This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/9e5060b8-f570-42d6-86ff-33ea7fdf2515/0/989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748.mft File: 989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748.mft (raw, json) Hash identifier: 2yFg91+USrlivfi9DbAMBnMmz6j6gdkODRQkptps298= Subject key identifier: 3F:21:78:ED:2C:8D:A1:AC:BE:2D:87:9C:B7:87:91:98:68:4E:21:CC Authority key identifier: 98:9B:87:D4:0F:7C:9F:1B:A5:4A:BC:AE:9B:C7:97:A3:E6:B2:57:48 Certificate issuer: /CN=989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748 Certificate serial: 09C05F619384E02013F5F37EB569C6DA533340CD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9e5060b8-f570-42d6-86ff-33ea7fdf2515/0/989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748.mft Manifest number: 0549 Signing time: Mon 02 Feb 2026 08:11:07 +0000 Manifest this update: Mon 02 Feb 2026 08:06:07 +0000 Manifest next update: Thu 05 Feb 2026 13:28:07 +0000 Files and hashes: 1: 989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748.crl (hash: rQ0grvhhL1bw2a8y8stmAHwDef/uTwxlsJpSIs7WvL8=) 2: 3130332e3132302e3132342e302f32332d3234203d3e20313338313137.roa (hash: 9pTXaEmfCAIZ2elcDY8x5651yYxommQlVzX4FaEZZFs=) 3: 323030313a6466363a313330303a3a2f34382d3438203d3e20313338313137.roa (hash: hzs93FaYaNphdZDJOy2a+k5Vr7J1TFpilPTw5TB+vyQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9e5060b8-f570-42d6-86ff-33ea7fdf2515/0/989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748.crl rsync://repo-rpki.idnic.net/repo/9e5060b8-f570-42d6-86ff-33ea7fdf2515/0/989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Feb 2026 05:24:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:c0:5f:61:93:84:e0:20:13:f5:f3:7e:b5:69:c6:da:53:33:40:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748 Validity Not Before: Feb 2 08:06:07 2026 GMT Not After : Feb 5 13:28:07 2026 GMT Subject: CN=3F2178ED2C8DA1ACBE2D879CB7879198684E21CC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:f5:d1:64:bd:d6:ec:1b:03:7a:b8:5f:3f:5b: 9c:c7:b0:f9:17:cc:dc:72:3e:97:f4:c9:2e:17:b0: 19:a3:39:49:ce:fe:68:4d:5b:e1:6a:57:f6:20:42: 21:b0:1a:81:b4:bc:a6:12:35:a5:4c:c6:dd:bf:39: 37:9c:7d:23:ce:c6:c7:4f:50:3b:b1:1d:07:a3:d3: 4b:fd:13:d3:61:f9:63:6e:40:df:3b:2e:87:05:bc: db:76:49:7a:af:3c:19:d0:c7:76:1c:f2:29:77:a4: 48:82:75:54:79:63:f6:b9:6c:78:04:58:0b:d7:11: 67:97:bd:49:7c:f9:6d:13:8b:59:fd:d2:89:57:4d: 2b:4f:0f:a5:cd:cb:40:58:e4:f2:82:56:7d:8b:56: fb:80:8d:e6:33:58:0f:1d:a9:7e:d7:90:31:a4:32: fa:30:55:d0:31:ac:f7:05:3d:61:bf:b1:73:f3:19: a1:d3:81:d6:88:af:4a:8e:79:48:a8:cf:6f:54:bc: ec:89:f4:31:a2:65:83:f4:72:7b:b2:b3:75:d5:ac: ae:76:69:78:5e:69:3e:ec:ea:8c:cc:5a:0c:70:6b: 34:17:4f:fd:c0:e4:09:8f:2e:a8:b5:93:59:94:b7: 40:16:27:ea:b9:a3:d5:7b:c2:2b:0e:97:bb:d6:b5: f5:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:21:78:ED:2C:8D:A1:AC:BE:2D:87:9C:B7:87:91:98:68:4E:21:CC X509v3 Authority Key Identifier: keyid:98:9B:87:D4:0F:7C:9F:1B:A5:4A:BC:AE:9B:C7:97:A3:E6:B2:57:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9e5060b8-f570-42d6-86ff-33ea7fdf2515/0/989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9e5060b8-f570-42d6-86ff-33ea7fdf2515/0/989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:ce:c5:51:8a:7a:27:f5:51:42:1b:0f:0d:a6:f4:2c:7f:88: 45:a8:83:5e:24:b3:14:c9:38:d9:b4:46:02:4f:4e:9d:93:7c: 35:61:4f:08:d4:2d:3b:0a:1a:c6:0f:4f:8a:f2:c2:27:fb:f8: a2:9c:2b:01:87:31:00:1b:74:a9:5e:23:f0:09:e2:df:54:e0: be:96:aa:92:56:83:c0:1e:c1:d6:63:26:d4:bd:72:14:85:0e: 59:b5:4c:f2:23:b9:a8:cf:3d:25:8d:d1:6d:05:7c:6d:25:a8: ea:03:3d:9d:7a:e3:c4:ed:1c:36:11:e6:d1:2f:0b:c8:ee:63: cc:e9:c7:a6:8c:64:74:0c:38:0b:81:4c:71:03:8a:da:e7:45: b7:8f:9d:d4:8f:51:00:97:3c:ee:c0:9c:de:a9:ad:f4:ff:5f: b2:5b:a3:f4:60:a9:23:1f:e1:28:72:0c:64:81:11:c0:c9:29: e0:c6:97:30:58:f6:0c:9a:15:df:2f:6d:d8:04:ef:64:08:eb: 07:a4:36:f5:b4:66:77:3c:0e:33:38:80:21:25:81:70:e4:99: c2:a1:2f:e0:17:ad:cd:df:b3:8a:61:05:24:f3:42:1d:e1:5c: 3c:d4:0d:dc:80:3e:ef:71:0e:99:07:4b:e8:28:3c:c5:0f:17: c7:60:f0:04 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCcBfYZOE4CAT9fN+tWnG2lMzQM0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTg5Qjg3RDQwRjdDOUYxQkE1NEFCQ0FFOUJDNzk3QTNF NkIyNTc0ODAeFw0yNjAyMDIwODA2MDdaFw0yNjAyMDUxMzI4MDdaMDMxMTAvBgNV BAMTKDNGMjE3OEVEMkM4REExQUNCRTJEODc5Q0I3ODc5MTk4Njg0RTIxQ0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn9dFkvdbsGwN6uF8/W5zHsPkX zNxyPpf0yS4XsBmjOUnO/mhNW+FqV/YgQiGwGoG0vKYSNaVMxt2/OTecfSPOxsdP UDuxHQej00v9E9Nh+WNuQN87LocFvNt2SXqvPBnQx3Yc8il3pEiCdVR5Y/a5bHgE WAvXEWeXvUl8+W0Ti1n90olXTStPD6XNy0BY5PKCVn2LVvuAjeYzWA8dqX7XkDGk MvowVdAxrPcFPWG/sXPzGaHTgdaIr0qOeUioz29UvOyJ9DGiZYP0cnuys3XVrK52 aXheaT7s6ozMWgxwazQXT/3A5AmPLqi1k1mUt0AWJ+q5o9V7wisOl7vWtfURAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPyF47SyNoay+LYect4eRmGhOIcwwHwYDVR0j BBgwFoAUmJuH1A98nxulSryum8eXo+ayV0gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZTUwNjBiOC1mNTcwLTQyZDYtODZmZi0zM2VhN2ZkZjI1MTUvMC85ODlCODdENDBG N0M5RjFCQTU0QUJDQUU5QkM3OTdBM0U2QjI1NzQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTg5Qjg3RDQwRjdDOUYxQkE1NEFCQ0FFOUJDNzk3QTNFNkIy NTc0OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWU1MDYwYjgtZjU3MC00MmQ2LTg2 ZmYtMzNlYTdmZGYyNTE1LzAvOTg5Qjg3RDQwRjdDOUYxQkE1NEFCQ0FFOUJDNzk3 QTNFNkIyNTc0OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFjOxVGKeif1UUIbDw2m9Cx/iEWog14ksxTJ ONm0RgJPTp2TfDVhTwjULTsKGsYPT4rywif7+KKcKwGHMQAbdKleI/AJ4t9U4L6W qpJWg8AewdZjJtS9chSFDlm1TPIjuajPPSWN0W0FfG0lqOoDPZ1648TtHDYR5tEv C8juY8zpx6aMZHQMOAuBTHEDitrnRbePndSPUQCXPO7AnN6prfT/X7Jbo/RgqSMf 4ShyDGSBEcDJKeDGlzBY9gyaFd8vbdgE72QI6wekNvW0Znc8DjM4gCElgXDkmcKh L+AXrc3fs4phBSTzQh3hXDzUDdyAPu9xDpkHS+goPMUPF8dg8AQ= -----END CERTIFICATE-----Generated at Mon Feb 2 10:06:36 2026 by rpki-client