This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/aa417608-16b8-4497-81e3-947d78dbcf11/0/2098B3BD046CFFF28B48954F288A333FADDD1DE9.mft File: 2098B3BD046CFFF28B48954F288A333FADDD1DE9.mft (raw, json) Hash identifier: E5QEuZhYNBeaU+D+yOAvSDfeipMEKC4YUCOux1OjaJU= Subject key identifier: 98:BC:27:80:3F:8F:5B:4F:3F:E7:44:F1:D1:6C:FF:A2:32:F9:2D:89 Authority key identifier: 20:98:B3:BD:04:6C:FF:F2:8B:48:95:4F:28:8A:33:3F:AD:DD:1D:E9 Certificate issuer: /CN=2098B3BD046CFFF28B48954F288A333FADDD1DE9 Certificate serial: 3A89A481DAD36A06CF6ECD48196249D41F7195B8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2098B3BD046CFFF28B48954F288A333FADDD1DE9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aa417608-16b8-4497-81e3-947d78dbcf11/0/2098B3BD046CFFF28B48954F288A333FADDD1DE9.mft Manifest number: BF Signing time: Fri 05 Dec 2025 05:30:39 +0000 Manifest this update: Fri 05 Dec 2025 05:25:39 +0000 Manifest next update: Mon 08 Dec 2025 09:39:39 +0000 Files and hashes: 1: 2098B3BD046CFFF28B48954F288A333FADDD1DE9.crl (hash: 5CuyJcGJMNG71SUtitMKAQbYXbtHfYhXgCT3981fdvY=) 2: 3136302e32352e3232392e302f32342d3234203d3e20313533313036.roa (hash: ZsjBtNoWEJx2NTRYL99sTUHqHLXTfuWH/2StZO9wGXM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aa417608-16b8-4497-81e3-947d78dbcf11/0/2098B3BD046CFFF28B48954F288A333FADDD1DE9.crl rsync://repo-rpki.idnic.net/repo/aa417608-16b8-4497-81e3-947d78dbcf11/0/2098B3BD046CFFF28B48954F288A333FADDD1DE9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2098B3BD046CFFF28B48954F288A333FADDD1DE9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 09:39:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:89:a4:81:da:d3:6a:06:cf:6e:cd:48:19:62:49:d4:1f:71:95:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2098B3BD046CFFF28B48954F288A333FADDD1DE9 Validity Not Before: Dec 5 05:25:39 2025 GMT Not After : Dec 8 09:39:39 2025 GMT Subject: CN=98BC27803F8F5B4F3FE744F1D16CFFA232F92D89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:f4:9a:91:36:77:78:e2:71:82:eb:41:f9:1a: 6b:ec:6c:fa:3d:69:cb:de:58:e9:87:a3:e2:18:0c: 1a:25:b0:db:f9:27:ef:ac:b6:71:2b:9c:ed:6e:0d: c4:d9:21:6f:88:3b:5f:e4:ea:f1:36:58:6c:5e:42: d1:90:0a:f4:04:f3:52:05:bc:83:f1:6d:f2:ce:8d: bc:14:a4:9f:f7:0e:7c:9b:d7:9d:4b:78:3f:17:5a: 14:c0:32:6b:a8:28:92:da:61:49:88:95:a9:76:b7: 5a:90:49:5c:f1:cf:69:7f:ff:97:e0:1e:92:f0:4b: 6e:be:43:9b:99:73:1c:b5:db:a2:1d:fe:e6:52:dd: d3:24:99:9b:25:ec:eb:12:ab:ab:fc:95:1d:0e:e9: b4:9f:3a:cf:e5:14:58:8d:41:7f:fd:8c:5d:ba:46: 83:38:cd:8f:c2:a0:f1:ad:73:5b:ef:c7:75:b8:cd: b2:42:2f:2d:3f:67:ee:43:71:c2:d6:9d:7d:af:86: 93:af:3b:67:13:83:c4:56:b1:b8:c4:7e:58:6c:c2: 0b:50:03:02:e9:8b:48:67:23:58:e0:d0:c9:45:d5: e1:2f:ef:68:2e:f6:72:bd:1d:75:d1:fd:cd:ef:9e: 6a:34:9d:16:8a:47:34:5c:6d:f7:fd:ea:a2:fe:df: 3c:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:BC:27:80:3F:8F:5B:4F:3F:E7:44:F1:D1:6C:FF:A2:32:F9:2D:89 X509v3 Authority Key Identifier: keyid:20:98:B3:BD:04:6C:FF:F2:8B:48:95:4F:28:8A:33:3F:AD:DD:1D:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aa417608-16b8-4497-81e3-947d78dbcf11/0/2098B3BD046CFFF28B48954F288A333FADDD1DE9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2098B3BD046CFFF28B48954F288A333FADDD1DE9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aa417608-16b8-4497-81e3-947d78dbcf11/0/2098B3BD046CFFF28B48954F288A333FADDD1DE9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:f3:3e:83:78:99:2d:92:89:b1:b5:3d:3f:65:e9:b5:05:15: 3e:df:b3:c3:0b:33:a8:37:bf:d7:fe:34:05:35:c8:f2:01:55: 01:98:15:b3:59:d6:03:58:a6:5f:54:07:bc:62:39:f0:e0:d2: f2:49:c7:df:4a:4a:a4:d7:7f:bd:66:68:c6:cf:d1:f5:d8:c1: f4:09:30:07:22:a3:e6:50:73:86:36:12:06:93:24:ae:28:38: 00:9a:b8:23:a8:bd:25:ce:53:93:c8:18:34:d5:0f:67:fd:da: c0:ff:2b:6d:c2:30:20:f4:90:4e:16:e4:47:c4:a8:a5:ab:43: df:8d:12:fd:7b:d8:17:53:f6:78:ab:6d:62:0c:61:00:19:24: ec:31:ce:85:1b:ce:e9:3a:6e:e4:43:f0:ee:05:dd:96:90:48: ec:d1:74:84:27:3d:fd:c3:dd:fd:cf:d8:b2:a3:48:e9:3b:87: df:7d:b4:f2:5f:b6:0c:fd:b1:ff:93:44:31:58:26:31:22:be: 50:da:6d:49:7f:73:3f:87:12:ce:f4:4d:8a:81:21:4a:dd:82: fc:2a:b4:c1:77:7c:d0:e3:97:c2:3d:c9:1e:36:39:c7:65:e2: eb:1a:91:68:59:66:d0:5d:12:9f:f9:31:17:3b:31:68:2c:24: 9b:4e:00:f7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOomkgdrTagbPbs1IGWJJ1B9xlbgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjA5OEIzQkQwNDZDRkZGMjhCNDg5NTRGMjg4QTMzM0ZB REREMURFOTAeFw0yNTEyMDUwNTI1MzlaFw0yNTEyMDgwOTM5MzlaMDMxMTAvBgNV BAMTKDk4QkMyNzgwM0Y4RjVCNEYzRkU3NDRGMUQxNkNGRkEyMzJGOTJEODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC59JqRNnd44nGC60H5GmvsbPo9 acveWOmHo+IYDBolsNv5J++stnErnO1uDcTZIW+IO1/k6vE2WGxeQtGQCvQE81IF vIPxbfLOjbwUpJ/3Dnyb151LeD8XWhTAMmuoKJLaYUmIlal2t1qQSVzxz2l//5fg HpLwS26+Q5uZcxy126Id/uZS3dMkmZsl7OsSq6v8lR0O6bSfOs/lFFiNQX/9jF26 RoM4zY/CoPGtc1vvx3W4zbJCLy0/Z+5DccLWnX2vhpOvO2cTg8RWsbjEflhswgtQ AwLpi0hnI1jg0MlF1eEv72gu9nK9HXXR/c3vnmo0nRaKRzRcbff96qL+3zyzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmLwngD+PW08/50Tx0Wz/ojL5LYkwHwYDVR0j BBgwFoAUIJizvQRs//KLSJVPKIozP63dHekwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YTQxNzYwOC0xNmI4LTQ0OTctODFlMy05NDdkNzhkYmNmMTEvMC8yMDk4QjNCRDA0 NkNGRkYyOEI0ODk1NEYyODhBMzMzRkFEREQxREU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMjA5OEIzQkQwNDZDRkZGMjhCNDg5NTRGMjg4QTMzM0ZBRERE MURFOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWE0MTc2MDgtMTZiOC00NDk3LTgx ZTMtOTQ3ZDc4ZGJjZjExLzAvMjA5OEIzQkQwNDZDRkZGMjhCNDg5NTRGMjg4QTMz M0ZBREREMURFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAPzPoN4mS2SibG1PT9l6bUFFT7fs8MLM6g3 v9f+NAU1yPIBVQGYFbNZ1gNYpl9UB7xiOfDg0vJJx99KSqTXf71maMbP0fXYwfQJ MAcio+ZQc4Y2EgaTJK4oOACauCOovSXOU5PIGDTVD2f92sD/K23CMCD0kE4W5EfE qKWrQ9+NEv172BdT9nirbWIMYQAZJOwxzoUbzuk6buRD8O4F3ZaQSOzRdIQnPf3D 3f3P2LKjSOk7h999tPJftgz9sf+TRDFYJjEivlDabUl/cz+HEs70TYqBIUrdgvwq tMF3fNDjl8I9yR42Ocdl4usakWhZZtBdEp/5MRc7MWgsJJtOAPc= -----END CERTIFICATE-----Generated at Sat Dec 6 19:08:38 2025 by rpki-client