This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d7db6c4f-9fdf-47f6-b24c-033fe3a44d50/0/98F4C6575CF8F756A44BFFD461A09A3F38D00F04.mft File: 98F4C6575CF8F756A44BFFD461A09A3F38D00F04.mft (raw, json) Hash identifier: PJMKba3A3ogSFvYsdWCQ2mSVE9xlVKvr20kMu8+btto= Subject key identifier: 2E:5C:95:F9:88:FE:33:ED:07:E2:72:56:60:90:BE:70:9F:55:55:58 Authority key identifier: 98:F4:C6:57:5C:F8:F7:56:A4:4B:FF:D4:61:A0:9A:3F:38:D0:0F:04 Certificate issuer: /CN=98F4C6575CF8F756A44BFFD461A09A3F38D00F04 Certificate serial: 050A670D18663B9C71FB78CCEB85FBE5837772BF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98F4C6575CF8F756A44BFFD461A09A3F38D00F04.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d7db6c4f-9fdf-47f6-b24c-033fe3a44d50/0/98F4C6575CF8F756A44BFFD461A09A3F38D00F04.mft Manifest number: CB Signing time: Fri 05 Dec 2025 00:20:43 +0000 Manifest this update: Fri 05 Dec 2025 00:15:43 +0000 Manifest next update: Mon 08 Dec 2025 12:02:43 +0000 Files and hashes: 1: 3230332e3134322e32362e302f32342d3234203d3e20313339333731.roa (hash: rpH9eA5JvXGhTPWutHU3TmV5ebwAEez1NYeLhnW9eIM=) 2: 98F4C6575CF8F756A44BFFD461A09A3F38D00F04.crl (hash: RnbgTjXtKrml5dGsx/zhj1B+eUFWFICDNd8uQOcZSMs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d7db6c4f-9fdf-47f6-b24c-033fe3a44d50/0/98F4C6575CF8F756A44BFFD461A09A3F38D00F04.crl rsync://repo-rpki.idnic.net/repo/d7db6c4f-9fdf-47f6-b24c-033fe3a44d50/0/98F4C6575CF8F756A44BFFD461A09A3F38D00F04.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98F4C6575CF8F756A44BFFD461A09A3F38D00F04.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 12:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:0a:67:0d:18:66:3b:9c:71:fb:78:cc:eb:85:fb:e5:83:77:72:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98F4C6575CF8F756A44BFFD461A09A3F38D00F04 Validity Not Before: Dec 5 00:15:43 2025 GMT Not After : Dec 8 12:02:43 2025 GMT Subject: CN=2E5C95F988FE33ED07E272566090BE709F555558 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:3e:d6:f6:1e:60:68:c4:78:9b:f5:9b:d4:1d: 9f:de:f8:96:5c:79:99:03:20:41:e9:dd:e1:5e:df: 0c:97:76:aa:8d:bd:04:bf:25:fd:d0:55:45:54:58: 36:f2:0a:66:c5:a7:61:b0:10:1d:21:72:44:4c:e9: a6:dd:1c:66:49:d2:fb:01:4c:2e:c4:e7:20:d0:23: cb:9e:57:f4:8a:58:af:ab:ff:78:26:97:a2:91:30: ad:92:4a:69:63:74:7c:bb:b6:fc:a5:ed:b8:0e:fb: 1a:7b:ac:ce:94:cf:fa:e8:15:50:17:0c:f6:94:46: 60:44:3d:cb:f9:13:19:b8:a7:25:0e:6e:66:1a:96: f6:33:08:3e:0f:9d:73:d2:b1:19:8c:7d:6d:0f:a6: 19:69:1b:c6:20:44:ed:24:00:3f:db:29:2b:f4:7c: 60:1e:98:72:0f:a7:22:1e:4b:32:36:3b:b2:cb:04: 28:6f:73:0d:19:d0:d0:db:66:40:cd:be:d2:38:00: da:4a:a7:03:c8:48:73:67:8b:a6:9c:e1:d6:0c:7f: 5e:57:77:51:2e:53:87:d2:9d:e2:9f:58:27:8e:fd: d8:0c:40:bb:62:d5:12:9b:61:d0:ac:28:70:4e:5a: d4:3a:6c:ce:32:03:0d:b7:d5:a5:a0:76:61:31:05: 5f:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:5C:95:F9:88:FE:33:ED:07:E2:72:56:60:90:BE:70:9F:55:55:58 X509v3 Authority Key Identifier: keyid:98:F4:C6:57:5C:F8:F7:56:A4:4B:FF:D4:61:A0:9A:3F:38:D0:0F:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d7db6c4f-9fdf-47f6-b24c-033fe3a44d50/0/98F4C6575CF8F756A44BFFD461A09A3F38D00F04.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98F4C6575CF8F756A44BFFD461A09A3F38D00F04.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d7db6c4f-9fdf-47f6-b24c-033fe3a44d50/0/98F4C6575CF8F756A44BFFD461A09A3F38D00F04.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:c4:61:4d:4b:1b:0d:42:41:df:94:9f:19:eb:72:10:4f:5b: 51:15:dc:87:73:ea:9f:50:3a:cd:b6:b7:2c:9c:34:c3:68:c9: 09:2d:5b:99:b1:26:d6:b8:03:b6:85:d1:f4:81:a0:2b:26:f1: c5:1a:7c:93:55:c1:d4:95:ad:a7:49:89:70:05:a7:fa:f8:4c: ba:5c:ec:f8:dd:c7:ec:22:df:b2:0e:18:db:ae:7b:42:bb:5b: 2c:6d:30:81:06:e6:cc:1c:32:02:41:79:51:e7:8c:f8:10:47: 2b:96:f1:fa:ec:ec:4c:15:55:ad:b3:58:13:55:74:8e:d1:5c: c0:fa:63:33:65:bf:ee:fc:26:c8:72:1f:ed:6d:ee:27:e1:a5: 73:23:a9:3b:6e:f0:7b:44:39:fe:50:af:7c:11:40:bb:cb:87: db:b3:7c:7a:b8:3b:34:8e:85:98:a7:6b:33:a9:36:7e:ce:1c: 1e:b5:00:a9:7d:ce:45:51:28:b6:20:13:e0:93:0a:b6:5c:0e: 66:5d:c9:14:e1:f6:e4:46:21:8b:34:be:b0:9d:64:4b:6f:f5: 82:b4:04:81:eb:bb:c4:46:59:28:82:04:e2:c5:85:04:24:a9: 10:4b:a0:80:ef:a6:94:99:72:f8:fb:35:96:cd:e2:11:08:1d: 20:a2:34:f3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBQpnDRhmO5xx+3jM64X75YN3cr8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOThGNEM2NTc1Q0Y4Rjc1NkE0NEJGRkQ0NjFBMDlBM0Yz OEQwMEYwNDAeFw0yNTEyMDUwMDE1NDNaFw0yNTEyMDgxMjAyNDNaMDMxMTAvBgNV BAMTKDJFNUM5NUY5ODhGRTMzRUQwN0UyNzI1NjYwOTBCRTcwOUY1NTU1NTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhPtb2HmBoxHib9ZvUHZ/e+JZc eZkDIEHp3eFe3wyXdqqNvQS/Jf3QVUVUWDbyCmbFp2GwEB0hckRM6abdHGZJ0vsB TC7E5yDQI8ueV/SKWK+r/3gml6KRMK2SSmljdHy7tvyl7bgO+xp7rM6Uz/roFVAX DPaURmBEPcv5Exm4pyUObmYalvYzCD4PnXPSsRmMfW0PphlpG8YgRO0kAD/bKSv0 fGAemHIPpyIeSzI2O7LLBChvcw0Z0NDbZkDNvtI4ANpKpwPISHNni6ac4dYMf15X d1EuU4fSneKfWCeO/dgMQLti1RKbYdCsKHBOWtQ6bM4yAw231aWgdmExBV+lAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULlyV+Yj+M+0H4nJWYJC+cJ9VVVgwHwYDVR0j BBgwFoAUmPTGV1z491akS//UYaCaPzjQDwQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k N2RiNmM0Zi05ZmRmLTQ3ZjYtYjI0Yy0wMzNmZTNhNDRkNTAvMC85OEY0QzY1NzVD RjhGNzU2QTQ0QkZGRDQ2MUEwOUEzRjM4RDAwRjA0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOThGNEM2NTc1Q0Y4Rjc1NkE0NEJGRkQ0NjFBMDlBM0YzOEQw MEYwNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDdkYjZjNGYtOWZkZi00N2Y2LWIy NGMtMDMzZmUzYTQ0ZDUwLzAvOThGNEM2NTc1Q0Y4Rjc1NkE0NEJGRkQ0NjFBMDlB M0YzOEQwMEYwNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEfEYU1LGw1CQd+UnxnrchBPW1EV3Idz6p9Q Os22tyycNMNoyQktW5mxJta4A7aF0fSBoCsm8cUafJNVwdSVradJiXAFp/r4TLpc 7Pjdx+wi37IOGNuue0K7WyxtMIEG5swcMgJBeVHnjPgQRyuW8frs7EwVVa2zWBNV dI7RXMD6YzNlv+78JshyH+1t7ifhpXMjqTtu8HtEOf5Qr3wRQLvLh9uzfHq4OzSO hZinazOpNn7OHB61AKl9zkVRKLYgE+CTCrZcDmZdyRTh9uRGIYs0vrCdZEtv9YK0 BIHru8RGWSiCBOLFhQQkqRBLoIDvppSZcvj7NZbN4hEIHSCiNPM= -----END CERTIFICATE-----Generated at Sun Dec 7 00:49:27 2025 by rpki-client