This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/b450d956-9b00-46c1-a631-3564e186a079/0/98FF48FFAD3CC9E9878D3FA74E0EEA79CA13F0FA.mft File: 98FF48FFAD3CC9E9878D3FA74E0EEA79CA13F0FA.mft (raw, json) Hash identifier: KOhFuLI83I2OWLG6oQV7J60ncUBmlKA0Datr58a5T2o= Subject key identifier: CD:D9:CC:F7:2C:BF:36:F2:D7:EA:3D:AA:10:27:C8:7F:A9:9E:45:4C Authority key identifier: 98:FF:48:FF:AD:3C:C9:E9:87:8D:3F:A7:4E:0E:EA:79:CA:13:F0:FA Certificate issuer: /CN=98FF48FFAD3CC9E9878D3FA74E0EEA79CA13F0FA Certificate serial: 1C4A2843B54624F295DFA4AA63188D30DCFB484C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98FF48FFAD3CC9E9878D3FA74E0EEA79CA13F0FA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b450d956-9b00-46c1-a631-3564e186a079/0/98FF48FFAD3CC9E9878D3FA74E0EEA79CA13F0FA.mft Manifest number: 01B4 Signing time: Sat 06 Dec 2025 09:32:19 +0000 Manifest this update: Sat 06 Dec 2025 09:27:19 +0000 Manifest next update: Tue 09 Dec 2025 20:31:19 +0000 Files and hashes: 1: 3130332e3135352e3139322e302f32342d3234203d3e20313431303639.roa (hash: HiN7YoBVkQHKPRmQcIw7KecJDTn4UB8o7deSNxTmkOk=) 2: 323430363a373563303a3a2f33322d3332203d3e20313431303639.roa (hash: PTq4K7C1NfA7u/hBgxfzHnc927GHuD0+t6G+/br9unw=) 3: 98FF48FFAD3CC9E9878D3FA74E0EEA79CA13F0FA.crl (hash: 20yycrNnAnkCHYW2MA6pEdo3gpP19bMb1OtE98nH84M=) 4: 3130332e3135352e3139322e302f32332d3233203d3e20313431303639.roa (hash: 5L7KwFUgvVnXbTdBI9pybBL9RZN1DFSQWqr7TkH60p0=) 5: 3130332e3135352e3139332e302f32342d3234203d3e20313431303639.roa (hash: SFmXn9PezsJj2J+n/KO+JoUR1XmcH1D+ZwQywLjd4NQ=) 6: 323430363a373563303a666666663a3a2f34382d3438203d3e20313431303639.roa (hash: eQ5WMRJPy7gKupW5F4m6uPUC6SkCMo1WY0hvFb3YFm0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b450d956-9b00-46c1-a631-3564e186a079/0/98FF48FFAD3CC9E9878D3FA74E0EEA79CA13F0FA.crl rsync://repo-rpki.idnic.net/repo/b450d956-9b00-46c1-a631-3564e186a079/0/98FF48FFAD3CC9E9878D3FA74E0EEA79CA13F0FA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98FF48FFAD3CC9E9878D3FA74E0EEA79CA13F0FA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:4a:28:43:b5:46:24:f2:95:df:a4:aa:63:18:8d:30:dc:fb:48:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98FF48FFAD3CC9E9878D3FA74E0EEA79CA13F0FA Validity Not Before: Dec 6 09:27:19 2025 GMT Not After : Dec 9 20:31:19 2025 GMT Subject: CN=CDD9CCF72CBF36F2D7EA3DAA1027C87FA99E454C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:3d:2d:bf:91:79:26:8b:33:55:f5:e8:9b:0c: 4b:9d:b2:e7:2a:ff:26:d1:50:ac:f0:89:8c:cf:ff: 32:67:b8:20:31:71:90:25:a5:09:67:dd:9e:1e:5e: e3:4e:fb:e2:53:fd:13:7c:ee:75:7f:b9:04:6f:38: cc:d6:fb:05:1e:84:9f:c6:c1:74:0d:00:c8:81:67: e6:41:76:14:ce:3c:9e:54:08:4f:2f:6f:27:66:a5: ca:6a:a9:64:62:f4:ae:b5:42:dd:4b:3f:49:8a:ae: cd:ae:6b:a9:55:ca:4d:27:5a:fc:74:d2:d0:09:e0: 69:11:58:72:e4:0c:fb:6c:73:84:43:1b:c6:15:c3: 7f:ec:0e:ac:38:f0:dd:aa:2c:ea:f7:e9:6c:de:dc: 59:c0:6c:97:3c:83:13:4c:40:51:44:73:05:5f:eb: 57:61:aa:27:a9:5d:0a:c2:c6:e5:39:d1:6d:ca:3d: 4e:6f:18:2f:cc:52:1b:c5:b8:1f:1a:c4:fb:f6:13: 59:23:b6:a4:a2:cd:8f:95:0e:9d:54:0b:e4:c1:f6: f8:82:a6:30:65:cc:b9:8a:6c:0f:f3:5f:72:e4:44: 5c:28:7a:1b:cd:90:d0:1c:e9:fe:bd:5c:d9:27:8b: 9c:6a:8a:68:fc:14:72:ed:04:6e:38:93:75:4f:24: 7b:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:D9:CC:F7:2C:BF:36:F2:D7:EA:3D:AA:10:27:C8:7F:A9:9E:45:4C X509v3 Authority Key Identifier: keyid:98:FF:48:FF:AD:3C:C9:E9:87:8D:3F:A7:4E:0E:EA:79:CA:13:F0:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b450d956-9b00-46c1-a631-3564e186a079/0/98FF48FFAD3CC9E9878D3FA74E0EEA79CA13F0FA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98FF48FFAD3CC9E9878D3FA74E0EEA79CA13F0FA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b450d956-9b00-46c1-a631-3564e186a079/0/98FF48FFAD3CC9E9878D3FA74E0EEA79CA13F0FA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:d7:ca:78:39:b7:05:71:7b:2e:87:f3:ee:09:66:4d:f3:98: fe:72:19:2f:3f:52:92:ce:dc:47:ab:3d:4f:ab:3c:42:d3:56: ee:aa:1f:f9:11:b1:b6:7d:fb:7b:82:c2:bc:9a:22:cf:8b:ae: df:11:4d:ab:90:07:9a:ed:87:14:0e:87:3e:50:9d:79:62:c3: 74:6d:52:61:eb:05:20:50:84:9a:0a:66:5d:5e:b9:6e:cc:0c: 5d:70:97:c6:db:5b:1c:65:88:67:71:0c:88:5c:16:fe:f6:bc: 59:a9:5c:82:1f:78:e0:00:87:39:c4:74:aa:af:2d:b5:a4:6d: 83:e6:f6:10:ca:ce:af:7e:0f:82:a7:7c:36:f1:b1:0a:d4:8d: 93:0b:d0:87:1c:eb:4f:4f:8f:af:60:c0:03:ea:ed:cf:31:1b: ae:5c:96:d3:28:8c:7e:47:fb:21:7b:e2:64:6e:6f:70:86:60: 37:6b:ad:a8:4b:ec:d1:12:0c:6f:5a:d4:a7:1f:e2:b0:60:7e: 91:39:56:2f:f1:6c:a3:0e:ab:68:a0:63:34:5f:29:08:28:11: 18:7f:4e:f0:11:67:26:77:3b:95:6b:60:30:fc:e6:45:30:32: 47:f4:25:5e:4d:4c:9b:5e:43:1a:b9:0d:c5:66:4b:02:f3:cc: d9:6f:85:d1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHEooQ7VGJPKV36SqYxiNMNz7SEwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOThGRjQ4RkZBRDNDQzlFOTg3OEQzRkE3NEUwRUVBNzlD QTEzRjBGQTAeFw0yNTEyMDYwOTI3MTlaFw0yNTEyMDkyMDMxMTlaMDMxMTAvBgNV BAMTKENERDlDQ0Y3MkNCRjM2RjJEN0VBM0RBQTEwMjdDODdGQTk5RTQ1NEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpPS2/kXkmizNV9eibDEudsucq /ybRUKzwiYzP/zJnuCAxcZAlpQln3Z4eXuNO++JT/RN87nV/uQRvOMzW+wUehJ/G wXQNAMiBZ+ZBdhTOPJ5UCE8vbydmpcpqqWRi9K61Qt1LP0mKrs2ua6lVyk0nWvx0 0tAJ4GkRWHLkDPtsc4RDG8YVw3/sDqw48N2qLOr36Wze3FnAbJc8gxNMQFFEcwVf 61dhqiepXQrCxuU50W3KPU5vGC/MUhvFuB8axPv2E1kjtqSizY+VDp1UC+TB9viC pjBlzLmKbA/zX3LkRFwoehvNkNAc6f69XNkni5xqimj8FHLtBG44k3VPJHuxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzdnM9yy/NvLX6j2qECfIf6meRUwwHwYDVR0j BBgwFoAUmP9I/608yemHjT+nTg7qecoT8PowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NDUwZDk1Ni05YjAwLTQ2YzEtYTYzMS0zNTY0ZTE4NmEwNzkvMC85OEZGNDhGRkFE M0NDOUU5ODc4RDNGQTc0RTBFRUE3OUNBMTNGMEZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOThGRjQ4RkZBRDNDQzlFOTg3OEQzRkE3NEUwRUVBNzlDQTEz RjBGQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjQ1MGQ5NTYtOWIwMC00NmMxLWE2 MzEtMzU2NGUxODZhMDc5LzAvOThGRjQ4RkZBRDNDQzlFOTg3OEQzRkE3NEUwRUVB NzlDQTEzRjBGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEvXyng5twVxey6H8+4JZk3zmP5yGS8/UpLO 3EerPU+rPELTVu6qH/kRsbZ9+3uCwryaIs+Lrt8RTauQB5rthxQOhz5QnXliw3Rt UmHrBSBQhJoKZl1euW7MDF1wl8bbWxxliGdxDIhcFv72vFmpXIIfeOAAhznEdKqv LbWkbYPm9hDKzq9+D4KnfDbxsQrUjZML0Icc609Pj69gwAPq7c8xG65cltMojH5H +yF74mRub3CGYDdrrahL7NESDG9a1Kcf4rBgfpE5Vi/xbKMOq2igYzRfKQgoERh/ TvARZyZ3O5VrYDD85kUwMkf0JV5NTJteQxq5DcVmSwLzzNlvhdE= -----END CERTIFICATE-----Generated at Sun Dec 7 06:18:05 2025 by rpki-client