This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/aa417608-16b8-4497-81e3-947d78dbcf11/0/2098B3BD046CFFF28B48954F288A333FADDD1DE9.mft File: 2098B3BD046CFFF28B48954F288A333FADDD1DE9.mft (raw, json) Hash identifier: mL6AHKUyI84v5uY54gUCsIWCulZWha3mgOtZGhdDyf0= Subject key identifier: 11:B2:F9:85:58:6B:53:CC:F4:A8:6D:75:27:02:E3:5E:85:2E:A8:3C Authority key identifier: 20:98:B3:BD:04:6C:FF:F2:8B:48:95:4F:28:8A:33:3F:AD:DD:1D:E9 Certificate issuer: /CN=2098B3BD046CFFF28B48954F288A333FADDD1DE9 Certificate serial: 5033196A6C410AC219C04885AC041D8819050D7B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2098B3BD046CFFF28B48954F288A333FADDD1DE9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aa417608-16b8-4497-81e3-947d78dbcf11/0/2098B3BD046CFFF28B48954F288A333FADDD1DE9.mft Manifest number: C0 Signing time: Sun 07 Dec 2025 09:40:41 +0000 Manifest this update: Sun 07 Dec 2025 09:35:41 +0000 Manifest next update: Wed 10 Dec 2025 17:52:41 +0000 Files and hashes: 1: 2098B3BD046CFFF28B48954F288A333FADDD1DE9.crl (hash: fXjIw1FpVNz7v3EirZxTxyw8LEd4uiWpwni6LL96zWg=) 2: 3136302e32352e3232392e302f32342d3234203d3e20313533313036.roa (hash: ZsjBtNoWEJx2NTRYL99sTUHqHLXTfuWH/2StZO9wGXM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aa417608-16b8-4497-81e3-947d78dbcf11/0/2098B3BD046CFFF28B48954F288A333FADDD1DE9.crl rsync://repo-rpki.idnic.net/repo/aa417608-16b8-4497-81e3-947d78dbcf11/0/2098B3BD046CFFF28B48954F288A333FADDD1DE9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2098B3BD046CFFF28B48954F288A333FADDD1DE9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 06:55:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:33:19:6a:6c:41:0a:c2:19:c0:48:85:ac:04:1d:88:19:05:0d:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2098B3BD046CFFF28B48954F288A333FADDD1DE9 Validity Not Before: Dec 7 09:35:41 2025 GMT Not After : Dec 10 17:52:41 2025 GMT Subject: CN=11B2F985586B53CCF4A86D752702E35E852EA83C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:58:85:b9:47:39:ae:60:19:c9:6d:41:d0:40: bb:e5:d9:d9:0e:c2:95:e9:70:06:a4:3d:b6:f3:8f: 96:aa:b2:e4:43:59:66:65:75:e5:90:fd:b3:ea:c4: 01:a2:6d:fb:7a:55:b7:ca:b3:f1:28:f3:f9:87:17: 33:70:74:d0:a3:69:2c:6e:0c:be:15:a5:1a:f3:99: d7:3c:59:d7:95:8f:5a:31:a4:df:09:4d:c6:9d:30: d5:f1:32:da:d6:71:21:19:5d:46:ef:26:9b:31:70: 8c:0c:da:86:ac:28:c6:c3:e9:81:d7:75:fa:86:c6: a2:2a:1e:1a:79:7b:7b:a6:1b:32:57:f0:46:1f:26: e6:b0:b9:66:0b:d6:4c:9f:c7:77:9c:27:7f:12:7f: 06:c0:8f:99:dc:b0:22:b9:d1:7f:b5:a6:c1:53:85: 46:bb:92:94:61:b2:63:f8:51:c2:5a:7c:7a:cc:d7: 63:65:fb:e9:82:d9:c1:ff:e7:67:59:8f:29:1b:66: 23:cb:08:13:68:0e:0d:a0:fc:14:fd:56:eb:b2:89: 7f:02:c6:43:e1:31:fb:2f:cb:ef:be:8a:79:04:14: 3a:e9:1f:6d:43:93:29:1c:ee:f8:01:b5:ae:d3:44: 00:b9:fa:28:3f:db:8d:9c:6a:0c:87:4c:2f:a8:86: f3:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:B2:F9:85:58:6B:53:CC:F4:A8:6D:75:27:02:E3:5E:85:2E:A8:3C X509v3 Authority Key Identifier: keyid:20:98:B3:BD:04:6C:FF:F2:8B:48:95:4F:28:8A:33:3F:AD:DD:1D:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aa417608-16b8-4497-81e3-947d78dbcf11/0/2098B3BD046CFFF28B48954F288A333FADDD1DE9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2098B3BD046CFFF28B48954F288A333FADDD1DE9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aa417608-16b8-4497-81e3-947d78dbcf11/0/2098B3BD046CFFF28B48954F288A333FADDD1DE9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:46:4a:67:fb:61:77:e2:be:29:12:0b:fa:79:80:eb:d1:7e: 90:2a:87:87:01:54:86:54:52:ce:05:a1:3e:00:ba:98:fe:ed: 01:99:42:75:17:90:39:18:d2:67:f8:a2:de:5a:6d:06:26:60: 0d:86:d3:c8:40:20:c4:4b:79:bf:75:f5:54:7b:92:6d:c2:4b: 2e:f6:d0:e6:e0:bf:81:5a:68:b2:ab:25:cc:72:5a:fa:bf:cd: e0:91:6f:20:87:85:16:e4:1c:07:f5:05:05:db:ee:3d:4e:8b: 34:47:fe:20:23:3b:62:2b:ad:7c:8b:ec:ef:36:4e:ac:b7:1d: c6:6e:70:fd:97:64:ff:20:b5:3d:08:5c:dd:8e:9d:75:c8:79: 92:97:05:1d:8a:ef:9a:79:b7:5e:44:c8:9a:e4:3c:15:e1:22: 55:5b:ac:01:af:a8:df:9b:0e:c9:f4:e6:9f:71:cc:a0:71:4a: 41:f1:a0:35:39:8b:14:9c:28:9f:36:73:2b:d4:a1:61:9d:bc: 17:10:d4:a2:1d:38:0f:9a:d9:d6:bf:22:b2:8c:0f:31:a8:06: 0c:cf:4e:55:ab:95:44:a0:58:40:73:64:d4:33:3c:51:83:71: f9:d0:64:18:f5:9f:ca:64:3a:4f:7a:19:83:d9:34:ac:cb:cb: 59:b8:cf:66 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUDMZamxBCsIZwEiFrAQdiBkFDXswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjA5OEIzQkQwNDZDRkZGMjhCNDg5NTRGMjg4QTMzM0ZB REREMURFOTAeFw0yNTEyMDcwOTM1NDFaFw0yNTEyMTAxNzUyNDFaMDMxMTAvBgNV BAMTKDExQjJGOTg1NTg2QjUzQ0NGNEE4NkQ3NTI3MDJFMzVFODUyRUE4M0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXWIW5RzmuYBnJbUHQQLvl2dkO wpXpcAakPbbzj5aqsuRDWWZldeWQ/bPqxAGibft6VbfKs/Eo8/mHFzNwdNCjaSxu DL4VpRrzmdc8WdeVj1oxpN8JTcadMNXxMtrWcSEZXUbvJpsxcIwM2oasKMbD6YHX dfqGxqIqHhp5e3umGzJX8EYfJuawuWYL1kyfx3ecJ38SfwbAj5ncsCK50X+1psFT hUa7kpRhsmP4UcJafHrM12Nl++mC2cH/52dZjykbZiPLCBNoDg2g/BT9VuuyiX8C xkPhMfsvy+++inkEFDrpH21Dkykc7vgBta7TRAC5+ig/242cagyHTC+ohvOFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEbL5hVhrU8z0qG11JwLjXoUuqDwwHwYDVR0j BBgwFoAUIJizvQRs//KLSJVPKIozP63dHekwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YTQxNzYwOC0xNmI4LTQ0OTctODFlMy05NDdkNzhkYmNmMTEvMC8yMDk4QjNCRDA0 NkNGRkYyOEI0ODk1NEYyODhBMzMzRkFEREQxREU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMjA5OEIzQkQwNDZDRkZGMjhCNDg5NTRGMjg4QTMzM0ZBRERE MURFOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWE0MTc2MDgtMTZiOC00NDk3LTgx ZTMtOTQ3ZDc4ZGJjZjExLzAvMjA5OEIzQkQwNDZDRkZGMjhCNDg5NTRGMjg4QTMz M0ZBREREMURFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAElGSmf7YXfivikSC/p5gOvRfpAqh4cBVIZU Us4FoT4Aupj+7QGZQnUXkDkY0mf4ot5abQYmYA2G08hAIMRLeb919VR7km3CSy72 0Obgv4FaaLKrJcxyWvq/zeCRbyCHhRbkHAf1BQXb7j1OizRH/iAjO2IrrXyL7O82 Tqy3HcZucP2XZP8gtT0IXN2OnXXIeZKXBR2K75p5t15EyJrkPBXhIlVbrAGvqN+b Dsn05p9xzKBxSkHxoDU5ixScKJ82cyvUoWGdvBcQ1KIdOA+a2da/IrKMDzGoBgzP TlWrlUSgWEBzZNQzPFGDcfnQZBj1n8pkOk96GYPZNKzLy1m4z2Y= -----END CERTIFICATE-----Generated at Sun Dec 7 18:56:48 2025 by rpki-client