This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/31bb66d0-a933-4110-a093-038da9ec8b7e/0/98BF0C90429CA12CE1425374F5765263297D61F1.mft File: 98BF0C90429CA12CE1425374F5765263297D61F1.mft (raw, json) Hash identifier: c35lNysZL7ep+lkbmA4bi9ZbwquX7kZxv8hl3ON9W/s= Subject key identifier: 34:3E:28:83:BF:7E:A7:B1:C6:EB:81:AA:83:F9:2A:A5:8A:6D:97:B7 Authority key identifier: 98:BF:0C:90:42:9C:A1:2C:E1:42:53:74:F5:76:52:63:29:7D:61:F1 Certificate issuer: /CN=98BF0C90429CA12CE1425374F5765263297D61F1 Certificate serial: 5CE1ED35DF3B954FF330C4AC2CB67CEE9FCE4983 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98BF0C90429CA12CE1425374F5765263297D61F1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/31bb66d0-a933-4110-a093-038da9ec8b7e/0/98BF0C90429CA12CE1425374F5765263297D61F1.mft Manifest number: 0138 Signing time: Fri 05 Dec 2025 03:30:53 +0000 Manifest this update: Fri 05 Dec 2025 03:25:53 +0000 Manifest next update: Mon 08 Dec 2025 09:37:53 +0000 Files and hashes: 1: 3231302e37392e3134362e302f32342d3234203d3e20313532303435.roa (hash: Lpc33YMBjJ9T7VbHHDqwImeBd6L01sxZlRa+x954AOo=) 2: 98BF0C90429CA12CE1425374F5765263297D61F1.crl (hash: XVK2LUG2RDZdQc9yzYQY72RXkdmUgVkvwRfnFNibgiE=) 3: 3231302e37392e3134372e302f32342d3234203d3e20313532303435.roa (hash: hSqv2eoQTO7JNJFj3qq3n7+1XfpnN6lz7ioOJ9M/TEg=) 4: 3231302e37392e3134362e302f32332d3233203d3e20313532303435.roa (hash: z0AijCCK1naTP5YmFbSs1RtXYY5T/kLC9Gc+ZK8h2kA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/31bb66d0-a933-4110-a093-038da9ec8b7e/0/98BF0C90429CA12CE1425374F5765263297D61F1.crl rsync://repo-rpki.idnic.net/repo/31bb66d0-a933-4110-a093-038da9ec8b7e/0/98BF0C90429CA12CE1425374F5765263297D61F1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98BF0C90429CA12CE1425374F5765263297D61F1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 09:37:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:e1:ed:35:df:3b:95:4f:f3:30:c4:ac:2c:b6:7c:ee:9f:ce:49:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98BF0C90429CA12CE1425374F5765263297D61F1 Validity Not Before: Dec 5 03:25:53 2025 GMT Not After : Dec 8 09:37:53 2025 GMT Subject: CN=343E2883BF7EA7B1C6EB81AA83F92AA58A6D97B7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:07:ca:a9:67:3f:e3:c6:ee:60:af:6f:8d:82: e8:32:92:f1:9b:76:ca:2f:b4:ed:30:d7:82:7d:74: e8:60:81:16:78:a0:02:ac:0c:23:a1:ba:c9:d6:32: c3:7e:4e:75:b4:2a:61:8f:da:62:4b:d6:da:27:b1: b9:47:bd:86:ea:a8:1c:6f:58:c9:86:b3:40:45:53: ea:3c:a5:30:c2:56:f1:1b:f6:ee:92:c6:9c:1e:c3: f6:d1:7f:96:06:b9:04:0f:4d:ca:08:ef:8e:4d:a9: ec:84:54:d8:90:c2:2c:06:aa:ef:64:54:86:5d:55: 70:8c:b3:7c:6e:ad:78:75:8d:5a:d9:94:2a:4f:50: e1:a0:cb:47:6e:02:3f:7b:61:10:82:31:04:cf:36: 82:b8:3f:a3:35:76:c5:21:a0:02:48:f8:8f:d7:36: f4:3f:60:5f:1e:25:94:73:6e:b0:34:d4:bb:01:db: 76:b8:f2:64:0b:dc:c0:93:10:45:26:e0:1b:21:9d: 57:3d:95:8c:41:99:24:ae:58:b6:0c:fd:cd:f5:e2: b3:c0:18:9b:21:5c:a2:06:bb:88:8d:3b:45:c1:da: 84:59:3f:cc:d7:69:68:bb:18:ad:09:7a:b7:78:6e: 63:52:cc:f0:97:70:55:45:3d:f6:54:c2:57:d8:02: 96:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:3E:28:83:BF:7E:A7:B1:C6:EB:81:AA:83:F9:2A:A5:8A:6D:97:B7 X509v3 Authority Key Identifier: keyid:98:BF:0C:90:42:9C:A1:2C:E1:42:53:74:F5:76:52:63:29:7D:61:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/31bb66d0-a933-4110-a093-038da9ec8b7e/0/98BF0C90429CA12CE1425374F5765263297D61F1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98BF0C90429CA12CE1425374F5765263297D61F1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/31bb66d0-a933-4110-a093-038da9ec8b7e/0/98BF0C90429CA12CE1425374F5765263297D61F1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:35:41:b8:94:35:51:d0:27:9d:c7:3a:27:a5:90:f2:e6:a4: 48:37:5f:b6:5a:c7:9b:62:e3:57:fa:64:4f:7e:f9:07:b1:78: 07:79:2d:89:e1:bc:d3:c2:f2:bc:be:ff:61:a0:81:23:66:7c: 2d:bb:3f:f4:33:30:d7:67:ec:f5:8d:29:08:98:6d:12:3d:97: 9c:f4:83:dd:b6:e2:75:9c:33:15:b7:f5:c2:62:72:42:bd:1d: 94:8f:c7:f1:08:2f:49:0c:6d:62:4a:2c:a2:f7:88:2c:bd:ac: 59:dd:c3:58:79:cf:f6:f8:20:bc:12:b1:e1:9d:c7:a8:de:2a: fb:b4:c7:ce:d7:1b:d0:a4:55:b7:be:22:73:a1:b6:cf:40:95: 25:3e:49:f1:74:6e:87:9a:7f:4a:78:68:81:a0:34:73:8a:98: 48:29:41:4a:6b:a9:a7:b5:b4:d6:de:19:e2:bd:bb:2e:a5:57: 93:70:54:a3:45:83:e5:25:d8:38:d8:ef:39:5b:21:ae:8e:35: c0:5b:47:64:b7:31:60:7c:c0:97:79:cf:06:71:6f:df:db:8d: 37:74:a5:bb:24:c1:3e:5b:8b:27:aa:57:b8:7a:a7:bc:8d:87: 89:79:81:9b:53:4e:bd:fb:0d:12:ae:0b:17:e0:5c:39:56:bf: 49:99:86:0a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXOHtNd87lU/zMMSsLLZ87p/OSYMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOThCRjBDOTA0MjlDQTEyQ0UxNDI1Mzc0RjU3NjUyNjMy OTdENjFGMTAeFw0yNTEyMDUwMzI1NTNaFw0yNTEyMDgwOTM3NTNaMDMxMTAvBgNV BAMTKDM0M0UyODgzQkY3RUE3QjFDNkVCODFBQTgzRjkyQUE1OEE2RDk3QjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGB8qpZz/jxu5gr2+NgugykvGb dsovtO0w14J9dOhggRZ4oAKsDCOhusnWMsN+TnW0KmGP2mJL1tonsblHvYbqqBxv WMmGs0BFU+o8pTDCVvEb9u6Sxpwew/bRf5YGuQQPTcoI745NqeyEVNiQwiwGqu9k VIZdVXCMs3xurXh1jVrZlCpPUOGgy0duAj97YRCCMQTPNoK4P6M1dsUhoAJI+I/X NvQ/YF8eJZRzbrA01LsB23a48mQL3MCTEEUm4BshnVc9lYxBmSSuWLYM/c314rPA GJshXKIGu4iNO0XB2oRZP8zXaWi7GK0Jerd4bmNSzPCXcFVFPfZUwlfYApYFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUND4og79+p7HG64Gqg/kqpYptl7cwHwYDVR0j BBgwFoAUmL8MkEKcoSzhQlN09XZSYyl9YfEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MWJiNjZkMC1hOTMzLTQxMTAtYTA5My0wMzhkYTllYzhiN2UvMC85OEJGMEM5MDQy OUNBMTJDRTE0MjUzNzRGNTc2NTI2MzI5N0Q2MUYxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOThCRjBDOTA0MjlDQTEyQ0UxNDI1Mzc0RjU3NjUyNjMyOTdE NjFGMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzFiYjY2ZDAtYTkzMy00MTEwLWEw OTMtMDM4ZGE5ZWM4YjdlLzAvOThCRjBDOTA0MjlDQTEyQ0UxNDI1Mzc0RjU3NjUy NjMyOTdENjFGMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA01QbiUNVHQJ53HOielkPLmpEg3X7Zax5ti 41f6ZE9++QexeAd5LYnhvNPC8ry+/2GggSNmfC27P/QzMNdn7PWNKQiYbRI9l5z0 g9224nWcMxW39cJickK9HZSPx/EIL0kMbWJKLKL3iCy9rFndw1h5z/b4ILwSseGd x6jeKvu0x87XG9CkVbe+InOhts9AlSU+SfF0boeaf0p4aIGgNHOKmEgpQUprqae1 tNbeGeK9uy6lV5NwVKNFg+Ul2DjY7zlbIa6ONcBbR2S3MWB8wJd5zwZxb9/bjTd0 pbskwT5biyeqV7h6p7yNh4l5gZtTTr37DRKuCxfgXDlWv0mZhgo= -----END CERTIFICATE-----Generated at Sun Dec 7 03:56:03 2025 by rpki-client