This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/89402655017312B8CFCB367BA82966AA21E11F90.mft File: 89402655017312B8CFCB367BA82966AA21E11F90.mft (raw, json) Hash identifier: eIgUBkPo5mH2dvo6EgKyk/qo/gzshqNwqplkOigIuEs= Subject key identifier: 1F:3F:12:B7:09:BE:D4:0F:F8:DD:9F:AB:A3:63:84:D7:11:B6:B9:47 Authority key identifier: 89:40:26:55:01:73:12:B8:CF:CB:36:7B:A8:29:66:AA:21:E1:1F:90 Certificate issuer: /CN=89402655017312B8CFCB367BA82966AA21E11F90 Certificate serial: 0F1E216B2405BE7360AE43167498B17277FBE59B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/89402655017312B8CFCB367BA82966AA21E11F90.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/89402655017312B8CFCB367BA82966AA21E11F90.mft Manifest number: 0503 Signing time: Mon 01 Dec 2025 20:02:02 +0000 Manifest this update: Mon 01 Dec 2025 19:57:02 +0000 Manifest next update: Fri 05 Dec 2025 07:04:02 +0000 Files and hashes: 1: 89402655017312B8CFCB367BA82966AA21E11F90.crl (hash: bPXfWVFmVSrOcKL3XnZ7LnKZlRSz5PcefTpE4AUyOME=) 2: 3230322e3134372e3139322e302f32302d3234203d3e203137363730.roa (hash: WsFr0RE3ZnujNzg56bjhtSV6UHqOuDU5rMSYq/HFAbw=) 3: 3132332e3235332e3233322e302f32322d3234203d3e203137363730.roa (hash: R1hpl90tpuGr3S7MM3M7sdpYxwM9mEKg6oXY2ZteCXg=) 4: 323430343a623238303a3a2f33322d3438203d3e203137363730.roa (hash: S1hTgzRInefDZ+nv4OU9cj+WPrGD6wknjfAjdl1JFoo=) 5: 3131302e35302e38302e302f32312d3234203d3e203137363730.roa (hash: ENs+ad22cCNfPNiUGh8Crfa5TLmxtOCxc9FzlyRTptI=) 6: 3130332e3231332e3132382e302f32322d3234203d3e203137363730.roa (hash: FYvSh1st1IicJh9tmsJCC36iwumwIFXZHMkoJwqA8Qw=) 7: 323430303a313838303a3a2f33322d3438203d3e203137363730.roa (hash: FP8IqHLkyX7Qj2+QyPrsBYEPwMn3gsRtfyfeKNBNdEg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/89402655017312B8CFCB367BA82966AA21E11F90.crl rsync://repo-rpki.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/89402655017312B8CFCB367BA82966AA21E11F90.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/89402655017312B8CFCB367BA82966AA21E11F90.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 07:04:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:1e:21:6b:24:05:be:73:60:ae:43:16:74:98:b1:72:77:fb:e5:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89402655017312B8CFCB367BA82966AA21E11F90 Validity Not Before: Dec 1 19:57:02 2025 GMT Not After : Dec 5 07:04:02 2025 GMT Subject: CN=1F3F12B709BED40FF8DD9FABA36384D711B6B947 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:7c:2b:ab:a9:32:e9:14:b7:63:bb:41:10:33: ad:93:5d:99:2b:36:57:f0:da:b4:7b:42:10:1b:3c: 3e:8b:18:77:23:b2:ca:3f:90:88:33:f9:4d:03:aa: b6:6b:19:26:09:c4:2d:38:c3:0d:bd:e2:0c:d2:38: ff:f3:a7:1e:9b:b8:f0:6a:0b:fe:75:09:61:26:6f: b2:37:f4:f0:f6:b3:4b:6b:20:80:d7:a7:33:cf:1f: c8:dd:81:d5:05:b0:64:8a:5b:78:2c:63:1b:99:58: a1:02:44:8f:32:df:3f:d7:78:fe:a7:8e:34:6a:ea: 35:99:8a:6f:dd:93:55:d3:58:b4:63:26:e5:3c:8c: 1d:fd:a8:b3:81:39:57:90:b7:40:d6:ee:ce:ca:e1: 7c:d8:8d:70:ce:d5:d9:99:df:b4:5e:92:24:c4:56: 88:ca:06:a4:ad:08:37:14:4c:e5:b2:79:de:69:a3: 95:d5:f2:1e:a7:67:1e:b0:ab:59:0f:72:67:36:44: ef:9b:fa:a8:b4:84:cb:6a:b5:79:5d:62:26:7e:6b: e7:c1:4e:71:dd:98:52:ee:f5:69:22:80:74:74:9a: 14:5e:42:2e:30:9c:cf:19:97:d4:f9:ea:cd:35:99: a1:db:81:42:d3:50:42:bf:90:62:aa:2b:f0:5a:ba: 9f:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:3F:12:B7:09:BE:D4:0F:F8:DD:9F:AB:A3:63:84:D7:11:B6:B9:47 X509v3 Authority Key Identifier: keyid:89:40:26:55:01:73:12:B8:CF:CB:36:7B:A8:29:66:AA:21:E1:1F:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/89402655017312B8CFCB367BA82966AA21E11F90.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/89402655017312B8CFCB367BA82966AA21E11F90.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/89402655017312B8CFCB367BA82966AA21E11F90.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:51:60:e5:f8:d2:0c:71:96:d2:2e:98:be:c8:9b:63:a7:6f: 1d:e7:2b:48:92:bb:f2:07:f1:69:53:2e:83:1f:1e:0a:af:81: 56:64:92:0f:e9:1a:61:a2:95:43:0f:77:19:79:b8:03:1b:fd: 8e:8f:45:55:76:e6:17:47:c3:e6:2f:8b:c3:dc:41:f0:be:7a: 1a:74:cd:a0:59:c0:7d:91:0a:28:f3:46:32:09:95:85:df:b3: 75:e4:14:0a:42:72:d2:3e:37:e3:5c:29:18:87:9d:4b:fb:2a: d2:5f:44:81:e9:60:f5:86:12:f3:38:50:22:e7:19:90:da:0d: 12:01:8e:fe:1c:8e:d6:88:5e:d1:b7:4f:cf:0e:0c:5b:88:2e: 85:44:dc:68:27:85:e8:ce:20:27:57:61:fc:85:4f:af:e8:95: 3c:00:ba:1c:f4:4f:c6:4c:00:c2:0c:76:a5:c7:6f:eb:d5:7e: f4:85:07:cd:63:c2:7a:b5:70:2f:03:de:7f:90:82:f7:e3:c2: 5e:26:2b:36:34:55:51:e3:96:07:c5:a7:7b:50:e7:9e:e6:8c: 3d:5c:d8:2f:4a:01:8f:61:5e:ee:ec:07:ff:97:31:ec:fb:ba: 43:da:b4:32:7a:2f:21:70:bf:5e:10:5b:dc:e6:88:9e:ad:36: 61:e2:ec:5b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDx4hayQFvnNgrkMWdJixcnf75ZswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODk0MDI2NTUwMTczMTJCOENGQ0IzNjdCQTgyOTY2QUEy MUUxMUY5MDAeFw0yNTEyMDExOTU3MDJaFw0yNTEyMDUwNzA0MDJaMDMxMTAvBgNV BAMTKDFGM0YxMkI3MDlCRUQ0MEZGOEREOUZBQkEzNjM4NEQ3MTFCNkI5NDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7fCurqTLpFLdju0EQM62TXZkr Nlfw2rR7QhAbPD6LGHcjsso/kIgz+U0DqrZrGSYJxC04ww294gzSOP/zpx6buPBq C/51CWEmb7I39PD2s0trIIDXpzPPH8jdgdUFsGSKW3gsYxuZWKECRI8y3z/XeP6n jjRq6jWZim/dk1XTWLRjJuU8jB39qLOBOVeQt0DW7s7K4XzYjXDO1dmZ37RekiTE VojKBqStCDcUTOWyed5po5XV8h6nZx6wq1kPcmc2RO+b+qi0hMtqtXldYiZ+a+fB TnHdmFLu9WkigHR0mhReQi4wnM8Zl9T56s01maHbgULTUEK/kGKqK/Baup9rAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHz8Stwm+1A/43Z+ro2OE1xG2uUcwHwYDVR0j BBgwFoAUiUAmVQFzErjPyzZ7qClmqiHhH5AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZmIxYzgwYy00ZDZjLTQ0MDgtODk0Ny1mYmE2ZTdjNGJlN2MvMC84OTQwMjY1NTAx NzMxMkI4Q0ZDQjM2N0JBODI5NjZBQTIxRTExRjkwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODk0MDI2NTUwMTczMTJCOENGQ0IzNjdCQTgyOTY2QUEyMUUx MUY5MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWZiMWM4MGMtNGQ2Yy00NDA4LTg5 NDctZmJhNmU3YzRiZTdjLzAvODk0MDI2NTUwMTczMTJCOENGQ0IzNjdCQTgyOTY2 QUEyMUUxMUY5MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA1RYOX40gxxltIumL7Im2Onbx3nK0iSu/IH 8WlTLoMfHgqvgVZkkg/pGmGilUMPdxl5uAMb/Y6PRVV25hdHw+Yvi8PcQfC+ehp0 zaBZwH2RCijzRjIJlYXfs3XkFApCctI+N+NcKRiHnUv7KtJfRIHpYPWGEvM4UCLn GZDaDRIBjv4cjtaIXtG3T88ODFuILoVE3GgnhejOICdXYfyFT6/olTwAuhz0T8ZM AMIMdqXHb+vVfvSFB81jwnq1cC8D3n+Qgvfjwl4mKzY0VVHjlgfFp3tQ557mjD1c 2C9KAY9hXu7sB/+XMez7ukPatDJ6LyFwv14QW9zmiJ6tNmHi7Fs= -----END CERTIFICATE-----Generated at Wed Dec 3 14:41:54 2025 by rpki-client