This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/4f8851e5-ee5b-41e1-9abc-442651d27294/0/E89C93F089A07D03B5794B0C02239EF67E1D721C.mft File: E89C93F089A07D03B5794B0C02239EF67E1D721C.mft (raw, json) Hash identifier: CnfDEwQTttPWBXk1CMBTL+aI00F8XiIRstDzsq72UP0= Subject key identifier: 98:BA:BA:C2:0B:1B:C1:9C:72:B6:BD:6C:FF:B1:CF:FC:3C:79:96:EF Authority key identifier: E8:9C:93:F0:89:A0:7D:03:B5:79:4B:0C:02:23:9E:F6:7E:1D:72:1C Certificate issuer: /CN=E89C93F089A07D03B5794B0C02239EF67E1D721C Certificate serial: 5AE6F2ADE1EBD2A866460CC62B16BC5695F4FC5A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E89C93F089A07D03B5794B0C02239EF67E1D721C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4f8851e5-ee5b-41e1-9abc-442651d27294/0/E89C93F089A07D03B5794B0C02239EF67E1D721C.mft Manifest number: B5 Signing time: Fri 05 Dec 2025 05:03:43 +0000 Manifest this update: Fri 05 Dec 2025 04:58:43 +0000 Manifest next update: Mon 08 Dec 2025 13:26:43 +0000 Files and hashes: 1: 3130332e37342e3136342e302f32342d3234203d3e203436303334.roa (hash: qP5p1JtLajQU4tMkK8i4H4Q7vMTKK0pWmbujRAH0CW4=) 2: 3130332e37342e3134332e302f32342d3234203d3e203436303334.roa (hash: D1j1lCivRx4MpFMf1wJtpmY2c2+VbcHJ9Y4DtgTsc+k=) 3: 3230322e37302e3133362e302f32342d3234203d3e203436303334.roa (hash: /rrVT8+7vMAShEA29/a83w5natJXQZ8dbakSMPveJCo=) 4: 3130332e35332e32302e302f32342d3234203d3e203436303334.roa (hash: R0jNeZREOH7PdH08cIX9FXJ07BU9g/y14/QiKIW3zDQ=) 5: E89C93F089A07D03B5794B0C02239EF67E1D721C.crl (hash: vc4FSjSC+JP4D58gSGjbEEZ9vaSdJuKMepLXNHmZl3s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4f8851e5-ee5b-41e1-9abc-442651d27294/0/E89C93F089A07D03B5794B0C02239EF67E1D721C.crl rsync://repo-rpki.idnic.net/repo/4f8851e5-ee5b-41e1-9abc-442651d27294/0/E89C93F089A07D03B5794B0C02239EF67E1D721C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E89C93F089A07D03B5794B0C02239EF67E1D721C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 13:26:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:e6:f2:ad:e1:eb:d2:a8:66:46:0c:c6:2b:16:bc:56:95:f4:fc:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E89C93F089A07D03B5794B0C02239EF67E1D721C Validity Not Before: Dec 5 04:58:43 2025 GMT Not After : Dec 8 13:26:43 2025 GMT Subject: CN=98BABAC20B1BC19C72B6BD6CFFB1CFFC3C7996EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:38:af:0a:c4:76:0a:f5:7d:a1:a9:2d:fd:bf: 9c:22:1b:d7:7c:72:3c:b5:b7:69:8a:8e:58:6e:f3: d5:61:0c:3f:90:be:d1:00:b5:a3:be:17:bd:3f:50: 82:20:33:1d:69:ea:01:b8:9b:8c:b6:11:75:fa:d5: 8c:52:dc:da:8f:65:8a:f6:42:e1:c2:6e:82:45:72: e6:f4:9a:33:9e:5f:e8:c5:3b:8c:99:69:99:ed:43: e2:d3:37:1e:fc:ed:29:1a:20:61:9e:7c:7e:14:2a: 2a:10:49:03:e9:b5:5c:92:ca:1e:a0:61:c5:1c:9e: 2b:76:b0:af:96:72:01:5a:3f:ce:20:80:77:a3:06: 6e:90:41:bd:0c:81:e2:32:fe:31:10:94:ea:e7:c5: 6c:f4:f1:c0:f8:f7:c5:29:09:22:1f:25:01:0d:ff: 64:a0:40:4a:70:5f:cf:65:9d:e7:5c:66:45:f2:f6: 2d:56:20:d6:c0:79:28:4f:a9:01:f8:6e:d6:68:f9: ef:f4:28:a4:97:9f:20:bf:62:f5:33:0b:69:f6:c7: 55:74:33:26:cf:65:0c:09:41:56:b9:1b:51:e6:dc: ab:3d:8f:41:92:9c:8e:da:2c:77:dc:4c:5d:3c:32: 9a:55:ce:f7:68:51:a5:b0:2d:5d:8f:ab:c4:dd:ce: 33:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:BA:BA:C2:0B:1B:C1:9C:72:B6:BD:6C:FF:B1:CF:FC:3C:79:96:EF X509v3 Authority Key Identifier: keyid:E8:9C:93:F0:89:A0:7D:03:B5:79:4B:0C:02:23:9E:F6:7E:1D:72:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4f8851e5-ee5b-41e1-9abc-442651d27294/0/E89C93F089A07D03B5794B0C02239EF67E1D721C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E89C93F089A07D03B5794B0C02239EF67E1D721C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4f8851e5-ee5b-41e1-9abc-442651d27294/0/E89C93F089A07D03B5794B0C02239EF67E1D721C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c7:a8:ea:54:4c:69:86:0c:c0:5d:2c:89:86:bf:06:59:45:1f: 1b:b6:88:1a:1a:f3:52:1f:b3:42:2e:6d:92:a9:22:30:d5:d3: 46:86:0c:f4:b8:80:a9:8e:7b:0f:a0:f9:33:d9:15:6d:b9:5d: 43:1c:d4:d1:31:9c:58:5e:6c:26:96:c7:53:47:79:06:ea:1f: ed:29:18:26:f5:e7:53:19:8e:a7:87:2a:48:80:fe:b1:2f:be: d4:f0:65:2d:99:ee:3a:df:5c:55:82:a0:13:36:e1:6f:de:d8: 94:71:7f:23:3b:f6:dc:4c:81:dc:ef:21:60:68:58:c0:06:a9: 52:22:28:2d:b1:c2:ef:54:25:41:fc:07:c2:59:c3:7c:c3:66: 80:1f:f6:9b:89:d8:9c:d3:26:4d:26:4d:5f:05:01:ac:c2:ca: 42:50:a2:9a:43:08:02:37:0d:cd:d5:41:ee:09:8f:af:d6:1f: ff:52:c6:03:de:d2:06:09:63:ff:24:13:c5:b8:90:68:9c:e7: 9f:b9:5a:cd:22:56:2e:ab:39:17:b0:a9:d4:a1:03:aa:75:9d: 6e:a3:4a:7f:19:c1:69:30:b4:0a:9a:70:d6:ba:3c:a3:4a:a9: 1d:68:bd:13:8c:4a:5b:dc:c7:f8:4c:53:01:09:f0:e7:e6:57: 5f:b2:e8:ec -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWubyreHr0qhmRgzGKxa8VpX0/FowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTg5QzkzRjA4OUEwN0QwM0I1Nzk0QjBDMDIyMzlFRjY3 RTFENzIxQzAeFw0yNTEyMDUwNDU4NDNaFw0yNTEyMDgxMzI2NDNaMDMxMTAvBgNV BAMTKDk4QkFCQUMyMEIxQkMxOUM3MkI2QkQ2Q0ZGQjFDRkZDM0M3OTk2RUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsOK8KxHYK9X2hqS39v5wiG9d8 cjy1t2mKjlhu89VhDD+QvtEAtaO+F70/UIIgMx1p6gG4m4y2EXX61YxS3NqPZYr2 QuHCboJFcub0mjOeX+jFO4yZaZntQ+LTNx787SkaIGGefH4UKioQSQPptVySyh6g YcUcnit2sK+WcgFaP84ggHejBm6QQb0MgeIy/jEQlOrnxWz08cD498UpCSIfJQEN /2SgQEpwX89lnedcZkXy9i1WINbAeShPqQH4btZo+e/0KKSXnyC/YvUzC2n2x1V0 MybPZQwJQVa5G1Hm3Ks9j0GSnI7aLHfcTF08MppVzvdoUaWwLV2Pq8TdzjP7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmLq6wgsbwZxytr1s/7HP/Dx5lu8wHwYDVR0j BBgwFoAU6JyT8ImgfQO1eUsMAiOe9n4dchwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 Zjg4NTFlNS1lZTViLTQxZTEtOWFiYy00NDI2NTFkMjcyOTQvMC9FODlDOTNGMDg5 QTA3RDAzQjU3OTRCMEMwMjIzOUVGNjdFMUQ3MjFDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTg5QzkzRjA4OUEwN0QwM0I1Nzk0QjBDMDIyMzlFRjY3RTFE NzIxQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGY4ODUxZTUtZWU1Yi00MWUxLTlh YmMtNDQyNjUxZDI3Mjk0LzAvRTg5QzkzRjA4OUEwN0QwM0I1Nzk0QjBDMDIyMzlF RjY3RTFENzIxQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMeo6lRMaYYMwF0siYa/BllFHxu2iBoa81If s0IubZKpIjDV00aGDPS4gKmOew+g+TPZFW25XUMc1NExnFhebCaWx1NHeQbqH+0p GCb151MZjqeHKkiA/rEvvtTwZS2Z7jrfXFWCoBM24W/e2JRxfyM79txMgdzvIWBo WMAGqVIiKC2xwu9UJUH8B8JZw3zDZoAf9puJ2JzTJk0mTV8FAazCykJQoppDCAI3 Dc3VQe4Jj6/WH/9SxgPe0gYJY/8kE8W4kGic55+5Ws0iVi6rORewqdShA6p1nW6j Sn8ZwWkwtAqacNa6PKNKqR1ovROMSlvcx/hMUwEJ8OfmV1+y6Ow= -----END CERTIFICATE-----Generated at Sun Dec 7 06:37:57 2025 by rpki-client