This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/981E5677AC602950ABE1A442C2779E7CB0C108A9.mft
File: 981E5677AC602950ABE1A442C2779E7CB0C108A9.mft (raw, json)
Hash identifier: XizwHNlhAeRYZ+NuTvJ1xHFSQWOxljVqPp/kur12QME=
Subject key identifier: 05:47:56:72:D6:92:43:76:E0:F9:FE:E6:BD:08:BA:0D:22:D6:71:35
Authority key identifier: 98:1E:56:77:AC:60:29:50:AB:E1:A4:42:C2:77:9E:7C:B0:C1:08:A9
Certificate issuer: /CN=981E5677AC602950ABE1A442C2779E7CB0C108A9
Certificate serial: 459B1B05A5036E2095E366F4C6F3378DE8AFD089
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/981E5677AC602950ABE1A442C2779E7CB0C108A9.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/981E5677AC602950ABE1A442C2779E7CB0C108A9.mft
Manifest number: 059A
Signing time: Wed 03 Dec 2025 10:31:24 +0000
Manifest this update: Wed 03 Dec 2025 10:26:24 +0000
Manifest next update: Sat 06 Dec 2025 11:38:24 +0000
Files and hashes: 1: 323430323a616230303a65663a3a2f34382d3438203d3e203234323036.roa (hash: tmM3oKcQYom0eZ0XNJS+YU7h43ssUwLiYaqon6dfaUY=)
2: 3131302e34342e3136392e302f32342d3234203d3e203234323036.roa (hash: njKwh9fBki9cQ9S37NNLRAGEY/gEGO5YoV7LWFXK6D8=)
3: 3230332e38342e3133372e302f32342d3234203d3e20323134313433.roa (hash: gGq3gtPXXpT8qmppXJpdYMGRNCe8MtmuCS9LRZ9VUgI=)
4: 323430323a616230303a613a3a2f34382d3438203d3e203234323036.roa (hash: vmMOC54VRYyQ6zaPWhSxLckPPT+mw9crTtfHlgZPBE8=)
5: 3230332e38342e3134332e302f32342d3234203d3e20323133363037.roa (hash: SU/DxOnFopjxkv8c6HfEkmadSFV8VExLgA9VBa2HuUc=)
6: 323430323a616230303a64663a3a2f34382d3438203d3e203234323036.roa (hash: 9MSiXUftqD7YwgoDDhRkUOlJfbnaxlrR0kRkqPsHDsM=)
7: 323430323a616230303a3a2f34382d3438203d3e203234323036.roa (hash: DzgPlEX76YPqKshtrhPz/EVID2lXXaNvCCo/tHgJE8c=)
8: 3230332e38342e3133382e302f32342d3234203d3e20313338303737.roa (hash: slxJrksLG/ugoCdz0xpYsZxbcTeP+M/3OR1Tilc8hic=)
9: 323430323a616230303a3a2f33322d3332203d3e203234323036.roa (hash: aaVQCjxDcTZfVP0GXV6UmhAVx/WHjfyhQPMjY9CDL1Y=)
10: 323430323a616230303a63663a3a2f34382d3438203d3e203234323036.roa (hash: 1MMaA/JALdwU46Gmn5cadR8bFFMn6pjjD2wa0Pe9Aag=)
11: 3131302e34342e3137312e302f32342d3234203d3e20333935373933.roa (hash: CzsB1i2n8blmvNya3o9w8kwH8dKsWQzSUJDKNEk5v+Y=)
12: 3230332e38342e3133392e302f32342d3234203d3e20313338383433.roa (hash: wu8diV5jdWuux9C39Tvhu1GJ88vcA6Du/7ncHsnVM8k=)
13: 323430323a616230303a636166653a3a2f34382d3438203d3e203234323036.roa (hash: yk2Beo121KKGPqhGrImYDU3EMLdITUqRzn7ocJjo60c=)
14: 323430323a616230303a61663a3a2f34382d3438203d3e203234323036.roa (hash: lNnryO3KjbjallOCFXPMSeEsKPceLct4DmwTgOEASfo=)
15: 3230332e38342e3133362e302f32342d3234203d3e20333935373933.roa (hash: RFhrg4bv5ZNSWmuLud5F/oLaU4cTEMAfMqrRIOATFAw=)
16: 3131302e34342e3136382e302f32332d3233203d3e203234323036.roa (hash: k8TYiHXc6vZmoqXaKgcDXCYwJI5QRLDArVJpzQsFi0s=)
17: 3131302e34342e3137322e302f32322d3232203d3e20313338303737.roa (hash: L7B4TlCu6+XGwvVIhFVxD06j+oz/txAbz7A9RLeSSuk=)
18: 3131302e34342e3136382e302f32322d3232203d3e203234323036.roa (hash: 8Z6QdZAm6ipP1goiFZjslQYb9XOb/wZyuYYrPlulaFM=)
19: 3230332e38342e3134322e302f32342d3234203d3e20313338383433.roa (hash: XBonl+MDq5JKpWntnVm6TMfayZbg8tQu2RWN6XgAyJw=)
20: 3230332e38342e3134312e302f32342d3234203d3e203234323036.roa (hash: Wij0WNmFzkS7ii03UOjMpVj1DHEK+SaLjmorAVH1mZI=)
21: 981E5677AC602950ABE1A442C2779E7CB0C108A9.crl (hash: 4ViydsmHzZGRIjYcqWumsDDhB/3EARlf8fEVwdK7Adk=)
22: 3131302e34342e3137302e302f32342d3234203d3e20313338303737.roa (hash: u/hRr1E7iAZVxPG4K+GYy4e7bkPpI7qrdTq8mm4/3Ao=)
23: 3230332e38342e3134302e302f32342d3234203d3e203234323036.roa (hash: T9tknLjTeQ+7ZUfv8SNf4lCYZ42qRdSxxizSEJYn0CA=)
24: 3131302e34342e3136382e302f32342d3234203d3e203234323036.roa (hash: H0HlMimCqXAso/aispJtA9+9Apf+w3psosa64aEPhuo=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/981E5677AC602950ABE1A442C2779E7CB0C108A9.crl
rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/981E5677AC602950ABE1A442C2779E7CB0C108A9.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/981E5677AC602950ABE1A442C2779E7CB0C108A9.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 06 Dec 2025 11:38:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:9b:1b:05:a5:03:6e:20:95:e3:66:f4:c6:f3:37:8d:e8:af:d0:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=981E5677AC602950ABE1A442C2779E7CB0C108A9
Validity
Not Before: Dec 3 10:26:24 2025 GMT
Not After : Dec 6 11:38:24 2025 GMT
Subject: CN=05475672D6924376E0F9FEE6BD08BA0D22D67135
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:1f:a9:08:94:e5:7a:cf:8d:b3:1f:bc:03:73:
2e:1b:4f:45:c3:b4:52:e3:a4:2a:2e:48:9f:c2:f3:
5f:bf:3b:7a:cd:de:5f:47:1c:1a:af:1c:79:2d:ff:
e1:b4:67:00:27:74:79:23:24:b4:76:ff:34:17:f9:
87:38:57:4b:a5:e5:11:b9:0d:1d:11:9f:ae:28:52:
52:b6:6b:bc:30:58:89:f4:eb:66:e6:e9:0c:e9:0c:
db:03:ec:98:64:79:d4:84:30:32:93:15:01:c8:3c:
66:38:fa:6c:62:91:c6:52:4b:9e:6e:48:d5:ac:49:
9f:f2:9c:31:e9:52:98:20:b9:58:bd:86:5f:42:08:
b8:b7:70:f4:19:e2:55:29:a1:5c:95:9e:47:3a:81:
e8:d9:05:ba:aa:1e:fc:82:3d:3d:c4:cc:76:80:8c:
c1:5c:26:22:1f:1e:2c:87:d0:af:32:79:bb:bc:bb:
2a:c2:76:57:37:f5:0d:78:aa:9f:1c:2f:48:98:a6:
b2:6d:32:a8:5d:8b:df:06:a9:1c:35:91:50:7f:d0:
fb:f8:cd:2f:e2:4c:ce:3c:89:f7:53:14:1e:0c:69:
6e:5f:eb:a2:60:d4:25:87:e6:7c:c6:2e:ea:76:af:
fa:a5:c1:e9:7f:6e:e8:3a:f5:73:ab:20:44:f9:44:
fe:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:47:56:72:D6:92:43:76:E0:F9:FE:E6:BD:08:BA:0D:22:D6:71:35
X509v3 Authority Key Identifier:
keyid:98:1E:56:77:AC:60:29:50:AB:E1:A4:42:C2:77:9E:7C:B0:C1:08:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/981E5677AC602950ABE1A442C2779E7CB0C108A9.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/981E5677AC602950ABE1A442C2779E7CB0C108A9.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/981E5677AC602950ABE1A442C2779E7CB0C108A9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:51:b7:00:eb:d8:9a:f8:2e:bc:87:96:d8:9a:37:5e:55:a6:
59:b5:b7:7a:29:72:01:1e:8d:b4:5c:09:0a:93:27:d0:1d:f0:
d6:8e:0f:47:25:1f:f4:a3:6d:95:ad:bb:cc:f9:41:0d:55:35:
7d:4c:b9:74:12:2b:80:cd:39:c7:62:f1:0a:a0:93:0c:30:33:
a7:85:4f:be:23:33:05:a6:52:e3:d5:fd:bb:dc:a0:36:7b:d3:
c3:2b:94:a0:67:05:68:1d:ab:b1:fb:c5:2d:ca:23:d9:43:4a:
26:16:45:95:65:59:f9:e5:ea:e9:fe:e8:4c:5b:9c:cc:7c:78:
86:88:7f:f2:4a:53:36:02:53:90:aa:56:59:24:cb:d1:fc:21:
a0:53:92:a2:a3:7a:de:c3:34:c4:f4:cc:0b:0d:1d:bf:27:a5:
18:00:3b:17:de:5e:69:84:b8:8b:a5:0d:37:c3:85:59:a6:d8:
f5:cc:34:81:69:3d:78:90:db:a9:67:b1:0f:9e:32:55:0f:a5:
b4:be:da:05:e8:db:97:61:04:2d:73:07:f2:09:15:99:23:7d:
e0:6c:53:72:0c:92:04:77:c6:19:aa:ae:6e:97:41:78:98:3c:
52:38:e5:c6:f9:86:c9:64:cb:1a:32:fc:fd:b9:11:4f:b7:ed:
a6:92:80:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 16:52:35 2025 by rpki-client