This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/53b146a2-7715-459f-8244-8b32a364663c/0/98F94938EA9072872BE06639F79DC61C000F849C.mft
File: 98F94938EA9072872BE06639F79DC61C000F849C.mft (raw, json)
Hash identifier: 1Xv1DxT9RSH6yg34rEkjhIRmaXdX9FRvH5hMzHSq0lc=
Subject key identifier: E0:18:10:25:51:1F:6F:FA:E4:FE:35:4F:38:50:A2:8C:35:77:23:3E
Authority key identifier: 98:F9:49:38:EA:90:72:87:2B:E0:66:39:F7:9D:C6:1C:00:0F:84:9C
Certificate issuer: /CN=98F94938EA9072872BE06639F79DC61C000F849C
Certificate serial: 71EDDF8015919D0CD47B0AA815DF4A83FC46B9B9
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98F94938EA9072872BE06639F79DC61C000F849C.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/53b146a2-7715-459f-8244-8b32a364663c/0/98F94938EA9072872BE06639F79DC61C000F849C.mft
Manifest number: 052F
Signing time: Fri 05 Dec 2025 18:10:02 +0000
Manifest this update: Fri 05 Dec 2025 18:05:02 +0000
Manifest next update: Mon 08 Dec 2025 18:59:02 +0000
Files and hashes: 1: 3130332e3132312e3134382e302f32342d3234203d3e203538333639.roa (hash: sb1oa9JahKggAJqL+2P4wHzELfKnqVAcTcFhItAaTrg=)
2: 98F94938EA9072872BE06639F79DC61C000F849C.crl (hash: IkGLYkiryyU2eFAkaI2E/LIJ1oxYfZWoYP+AQfBVd+Q=)
3: 3130332e3132312e3134392e302f32342d3234203d3e203538333639.roa (hash: M8bRC4wiSLB6e2iwcZHOvqYaGOdNzRxUPpYTKPxu050=)
4: 3130332e3132312e3134382e302f32332d3233203d3e203538333639.roa (hash: 1MO7kNfuZHEztN7LWlrlsKvsPX1c2EMnYyDa6xlPz/k=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/53b146a2-7715-459f-8244-8b32a364663c/0/98F94938EA9072872BE06639F79DC61C000F849C.crl
rsync://repo-rpki.idnic.net/repo/53b146a2-7715-459f-8244-8b32a364663c/0/98F94938EA9072872BE06639F79DC61C000F849C.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98F94938EA9072872BE06639F79DC61C000F849C.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Dec 2025 18:59:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:ed:df:80:15:91:9d:0c:d4:7b:0a:a8:15:df:4a:83:fc:46:b9:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98F94938EA9072872BE06639F79DC61C000F849C
Validity
Not Before: Dec 5 18:05:02 2025 GMT
Not After : Dec 8 18:59:02 2025 GMT
Subject: CN=E0181025511F6FFAE4FE354F3850A28C3577233E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:84:14:2f:69:a4:08:04:ea:84:4f:49:0f:d3:
d2:21:b9:f8:f0:c1:90:5f:85:e0:8d:fa:f9:8e:29:
c5:84:b7:52:e9:57:21:c8:52:70:c3:64:c0:4c:e1:
07:ba:d2:87:96:c1:c8:04:3c:39:cf:92:c3:a7:c6:
4a:cc:50:72:37:4e:0d:95:b9:46:f8:1c:37:f9:ab:
55:79:7c:94:cf:28:e9:94:f6:31:91:0d:89:46:13:
7c:c0:81:50:b3:57:95:1f:84:66:fc:97:e0:46:45:
1f:4b:6f:55:3b:ea:d2:81:aa:70:04:4b:39:51:b4:
fd:0d:dd:7a:5b:d5:60:c8:5a:f4:fd:7a:a2:0a:fd:
84:38:2b:df:7f:cb:2b:cb:9a:d2:54:b4:78:f7:c0:
05:cf:f5:d0:3f:11:75:9f:ea:aa:06:de:9b:34:23:
c1:9d:da:8c:4c:c9:19:13:75:7c:b2:32:dc:47:21:
dc:e8:10:cc:6a:d1:6c:b0:5b:b0:36:63:4f:0a:42:
b8:c8:27:ae:10:56:47:8d:28:4c:df:06:be:94:fb:
56:5a:25:7b:0e:ba:a6:98:43:ba:39:6a:a8:a2:d2:
65:46:82:7f:5b:55:f4:f1:6d:0a:3f:46:03:68:12:
78:09:5b:5d:97:4a:8b:86:ef:9f:74:9d:c1:27:bd:
0b:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:18:10:25:51:1F:6F:FA:E4:FE:35:4F:38:50:A2:8C:35:77:23:3E
X509v3 Authority Key Identifier:
keyid:98:F9:49:38:EA:90:72:87:2B:E0:66:39:F7:9D:C6:1C:00:0F:84:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/53b146a2-7715-459f-8244-8b32a364663c/0/98F94938EA9072872BE06639F79DC61C000F849C.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98F94938EA9072872BE06639F79DC61C000F849C.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/53b146a2-7715-459f-8244-8b32a364663c/0/98F94938EA9072872BE06639F79DC61C000F849C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:5e:ec:cd:5a:64:1b:26:3d:8d:0e:d0:0d:f2:e2:33:1a:24:
26:eb:4a:cd:27:7d:e4:ec:d4:a1:bd:27:13:92:e9:2c:bf:28:
45:e6:29:40:68:47:c0:8e:97:e1:cc:56:7f:8e:0a:f0:dd:cc:
a8:fb:a7:9c:f9:f5:8a:45:8b:d0:a8:2e:e3:ce:66:87:f4:2b:
1c:bc:7d:2b:fd:6b:72:89:d6:bb:45:66:53:43:32:bb:8c:14:
8a:0a:27:67:e5:f3:59:b0:71:55:87:57:b8:b3:a1:a6:13:ed:
97:a6:cc:e5:2d:f6:ce:47:60:c8:8a:dd:f1:85:e6:d6:4a:78:
a9:91:0e:e3:52:70:15:0a:00:13:96:af:ad:bb:4a:90:ec:50:
d6:77:28:14:ac:c4:3d:98:23:32:81:20:b2:ec:72:16:ef:7b:
b8:f2:17:a0:7c:0a:c9:3e:d5:ac:8d:98:4a:4a:ff:7c:81:26:
d8:9b:b8:d9:f9:70:80:3e:4c:3b:cd:50:10:ef:98:de:df:cb:
3d:22:81:e8:6e:a2:7e:f7:01:e4:c8:31:a1:6e:ac:66:a1:04:
8e:f9:e0:64:45:dc:90:7d:69:ab:45:5a:27:e6:86:fe:d5:a2:
1a:eb:17:03:a5:d6:e2:8f:77:dc:90:50:13:49:b3:b1:2a:3a:
23:33:d1:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 07:48:16 2025 by rpki-client