This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/89a40089-6041-45ed-8e44-a997c8acf480/0/98906779AB8F30762B65B3E6AD7F48326A08605E.mft File: 98906779AB8F30762B65B3E6AD7F48326A08605E.mft (raw, json) Hash identifier: Xe6pYYNHIKQBMQS8Au7iPYLiBcDzrCGr6JMKRRQiku4= Subject key identifier: BB:0B:1B:E4:81:DF:47:72:68:49:25:38:C6:29:71:14:C4:C5:E8:B8 Authority key identifier: 98:90:67:79:AB:8F:30:76:2B:65:B3:E6:AD:7F:48:32:6A:08:60:5E Certificate issuer: /CN=98906779AB8F30762B65B3E6AD7F48326A08605E Certificate serial: 7504BD9663B6E8B11DC685A596A9C9E2781F6EC1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98906779AB8F30762B65B3E6AD7F48326A08605E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/89a40089-6041-45ed-8e44-a997c8acf480/0/98906779AB8F30762B65B3E6AD7F48326A08605E.mft Manifest number: 01A3 Signing time: Sat 06 Dec 2025 02:22:31 +0000 Manifest this update: Sat 06 Dec 2025 02:17:31 +0000 Manifest next update: Tue 09 Dec 2025 10:56:31 +0000 Files and hashes: 1: 3130332e3132362e3233322e302f32342d3234203d3e20313530393738.roa (hash: eIcKVswkxVzPLsHeuZgtjUH51030AdVpi+kyPLC0pTE=) 2: 98906779AB8F30762B65B3E6AD7F48326A08605E.crl (hash: 2t1Pw4lxNX13Zxl5Xa5PSseM7e/cyVRs9a98JNS77Qo=) 3: 3130332e3132362e3233332e302f32342d3234203d3e20313530393738.roa (hash: bdtz3V8NAXQ4FsPLxYoFwHQihtebd8fh/UmhU4gX81I=) 4: 3130332e3132362e3233322e302f32332d3233203d3e20313530393738.roa (hash: 7rcqjDK1en4Ve1PM9Wuc4mrM+RdU8sJ+v75czM9rFEY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/89a40089-6041-45ed-8e44-a997c8acf480/0/98906779AB8F30762B65B3E6AD7F48326A08605E.crl rsync://repo-rpki.idnic.net/repo/89a40089-6041-45ed-8e44-a997c8acf480/0/98906779AB8F30762B65B3E6AD7F48326A08605E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98906779AB8F30762B65B3E6AD7F48326A08605E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 10:56:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:04:bd:96:63:b6:e8:b1:1d:c6:85:a5:96:a9:c9:e2:78:1f:6e:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98906779AB8F30762B65B3E6AD7F48326A08605E Validity Not Before: Dec 6 02:17:31 2025 GMT Not After : Dec 9 10:56:31 2025 GMT Subject: CN=BB0B1BE481DF477268492538C6297114C4C5E8B8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:19:0c:73:c0:73:60:d5:64:28:0f:c7:f5:a7: 54:aa:4d:a7:b9:3f:cc:18:36:de:ca:76:97:63:c2: af:7b:de:7e:4b:cd:96:0a:d7:a9:3d:9d:4a:0c:d6: 6c:5c:ce:07:43:00:76:de:0c:2d:b9:a4:c3:3c:21: 69:ae:e3:8e:25:da:3b:b9:88:96:82:52:08:24:93: 91:96:33:0f:bd:01:d1:ff:74:c7:06:b1:3e:b5:5b: f9:5e:2a:02:fe:fe:6e:58:e7:0f:22:5a:b2:67:aa: c3:9c:0f:4b:75:80:9b:74:d1:10:ae:61:96:e5:a7: 17:1e:1d:b5:c8:46:84:76:39:c8:01:95:8a:e8:b3: 91:f9:95:99:3b:83:ef:77:dd:a1:c3:e8:a1:14:4d: b7:f7:0e:50:7a:35:45:ac:0f:f3:01:a0:ca:82:f8: 0d:e5:d2:10:b4:bb:c6:10:7f:12:2f:17:b6:f8:d7: 91:7a:ba:7b:9b:26:e9:1f:8f:9f:a0:83:05:e2:06: 31:ff:de:85:e1:b6:3d:de:47:84:b1:8a:8c:f1:ad: da:a3:38:2d:bf:c7:64:87:3d:3a:5d:61:d4:91:db: 1b:37:21:57:73:90:3b:48:42:8b:45:e6:02:83:5a: b9:2b:96:38:cc:41:70:25:ed:bd:3d:46:71:42:b6: 7a:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:0B:1B:E4:81:DF:47:72:68:49:25:38:C6:29:71:14:C4:C5:E8:B8 X509v3 Authority Key Identifier: keyid:98:90:67:79:AB:8F:30:76:2B:65:B3:E6:AD:7F:48:32:6A:08:60:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/89a40089-6041-45ed-8e44-a997c8acf480/0/98906779AB8F30762B65B3E6AD7F48326A08605E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98906779AB8F30762B65B3E6AD7F48326A08605E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/89a40089-6041-45ed-8e44-a997c8acf480/0/98906779AB8F30762B65B3E6AD7F48326A08605E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:11:78:4e:13:dd:5a:a0:37:e2:8a:88:78:0a:e4:6b:74:99: e9:b9:97:75:61:ba:d4:c2:0a:f9:2b:e2:70:ae:13:87:d3:34: f0:ba:17:7c:41:06:8e:5e:76:c1:92:7d:fc:3c:77:32:81:ef: f1:da:82:1d:ce:c9:b8:dd:fc:4c:33:5a:e5:34:9b:1d:eb:a3: 3a:5a:be:b9:cf:45:a2:3b:97:2d:c2:62:ba:39:f0:4b:81:7b: cd:04:8c:b4:39:77:71:2e:74:84:8b:5d:b5:54:99:26:f3:93: 7c:96:7f:f5:88:1c:8c:0d:1c:ca:0c:a8:ef:04:6f:ef:ea:46: 7c:c0:cb:1e:6a:15:b4:f4:48:f8:4e:22:11:08:08:97:57:26: 1e:6f:79:de:11:cc:6d:53:e2:3f:95:6d:33:32:ac:64:93:4a: 8f:07:f8:86:d8:38:fa:42:f1:aa:60:1d:1f:8a:e7:5a:44:20: 9d:ba:ac:d9:78:d8:2c:e4:8f:38:3c:48:02:58:49:3d:bf:cf: 26:00:50:d2:7d:2d:3d:6c:64:bc:f8:c8:9e:a9:50:64:98:5a: df:a0:54:bb:48:3b:b9:7f:f5:0b:14:1c:d0:39:aa:59:9f:55: 82:0c:98:a4:f9:21:83:56:f7:b7:b1:9a:9a:65:98:a7:3a:66: 32:53:92:6b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdQS9lmO26LEdxoWllqnJ4ngfbsEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTg5MDY3NzlBQjhGMzA3NjJCNjVCM0U2QUQ3RjQ4MzI2 QTA4NjA1RTAeFw0yNTEyMDYwMjE3MzFaFw0yNTEyMDkxMDU2MzFaMDMxMTAvBgNV BAMTKEJCMEIxQkU0ODFERjQ3NzI2ODQ5MjUzOEM2Mjk3MTE0QzRDNUU4QjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWGQxzwHNg1WQoD8f1p1SqTae5 P8wYNt7Kdpdjwq973n5LzZYK16k9nUoM1mxczgdDAHbeDC25pMM8IWmu444l2ju5 iJaCUggkk5GWMw+9AdH/dMcGsT61W/leKgL+/m5Y5w8iWrJnqsOcD0t1gJt00RCu YZblpxceHbXIRoR2OcgBlYros5H5lZk7g+933aHD6KEUTbf3DlB6NUWsD/MBoMqC +A3l0hC0u8YQfxIvF7b415F6unubJukfj5+ggwXiBjH/3oXhtj3eR4Sxiozxrdqj OC2/x2SHPTpdYdSR2xs3IVdzkDtIQotF5gKDWrkrljjMQXAl7b09RnFCtnpRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuwsb5IHfR3JoSSU4xilxFMTF6LgwHwYDVR0j BBgwFoAUmJBneauPMHYrZbPmrX9IMmoIYF4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 OWE0MDA4OS02MDQxLTQ1ZWQtOGU0NC1hOTk3YzhhY2Y0ODAvMC85ODkwNjc3OUFC OEYzMDc2MkI2NUIzRTZBRDdGNDgzMjZBMDg2MDVFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTg5MDY3NzlBQjhGMzA3NjJCNjVCM0U2QUQ3RjQ4MzI2QTA4 NjA1RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODlhNDAwODktNjA0MS00NWVkLThl NDQtYTk5N2M4YWNmNDgwLzAvOTg5MDY3NzlBQjhGMzA3NjJCNjVCM0U2QUQ3RjQ4 MzI2QTA4NjA1RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA0ReE4T3VqgN+KKiHgK5Gt0mem5l3VhutTC Cvkr4nCuE4fTNPC6F3xBBo5edsGSffw8dzKB7/Hagh3Oybjd/EwzWuU0mx3rozpa vrnPRaI7ly3CYro58EuBe80EjLQ5d3EudISLXbVUmSbzk3yWf/WIHIwNHMoMqO8E b+/qRnzAyx5qFbT0SPhOIhEICJdXJh5ved4RzG1T4j+VbTMyrGSTSo8H+IbYOPpC 8apgHR+K51pEIJ26rNl42Czkjzg8SAJYST2/zyYAUNJ9LT1sZLz4yJ6pUGSYWt+g VLtIO7l/9QsUHNA5qlmfVYIMmKT5IYNW97exmpplmKc6ZjJTkms= -----END CERTIFICATE-----Generated at Sun Dec 7 01:10:17 2025 by rpki-client