This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/15bae30c-b363-407b-a0ab-3154eb309ae9/1/C89AFDB015B4516342E4702244E8B8AC331B8669.mft File: C89AFDB015B4516342E4702244E8B8AC331B8669.mft (raw, json) Hash identifier: tWCafAYW8OkBfhHRTAJAkz7F6ExaSK4dIREE9EwQ81A= Subject key identifier: B3:A1:F0:17:36:7C:8F:76:6A:27:F7:5F:D6:31:59:B5:65:8C:CB:49 Authority key identifier: C8:9A:FD:B0:15:B4:51:63:42:E4:70:22:44:E8:B8:AC:33:1B:86:69 Certificate issuer: /CN=C89AFDB015B4516342E4702244E8B8AC331B8669 Certificate serial: 1F5626912AD707ADCF3CA9459CADAC5D784432DE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C89AFDB015B4516342E4702244E8B8AC331B8669.cer Subject info access: rsync://repo-rpki.idnic.net/repo/15bae30c-b363-407b-a0ab-3154eb309ae9/1/C89AFDB015B4516342E4702244E8B8AC331B8669.mft Manifest number: 0123 Signing time: Mon 01 Dec 2025 13:10:51 +0000 Manifest this update: Mon 01 Dec 2025 13:05:51 +0000 Manifest next update: Thu 04 Dec 2025 23:38:51 +0000 Files and hashes: 1: 3130332e34302e39342e302f32342d3234203d3e203633353036.roa (hash: yEUmOyWPO5f/A4sL+Yd825dO+D/6S8GK82Q3tLvqY0Q=) 2: C89AFDB015B4516342E4702244E8B8AC331B8669.crl (hash: sO0LFi30UKFrc5+9Ktg7Og6nxAG3XEuVEtUDRMkft1E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/15bae30c-b363-407b-a0ab-3154eb309ae9/1/C89AFDB015B4516342E4702244E8B8AC331B8669.crl rsync://repo-rpki.idnic.net/repo/15bae30c-b363-407b-a0ab-3154eb309ae9/1/C89AFDB015B4516342E4702244E8B8AC331B8669.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C89AFDB015B4516342E4702244E8B8AC331B8669.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Dec 2025 23:38:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:56:26:91:2a:d7:07:ad:cf:3c:a9:45:9c:ad:ac:5d:78:44:32:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C89AFDB015B4516342E4702244E8B8AC331B8669 Validity Not Before: Dec 1 13:05:51 2025 GMT Not After : Dec 4 23:38:51 2025 GMT Subject: CN=B3A1F017367C8F766A27F75FD63159B5658CCB49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:8a:41:ae:b5:c8:7f:1d:e5:53:80:96:81:69: f5:7f:c5:f3:07:3e:9c:7f:2d:0d:02:f8:a6:58:ff: 04:16:9c:1f:b7:3c:6d:24:26:a8:39:7d:54:cc:c1: 12:8c:6c:28:ce:3c:5f:c7:fb:5e:b6:6f:e2:fa:77: 61:90:0b:cd:3b:76:15:72:85:dd:84:00:c5:39:58: 56:6f:c5:74:87:2a:7b:04:cd:32:b3:b5:d4:26:d8: 8a:c6:20:89:50:5c:6e:6a:69:96:7a:22:9c:e6:6f: 32:bb:c9:e5:3f:d9:53:55:0e:f8:bb:7c:af:52:fc: 9c:54:cf:35:0f:ac:a1:4e:a3:3e:4c:1f:c9:6e:44: 56:74:22:77:e8:bc:3c:9e:e2:df:43:25:02:38:c1: f2:8a:cd:f3:04:60:fc:27:48:9f:f6:e7:70:e1:26: 9c:c8:99:2a:07:75:1e:20:93:61:c9:2a:1a:d9:52: e9:d5:a5:b5:63:dd:b9:e0:15:44:82:da:4e:35:ea: 38:a1:77:b3:cb:20:75:3b:69:0a:9d:b0:5a:97:b7: 55:bc:e2:4e:5e:ff:32:21:58:ba:69:4f:bc:00:11: 82:d7:11:f7:29:a0:30:c6:ce:c2:99:c5:2b:cb:6a: 84:06:1e:34:67:8c:a0:3f:43:ec:59:fd:ba:81:3b: 5d:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:A1:F0:17:36:7C:8F:76:6A:27:F7:5F:D6:31:59:B5:65:8C:CB:49 X509v3 Authority Key Identifier: keyid:C8:9A:FD:B0:15:B4:51:63:42:E4:70:22:44:E8:B8:AC:33:1B:86:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/15bae30c-b363-407b-a0ab-3154eb309ae9/1/C89AFDB015B4516342E4702244E8B8AC331B8669.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C89AFDB015B4516342E4702244E8B8AC331B8669.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/15bae30c-b363-407b-a0ab-3154eb309ae9/1/C89AFDB015B4516342E4702244E8B8AC331B8669.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:e3:1c:85:e1:65:3c:e2:10:e9:91:ff:ea:41:58:00:37:74: d6:c0:2c:c5:27:2f:fb:4f:b5:f7:e1:92:00:02:ec:61:d0:62: f3:4f:54:77:46:67:26:31:b6:8a:f0:f8:45:af:a3:9b:10:3c: f7:e3:92:8e:07:10:14:f4:cb:01:bc:3b:f7:bd:1d:51:55:e3: e7:eb:ba:11:85:67:e4:27:0a:16:82:e9:24:73:df:7e:0c:1f: 4c:51:68:a8:39:f6:9f:e6:60:38:a0:3a:8c:e3:b3:2b:70:30: 40:dd:ed:33:4b:d1:42:94:e1:b8:2f:46:d2:a5:73:29:05:96: 51:0d:7c:cb:a0:6a:90:bd:05:f2:f3:e4:0a:e0:5a:c0:23:58: c3:fd:56:41:e6:a4:ad:66:1d:be:fb:68:de:33:61:1e:fe:8a: 46:62:ce:f8:ce:c3:28:5a:74:a8:67:ce:5a:fd:e0:5d:4f:17: 71:e2:62:a2:4a:1e:72:da:ef:db:cb:69:dc:4f:29:c3:f6:d2: a3:04:24:af:b7:f0:fb:9f:cb:cf:72:72:ba:3e:d8:6e:cb:ba: 17:d0:a4:9a:05:56:99:aa:24:c3:98:61:79:5f:63:d8:67:1b: 88:b7:06:0e:27:c3:76:a9:aa:22:d5:8e:d6:d4:6a:3c:01:db: 8e:eb:a2:1d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH1YmkSrXB63PPKlFnK2sXXhEMt4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzg5QUZEQjAxNUI0NTE2MzQyRTQ3MDIyNDRFOEI4QUMz MzFCODY2OTAeFw0yNTEyMDExMzA1NTFaFw0yNTEyMDQyMzM4NTFaMDMxMTAvBgNV BAMTKEIzQTFGMDE3MzY3QzhGNzY2QTI3Rjc1RkQ2MzE1OUI1NjU4Q0NCNDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhikGutch/HeVTgJaBafV/xfMH Ppx/LQ0C+KZY/wQWnB+3PG0kJqg5fVTMwRKMbCjOPF/H+162b+L6d2GQC807dhVy hd2EAMU5WFZvxXSHKnsEzTKztdQm2IrGIIlQXG5qaZZ6IpzmbzK7yeU/2VNVDvi7 fK9S/JxUzzUPrKFOoz5MH8luRFZ0InfovDye4t9DJQI4wfKKzfMEYPwnSJ/253Dh JpzImSoHdR4gk2HJKhrZUunVpbVj3bngFUSC2k416jihd7PLIHU7aQqdsFqXt1W8 4k5e/zIhWLppT7wAEYLXEfcpoDDGzsKZxSvLaoQGHjRnjKA/Q+xZ/bqBO13HAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUs6HwFzZ8j3ZqJ/df1jFZtWWMy0kwHwYDVR0j BBgwFoAUyJr9sBW0UWNC5HAiROi4rDMbhmkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NWJhZTMwYy1iMzYzLTQwN2ItYTBhYi0zMTU0ZWIzMDlhZTkvMS9DODlBRkRCMDE1 QjQ1MTYzNDJFNDcwMjI0NEU4QjhBQzMzMUI4NjY5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzg5QUZEQjAxNUI0NTE2MzQyRTQ3MDIyNDRFOEI4QUMzMzFC ODY2OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTViYWUzMGMtYjM2My00MDdiLWEw YWItMzE1NGViMzA5YWU5LzEvQzg5QUZEQjAxNUI0NTE2MzQyRTQ3MDIyNDRFOEI4 QUMzMzFCODY2OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIrjHIXhZTziEOmR/+pBWAA3dNbALMUnL/tP tffhkgAC7GHQYvNPVHdGZyYxtorw+EWvo5sQPPfjko4HEBT0ywG8O/e9HVFV4+fr uhGFZ+QnChaC6SRz334MH0xRaKg59p/mYDigOozjsytwMEDd7TNL0UKU4bgvRtKl cykFllENfMugapC9BfLz5ArgWsAjWMP9VkHmpK1mHb77aN4zYR7+ikZizvjOwyha dKhnzlr94F1PF3HiYqJKHnLa79vLadxPKcP20qMEJK+38Pufy89ycro+2G7LuhfQ pJoFVpmqJMOYYXlfY9hnG4i3Bg4nw3apqiLVjtbUajwB247roh0= -----END CERTIFICATE-----Generated at Wed Dec 3 14:42:37 2025 by rpki-client