This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/dbff1b3f-1190-4119-bbc6-1417df8aa258/0/89B98D1F135A7FC66C0284C34477C19604645554.mft File: 89B98D1F135A7FC66C0284C34477C19604645554.mft (raw, json) Hash identifier: iB3jZQDm66rLWCZgUEtSQKkMy0I8O7tyrljNMKEBddY= Subject key identifier: 42:0F:5B:8C:6B:4A:8D:42:4A:1E:B0:8D:6E:35:10:AF:13:16:72:B6 Authority key identifier: 89:B9:8D:1F:13:5A:7F:C6:6C:02:84:C3:44:77:C1:96:04:64:55:54 Certificate issuer: /CN=89B98D1F135A7FC66C0284C34477C19604645554 Certificate serial: 5D36C5E9AF20FD7A5DB97C48945EFC31A04DBF19 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/89B98D1F135A7FC66C0284C34477C19604645554.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dbff1b3f-1190-4119-bbc6-1417df8aa258/0/89B98D1F135A7FC66C0284C34477C19604645554.mft Manifest number: 01B3 Signing time: Tue 02 Dec 2025 10:02:25 +0000 Manifest this update: Tue 02 Dec 2025 09:57:25 +0000 Manifest next update: Fri 05 Dec 2025 21:15:25 +0000 Files and hashes: 1: 89B98D1F135A7FC66C0284C34477C19604645554.crl (hash: N9JsHnnwsrMIvtu0MQTrHfAN0ECOMEtyX1YwLVqfH5k=) 2: 3130332e37392e3233362e302f32332d3233203d3e20313530393535.roa (hash: ThDgpbBTSfRRealh0FHjoyTHcEPiBLGvmWH7tSYcxdE=) 3: 3130332e37392e3233372e302f32342d3234203d3e20313530393535.roa (hash: 2IWnXxowwOlz7I18Z25U30dGHsj5oRHYQH7WRuuUzKo=) 4: 3130332e37392e3233362e302f32342d3234203d3e20313530393535.roa (hash: onZqAL56YoMix5wpV03h5e8xuAaImMliGkPVBv6grnU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dbff1b3f-1190-4119-bbc6-1417df8aa258/0/89B98D1F135A7FC66C0284C34477C19604645554.crl rsync://repo-rpki.idnic.net/repo/dbff1b3f-1190-4119-bbc6-1417df8aa258/0/89B98D1F135A7FC66C0284C34477C19604645554.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/89B98D1F135A7FC66C0284C34477C19604645554.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 21:15:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:36:c5:e9:af:20:fd:7a:5d:b9:7c:48:94:5e:fc:31:a0:4d:bf:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89B98D1F135A7FC66C0284C34477C19604645554 Validity Not Before: Dec 2 09:57:25 2025 GMT Not After : Dec 5 21:15:25 2025 GMT Subject: CN=420F5B8C6B4A8D424A1EB08D6E3510AF131672B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:0e:15:42:20:ec:29:7a:7b:a3:8f:db:1f:ba: 5c:e3:62:28:48:4d:cc:93:a7:94:54:b1:cf:bd:15: f9:e3:65:ee:be:a1:4a:ce:92:24:7e:3f:17:74:1d: 2e:87:11:d3:a9:50:29:f5:3f:73:98:b6:79:ec:79: c9:d7:8e:0d:9b:bc:2a:45:d3:2f:c3:4a:63:e1:ad: b4:a3:90:dd:85:93:4d:72:50:ec:6b:d8:d2:f2:a6: 11:87:36:fb:84:79:38:f6:d9:52:6f:88:9a:11:86: 52:59:70:2e:99:b2:01:21:72:86:aa:1d:aa:32:6a: f7:f7:32:c3:6e:c8:87:c5:82:e9:72:5c:dc:70:f2: be:9a:2e:51:b2:88:be:5e:b9:d9:0f:9f:0d:99:97: ea:15:f8:65:25:3e:8b:13:39:2d:d8:0d:86:11:6d: 58:03:98:9b:65:f7:f3:c8:60:4c:7e:29:4d:e9:07: ce:fa:96:bc:8b:46:a4:2b:10:ea:e8:e5:29:92:74: 9e:08:13:6d:0b:0e:ee:30:22:13:d0:87:b7:64:ac: 4f:2b:54:cb:0c:83:fb:b8:ac:11:ff:2f:07:02:1e: 95:39:0b:f1:e8:0e:3b:f5:79:e9:0a:cb:2d:a9:1f: 92:a2:14:38:67:3b:61:54:30:d2:41:55:6e:a1:7c: 83:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:0F:5B:8C:6B:4A:8D:42:4A:1E:B0:8D:6E:35:10:AF:13:16:72:B6 X509v3 Authority Key Identifier: keyid:89:B9:8D:1F:13:5A:7F:C6:6C:02:84:C3:44:77:C1:96:04:64:55:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dbff1b3f-1190-4119-bbc6-1417df8aa258/0/89B98D1F135A7FC66C0284C34477C19604645554.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/89B98D1F135A7FC66C0284C34477C19604645554.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dbff1b3f-1190-4119-bbc6-1417df8aa258/0/89B98D1F135A7FC66C0284C34477C19604645554.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:32:87:4d:fb:aa:d0:44:c8:0d:c5:e2:af:f9:5e:0a:5f:40: 3a:9b:ae:8a:9a:97:00:1f:96:66:03:b9:66:34:6d:31:fa:1f: 67:fb:7c:11:3b:38:28:ef:c1:c5:62:0e:3e:ac:6b:b8:1d:b7: 36:6f:ba:2d:a3:53:cc:c6:93:ff:67:a8:50:8c:0b:15:b4:5e: 92:b1:e2:d0:9b:43:6b:12:95:c4:82:63:8b:71:7b:b4:8e:cd: 73:39:a5:08:41:cc:8b:e9:d4:d7:45:3f:3f:c9:d0:e8:be:5b: 2d:ec:fb:af:fa:5a:16:4e:09:5c:60:cf:ae:4a:9d:b1:6d:af: bb:9d:ba:2c:cf:63:6e:39:6b:14:8b:da:f0:43:8f:81:b3:71: 0b:86:7b:8a:1d:00:a6:c5:56:08:dc:32:a4:a1:12:45:23:9f: d0:2a:9f:f6:74:77:cd:25:83:b4:63:27:13:54:e1:ce:4f:a2: 23:5e:0a:06:22:e4:a8:10:cc:8c:78:6f:59:b9:50:c2:39:74: f4:af:98:bb:f7:76:9d:57:ac:3f:a4:21:0b:6f:37:c6:a6:d7: 95:49:0b:87:93:f0:3b:9e:d9:c8:37:25:d6:6f:a0:d0:94:db: dd:a6:2b:2c:6b:86:cc:7f:a4:6a:f8:ea:40:60:58:bf:90:41: ef:58:b2:60 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXTbF6a8g/XpduXxIlF78MaBNvxkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODlCOThEMUYxMzVBN0ZDNjZDMDI4NEMzNDQ3N0MxOTYw NDY0NTU1NDAeFw0yNTEyMDIwOTU3MjVaFw0yNTEyMDUyMTE1MjVaMDMxMTAvBgNV BAMTKDQyMEY1QjhDNkI0QThENDI0QTFFQjA4RDZFMzUxMEFGMTMxNjcyQjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgDhVCIOwpenujj9sfulzjYihI TcyTp5RUsc+9FfnjZe6+oUrOkiR+Pxd0HS6HEdOpUCn1P3OYtnnsecnXjg2bvCpF 0y/DSmPhrbSjkN2Fk01yUOxr2NLyphGHNvuEeTj22VJviJoRhlJZcC6ZsgEhcoaq Haoyavf3MsNuyIfFgulyXNxw8r6aLlGyiL5eudkPnw2Zl+oV+GUlPosTOS3YDYYR bVgDmJtl9/PIYEx+KU3pB876lryLRqQrEOro5SmSdJ4IE20LDu4wIhPQh7dkrE8r VMsMg/u4rBH/LwcCHpU5C/HoDjv1eekKyy2pH5KiFDhnO2FUMNJBVW6hfIM5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQg9bjGtKjUJKHrCNbjUQrxMWcrYwHwYDVR0j BBgwFoAUibmNHxNaf8ZsAoTDRHfBlgRkVVQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YmZmMWIzZi0xMTkwLTQxMTktYmJjNi0xNDE3ZGY4YWEyNTgvMC84OUI5OEQxRjEz NUE3RkM2NkMwMjg0QzM0NDc3QzE5NjA0NjQ1NTU0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODlCOThEMUYxMzVBN0ZDNjZDMDI4NEMzNDQ3N0MxOTYwNDY0 NTU1NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGJmZjFiM2YtMTE5MC00MTE5LWJi YzYtMTQxN2RmOGFhMjU4LzAvODlCOThEMUYxMzVBN0ZDNjZDMDI4NEMzNDQ3N0Mx OTYwNDY0NTU1NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEAyh037qtBEyA3F4q/5XgpfQDqbroqalwAf lmYDuWY0bTH6H2f7fBE7OCjvwcViDj6sa7gdtzZvui2jU8zGk/9nqFCMCxW0XpKx 4tCbQ2sSlcSCY4txe7SOzXM5pQhBzIvp1NdFPz/J0Oi+Wy3s+6/6WhZOCVxgz65K nbFtr7uduizPY245axSL2vBDj4GzcQuGe4odAKbFVgjcMqShEkUjn9Aqn/Z0d80l g7RjJxNU4c5PoiNeCgYi5KgQzIx4b1m5UMI5dPSvmLv3dp1XrD+kIQtvN8am15VJ C4eT8Due2cg3JdZvoNCU292mKyxrhsx/pGr46kBgWL+QQe9YsmA= -----END CERTIFICATE-----Generated at Wed Dec 3 14:14:39 2025 by rpki-client