This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d7db6c4f-9fdf-47f6-b24c-033fe3a44d50/0/98F4C6575CF8F756A44BFFD461A09A3F38D00F04.mft File: 98F4C6575CF8F756A44BFFD461A09A3F38D00F04.mft (raw, json) Hash identifier: YojGpg+AI1nfOgqzl1moDUQFFtkRi11KD32YE3+JwB4= Subject key identifier: A0:F5:BD:0E:DC:D1:F2:F6:6A:A4:45:0F:03:E6:7E:32:64:06:A7:97 Authority key identifier: 98:F4:C6:57:5C:F8:F7:56:A4:4B:FF:D4:61:A0:9A:3F:38:D0:0F:04 Certificate issuer: /CN=98F4C6575CF8F756A44BFFD461A09A3F38D00F04 Certificate serial: 7CEF4C231E4A87A075DB632AE5EE42AC348590EF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98F4C6575CF8F756A44BFFD461A09A3F38D00F04.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d7db6c4f-9fdf-47f6-b24c-033fe3a44d50/0/98F4C6575CF8F756A44BFFD461A09A3F38D00F04.mft Manifest number: CA Signing time: Tue 02 Dec 2025 23:50:43 +0000 Manifest this update: Tue 02 Dec 2025 23:45:43 +0000 Manifest next update: Sat 06 Dec 2025 00:11:43 +0000 Files and hashes: 1: 3230332e3134322e32362e302f32342d3234203d3e20313339333731.roa (hash: rpH9eA5JvXGhTPWutHU3TmV5ebwAEez1NYeLhnW9eIM=) 2: 98F4C6575CF8F756A44BFFD461A09A3F38D00F04.crl (hash: BTLFGxQmw5f1nxpk376sY6DxIxI2qs+UDGp1+i/bU64=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d7db6c4f-9fdf-47f6-b24c-033fe3a44d50/0/98F4C6575CF8F756A44BFFD461A09A3F38D00F04.crl rsync://repo-rpki.idnic.net/repo/d7db6c4f-9fdf-47f6-b24c-033fe3a44d50/0/98F4C6575CF8F756A44BFFD461A09A3F38D00F04.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98F4C6575CF8F756A44BFFD461A09A3F38D00F04.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 00:11:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:ef:4c:23:1e:4a:87:a0:75:db:63:2a:e5:ee:42:ac:34:85:90:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98F4C6575CF8F756A44BFFD461A09A3F38D00F04 Validity Not Before: Dec 2 23:45:43 2025 GMT Not After : Dec 6 00:11:43 2025 GMT Subject: CN=A0F5BD0EDCD1F2F66AA4450F03E67E326406A797 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:12:7f:ff:b6:ad:6e:ed:97:69:0a:4e:84:26: 81:92:ef:77:00:ae:fc:62:0b:41:33:f0:d2:a3:7d: f5:a0:90:02:6c:09:b7:27:cc:3f:d9:18:00:24:49: b4:ec:80:66:1f:be:97:73:08:08:cd:f6:56:54:6d: c6:96:04:19:0a:87:f7:55:2e:49:5f:9d:91:d4:33: 3a:7c:4b:d2:3f:c0:32:8c:f7:2a:35:66:bc:f8:72: e3:4e:27:84:2a:34:48:b3:76:c4:52:3c:72:f9:76: 82:83:0c:c3:c5:fc:31:91:6b:01:c1:53:60:48:36: e2:ed:ed:2f:76:c8:ac:05:20:e9:0a:1e:00:63:4b: b6:fc:60:a2:7e:18:0b:77:b7:1a:7c:f1:9a:28:21: f8:6d:3e:5f:48:aa:94:22:8d:f5:a4:b8:7b:63:c9: d7:4d:b1:44:e2:9b:ab:e9:98:52:14:b7:33:4d:18: fc:e9:02:24:92:1d:0f:11:8a:8b:ca:97:c2:c0:70: 6d:e9:eb:08:0c:aa:10:22:98:cb:5e:35:9d:85:69: 40:46:c0:68:7a:a5:52:c3:c3:37:13:7a:c6:e1:94: 91:bb:c1:7e:c4:ac:c6:fd:e2:97:eb:b3:05:f7:9f: ce:89:fd:62:92:d5:2b:ac:67:b5:c2:05:ea:53:6d: fd:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:F5:BD:0E:DC:D1:F2:F6:6A:A4:45:0F:03:E6:7E:32:64:06:A7:97 X509v3 Authority Key Identifier: keyid:98:F4:C6:57:5C:F8:F7:56:A4:4B:FF:D4:61:A0:9A:3F:38:D0:0F:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d7db6c4f-9fdf-47f6-b24c-033fe3a44d50/0/98F4C6575CF8F756A44BFFD461A09A3F38D00F04.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98F4C6575CF8F756A44BFFD461A09A3F38D00F04.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d7db6c4f-9fdf-47f6-b24c-033fe3a44d50/0/98F4C6575CF8F756A44BFFD461A09A3F38D00F04.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:a4:6a:20:07:27:41:cf:b5:98:a5:89:8b:a1:59:4a:50:67: b5:6e:41:b2:07:0e:47:cf:98:1f:c6:30:7c:cf:25:ba:39:33: fe:0a:03:f1:bc:eb:53:d1:b7:81:b0:63:80:f9:e5:fe:21:f2: 05:1f:a6:ec:81:bc:c7:bd:99:f4:ce:fe:55:38:92:45:ef:b4: f3:e7:41:7a:2a:c3:5a:01:bd:64:a6:be:d8:06:00:95:7a:f7: 0e:45:13:9c:11:d1:96:8a:0f:84:8f:f2:18:25:40:73:07:56: fd:1b:0a:e5:ed:b8:06:3b:05:81:4e:a8:ff:36:02:f7:b0:66: 4e:ed:52:57:95:55:19:02:3d:28:c1:ba:cd:b9:13:b4:ad:9c: 75:8a:7a:c5:47:bf:8f:e5:8c:3f:49:da:b5:62:5a:7d:a4:84: 6a:ed:4f:14:86:94:35:cd:83:12:9d:a0:70:b8:da:2b:4c:3b: ee:06:87:95:38:9c:0a:4b:5e:1f:6c:1e:9c:eb:6f:69:d9:51: 09:c3:e8:e6:cb:d2:23:3f:1f:58:cc:ea:e1:54:7f:aa:03:18: 2a:2f:1e:d0:7b:57:74:9a:7f:16:25:0f:d9:7c:b4:c7:b5:2e: c5:9a:d7:27:51:fb:c8:94:a6:e9:f7:62:60:67:e7:63:13:c9: b4:2d:a7:70 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfO9MIx5Kh6B122Mq5e5CrDSFkO8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOThGNEM2NTc1Q0Y4Rjc1NkE0NEJGRkQ0NjFBMDlBM0Yz OEQwMEYwNDAeFw0yNTEyMDIyMzQ1NDNaFw0yNTEyMDYwMDExNDNaMDMxMTAvBgNV BAMTKEEwRjVCRDBFRENEMUYyRjY2QUE0NDUwRjAzRTY3RTMyNjQwNkE3OTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqEn//tq1u7ZdpCk6EJoGS73cA rvxiC0Ez8NKjffWgkAJsCbcnzD/ZGAAkSbTsgGYfvpdzCAjN9lZUbcaWBBkKh/dV LklfnZHUMzp8S9I/wDKM9yo1Zrz4cuNOJ4QqNEizdsRSPHL5doKDDMPF/DGRawHB U2BINuLt7S92yKwFIOkKHgBjS7b8YKJ+GAt3txp88ZooIfhtPl9IqpQijfWkuHtj yddNsUTim6vpmFIUtzNNGPzpAiSSHQ8RiovKl8LAcG3p6wgMqhAimMteNZ2FaUBG wGh6pVLDwzcTesbhlJG7wX7ErMb94pfrswX3n86J/WKS1SusZ7XCBepTbf0/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoPW9DtzR8vZqpEUPA+Z+MmQGp5cwHwYDVR0j BBgwFoAUmPTGV1z491akS//UYaCaPzjQDwQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k N2RiNmM0Zi05ZmRmLTQ3ZjYtYjI0Yy0wMzNmZTNhNDRkNTAvMC85OEY0QzY1NzVD RjhGNzU2QTQ0QkZGRDQ2MUEwOUEzRjM4RDAwRjA0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOThGNEM2NTc1Q0Y4Rjc1NkE0NEJGRkQ0NjFBMDlBM0YzOEQw MEYwNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDdkYjZjNGYtOWZkZi00N2Y2LWIy NGMtMDMzZmUzYTQ0ZDUwLzAvOThGNEM2NTc1Q0Y4Rjc1NkE0NEJGRkQ0NjFBMDlB M0YzOEQwMEYwNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEukaiAHJ0HPtZiliYuhWUpQZ7VuQbIHDkfP mB/GMHzPJbo5M/4KA/G861PRt4GwY4D55f4h8gUfpuyBvMe9mfTO/lU4kkXvtPPn QXoqw1oBvWSmvtgGAJV69w5FE5wR0ZaKD4SP8hglQHMHVv0bCuXtuAY7BYFOqP82 AvewZk7tUleVVRkCPSjBus25E7StnHWKesVHv4/ljD9J2rViWn2khGrtTxSGlDXN gxKdoHC42itMO+4Gh5U4nApLXh9sHpzrb2nZUQnD6ObL0iM/H1jM6uFUf6oDGCov HtB7V3SafxYlD9l8tMe1LsWa1ydR+8iUpun3YmBn52MTybQtp3A= -----END CERTIFICATE-----Generated at Wed Dec 3 15:28:31 2025 by rpki-client