This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d7db6c4f-9fdf-47f6-b24c-033fe3a44d50/0/98F4C6575CF8F756A44BFFD461A09A3F38D00F04.mft File: 98F4C6575CF8F756A44BFFD461A09A3F38D00F04.mft (raw, json) Hash identifier: bjJgquVGMJHDZ54+F/GcfwDqjQvCJHMtA79wDAMQE7E= Subject key identifier: C2:53:49:CB:A6:B0:0A:6A:5D:1A:D9:B8:90:17:95:B3:C5:63:1A:31 Authority key identifier: 98:F4:C6:57:5C:F8:F7:56:A4:4B:FF:D4:61:A0:9A:3F:38:D0:0F:04 Certificate issuer: /CN=98F4C6575CF8F756A44BFFD461A09A3F38D00F04 Certificate serial: 1EA163D5DF9C05F3BBC162EDEB02E5D7026264D0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98F4C6575CF8F756A44BFFD461A09A3F38D00F04.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d7db6c4f-9fdf-47f6-b24c-033fe3a44d50/0/98F4C6575CF8F756A44BFFD461A09A3F38D00F04.mft Manifest number: E5 Signing time: Sat 31 Jan 2026 23:50:43 +0000 Manifest this update: Sat 31 Jan 2026 23:45:43 +0000 Manifest next update: Wed 04 Feb 2026 10:46:43 +0000 Files and hashes: 1: 3230332e3134322e32362e302f32342d3234203d3e20313339333731.roa (hash: rpH9eA5JvXGhTPWutHU3TmV5ebwAEez1NYeLhnW9eIM=) 2: 98F4C6575CF8F756A44BFFD461A09A3F38D00F04.crl (hash: CIR5M0cspTtzq5Wn1Hym09PxMybXyl4LVDQm+joRGZc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d7db6c4f-9fdf-47f6-b24c-033fe3a44d50/0/98F4C6575CF8F756A44BFFD461A09A3F38D00F04.crl rsync://repo-rpki.idnic.net/repo/d7db6c4f-9fdf-47f6-b24c-033fe3a44d50/0/98F4C6575CF8F756A44BFFD461A09A3F38D00F04.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98F4C6575CF8F756A44BFFD461A09A3F38D00F04.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Feb 2026 10:46:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:a1:63:d5:df:9c:05:f3:bb:c1:62:ed:eb:02:e5:d7:02:62:64:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98F4C6575CF8F756A44BFFD461A09A3F38D00F04 Validity Not Before: Jan 31 23:45:43 2026 GMT Not After : Feb 4 10:46:43 2026 GMT Subject: CN=C25349CBA6B00A6A5D1AD9B8901795B3C5631A31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:23:72:a7:57:d2:a3:99:b2:81:9e:71:71:b2: 83:cc:5c:3b:86:e5:1f:4e:29:bb:da:37:7a:ea:6d: 19:d4:bc:67:21:f4:44:ea:8f:29:d7:cf:6d:1b:cf: bf:92:80:85:2e:11:9c:ea:cd:ef:19:9c:a2:1d:05: f7:94:02:67:fa:6d:f8:b7:b9:62:a4:e7:84:09:60: d0:75:67:c7:3c:b8:2e:31:f9:3a:ba:ac:bc:97:b8: b0:41:69:bc:05:82:12:9e:cd:15:43:fa:e6:8a:42: 18:af:21:b0:70:17:b9:b3:ca:bc:c1:a1:72:eb:fb: 25:bc:ff:82:37:cd:76:43:16:74:00:16:7e:8c:31: 84:7a:11:86:ca:46:db:50:7f:b1:b9:11:63:b2:44: da:67:06:9d:cb:eb:a5:47:cb:5d:60:67:dc:14:2a: 19:e2:82:52:76:8c:cb:53:f4:1a:56:45:b1:7a:01: 07:0b:7e:7c:0e:ee:6f:3a:af:5d:19:b6:7b:7e:41: 4f:db:b6:58:03:aa:9f:80:19:37:cf:87:0c:57:5b: bf:98:d8:f8:ac:92:ac:3b:fb:f1:d6:a8:71:d4:20: 0f:c0:ec:ee:6b:bf:b2:eb:80:08:70:5e:0b:b2:e8: 63:eb:f0:23:b5:87:e1:9f:b6:c9:d5:80:0a:dd:e4: a5:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:53:49:CB:A6:B0:0A:6A:5D:1A:D9:B8:90:17:95:B3:C5:63:1A:31 X509v3 Authority Key Identifier: keyid:98:F4:C6:57:5C:F8:F7:56:A4:4B:FF:D4:61:A0:9A:3F:38:D0:0F:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d7db6c4f-9fdf-47f6-b24c-033fe3a44d50/0/98F4C6575CF8F756A44BFFD461A09A3F38D00F04.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98F4C6575CF8F756A44BFFD461A09A3F38D00F04.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d7db6c4f-9fdf-47f6-b24c-033fe3a44d50/0/98F4C6575CF8F756A44BFFD461A09A3F38D00F04.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:13:62:c0:7b:a8:b5:9e:77:39:9c:b9:01:ee:e0:11:59:d3: 00:cc:68:9b:de:1a:07:bc:ae:a0:53:5d:f5:59:bb:6c:a0:74: d6:21:bd:e6:e5:aa:c0:f0:8c:1d:d0:b0:19:6a:10:cb:b6:66: 98:04:03:1e:6c:2f:e5:88:07:76:cb:29:e7:dd:ee:9f:93:c0: e9:18:21:a5:58:6a:3d:8f:ac:73:70:8a:ba:7f:4e:05:70:01: 35:5d:41:b3:1c:9b:0d:23:f2:09:83:c3:4d:b0:d8:2e:b7:74: b3:9c:53:39:6d:fb:39:71:ee:c7:e3:09:57:ca:4a:4d:f8:53: 82:6b:7c:5e:6d:12:12:fe:9a:9e:27:f2:b5:80:17:60:11:c4: ee:cb:62:10:a2:48:4c:67:06:77:ee:7c:c6:26:ff:dc:8c:08: bc:4b:47:54:94:e7:4b:c7:cc:39:51:3a:ef:41:e9:fd:30:b1: 6e:20:61:21:a8:5c:ac:52:17:bf:13:b4:b5:5f:d5:4a:cc:c8: 59:06:99:c6:f5:39:f2:ef:33:ce:ce:9f:75:c5:c7:7c:a3:f7: 1a:46:f4:ed:6f:13:12:a9:15:a2:4e:1c:bf:24:3a:f4:6a:86: 94:33:bb:e9:2b:c1:f2:bd:a7:70:5c:b4:19:25:e9:ad:e8:4d: 80:02:9d:40 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHqFj1d+cBfO7wWLt6wLl1wJiZNAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOThGNEM2NTc1Q0Y4Rjc1NkE0NEJGRkQ0NjFBMDlBM0Yz OEQwMEYwNDAeFw0yNjAxMzEyMzQ1NDNaFw0yNjAyMDQxMDQ2NDNaMDMxMTAvBgNV BAMTKEMyNTM0OUNCQTZCMDBBNkE1RDFBRDlCODkwMTc5NUIzQzU2MzFBMzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLI3KnV9KjmbKBnnFxsoPMXDuG 5R9OKbvaN3rqbRnUvGch9ETqjynXz20bz7+SgIUuEZzqze8ZnKIdBfeUAmf6bfi3 uWKk54QJYNB1Z8c8uC4x+Tq6rLyXuLBBabwFghKezRVD+uaKQhivIbBwF7mzyrzB oXLr+yW8/4I3zXZDFnQAFn6MMYR6EYbKRttQf7G5EWOyRNpnBp3L66VHy11gZ9wU KhniglJ2jMtT9BpWRbF6AQcLfnwO7m86r10Ztnt+QU/btlgDqp+AGTfPhwxXW7+Y 2Piskqw7+/HWqHHUIA/A7O5rv7LrgAhwXguy6GPr8CO1h+GftsnVgArd5KVRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwlNJy6awCmpdGtm4kBeVs8VjGjEwHwYDVR0j BBgwFoAUmPTGV1z491akS//UYaCaPzjQDwQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k N2RiNmM0Zi05ZmRmLTQ3ZjYtYjI0Yy0wMzNmZTNhNDRkNTAvMC85OEY0QzY1NzVD RjhGNzU2QTQ0QkZGRDQ2MUEwOUEzRjM4RDAwRjA0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOThGNEM2NTc1Q0Y4Rjc1NkE0NEJGRkQ0NjFBMDlBM0YzOEQw MEYwNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDdkYjZjNGYtOWZkZi00N2Y2LWIy NGMtMDMzZmUzYTQ0ZDUwLzAvOThGNEM2NTc1Q0Y4Rjc1NkE0NEJGRkQ0NjFBMDlB M0YzOEQwMEYwNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAgTYsB7qLWedzmcuQHu4BFZ0wDMaJveGge8 rqBTXfVZu2ygdNYhveblqsDwjB3QsBlqEMu2ZpgEAx5sL+WIB3bLKefd7p+TwOkY IaVYaj2PrHNwirp/TgVwATVdQbMcmw0j8gmDw02w2C63dLOcUzlt+zlx7sfjCVfK Sk34U4JrfF5tEhL+mp4n8rWAF2ARxO7LYhCiSExnBnfufMYm/9yMCLxLR1SU50vH zDlROu9B6f0wsW4gYSGoXKxSF78TtLVf1UrMyFkGmcb1OfLvM87On3XFx3yj9xpG 9O1vExKpFaJOHL8kOvRqhpQzu+krwfK9p3BctBkl6a3oTYACnUA= -----END CERTIFICATE-----Generated at Mon Feb 2 09:57:10 2026 by rpki-client