This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/89a40089-6041-45ed-8e44-a997c8acf480/0/98906779AB8F30762B65B3E6AD7F48326A08605E.mft File: 98906779AB8F30762B65B3E6AD7F48326A08605E.mft (raw, json) Hash identifier: FW9Jtolt9fI461FOUvs5kmRj9fPORt9Jh0x0ZOCHwx0= Subject key identifier: E9:A6:C8:A2:F6:C9:47:D6:5F:38:14:2C:9E:29:01:CB:6A:13:6D:7E Authority key identifier: 98:90:67:79:AB:8F:30:76:2B:65:B3:E6:AD:7F:48:32:6A:08:60:5E Certificate issuer: /CN=98906779AB8F30762B65B3E6AD7F48326A08605E Certificate serial: 73DE3EDBB7F95D177A087B00AE504116AFCFE5A7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98906779AB8F30762B65B3E6AD7F48326A08605E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/89a40089-6041-45ed-8e44-a997c8acf480/0/98906779AB8F30762B65B3E6AD7F48326A08605E.mft Manifest number: 01A9 Signing time: Fri 19 Dec 2025 20:03:51 +0000 Manifest this update: Fri 19 Dec 2025 19:58:51 +0000 Manifest next update: Tue 23 Dec 2025 06:40:51 +0000 Files and hashes: 1: 3130332e3132362e3233322e302f32342d3234203d3e20313530393738.roa (hash: eIcKVswkxVzPLsHeuZgtjUH51030AdVpi+kyPLC0pTE=) 2: 3130332e3132362e3233332e302f32342d3234203d3e20313530393738.roa (hash: bdtz3V8NAXQ4FsPLxYoFwHQihtebd8fh/UmhU4gX81I=) 3: 98906779AB8F30762B65B3E6AD7F48326A08605E.crl (hash: IgmRVVw0vRzTbqYl57CO1H4Kd3KAmaFDB7Un35l7ddk=) 4: 3130332e3132362e3233322e302f32332d3233203d3e20313530393738.roa (hash: 7rcqjDK1en4Ve1PM9Wuc4mrM+RdU8sJ+v75czM9rFEY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/89a40089-6041-45ed-8e44-a997c8acf480/0/98906779AB8F30762B65B3E6AD7F48326A08605E.crl rsync://repo-rpki.idnic.net/repo/89a40089-6041-45ed-8e44-a997c8acf480/0/98906779AB8F30762B65B3E6AD7F48326A08605E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98906779AB8F30762B65B3E6AD7F48326A08605E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Dec 2025 00:38:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:de:3e:db:b7:f9:5d:17:7a:08:7b:00:ae:50:41:16:af:cf:e5:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98906779AB8F30762B65B3E6AD7F48326A08605E Validity Not Before: Dec 19 19:58:51 2025 GMT Not After : Dec 23 06:40:51 2025 GMT Subject: CN=E9A6C8A2F6C947D65F38142C9E2901CB6A136D7E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:cc:9c:a1:31:ac:72:a0:6b:b2:18:26:f8:15: 72:f6:d7:b8:75:8b:a1:95:27:0d:21:ba:ea:ff:93: bc:e6:e0:05:79:61:b0:8d:92:7c:d9:cd:0c:04:83: 81:f3:43:55:29:56:c5:ab:59:64:ce:00:c2:8d:11: f0:3a:e0:8e:77:77:5d:b8:06:36:57:dd:be:77:69: 9b:46:df:69:77:41:6f:70:e5:32:1e:16:d9:36:af: bc:9a:b3:2d:07:d8:67:ed:69:a0:8e:86:1e:41:72: a2:26:43:99:26:35:2d:82:64:52:4a:a4:5e:9a:ac: e3:40:f7:58:6b:ad:05:3a:6c:bb:d1:38:bc:3b:17: e3:6f:93:49:9b:aa:f9:76:8d:88:b5:43:a6:f3:e5: 58:88:2f:21:5c:86:ea:71:9c:62:c2:10:63:2a:17: 4b:31:9b:21:17:5e:53:70:28:a7:dd:01:f2:46:72: 1d:4f:89:5c:65:79:ce:46:7c:d0:83:5d:3f:11:a5: 4c:d7:21:aa:14:13:10:c5:3d:76:62:4d:81:3a:74: c4:c5:bf:22:c3:a8:97:b0:7b:5c:b8:e9:d4:26:76: ae:bf:82:c0:b7:38:cc:54:4c:3c:98:77:b8:5f:e7: d3:36:ea:98:a6:fa:54:ef:f1:00:65:5b:06:e8:73: 4d:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:A6:C8:A2:F6:C9:47:D6:5F:38:14:2C:9E:29:01:CB:6A:13:6D:7E X509v3 Authority Key Identifier: keyid:98:90:67:79:AB:8F:30:76:2B:65:B3:E6:AD:7F:48:32:6A:08:60:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/89a40089-6041-45ed-8e44-a997c8acf480/0/98906779AB8F30762B65B3E6AD7F48326A08605E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98906779AB8F30762B65B3E6AD7F48326A08605E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/89a40089-6041-45ed-8e44-a997c8acf480/0/98906779AB8F30762B65B3E6AD7F48326A08605E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:6d:15:43:19:22:2d:fb:c5:cf:f5:de:4a:c6:29:9a:36:01: 5d:1a:b5:6f:e8:73:ac:fd:6a:5d:29:99:5d:a8:be:df:77:8a: 6b:fe:db:43:c9:4c:7f:82:6c:42:7b:bb:c8:b3:74:00:cd:67: e8:c2:24:d6:6e:7a:70:63:b9:8f:27:a6:1d:03:be:cc:b2:0e: 7b:8f:0d:92:d1:ea:d8:e4:b2:fb:95:b6:63:4e:cd:27:97:cc: 17:7a:47:4a:1a:68:4c:f7:79:0b:32:a6:29:b1:df:86:8d:ce: d1:68:3b:5e:12:a4:c3:d8:10:4a:c4:b8:a6:6f:1e:b4:f5:91: 47:d5:91:8b:7c:5e:e4:54:9e:2c:64:cb:49:fe:28:59:33:18: b9:1d:a9:e2:9f:bd:ca:55:20:4c:a3:7e:a4:c7:86:f5:68:88: 1c:ae:57:01:e9:8d:b9:ce:e8:57:f9:ca:de:20:78:c5:b4:55: 79:ea:bc:23:98:8b:09:60:f2:d7:76:af:d4:bd:2f:19:d9:f1: 9b:0e:b7:53:ec:59:f0:ba:23:30:e8:f0:4a:2d:a5:aa:d9:9f: 2d:d5:64:77:32:3b:37:95:69:5f:65:c3:1a:ef:0b:93:23:60: cd:07:1f:08:d8:e6:58:b1:59:b2:34:60:ff:41:71:5c:a5:2a: 68:db:f5:2d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUc94+27f5XRd6CHsArlBBFq/P5acwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTg5MDY3NzlBQjhGMzA3NjJCNjVCM0U2QUQ3RjQ4MzI2 QTA4NjA1RTAeFw0yNTEyMTkxOTU4NTFaFw0yNTEyMjMwNjQwNTFaMDMxMTAvBgNV BAMTKEU5QTZDOEEyRjZDOTQ3RDY1RjM4MTQyQzlFMjkwMUNCNkExMzZEN0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4zJyhMaxyoGuyGCb4FXL217h1 i6GVJw0huur/k7zm4AV5YbCNknzZzQwEg4HzQ1UpVsWrWWTOAMKNEfA64I53d124 BjZX3b53aZtG32l3QW9w5TIeFtk2r7yasy0H2GftaaCOhh5BcqImQ5kmNS2CZFJK pF6arONA91hrrQU6bLvROLw7F+Nvk0mbqvl2jYi1Q6bz5ViILyFchupxnGLCEGMq F0sxmyEXXlNwKKfdAfJGch1PiVxlec5GfNCDXT8RpUzXIaoUExDFPXZiTYE6dMTF vyLDqJewe1y46dQmdq6/gsC3OMxUTDyYd7hf59M26pim+lTv8QBlWwboc037AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6abIovbJR9ZfOBQsnikBy2oTbX4wHwYDVR0j BBgwFoAUmJBneauPMHYrZbPmrX9IMmoIYF4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 OWE0MDA4OS02MDQxLTQ1ZWQtOGU0NC1hOTk3YzhhY2Y0ODAvMC85ODkwNjc3OUFC OEYzMDc2MkI2NUIzRTZBRDdGNDgzMjZBMDg2MDVFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTg5MDY3NzlBQjhGMzA3NjJCNjVCM0U2QUQ3RjQ4MzI2QTA4 NjA1RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODlhNDAwODktNjA0MS00NWVkLThl NDQtYTk5N2M4YWNmNDgwLzAvOTg5MDY3NzlBQjhGMzA3NjJCNjVCM0U2QUQ3RjQ4 MzI2QTA4NjA1RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAhtFUMZIi37xc/13krGKZo2AV0atW/oc6z9 al0pmV2ovt93imv+20PJTH+CbEJ7u8izdADNZ+jCJNZuenBjuY8nph0DvsyyDnuP DZLR6tjksvuVtmNOzSeXzBd6R0oaaEz3eQsypimx34aNztFoO14SpMPYEErEuKZv HrT1kUfVkYt8XuRUnixky0n+KFkzGLkdqeKfvcpVIEyjfqTHhvVoiByuVwHpjbnO 6Ff5yt4geMW0VXnqvCOYiwlg8td2r9S9LxnZ8ZsOt1PsWfC6IzDo8EotparZny3V ZHcyOzeVaV9lwxrvC5MjYM0HHwjY5lixWbI0YP9BcVylKmjb9S0= -----END CERTIFICATE-----Generated at Sat Dec 20 20:29:18 2025 by rpki-client