This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/31bb66d0-a933-4110-a093-038da9ec8b7e/0/98BF0C90429CA12CE1425374F5765263297D61F1.mft File: 98BF0C90429CA12CE1425374F5765263297D61F1.mft (raw, json) Hash identifier: qLwGbJWjSoyUV0pRB25AkuxxTHLnPLTPpPXRu95UB3A= Subject key identifier: 26:A2:CD:6C:4A:40:D3:60:14:A0:1A:E0:E6:2D:B0:C6:B6:8B:71:89 Authority key identifier: 98:BF:0C:90:42:9C:A1:2C:E1:42:53:74:F5:76:52:63:29:7D:61:F1 Certificate issuer: /CN=98BF0C90429CA12CE1425374F5765263297D61F1 Certificate serial: 0775C220D3BACB4608AAB4FD6FB358BE3891821B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98BF0C90429CA12CE1425374F5765263297D61F1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/31bb66d0-a933-4110-a093-038da9ec8b7e/0/98BF0C90429CA12CE1425374F5765263297D61F1.mft Manifest number: 0137 Signing time: Wed 03 Dec 2025 02:50:51 +0000 Manifest this update: Wed 03 Dec 2025 02:45:51 +0000 Manifest next update: Sat 06 Dec 2025 03:28:51 +0000 Files and hashes: 1: 3231302e37392e3134362e302f32342d3234203d3e20313532303435.roa (hash: Lpc33YMBjJ9T7VbHHDqwImeBd6L01sxZlRa+x954AOo=) 2: 3231302e37392e3134372e302f32342d3234203d3e20313532303435.roa (hash: hSqv2eoQTO7JNJFj3qq3n7+1XfpnN6lz7ioOJ9M/TEg=) 3: 3231302e37392e3134362e302f32332d3233203d3e20313532303435.roa (hash: z0AijCCK1naTP5YmFbSs1RtXYY5T/kLC9Gc+ZK8h2kA=) 4: 98BF0C90429CA12CE1425374F5765263297D61F1.crl (hash: MO7BwhY3vgfgA7hY2r++nYqcCXUP4xRAS+dIV4SR6zE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/31bb66d0-a933-4110-a093-038da9ec8b7e/0/98BF0C90429CA12CE1425374F5765263297D61F1.crl rsync://repo-rpki.idnic.net/repo/31bb66d0-a933-4110-a093-038da9ec8b7e/0/98BF0C90429CA12CE1425374F5765263297D61F1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98BF0C90429CA12CE1425374F5765263297D61F1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 03:28:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:75:c2:20:d3:ba:cb:46:08:aa:b4:fd:6f:b3:58:be:38:91:82:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98BF0C90429CA12CE1425374F5765263297D61F1 Validity Not Before: Dec 3 02:45:51 2025 GMT Not After : Dec 6 03:28:51 2025 GMT Subject: CN=26A2CD6C4A40D36014A01AE0E62DB0C6B68B7189 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:6e:b8:fa:89:8c:ce:85:31:bd:27:78:28:b2: 6e:d8:13:9d:ca:d9:30:65:6b:07:45:cf:de:e7:20: a1:77:78:cd:20:96:70:f9:92:ed:65:77:a7:49:89: 53:2c:24:e0:c1:b8:01:38:19:4a:9a:92:13:10:fa: 0c:99:5e:ad:4c:05:b3:4f:78:68:78:6c:48:cc:fd: 64:34:ad:03:5e:ae:31:28:dc:cc:86:c8:2d:1a:90: af:f5:b3:07:0e:08:9f:23:87:48:34:ad:e9:5c:22: 81:12:9a:c6:71:b2:dd:42:8a:47:59:77:6e:fc:0d: 58:48:14:70:93:88:40:19:c1:9b:7a:ea:e8:ee:60: a6:2c:d6:e2:52:08:66:77:b5:fd:e2:11:50:19:89: 42:20:a0:7b:fe:03:ca:bf:c9:1b:6e:b9:82:3d:ba: fc:f6:73:b5:b0:15:40:33:a5:bd:f0:32:7a:bf:92: f4:58:13:da:d0:42:2e:bf:b9:37:b8:39:11:f4:0a: ac:9a:2f:d6:16:ea:60:ae:0d:64:08:35:62:09:c3: 4f:31:f5:56:c1:39:ba:57:5b:6e:19:2e:ac:04:59: 4a:66:15:ed:04:65:2e:ee:a2:1f:70:c3:59:a5:2e: 29:9a:97:f4:5f:54:a2:7f:1b:70:5e:1e:db:a4:81: ba:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:A2:CD:6C:4A:40:D3:60:14:A0:1A:E0:E6:2D:B0:C6:B6:8B:71:89 X509v3 Authority Key Identifier: keyid:98:BF:0C:90:42:9C:A1:2C:E1:42:53:74:F5:76:52:63:29:7D:61:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/31bb66d0-a933-4110-a093-038da9ec8b7e/0/98BF0C90429CA12CE1425374F5765263297D61F1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98BF0C90429CA12CE1425374F5765263297D61F1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/31bb66d0-a933-4110-a093-038da9ec8b7e/0/98BF0C90429CA12CE1425374F5765263297D61F1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:e2:00:44:01:cf:a4:59:bf:38:d2:ac:49:12:5c:5a:cf:59: 11:12:1f:6b:de:92:7a:b5:3f:b5:52:f3:e4:9d:92:38:78:68: 22:c6:fc:92:78:6d:fb:25:0e:e3:00:a4:95:68:4e:6a:9b:fe: 59:d6:4c:eb:72:5f:e0:64:b7:38:dd:41:4d:cb:a9:b2:c4:e3: cb:7b:7f:74:a8:bf:a5:0a:40:c3:3f:23:24:2e:a9:85:ca:59: ad:d3:1e:b0:93:42:17:d5:6b:1e:3e:73:84:0e:87:a8:5d:da: e1:e9:61:58:1b:d5:1e:5d:ef:c1:7c:97:b7:78:2f:d9:1d:c5: 71:be:48:4f:b7:50:a1:d1:0a:5d:42:a0:5a:31:9d:fc:70:9f: 2c:9c:ba:1d:1a:92:32:9d:4a:02:93:25:e9:3e:ad:76:93:d2: 51:df:4c:ef:60:ed:46:0b:d9:a1:f6:3a:b0:35:33:0a:a7:14: 5f:d2:06:dc:76:01:6d:25:02:65:2b:88:6e:d3:41:69:49:06: 51:19:d8:a2:18:d1:69:17:39:3d:8e:e3:2b:10:c1:2d:09:c4: 51:bc:95:7d:bc:6c:f4:ff:1d:c6:8c:88:64:2f:c4:2d:22:1f: 73:85:5d:a3:ee:83:0e:f1:a7:4e:49:d0:66:a3:f9:cf:7a:03: 99:2c:cd:80 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUB3XCINO6y0YIqrT9b7NYvjiRghswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOThCRjBDOTA0MjlDQTEyQ0UxNDI1Mzc0RjU3NjUyNjMy OTdENjFGMTAeFw0yNTEyMDMwMjQ1NTFaFw0yNTEyMDYwMzI4NTFaMDMxMTAvBgNV BAMTKDI2QTJDRDZDNEE0MEQzNjAxNEEwMUFFMEU2MkRCMEM2QjY4QjcxODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKbrj6iYzOhTG9J3gosm7YE53K 2TBlawdFz97nIKF3eM0glnD5ku1ld6dJiVMsJODBuAE4GUqakhMQ+gyZXq1MBbNP eGh4bEjM/WQ0rQNerjEo3MyGyC0akK/1swcOCJ8jh0g0relcIoESmsZxst1CikdZ d278DVhIFHCTiEAZwZt66ujuYKYs1uJSCGZ3tf3iEVAZiUIgoHv+A8q/yRtuuYI9 uvz2c7WwFUAzpb3wMnq/kvRYE9rQQi6/uTe4ORH0CqyaL9YW6mCuDWQINWIJw08x 9VbBObpXW24ZLqwEWUpmFe0EZS7uoh9ww1mlLimal/RfVKJ/G3BeHtukgboFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJqLNbEpA02AUoBrg5i2wxraLcYkwHwYDVR0j BBgwFoAUmL8MkEKcoSzhQlN09XZSYyl9YfEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MWJiNjZkMC1hOTMzLTQxMTAtYTA5My0wMzhkYTllYzhiN2UvMC85OEJGMEM5MDQy OUNBMTJDRTE0MjUzNzRGNTc2NTI2MzI5N0Q2MUYxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOThCRjBDOTA0MjlDQTEyQ0UxNDI1Mzc0RjU3NjUyNjMyOTdE NjFGMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzFiYjY2ZDAtYTkzMy00MTEwLWEw OTMtMDM4ZGE5ZWM4YjdlLzAvOThCRjBDOTA0MjlDQTEyQ0UxNDI1Mzc0RjU3NjUy NjMyOTdENjFGMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKjiAEQBz6RZvzjSrEkSXFrPWRESH2veknq1 P7VS8+Sdkjh4aCLG/JJ4bfslDuMApJVoTmqb/lnWTOtyX+BktzjdQU3LqbLE48t7 f3Sov6UKQMM/IyQuqYXKWa3THrCTQhfVax4+c4QOh6hd2uHpYVgb1R5d78F8l7d4 L9kdxXG+SE+3UKHRCl1CoFoxnfxwnyycuh0akjKdSgKTJek+rXaT0lHfTO9g7UYL 2aH2OrA1MwqnFF/SBtx2AW0lAmUriG7TQWlJBlEZ2KIY0WkXOT2O4ysQwS0JxFG8 lX28bPT/HcaMiGQvxC0iH3OFXaPugw7xp05J0Gaj+c96A5kszYA= -----END CERTIFICATE-----Generated at Wed Dec 3 15:30:37 2025 by rpki-client