd:fd:01:29:0c:43:e0:f4:bc:dc:d4:86:af:6b:e8:fe: 2a:a9:86:0f:17:5f:ca:8e:71:a5:ad:8f:16:69:65:55:9a:36: d9:8a:bd:d7:c0:e0:e7:51:89:61:6a:a4:6f:c3:bf:62:8d:1b: c3:1a:a0:a4:80:da:eb:5b:72:bd:7b:35:e1:7d:2a:44:35:5b: d2:50:b6:a1:5a:f8:e7:46:9a:8d:db:03:0e:40:a1:f0:3a:5a: c2:27:ea:91 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ5/WLezo/XEDcvsFwPe3NSf3bmUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODhCRDFBQUVBMTZEOEEyNDU1MDQxNkNEQjk1RTIzMjE1 MjI0OUIzRTAeFw0yNTEyMDYxOTQ3MjlaFw0yNTEyMTAwNzMyMjlaMDMxMTAvBgNV BAMTKDVFOEIzOTkwRDdEQzVBMTlERDBERTUzOTE5QTVEQ0Y1RkJBQ0FFMDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHBsX0FqZ4ypqm7EQbQw/2gUXJ p44/ozqeIWB8oCk/MjNe0qkkeI0ibd+133pk+O7qyvLB6a5b8AG6QnKtIpXyVfjZ kO0VohmVdXPbXurbCA7kZFSF4rNaCCGgywMUnjuZBIUo0K/We6qQ2yh06HMQBEEX iAWvCeQ+Xt3U2r5SuykibhGrJcGTeGohi3VDioULky5XugXIQsos4HtJvoJsdx/p ZwQA9HlhHXFq7mbdLgyb0u3svXD1zaxlm9GaRyDZf0giUpThAasga0TTH96EcdiR GNCDgfoILnJ07Xo8wuNyKu8qi4YXH+xxTXmeEonW6MSSuxjS6FDaHVsuS6UrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXos5kNfcWhndDeU5GaXc9fusrgkwHwYDVR0j BBgwFoAUiL0arqFtiiRVBBbNuV4jIVIkmz4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MjBjNmQ2OS02MjkwLTQwMmYtYTg0ZS1kMjg5YzZlOTNhNzMvMC84OEJEMUFBRUEx NkQ4QTI0NTUwNDE2Q0RCOTVFMjMyMTUyMjQ5QjNFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODhCRDFBQUVBMTZEOEEyNDU1MDQxNkNEQjk1RTIzMjE1MjI0 OUIzRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjIwYzZkNjktNjI5MC00MDJmLWE4 NGUtZDI4OWM2ZTkzYTczLzAvODhCRDFBQUVBMTZEOEEyNDU1MDQxNkNEQjk1RTIz MjE1MjI0OUIzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAN1LhMBRkene5qkPLXZDHHon4jkCFh2XEh9M euHodL0gT9MYA2rkXZcAI1P2D3+nesXi6hHOYv/vltw9rMSulmlIUedlUFnxpEHu Y35pblWAfO6wJzzASc9Y8dOlpBpgB9yHbLzHif3lJHZ55gd1kOqTFmL7Xbhtu/6O 22OF/haFi0MWSom45sBOJWNs8wIG3+gGrm7cvvm9+i/+vHJoNkEwdWmR/f0BKQxD 4PS83NSGr2vo/iqphg8XX8qOcaWtjxZpZVWaNtmKvdfA4OdRiWFqpG/Dv2KNG8Ma oKSA2utbcr17NeF9KkQ1W9JQtqFa+OdGmo3bAw5AofA6WsIn6pE= -----END CERTIFICATE-----Generated at Sun Dec 7 07:28:23 2025 by rpki-client