This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/b450d956-9b00-46c1-a631-3564e186a079/0/98FF48FFAD3CC9E9878D3FA74E0EEA79CA13F0FA.mft File: 98FF48FFAD3CC9E9878D3FA74E0EEA79CA13F0FA.mft (raw, json) Hash identifier: eEihD3QnHHsdIezyZTU6yC274TXe6Rrl5YMk34WJTlE= Subject key identifier: 19:9D:01:C0:5D:AA:21:5D:BD:7F:69:12:FE:EA:14:57:2F:2D:56:8B Authority key identifier: 98:FF:48:FF:AD:3C:C9:E9:87:8D:3F:A7:4E:0E:EA:79:CA:13:F0:FA Certificate issuer: /CN=98FF48FFAD3CC9E9878D3FA74E0EEA79CA13F0FA Certificate serial: 095F666DFD4C0792D862490EE0785B1B6AA0C972 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98FF48FFAD3CC9E9878D3FA74E0EEA79CA13F0FA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b450d956-9b00-46c1-a631-3564e186a079/0/98FF48FFAD3CC9E9878D3FA74E0EEA79CA13F0FA.mft Manifest number: 01CA Signing time: Sat 24 Jan 2026 22:52:26 +0000 Manifest this update: Sat 24 Jan 2026 22:47:26 +0000 Manifest next update: Wed 28 Jan 2026 08:45:26 +0000 Files and hashes: 1: 98FF48FFAD3CC9E9878D3FA74E0EEA79CA13F0FA.crl (hash: nlHSnl+sQPsL/zJI3HZyQGcNcDZQkiT1vVUCaZUIw18=) 2: 3130332e3135352e3139322e302f32342d3234203d3e20313431303639.roa (hash: HiN7YoBVkQHKPRmQcIw7KecJDTn4UB8o7deSNxTmkOk=) 3: 323430363a373563303a666666663a3a2f34382d3438203d3e20313431303639.roa (hash: eQ5WMRJPy7gKupW5F4m6uPUC6SkCMo1WY0hvFb3YFm0=) 4: 3130332e3135352e3139332e302f32342d3234203d3e20313431303639.roa (hash: SFmXn9PezsJj2J+n/KO+JoUR1XmcH1D+ZwQywLjd4NQ=) 5: 3130332e3135352e3139322e302f32332d3233203d3e20313431303639.roa (hash: 5L7KwFUgvVnXbTdBI9pybBL9RZN1DFSQWqr7TkH60p0=) 6: 323430363a373563303a3a2f33322d3332203d3e20313431303639.roa (hash: PTq4K7C1NfA7u/hBgxfzHnc927GHuD0+t6G+/br9unw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b450d956-9b00-46c1-a631-3564e186a079/0/98FF48FFAD3CC9E9878D3FA74E0EEA79CA13F0FA.crl rsync://repo-rpki.idnic.net/repo/b450d956-9b00-46c1-a631-3564e186a079/0/98FF48FFAD3CC9E9878D3FA74E0EEA79CA13F0FA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98FF48FFAD3CC9E9878D3FA74E0EEA79CA13F0FA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 08:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:5f:66:6d:fd:4c:07:92:d8:62:49:0e:e0:78:5b:1b:6a:a0:c9:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98FF48FFAD3CC9E9878D3FA74E0EEA79CA13F0FA Validity Not Before: Jan 24 22:47:26 2026 GMT Not After : Jan 28 08:45:26 2026 GMT Subject: CN=199D01C05DAA215DBD7F6912FEEA14572F2D568B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:01:f7:38:cd:2e:5a:58:2d:98:72:12:02:22: 96:5d:7c:ed:88:11:29:49:40:4e:e8:6c:e6:d2:56: b5:f0:6c:ef:80:14:27:cc:0b:25:71:35:b4:b1:2e: ed:3a:30:dc:1c:47:dc:7c:8d:8e:8a:ce:9d:af:54: a0:c0:1a:8e:37:ab:2a:be:a5:fd:8a:fb:e1:16:5e: f7:7c:d9:87:b6:ac:a6:6a:b8:6b:c7:8d:23:52:ae: 3b:64:ff:ee:92:9d:96:f6:a4:85:27:51:7c:61:38: 03:c3:93:b3:9b:04:a8:37:e9:22:cc:ba:a4:99:6f: 51:8a:7a:56:55:e4:c9:2b:89:02:4e:2f:17:7c:94: f8:c9:d2:49:3d:7d:b4:1b:8a:e1:64:cb:2a:7a:75: 2a:e2:86:13:a9:1f:61:07:7c:60:54:4e:9f:a8:1f: c6:51:f1:ac:3b:2e:67:90:f7:52:a8:20:ce:15:24: 94:33:f5:6c:96:c5:1f:1e:90:ea:a4:ee:17:d4:7a: e7:4a:4e:01:97:8c:59:c6:57:d1:c9:d7:f0:76:eb: 9d:34:36:18:92:61:57:9f:bf:ad:da:23:45:08:95: 6c:bb:9f:3b:1f:1c:84:cc:68:fd:1f:29:38:bb:ba: 39:e4:e8:26:01:e8:96:68:2c:69:40:99:14:b3:7e: 63:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:9D:01:C0:5D:AA:21:5D:BD:7F:69:12:FE:EA:14:57:2F:2D:56:8B X509v3 Authority Key Identifier: keyid:98:FF:48:FF:AD:3C:C9:E9:87:8D:3F:A7:4E:0E:EA:79:CA:13:F0:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b450d956-9b00-46c1-a631-3564e186a079/0/98FF48FFAD3CC9E9878D3FA74E0EEA79CA13F0FA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98FF48FFAD3CC9E9878D3FA74E0EEA79CA13F0FA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b450d956-9b00-46c1-a631-3564e186a079/0/98FF48FFAD3CC9E9878D3FA74E0EEA79CA13F0FA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:7b:ea:2f:16:b3:c0:e5:cb:0f:ee:e3:18:55:05:62:7e:56: 04:cb:12:d8:fc:3e:a9:c2:9b:5c:4b:b2:39:4f:9c:e4:cb:e2: 00:4e:21:85:af:c6:ba:8e:2a:67:e0:26:e0:e9:c0:83:17:37: 0b:f7:6b:07:da:63:74:17:68:7b:f3:5b:76:df:a5:8b:6e:b3: 29:bb:8b:ea:28:ab:56:db:5a:db:21:90:35:91:ab:25:a2:08: 19:c4:39:c5:48:c6:06:32:c4:19:4e:5c:60:d0:6f:ce:f8:2d: 99:8a:bc:ea:db:88:61:67:f1:5f:25:03:e8:6e:5e:5d:c4:08: 79:6c:cb:a4:b6:11:42:30:8e:e2:bd:68:e8:7d:cd:ae:2b:76: b8:24:bd:d2:9d:8e:c0:cb:82:ad:93:b3:77:f5:a1:e9:08:6a: 2b:99:1d:c9:ea:c7:68:52:53:53:67:77:71:aa:87:b4:1a:78: ce:39:42:14:47:3d:9b:06:ed:e0:96:bf:d0:e3:cc:7c:a0:7c: d3:f8:96:a0:6c:12:95:02:42:bb:e4:8a:2c:1c:e3:bd:e5:70: 28:ec:37:6f:c4:05:5d:74:64:cf:6a:67:eb:01:d0:f9:a3:f3: 92:fa:47:a4:34:e0:8d:e1:70:ab:60:fc:23:ab:a2:f1:c3:5b: 7f:99:4c:41 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCV9mbf1MB5LYYkkO4HhbG2qgyXIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOThGRjQ4RkZBRDNDQzlFOTg3OEQzRkE3NEUwRUVBNzlD QTEzRjBGQTAeFw0yNjAxMjQyMjQ3MjZaFw0yNjAxMjgwODQ1MjZaMDMxMTAvBgNV BAMTKDE5OUQwMUMwNURBQTIxNURCRDdGNjkxMkZFRUExNDU3MkYyRDU2OEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3Afc4zS5aWC2YchICIpZdfO2I ESlJQE7obObSVrXwbO+AFCfMCyVxNbSxLu06MNwcR9x8jY6Kzp2vVKDAGo43qyq+ pf2K++EWXvd82Ye2rKZquGvHjSNSrjtk/+6SnZb2pIUnUXxhOAPDk7ObBKg36SLM uqSZb1GKelZV5MkriQJOLxd8lPjJ0kk9fbQbiuFkyyp6dSrihhOpH2EHfGBUTp+o H8ZR8aw7LmeQ91KoIM4VJJQz9WyWxR8ekOqk7hfUeudKTgGXjFnGV9HJ1/B26500 NhiSYVefv63aI0UIlWy7nzsfHITMaP0fKTi7ujnk6CYB6JZoLGlAmRSzfmPPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGZ0BwF2qIV29f2kS/uoUVy8tVoswHwYDVR0j BBgwFoAUmP9I/608yemHjT+nTg7qecoT8PowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NDUwZDk1Ni05YjAwLTQ2YzEtYTYzMS0zNTY0ZTE4NmEwNzkvMC85OEZGNDhGRkFE M0NDOUU5ODc4RDNGQTc0RTBFRUE3OUNBMTNGMEZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOThGRjQ4RkZBRDNDQzlFOTg3OEQzRkE3NEUwRUVBNzlDQTEz RjBGQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjQ1MGQ5NTYtOWIwMC00NmMxLWE2 MzEtMzU2NGUxODZhMDc5LzAvOThGRjQ4RkZBRDNDQzlFOTg3OEQzRkE3NEUwRUVB NzlDQTEzRjBGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADt76i8Ws8Dlyw/u4xhVBWJ+VgTLEtj8PqnC m1xLsjlPnOTL4gBOIYWvxrqOKmfgJuDpwIMXNwv3awfaY3QXaHvzW3bfpYtusym7 i+ooq1bbWtshkDWRqyWiCBnEOcVIxgYyxBlOXGDQb874LZmKvOrbiGFn8V8lA+hu Xl3ECHlsy6S2EUIwjuK9aOh9za4rdrgkvdKdjsDLgq2Ts3f1oekIaiuZHcnqx2hS U1Nnd3Gqh7QaeM45QhRHPZsG7eCWv9DjzHygfNP4lqBsEpUCQrvkiiwc473lcCjs N2/EBV10ZM9qZ+sB0Pmj85L6R6Q04I3hcKtg/COrovHDW3+ZTEE= -----END CERTIFICATE-----Generated at Sun Jan 25 18:59:33 2026 by rpki-client