This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/fb0074cf-76dd-4097-a19b-e37e62858b24/0/C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4.mft File: C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4.mft (raw, json) Hash identifier: aTbuutbQYM1a/5k5lALUZszz2pAll0GiPwCF6Rc0Q2w= Subject key identifier: 43:21:32:80:A1:15:72:F2:73:1F:BA:35:42:A5:C3:2E:57:50:52:76 Authority key identifier: C9:8D:64:A8:C5:83:48:DE:9C:5F:8D:92:13:E7:97:EE:3B:D3:9D:A4 Certificate issuer: /CN=C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4 Certificate serial: 57FAF0F1E3C5BF79084A89793819A2F0ED2DA485 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fb0074cf-76dd-4097-a19b-e37e62858b24/0/C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4.mft Manifest number: 021B Signing time: Fri 05 Dec 2025 20:11:47 +0000 Manifest this update: Fri 05 Dec 2025 20:06:47 +0000 Manifest next update: Mon 08 Dec 2025 22:54:47 +0000 Files and hashes: 1: 3130332e3139312e3132372e302f32342d3234203d3e203233393534.roa (hash: VTTQAgRENeOwajLS/6KGqVtYtu8gKZsiy/3ONlUdfPM=) 2: C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4.crl (hash: 2WCX7a1t2pBQXPqS50/tgalhx04ydTDroMoklqh40m0=) 3: 3130332e3139312e3132362e302f32342d3234203d3e203233393534.roa (hash: udVekUn4TWBKeQkQYpGcF2rohkU6UK3TsyCyh6Sm1SQ=) 4: 3130332e3139312e3132362e302f32332d3234203d3e203233393534.roa (hash: tBWugiwQMjtC5piuUMK7QRT4X1helIOcbLU7F6gO8Ao=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fb0074cf-76dd-4097-a19b-e37e62858b24/0/C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4.crl rsync://repo-rpki.idnic.net/repo/fb0074cf-76dd-4097-a19b-e37e62858b24/0/C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 22:54:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:fa:f0:f1:e3:c5:bf:79:08:4a:89:79:38:19:a2:f0:ed:2d:a4:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4 Validity Not Before: Dec 5 20:06:47 2025 GMT Not After : Dec 8 22:54:47 2025 GMT Subject: CN=43213280A11572F2731FBA3542A5C32E57505276 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:67:63:86:2e:49:2a:f8:4e:61:51:86:63:09: 35:ae:e2:e0:48:58:86:4a:d2:45:74:7b:05:69:69: 34:ec:c1:f9:eb:93:53:82:3a:15:ef:32:cc:49:43: ca:82:f8:27:5e:f1:9d:f4:a1:e0:3b:cb:b1:2e:46: 94:44:f4:1a:71:e6:0c:f9:a0:97:f7:11:ec:fb:9c: 36:0e:40:87:92:d7:e0:ec:7b:dc:20:b6:1a:10:90: 10:cf:f7:09:15:de:3b:4c:ac:d8:5d:02:3b:0e:a6: 77:76:ac:45:f0:2e:b8:1b:14:55:cf:47:31:5b:d7: d0:0e:1b:f1:46:66:c5:b7:01:6f:40:b7:26:f8:1f: 73:00:39:f6:23:97:66:b9:ab:38:ec:ee:07:96:74: 3d:5e:93:bd:b2:14:32:34:9d:d6:29:56:63:b0:d1: ef:e6:2f:be:42:a0:c8:f9:e0:7f:45:fa:d9:f4:67: 4b:2c:74:4d:f5:78:9a:e4:f0:9b:ea:09:18:65:1c: 23:1d:50:db:f2:2a:51:e1:40:ae:b2:a7:5a:bc:2e: d4:ba:42:74:80:10:58:09:2c:a1:b3:2e:10:2a:0b: 99:c2:35:01:bd:94:0e:ab:93:8f:a2:c5:8c:3a:13: b1:6d:d1:f6:de:62:1f:22:e7:f8:fc:af:0d:fb:ab: b2:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:21:32:80:A1:15:72:F2:73:1F:BA:35:42:A5:C3:2E:57:50:52:76 X509v3 Authority Key Identifier: keyid:C9:8D:64:A8:C5:83:48:DE:9C:5F:8D:92:13:E7:97:EE:3B:D3:9D:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fb0074cf-76dd-4097-a19b-e37e62858b24/0/C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fb0074cf-76dd-4097-a19b-e37e62858b24/0/C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:c9:88:6f:d1:19:10:15:b8:28:e8:0e:75:a4:78:bc:6a:33: fb:63:37:32:b7:89:5f:46:61:80:f5:f7:9a:ae:72:a4:a4:2b: 65:85:f2:89:bd:24:b5:7f:f2:82:f8:b1:90:10:b7:62:25:a0: b9:56:f0:42:11:da:66:54:7e:a8:23:e1:b2:77:10:a3:ca:8b: e7:f8:de:83:42:83:cb:5a:bb:9f:0e:5a:3f:33:90:22:ea:3b: 5e:74:95:ac:7e:99:a5:b7:b8:0d:73:53:9e:a5:49:4d:85:01: a4:76:b0:93:bc:ac:23:0a:91:ac:da:24:18:24:2c:4c:6d:b3: ee:16:5d:a6:8d:98:42:07:51:4c:3c:f8:d5:2a:59:93:c1:e3: 55:18:67:d3:af:57:ac:d4:9e:99:a3:44:4e:bb:95:94:f5:f4: 29:21:26:db:69:49:aa:99:79:c6:c4:d3:ed:dd:10:a4:22:9b: 51:c3:04:ff:33:04:fd:ba:a4:a6:f8:1b:cf:7c:f7:61:62:2a: 2b:82:72:e6:b2:bd:65:57:6b:35:9b:53:b2:a7:7f:91:de:b7: cc:8f:5b:dd:d1:f7:b9:1e:a0:f3:6a:8b:fc:28:f9:41:1c:03: 63:67:0f:1f:4d:bf:45:83:ca:e9:15:8a:ac:73:ca:ff:1b:4b: 09:e2:20:d0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV/rw8ePFv3kISol5OBmi8O0tpIUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzk4RDY0QThDNTgzNDhERTlDNUY4RDkyMTNFNzk3RUUz QkQzOURBNDAeFw0yNTEyMDUyMDA2NDdaFw0yNTEyMDgyMjU0NDdaMDMxMTAvBgNV BAMTKDQzMjEzMjgwQTExNTcyRjI3MzFGQkEzNTQyQTVDMzJFNTc1MDUyNzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoZ2OGLkkq+E5hUYZjCTWu4uBI WIZK0kV0ewVpaTTswfnrk1OCOhXvMsxJQ8qC+Cde8Z30oeA7y7EuRpRE9Bpx5gz5 oJf3Eez7nDYOQIeS1+Dse9wgthoQkBDP9wkV3jtMrNhdAjsOpnd2rEXwLrgbFFXP RzFb19AOG/FGZsW3AW9Atyb4H3MAOfYjl2a5qzjs7geWdD1ek72yFDI0ndYpVmOw 0e/mL75CoMj54H9F+tn0Z0ssdE31eJrk8JvqCRhlHCMdUNvyKlHhQK6yp1q8LtS6 QnSAEFgJLKGzLhAqC5nCNQG9lA6rk4+ixYw6E7Ft0fbeYh8i5/j8rw37q7JzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQyEygKEVcvJzH7o1QqXDLldQUnYwHwYDVR0j BBgwFoAUyY1kqMWDSN6cX42SE+eX7jvTnaQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YjAwNzRjZi03NmRkLTQwOTctYTE5Yi1lMzdlNjI4NThiMjQvMC9DOThENjRBOEM1 ODM0OERFOUM1RjhEOTIxM0U3OTdFRTNCRDM5REE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzk4RDY0QThDNTgzNDhERTlDNUY4RDkyMTNFNzk3RUUzQkQz OURBNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmIwMDc0Y2YtNzZkZC00MDk3LWEx OWItZTM3ZTYyODU4YjI0LzAvQzk4RDY0QThDNTgzNDhERTlDNUY4RDkyMTNFNzk3 RUUzQkQzOURBNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEjJiG/RGRAVuCjoDnWkeLxqM/tjNzK3iV9G YYD195qucqSkK2WF8om9JLV/8oL4sZAQt2IloLlW8EIR2mZUfqgj4bJ3EKPKi+f4 3oNCg8tau58OWj8zkCLqO150lax+maW3uA1zU56lSU2FAaR2sJO8rCMKkazaJBgk LExts+4WXaaNmEIHUUw8+NUqWZPB41UYZ9OvV6zUnpmjRE67lZT19CkhJttpSaqZ ecbE0+3dEKQim1HDBP8zBP26pKb4G89892FiKiuCcuayvWVXazWbU7Knf5Het8yP W93R97keoPNqi/wo+UEcA2NnDx9Nv0WDyukViqxzyv8bSwniINA= -----END CERTIFICATE-----Generated at Sun Dec 7 05:58:47 2025 by rpki-client