This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/9e5060b8-f570-42d6-86ff-33ea7fdf2515/0/989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748.mft File: 989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748.mft (raw, json) Hash identifier: jFTGry6boUyJztj8OQQy5gHicUrw2lLptpVS25xvbE8= Subject key identifier: DE:47:55:D2:35:9E:FC:3D:ED:FE:23:AA:C0:35:E6:33:B0:83:54:A4 Authority key identifier: 98:9B:87:D4:0F:7C:9F:1B:A5:4A:BC:AE:9B:C7:97:A3:E6:B2:57:48 Certificate issuer: /CN=989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748 Certificate serial: 68B320CC83F4B6DCC4F592EBF829CBD615AEBC5A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9e5060b8-f570-42d6-86ff-33ea7fdf2515/0/989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748.mft Manifest number: 052E Signing time: Wed 03 Dec 2025 02:11:06 +0000 Manifest this update: Wed 03 Dec 2025 02:06:06 +0000 Manifest next update: Sat 06 Dec 2025 08:49:06 +0000 Files and hashes: 1: 3130332e3132302e3132342e302f32332d3234203d3e20313338313137.roa (hash: 9pTXaEmfCAIZ2elcDY8x5651yYxommQlVzX4FaEZZFs=) 2: 989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748.crl (hash: K9rdccu+syzGTQ5mBrmt3X+7dEgPagRaROoCNYMnLUE=) 3: 323030313a6466363a313330303a3a2f34382d3438203d3e20313338313137.roa (hash: hzs93FaYaNphdZDJOy2a+k5Vr7J1TFpilPTw5TB+vyQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9e5060b8-f570-42d6-86ff-33ea7fdf2515/0/989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748.crl rsync://repo-rpki.idnic.net/repo/9e5060b8-f570-42d6-86ff-33ea7fdf2515/0/989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 08:49:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:b3:20:cc:83:f4:b6:dc:c4:f5:92:eb:f8:29:cb:d6:15:ae:bc:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748 Validity Not Before: Dec 3 02:06:06 2025 GMT Not After : Dec 6 08:49:06 2025 GMT Subject: CN=DE4755D2359EFC3DEDFE23AAC035E633B08354A4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:9b:78:d4:e5:c1:59:1a:86:0b:9f:f4:f6:e9: 30:ca:29:70:69:a1:ba:94:6d:11:ca:41:4c:78:ab: 55:71:51:27:80:f8:49:ff:7d:2c:6d:83:a0:f3:7b: d3:9b:3c:dd:42:b1:4a:72:65:16:17:1f:13:3c:73: 1a:42:57:60:32:59:d4:da:35:84:99:ae:ee:5a:30: 66:d0:34:fc:2b:59:0e:2c:58:5b:fa:da:1c:89:7c: f9:29:39:e9:a4:b1:d4:69:18:89:27:26:1f:0c:cb: ac:60:de:a1:79:8a:75:ab:1c:69:ba:58:74:2e:1c: 1f:77:cb:aa:df:06:77:ff:58:46:32:be:53:62:6b: 21:2c:a8:aa:ed:b8:03:ee:d8:7d:69:41:93:2d:2c: 67:da:90:ad:39:74:f8:22:bc:36:d5:b6:5e:19:74: ff:92:71:75:4c:72:5b:93:89:7e:15:d3:10:0b:8b: e9:c0:76:91:07:66:6e:6a:1c:8f:62:6c:9b:dd:a7: 13:d9:60:88:c5:72:ae:bd:24:aa:5e:b9:00:0d:48: 61:ab:ab:08:44:36:69:e3:15:44:8a:93:4d:00:8d: 18:fc:8f:12:16:36:94:1b:15:72:47:e6:ba:f9:51: 99:cb:20:d3:66:02:7f:f7:8d:05:8e:b8:dc:a6:15: 86:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:47:55:D2:35:9E:FC:3D:ED:FE:23:AA:C0:35:E6:33:B0:83:54:A4 X509v3 Authority Key Identifier: keyid:98:9B:87:D4:0F:7C:9F:1B:A5:4A:BC:AE:9B:C7:97:A3:E6:B2:57:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9e5060b8-f570-42d6-86ff-33ea7fdf2515/0/989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9e5060b8-f570-42d6-86ff-33ea7fdf2515/0/989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:47:dd:5a:29:d2:df:6c:ba:ae:73:a7:a4:ad:2b:8b:bf:b8: 8c:28:17:be:44:d3:1d:9c:15:85:57:b0:4d:e6:eb:e8:69:c8: 1b:5f:b8:7a:f7:6d:37:e8:96:0a:af:a3:19:96:3a:9f:d5:c3: ac:81:c0:eb:21:83:a0:23:c0:28:16:24:65:7c:55:49:4c:31: 69:49:99:44:a0:10:ee:d2:30:22:2d:c0:5a:91:86:76:51:74: 00:dd:26:5b:01:71:58:aa:50:62:8e:ac:91:f5:20:02:99:cb: ba:30:47:a1:82:c3:e3:49:c7:6a:13:96:48:bd:01:f8:ed:16: 7a:8a:ee:aa:b3:d8:e5:97:44:31:30:0f:47:69:fc:15:36:52: 61:5e:d0:0d:48:6a:11:44:1e:cc:a8:d7:63:98:ad:31:50:45: 2e:a8:2d:ba:ee:65:12:f0:0e:c0:fa:6c:0e:6b:1b:30:ac:51: 19:b4:2e:a0:a2:4b:1b:df:54:fe:f0:e4:4a:d9:c0:c7:62:b0: f1:0d:6b:df:d9:61:e2:3d:4c:3e:93:e1:aa:57:6d:7a:07:93: 25:ea:e6:22:94:b5:6f:3f:9a:ac:92:ac:0f:67:bb:65:6c:ef: cd:c8:f4:b7:35:22:a5:6b:db:52:55:51:cb:62:32:f7:c2:2f: 63:97:2b:90 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaLMgzIP0ttzE9ZLr+CnL1hWuvFowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTg5Qjg3RDQwRjdDOUYxQkE1NEFCQ0FFOUJDNzk3QTNF NkIyNTc0ODAeFw0yNTEyMDMwMjA2MDZaFw0yNTEyMDYwODQ5MDZaMDMxMTAvBgNV BAMTKERFNDc1NUQyMzU5RUZDM0RFREZFMjNBQUMwMzVFNjMzQjA4MzU0QTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqm3jU5cFZGoYLn/T26TDKKXBp obqUbRHKQUx4q1VxUSeA+En/fSxtg6Dze9ObPN1CsUpyZRYXHxM8cxpCV2AyWdTa NYSZru5aMGbQNPwrWQ4sWFv62hyJfPkpOemksdRpGIknJh8My6xg3qF5inWrHGm6 WHQuHB93y6rfBnf/WEYyvlNiayEsqKrtuAPu2H1pQZMtLGfakK05dPgivDbVtl4Z dP+ScXVMcluTiX4V0xALi+nAdpEHZm5qHI9ibJvdpxPZYIjFcq69JKpeuQANSGGr qwhENmnjFUSKk00AjRj8jxIWNpQbFXJH5rr5UZnLINNmAn/3jQWOuNymFYbhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3kdV0jWe/D3t/iOqwDXmM7CDVKQwHwYDVR0j BBgwFoAUmJuH1A98nxulSryum8eXo+ayV0gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZTUwNjBiOC1mNTcwLTQyZDYtODZmZi0zM2VhN2ZkZjI1MTUvMC85ODlCODdENDBG N0M5RjFCQTU0QUJDQUU5QkM3OTdBM0U2QjI1NzQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTg5Qjg3RDQwRjdDOUYxQkE1NEFCQ0FFOUJDNzk3QTNFNkIy NTc0OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWU1MDYwYjgtZjU3MC00MmQ2LTg2 ZmYtMzNlYTdmZGYyNTE1LzAvOTg5Qjg3RDQwRjdDOUYxQkE1NEFCQ0FFOUJDNzk3 QTNFNkIyNTc0OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACFH3Vop0t9suq5zp6StK4u/uIwoF75E0x2c FYVXsE3m6+hpyBtfuHr3bTfolgqvoxmWOp/Vw6yBwOshg6AjwCgWJGV8VUlMMWlJ mUSgEO7SMCItwFqRhnZRdADdJlsBcViqUGKOrJH1IAKZy7owR6GCw+NJx2oTlki9 AfjtFnqK7qqz2OWXRDEwD0dp/BU2UmFe0A1IahFEHsyo12OYrTFQRS6oLbruZRLw DsD6bA5rGzCsURm0LqCiSxvfVP7w5ErZwMdisPENa9/ZYeI9TD6T4apXbXoHkyXq 5iKUtW8/mqySrA9nu2Vs783I9Lc1IqVr21JVUctiMvfCL2OXK5A= -----END CERTIFICATE-----Generated at Wed Dec 3 16:50:56 2025 by rpki-client