This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/dbff1b3f-1190-4119-bbc6-1417df8aa258/0/89B98D1F135A7FC66C0284C34477C19604645554.mft File: 89B98D1F135A7FC66C0284C34477C19604645554.mft (raw, json) Hash identifier: +BMf7Q3NkHTTUrpvfMAfRV4NzwZmeSw/qvOBEK7DdL8= Subject key identifier: 35:0E:FB:AD:BE:15:AB:AF:FD:9B:C2:93:17:F5:E7:21:E6:02:D4:8C Authority key identifier: 89:B9:8D:1F:13:5A:7F:C6:6C:02:84:C3:44:77:C1:96:04:64:55:54 Certificate issuer: /CN=89B98D1F135A7FC66C0284C34477C19604645554 Certificate serial: 6EB2E1ED4AFBD235CBC7F6E05580262F2AAD08B1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/89B98D1F135A7FC66C0284C34477C19604645554.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dbff1b3f-1190-4119-bbc6-1417df8aa258/0/89B98D1F135A7FC66C0284C34477C19604645554.mft Manifest number: 01B4 Signing time: Thu 04 Dec 2025 21:22:25 +0000 Manifest this update: Thu 04 Dec 2025 21:17:25 +0000 Manifest next update: Mon 08 Dec 2025 07:05:25 +0000 Files and hashes: 1: 3130332e37392e3233372e302f32342d3234203d3e20313530393535.roa (hash: 2IWnXxowwOlz7I18Z25U30dGHsj5oRHYQH7WRuuUzKo=) 2: 89B98D1F135A7FC66C0284C34477C19604645554.crl (hash: aSJxeRpFbhdgJgeMat2TEU5n/q0iGiowe+wAubpsg3g=) 3: 3130332e37392e3233362e302f32332d3233203d3e20313530393535.roa (hash: ThDgpbBTSfRRealh0FHjoyTHcEPiBLGvmWH7tSYcxdE=) 4: 3130332e37392e3233362e302f32342d3234203d3e20313530393535.roa (hash: onZqAL56YoMix5wpV03h5e8xuAaImMliGkPVBv6grnU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dbff1b3f-1190-4119-bbc6-1417df8aa258/0/89B98D1F135A7FC66C0284C34477C19604645554.crl rsync://repo-rpki.idnic.net/repo/dbff1b3f-1190-4119-bbc6-1417df8aa258/0/89B98D1F135A7FC66C0284C34477C19604645554.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/89B98D1F135A7FC66C0284C34477C19604645554.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 07:05:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:b2:e1:ed:4a:fb:d2:35:cb:c7:f6:e0:55:80:26:2f:2a:ad:08:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89B98D1F135A7FC66C0284C34477C19604645554 Validity Not Before: Dec 4 21:17:25 2025 GMT Not After : Dec 8 07:05:25 2025 GMT Subject: CN=350EFBADBE15ABAFFD9BC29317F5E721E602D48C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:6b:38:12:3a:b4:84:ac:08:37:f5:3e:bd:54: ce:f9:74:11:ad:1c:6d:95:4a:5d:e1:c0:b9:91:9d: 1a:e8:30:cf:76:fe:b4:89:b5:69:42:b2:b5:e9:4f: 9a:9b:42:90:5d:e9:c5:50:46:f5:5f:43:d1:ca:93: c2:e7:96:31:4e:58:29:2d:ec:4b:a0:82:d8:8f:44: f8:33:55:4d:42:64:82:3e:c3:03:40:7c:a1:07:18: 98:bd:06:7f:94:82:0b:38:fe:c4:b5:9f:2e:df:fb: dc:b0:58:19:6b:09:06:f2:71:70:4d:b3:3f:1f:bc: e8:0a:25:33:7e:82:7f:fa:f6:07:57:74:fe:7f:20: fd:63:36:0f:11:37:44:40:f2:ac:95:50:49:67:08: 77:ab:28:a5:15:9f:c0:75:5b:0e:f4:72:18:eb:e0: 15:57:41:33:e4:33:5c:67:e6:f0:00:bb:63:c4:06: b4:90:6f:3d:18:90:c6:7a:1e:a8:1f:84:6e:e4:2f: 5a:c5:2d:48:89:2f:1b:84:95:3a:57:b6:b2:e8:01: 40:0f:24:cb:29:a7:cd:38:c3:79:a2:2a:73:7f:c4: a3:98:1e:4a:94:a0:42:ac:c7:97:88:66:ec:fd:63: 5a:f3:82:0b:28:92:38:88:7d:28:ab:05:99:5b:d9: 20:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:0E:FB:AD:BE:15:AB:AF:FD:9B:C2:93:17:F5:E7:21:E6:02:D4:8C X509v3 Authority Key Identifier: keyid:89:B9:8D:1F:13:5A:7F:C6:6C:02:84:C3:44:77:C1:96:04:64:55:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dbff1b3f-1190-4119-bbc6-1417df8aa258/0/89B98D1F135A7FC66C0284C34477C19604645554.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/89B98D1F135A7FC66C0284C34477C19604645554.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dbff1b3f-1190-4119-bbc6-1417df8aa258/0/89B98D1F135A7FC66C0284C34477C19604645554.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:8c:91:0a:d1:11:43:08:24:35:a6:f0:c5:24:d7:80:2c:7b: 34:c0:70:8d:1c:1e:3d:d0:bd:a1:44:44:55:cc:cd:50:0c:ee: 3c:fc:c4:13:a6:c3:16:d3:a2:63:e4:ec:5b:e9:e5:26:d8:eb: 45:8c:90:89:a4:82:99:21:d7:25:0e:d1:ad:24:76:8a:d6:61: cf:ad:c4:2e:94:d8:f0:81:32:74:ce:04:b1:14:43:95:aa:4b: 04:8d:e0:0e:b2:e2:3f:b8:e9:e8:0f:50:f0:7f:6d:3c:3f:1c: 03:da:34:3e:a5:bd:65:c6:82:81:80:cd:4e:af:95:c6:18:14: 2f:84:3a:3f:7d:05:23:c5:77:10:05:36:14:d8:a4:24:3c:f8: cd:23:e4:38:68:98:5a:66:ff:45:13:6e:1c:57:cf:d3:5e:95: de:54:dc:16:2a:eb:89:b5:9a:00:3b:c2:86:39:c2:f8:e7:48: 54:03:6f:74:03:3d:cc:8c:96:3d:3b:67:57:d2:9e:18:19:29: cd:fd:5b:bb:5c:de:3e:43:bf:17:c6:a6:0d:26:04:5b:c9:85: a9:6a:2e:4d:e9:ba:e8:48:ac:41:00:30:24:cd:1d:10:7a:db: ed:e5:3f:31:ca:e9:bc:a2:06:80:ed:ac:49:69:6c:23:18:77: 8c:4c:02:c7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbrLh7Ur70jXLx/bgVYAmLyqtCLEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODlCOThEMUYxMzVBN0ZDNjZDMDI4NEMzNDQ3N0MxOTYw NDY0NTU1NDAeFw0yNTEyMDQyMTE3MjVaFw0yNTEyMDgwNzA1MjVaMDMxMTAvBgNV BAMTKDM1MEVGQkFEQkUxNUFCQUZGRDlCQzI5MzE3RjVFNzIxRTYwMkQ0OEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvazgSOrSErAg39T69VM75dBGt HG2VSl3hwLmRnRroMM92/rSJtWlCsrXpT5qbQpBd6cVQRvVfQ9HKk8LnljFOWCkt 7EuggtiPRPgzVU1CZII+wwNAfKEHGJi9Bn+Uggs4/sS1ny7f+9ywWBlrCQbycXBN sz8fvOgKJTN+gn/69gdXdP5/IP1jNg8RN0RA8qyVUElnCHerKKUVn8B1Ww70chjr 4BVXQTPkM1xn5vAAu2PEBrSQbz0YkMZ6HqgfhG7kL1rFLUiJLxuElTpXtrLoAUAP JMspp804w3miKnN/xKOYHkqUoEKsx5eIZuz9Y1rzggsokjiIfSirBZlb2SCHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNQ77rb4Vq6/9m8KTF/XnIeYC1IwwHwYDVR0j BBgwFoAUibmNHxNaf8ZsAoTDRHfBlgRkVVQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YmZmMWIzZi0xMTkwLTQxMTktYmJjNi0xNDE3ZGY4YWEyNTgvMC84OUI5OEQxRjEz NUE3RkM2NkMwMjg0QzM0NDc3QzE5NjA0NjQ1NTU0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODlCOThEMUYxMzVBN0ZDNjZDMDI4NEMzNDQ3N0MxOTYwNDY0 NTU1NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGJmZjFiM2YtMTE5MC00MTE5LWJi YzYtMTQxN2RmOGFhMjU4LzAvODlCOThEMUYxMzVBN0ZDNjZDMDI4NEMzNDQ3N0Mx OTYwNDY0NTU1NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA2MkQrREUMIJDWm8MUk14AsezTAcI0cHj3Q vaFERFXMzVAM7jz8xBOmwxbTomPk7Fvp5SbY60WMkImkgpkh1yUO0a0kdorWYc+t xC6U2PCBMnTOBLEUQ5WqSwSN4A6y4j+46egPUPB/bTw/HAPaND6lvWXGgoGAzU6v lcYYFC+EOj99BSPFdxAFNhTYpCQ8+M0j5DhomFpm/0UTbhxXz9Neld5U3BYq64m1 mgA7woY5wvjnSFQDb3QDPcyMlj07Z1fSnhgZKc39W7tc3j5DvxfGpg0mBFvJhalq Lk3puuhIrEEAMCTNHRB62+3lPzHK6byiBoDtrElpbCMYd4xMAsc= -----END CERTIFICATE-----Generated at Sun Dec 7 04:44:56 2025 by rpki-client