This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/4a87064b-5f27-4270-90e4-99f43ae84db7/0/8989D0431453556F22D882A21B2BBB9F4E4A2C24.mft File: 8989D0431453556F22D882A21B2BBB9F4E4A2C24.mft (raw, json) Hash identifier: XfCee+l4gKGO+mpx+EDNdlZPJkQwGuQkuDvLy0LmPgs= Subject key identifier: 91:DA:48:52:1E:23:F3:C2:9E:AE:E5:96:07:D2:FF:A8:A8:70:3E:C8 Authority key identifier: 89:89:D0:43:14:53:55:6F:22:D8:82:A2:1B:2B:BB:9F:4E:4A:2C:24 Certificate issuer: /CN=8989D0431453556F22D882A21B2BBB9F4E4A2C24 Certificate serial: 5348AD66279AD18F29F573EF6AD032B20D4F0208 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8989D0431453556F22D882A21B2BBB9F4E4A2C24.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4a87064b-5f27-4270-90e4-99f43ae84db7/0/8989D0431453556F22D882A21B2BBB9F4E4A2C24.mft Manifest number: 01B8 Signing time: Tue 16 Dec 2025 22:21:31 +0000 Manifest this update: Tue 16 Dec 2025 22:16:31 +0000 Manifest next update: Sat 20 Dec 2025 01:32:31 +0000 Files and hashes: 1: 3130332e3133302e38332e302f32342d3234203d3e20313530393636.roa (hash: MueUJKcGkwue3xJukPLYM+05PMMpQl2v+Pz0FDXtNcM=) 2: 8989D0431453556F22D882A21B2BBB9F4E4A2C24.crl (hash: 2Rxubb3kkfbRFdkCHM7jKJYIZdcRBEp5clpKcTBrTi8=) 3: 3130332e3133302e38322e302f32342d3234203d3e20313530393636.roa (hash: WdwAhrLb01WctAevsLo2E5F0+guZcHnuWIL6/QTKVQY=) 4: 3130332e3133302e38322e302f32332d3233203d3e20313530393636.roa (hash: wzb3XBaqsWwxrRVk4X/B9M9lBaxhMB40Ug9owyKd8Yw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4a87064b-5f27-4270-90e4-99f43ae84db7/0/8989D0431453556F22D882A21B2BBB9F4E4A2C24.crl rsync://repo-rpki.idnic.net/repo/4a87064b-5f27-4270-90e4-99f43ae84db7/0/8989D0431453556F22D882A21B2BBB9F4E4A2C24.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8989D0431453556F22D882A21B2BBB9F4E4A2C24.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 01:32:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:48:ad:66:27:9a:d1:8f:29:f5:73:ef:6a:d0:32:b2:0d:4f:02:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8989D0431453556F22D882A21B2BBB9F4E4A2C24 Validity Not Before: Dec 16 22:16:31 2025 GMT Not After : Dec 20 01:32:31 2025 GMT Subject: CN=91DA48521E23F3C29EAEE59607D2FFA8A8703EC8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:e7:0c:bc:f7:b9:fb:ea:3e:49:4c:6f:98:a4: aa:d0:a1:4b:50:69:bb:9a:9e:79:46:21:53:a7:a3: da:de:ab:47:da:63:b8:7b:5e:3a:e8:40:61:12:97: 1e:26:89:ba:70:85:1e:b4:3e:aa:e2:99:fe:0d:1d: 95:5a:f2:49:11:0d:60:0d:2e:98:84:b0:74:17:30: c9:0e:c3:81:8e:69:47:d4:46:23:57:fb:f6:7b:b8: d9:9e:00:ba:00:46:ae:23:e6:df:9a:79:83:48:3f: cc:1b:e2:49:b2:8c:d5:c9:1c:e5:74:1f:3e:bf:c9: 85:01:60:ea:b7:c7:46:ab:fe:67:81:a9:2e:e4:89: 86:d6:72:61:23:ea:57:6a:c6:5e:a7:22:7a:57:9c: aa:6d:c1:9f:26:92:cc:5d:a3:38:d0:d5:db:db:1f: 13:83:01:b8:54:c6:8f:23:a1:da:80:3a:8a:f5:a6: 84:ab:e2:2c:20:f5:43:03:0b:a0:5a:98:8d:43:df: e9:36:55:c5:b9:a3:23:8a:67:6c:19:8d:52:6c:14: 83:d0:f8:a7:af:ae:e3:ca:e8:92:a2:ed:80:80:68: 7d:c7:ba:8c:ba:a8:9d:96:72:8e:c4:2e:26:a7:70: 22:3d:5c:70:51:48:57:45:79:90:e9:c4:a2:73:82: fd:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:DA:48:52:1E:23:F3:C2:9E:AE:E5:96:07:D2:FF:A8:A8:70:3E:C8 X509v3 Authority Key Identifier: keyid:89:89:D0:43:14:53:55:6F:22:D8:82:A2:1B:2B:BB:9F:4E:4A:2C:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4a87064b-5f27-4270-90e4-99f43ae84db7/0/8989D0431453556F22D882A21B2BBB9F4E4A2C24.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8989D0431453556F22D882A21B2BBB9F4E4A2C24.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4a87064b-5f27-4270-90e4-99f43ae84db7/0/8989D0431453556F22D882A21B2BBB9F4E4A2C24.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:24:d2:bb:aa:47:d7:98:d3:2f:83:0c:f8:df:db:c4:14:52: f4:9e:83:b6:52:a6:29:88:3b:7c:f1:b5:59:91:72:61:fe:7c: 16:e3:e8:76:7a:e8:4d:b8:ca:58:c0:8b:de:94:57:41:81:27: a2:46:c4:a4:fc:0f:fa:61:1b:95:41:6e:3f:98:c0:67:ac:61: ba:dd:93:fa:47:d2:2e:15:e6:2c:38:19:63:f9:57:48:b1:fe: ec:ee:69:30:b9:d7:96:02:04:d4:29:96:a4:15:23:c0:d1:d2: 90:e9:54:48:89:36:6a:eb:72:7a:c7:fe:71:e9:3e:1d:9c:a5: b8:c1:27:2c:57:08:9b:f8:2a:50:31:1d:e6:b1:53:3b:c4:c8: 7b:2e:97:e1:4e:a9:e2:7c:48:ff:4b:e9:af:d8:46:f0:ee:21: ab:82:55:84:a5:c5:0b:7a:16:e3:0b:79:52:98:05:48:d5:de: e3:86:d8:5c:c5:6d:a8:25:85:07:7e:5d:9e:43:6d:af:a8:a0: 21:b5:a1:13:e1:66:66:ad:44:63:f6:d1:c3:3b:67:b3:41:55: ce:8c:d1:9c:d7:f0:95:83:41:49:83:f8:47:5f:b2:3a:40:f2: 86:6f:72:c3:2c:66:85:21:8f:df:fd:4b:71:ff:af:aa:58:af: 4c:1c:35:a2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUU0itZiea0Y8p9XPvatAysg1PAggwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODk4OUQwNDMxNDUzNTU2RjIyRDg4MkEyMUIyQkJCOUY0 RTRBMkMyNDAeFw0yNTEyMTYyMjE2MzFaFw0yNTEyMjAwMTMyMzFaMDMxMTAvBgNV BAMTKDkxREE0ODUyMUUyM0YzQzI5RUFFRTU5NjA3RDJGRkE4QTg3MDNFQzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDe5wy897n76j5JTG+YpKrQoUtQ abuannlGIVOno9req0faY7h7XjroQGESlx4mibpwhR60Pqrimf4NHZVa8kkRDWAN LpiEsHQXMMkOw4GOaUfURiNX+/Z7uNmeALoARq4j5t+aeYNIP8wb4kmyjNXJHOV0 Hz6/yYUBYOq3x0ar/meBqS7kiYbWcmEj6ldqxl6nInpXnKptwZ8mksxdozjQ1dvb HxODAbhUxo8jodqAOor1poSr4iwg9UMDC6BamI1D3+k2VcW5oyOKZ2wZjVJsFIPQ +KevruPK6JKi7YCAaH3Huoy6qJ2Wco7ELiancCI9XHBRSFdFeZDpxKJzgv21AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkdpIUh4j88KeruWWB9L/qKhwPsgwHwYDVR0j BBgwFoAUiYnQQxRTVW8i2IKiGyu7n05KLCQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YTg3MDY0Yi01ZjI3LTQyNzAtOTBlNC05OWY0M2FlODRkYjcvMC84OTg5RDA0MzE0 NTM1NTZGMjJEODgyQTIxQjJCQkI5RjRFNEEyQzI0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODk4OUQwNDMxNDUzNTU2RjIyRDg4MkEyMUIyQkJCOUY0RTRB MkMyNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGE4NzA2NGItNWYyNy00MjcwLTkw ZTQtOTlmNDNhZTg0ZGI3LzAvODk4OUQwNDMxNDUzNTU2RjIyRDg4MkEyMUIyQkJC OUY0RTRBMkMyNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFsk0ruqR9eY0y+DDPjf28QUUvSeg7ZSpimI O3zxtVmRcmH+fBbj6HZ66E24yljAi96UV0GBJ6JGxKT8D/phG5VBbj+YwGesYbrd k/pH0i4V5iw4GWP5V0ix/uzuaTC515YCBNQplqQVI8DR0pDpVEiJNmrrcnrH/nHp Ph2cpbjBJyxXCJv4KlAxHeaxUzvEyHsul+FOqeJ8SP9L6a/YRvDuIauCVYSlxQt6 FuMLeVKYBUjV3uOG2FzFbaglhQd+XZ5Dba+ooCG1oRPhZmatRGP20cM7Z7NBVc6M 0ZzX8JWDQUmD+EdfsjpA8oZvcsMsZoUhj9/9S3H/r6pYr0wcNaI= -----END CERTIFICATE-----Generated at Fri Dec 19 09:47:00 2025 by rpki-client