This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/89402655017312B8CFCB367BA82966AA21E11F90.mft File: 89402655017312B8CFCB367BA82966AA21E11F90.mft (raw, json) Hash identifier: IuDd4vXiaVEv2Ejj1W1IJmMOjcRwRsnXOXW5yzhFHmA= Subject key identifier: DC:70:BF:9D:4F:AC:2E:FE:B7:7A:3E:11:AD:14:96:5D:B6:55:5D:46 Authority key identifier: 89:40:26:55:01:73:12:B8:CF:CB:36:7B:A8:29:66:AA:21:E1:1F:90 Certificate issuer: /CN=89402655017312B8CFCB367BA82966AA21E11F90 Certificate serial: 459BFE05EEC5C95DB4593B33AB47F6BC2CAB9577 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/89402655017312B8CFCB367BA82966AA21E11F90.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/89402655017312B8CFCB367BA82966AA21E11F90.mft Manifest number: 0509 Signing time: Mon 15 Dec 2025 11:51:58 +0000 Manifest this update: Mon 15 Dec 2025 11:46:58 +0000 Manifest next update: Thu 18 Dec 2025 13:13:58 +0000 Files and hashes: 1: 89402655017312B8CFCB367BA82966AA21E11F90.crl (hash: 0vWNGNkmhxcUJczInFKPh8hq60jZ1cG6mL8y06W+kcE=) 2: 323430343a623238303a3a2f33322d3438203d3e203137363730.roa (hash: S1hTgzRInefDZ+nv4OU9cj+WPrGD6wknjfAjdl1JFoo=) 3: 3132332e3235332e3233322e302f32322d3234203d3e203137363730.roa (hash: R1hpl90tpuGr3S7MM3M7sdpYxwM9mEKg6oXY2ZteCXg=) 4: 323430303a313838303a3a2f33322d3438203d3e203137363730.roa (hash: FP8IqHLkyX7Qj2+QyPrsBYEPwMn3gsRtfyfeKNBNdEg=) 5: 3130332e3231332e3132382e302f32322d3234203d3e203137363730.roa (hash: LCi1weYpsHjqbHjmDdoyI35l96+t96YsB4f16htlxbU=) 6: 3230322e3134372e3139322e302f32302d3234203d3e203137363730.roa (hash: WsFr0RE3ZnujNzg56bjhtSV6UHqOuDU5rMSYq/HFAbw=) 7: 3131302e35302e38302e302f32312d3234203d3e203137363730.roa (hash: ENs+ad22cCNfPNiUGh8Crfa5TLmxtOCxc9FzlyRTptI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/89402655017312B8CFCB367BA82966AA21E11F90.crl rsync://repo-rpki.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/89402655017312B8CFCB367BA82966AA21E11F90.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/89402655017312B8CFCB367BA82966AA21E11F90.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Dec 2025 13:13:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:9b:fe:05:ee:c5:c9:5d:b4:59:3b:33:ab:47:f6:bc:2c:ab:95:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89402655017312B8CFCB367BA82966AA21E11F90 Validity Not Before: Dec 15 11:46:58 2025 GMT Not After : Dec 18 13:13:58 2025 GMT Subject: CN=DC70BF9D4FAC2EFEB77A3E11AD14965DB6555D46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:0a:4c:d1:9d:fe:d1:71:b5:57:52:ef:4e:6c: fb:0c:6b:7e:b4:5a:8e:43:93:8a:d3:55:87:ba:29: 66:dc:2d:5e:fa:0d:0b:01:7a:0e:2e:9c:49:09:6b: a5:bd:37:9c:91:bd:8b:c1:bb:a1:50:6d:67:56:fb: cf:a2:d6:e2:b4:96:12:cf:9a:4f:c7:cb:8d:06:2e: c6:f7:ca:6d:08:45:d8:ca:45:47:60:5d:d6:fa:e4: 97:c1:ef:22:e3:96:47:3c:b1:11:aa:d0:2d:0b:cd: ca:7f:f0:35:c0:eb:44:af:2d:31:f5:c3:6b:32:f2: 19:71:77:06:43:38:44:0e:a3:c8:22:b5:71:c9:e8: dd:22:05:d2:fb:6c:79:3e:73:1d:49:7a:b4:88:78: a0:bb:dc:0e:a7:b7:0e:dc:c1:0b:39:db:78:2f:4e: 0d:9c:dd:18:6f:f9:87:67:47:cb:03:96:ea:76:e0: 76:49:69:c1:40:33:97:ce:36:cd:11:2f:67:b6:e1: 92:a8:c7:3a:a7:b4:da:76:41:94:3a:29:bd:d1:72: 50:5a:ca:b1:88:35:6f:c6:fa:5d:9a:18:ea:43:d3: 47:7a:ef:bd:25:d8:ca:f2:4e:a0:c3:67:23:d9:c2: 28:10:e7:3f:cc:1b:82:52:21:30:67:f3:42:b2:86: 1e:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:70:BF:9D:4F:AC:2E:FE:B7:7A:3E:11:AD:14:96:5D:B6:55:5D:46 X509v3 Authority Key Identifier: keyid:89:40:26:55:01:73:12:B8:CF:CB:36:7B:A8:29:66:AA:21:E1:1F:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/89402655017312B8CFCB367BA82966AA21E11F90.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/89402655017312B8CFCB367BA82966AA21E11F90.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/89402655017312B8CFCB367BA82966AA21E11F90.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:a3:d5:94:2e:52:52:30:73:df:71:74:93:f8:c5:6b:f6:e4: 92:17:ea:58:9b:ac:10:73:57:85:2f:14:46:05:99:c7:dc:db: 69:92:98:29:55:17:f9:91:c2:fa:05:f3:b4:40:6d:64:19:93: 85:3f:39:36:ea:a9:68:0c:22:ff:3a:49:b7:e9:77:9f:8c:4f: 04:1e:00:20:0b:28:cb:b8:c5:ae:f9:29:1c:0d:e1:14:f1:d9: e6:f2:ba:ef:34:7a:61:ab:97:41:d0:13:30:c4:ab:88:b1:59: 00:5f:21:d7:19:c4:7b:98:5c:b7:0d:f8:f0:0e:7d:9c:c0:53: ef:36:11:c7:da:f6:fb:04:63:99:3a:62:7d:5c:02:2f:0c:7e: a2:47:6b:bc:39:6a:fc:37:66:74:f7:9d:f0:90:45:fe:5d:68: bb:02:20:b3:65:db:9e:95:a7:cc:73:81:54:cb:be:e1:4c:16: 53:c1:f4:df:22:72:9a:14:90:33:6c:d9:e8:4f:7a:91:6d:54: cb:62:74:f6:7f:f5:5a:67:54:e8:b1:fb:6a:da:a4:82:60:45: f9:56:ec:9e:2c:1c:40:66:d2:a2:3f:cd:f5:d4:85:34:cc:fc: 6c:e5:00:b5:e8:8a:03:e5:0b:1b:72:38:de:db:fc:56:2f:38: 05:7c:00:a2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURZv+Be7FyV20WTszq0f2vCyrlXcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODk0MDI2NTUwMTczMTJCOENGQ0IzNjdCQTgyOTY2QUEy MUUxMUY5MDAeFw0yNTEyMTUxMTQ2NThaFw0yNTEyMTgxMzEzNThaMDMxMTAvBgNV BAMTKERDNzBCRjlENEZBQzJFRkVCNzdBM0UxMUFEMTQ5NjVEQjY1NTVENDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDICkzRnf7RcbVXUu9ObPsMa360 Wo5Dk4rTVYe6KWbcLV76DQsBeg4unEkJa6W9N5yRvYvBu6FQbWdW+8+i1uK0lhLP mk/Hy40GLsb3ym0IRdjKRUdgXdb65JfB7yLjlkc8sRGq0C0Lzcp/8DXA60SvLTH1 w2sy8hlxdwZDOEQOo8gitXHJ6N0iBdL7bHk+cx1JerSIeKC73A6ntw7cwQs523gv Tg2c3Rhv+YdnR8sDlup24HZJacFAM5fONs0RL2e24ZKoxzqntNp2QZQ6Kb3RclBa yrGINW/G+l2aGOpD00d6770l2MryTqDDZyPZwigQ5z/MG4JSITBn80Kyhh59AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3HC/nU+sLv63ej4RrRSWXbZVXUYwHwYDVR0j BBgwFoAUiUAmVQFzErjPyzZ7qClmqiHhH5AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZmIxYzgwYy00ZDZjLTQ0MDgtODk0Ny1mYmE2ZTdjNGJlN2MvMC84OTQwMjY1NTAx NzMxMkI4Q0ZDQjM2N0JBODI5NjZBQTIxRTExRjkwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODk0MDI2NTUwMTczMTJCOENGQ0IzNjdCQTgyOTY2QUEyMUUx MUY5MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWZiMWM4MGMtNGQ2Yy00NDA4LTg5 NDctZmJhNmU3YzRiZTdjLzAvODk0MDI2NTUwMTczMTJCOENGQ0IzNjdCQTgyOTY2 QUEyMUUxMUY5MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACej1ZQuUlIwc99xdJP4xWv25JIX6librBBz V4UvFEYFmcfc22mSmClVF/mRwvoF87RAbWQZk4U/OTbqqWgMIv86Sbfpd5+MTwQe ACALKMu4xa75KRwN4RTx2ebyuu80emGrl0HQEzDEq4ixWQBfIdcZxHuYXLcN+PAO fZzAU+82Ecfa9vsEY5k6Yn1cAi8MfqJHa7w5avw3ZnT3nfCQRf5daLsCILNl256V p8xzgVTLvuFMFlPB9N8icpoUkDNs2ehPepFtVMtidPZ/9VpnVOix+2rapIJgRflW 7J4sHEBm0qI/zfXUhTTM/GzlALXoigPlCxtyON7b/FYvOAV8AKI= -----END CERTIFICATE-----Generated at Mon Dec 15 15:32:18 2025 by rpki-client