This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/fb0074cf-76dd-4097-a19b-e37e62858b24/0/C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4.mft File: C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4.mft (raw, json) Hash identifier: pdo2lzTTEJMdeV+XZ4VSLBXZlhHEaMCBhEla1ejVABA= Subject key identifier: 57:CB:D2:09:D9:3A:88:FB:3F:F7:2A:FB:A8:0E:F2:7F:51:86:FC:42 Authority key identifier: C9:8D:64:A8:C5:83:48:DE:9C:5F:8D:92:13:E7:97:EE:3B:D3:9D:A4 Certificate issuer: /CN=C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4 Certificate serial: 48242D150B1C7CF2DAD3020A512CB22660B8E9A1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fb0074cf-76dd-4097-a19b-e37e62858b24/0/C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4.mft Manifest number: 0219 Signing time: Mon 01 Dec 2025 07:31:43 +0000 Manifest this update: Mon 01 Dec 2025 07:26:43 +0000 Manifest next update: Thu 04 Dec 2025 17:10:43 +0000 Files and hashes: 1: 3130332e3139312e3132362e302f32332d3234203d3e203233393534.roa (hash: tBWugiwQMjtC5piuUMK7QRT4X1helIOcbLU7F6gO8Ao=) 2: 3130332e3139312e3132372e302f32342d3234203d3e203233393534.roa (hash: VTTQAgRENeOwajLS/6KGqVtYtu8gKZsiy/3ONlUdfPM=) 3: 3130332e3139312e3132362e302f32342d3234203d3e203233393534.roa (hash: udVekUn4TWBKeQkQYpGcF2rohkU6UK3TsyCyh6Sm1SQ=) 4: C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4.crl (hash: oHeBB6DN+GKME9uI+1cWKx08ZMsWQ3Noe5uMDB8UExU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fb0074cf-76dd-4097-a19b-e37e62858b24/0/C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4.crl rsync://repo-rpki.idnic.net/repo/fb0074cf-76dd-4097-a19b-e37e62858b24/0/C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Dec 2025 17:10:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:24:2d:15:0b:1c:7c:f2:da:d3:02:0a:51:2c:b2:26:60:b8:e9:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4 Validity Not Before: Dec 1 07:26:43 2025 GMT Not After : Dec 4 17:10:43 2025 GMT Subject: CN=57CBD209D93A88FB3FF72AFBA80EF27F5186FC42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:30:bb:0e:b9:ec:80:73:d5:0b:de:0c:48:5f: 9f:da:f9:c4:b3:f9:8a:b6:28:51:48:c8:6b:f2:51: 98:59:01:ae:6f:1e:02:95:00:bf:66:56:8b:2e:38: e5:24:ea:ee:c5:84:e2:ef:18:43:11:7e:32:10:de: 77:e9:83:c2:30:06:53:43:c2:20:4c:55:33:2c:e4: 05:d4:31:35:b1:03:8d:b4:93:4e:56:ff:47:47:b9: 57:67:88:57:fe:55:9b:80:51:4e:b2:05:8c:5a:c9: 8e:ac:35:17:4d:ce:d8:4d:f6:15:ef:df:3c:15:3e: 74:b0:dc:95:fd:3e:73:55:fe:bc:2e:e8:d1:19:aa: 5e:e4:0a:fb:77:8e:4c:1a:e5:7c:01:f6:09:78:00: 03:2c:ac:ab:9e:cb:87:0d:2c:7a:bc:ce:59:b8:3f: 3c:e3:3c:22:0e:b9:a7:36:72:f5:74:01:eb:16:9f: 62:dc:50:b1:94:57:7b:81:f4:56:38:c2:62:29:63: 59:78:d6:11:10:aa:88:f9:38:8a:80:92:7c:ff:0c: 43:0a:fd:93:5a:f2:d1:fa:8b:e7:18:ea:8c:cb:a3: 9a:4d:19:99:f8:98:fe:64:ef:6b:4a:f3:0a:7e:0d: 51:ca:0c:21:cc:d7:34:a4:33:1e:93:e4:32:b6:d2: b8:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:CB:D2:09:D9:3A:88:FB:3F:F7:2A:FB:A8:0E:F2:7F:51:86:FC:42 X509v3 Authority Key Identifier: keyid:C9:8D:64:A8:C5:83:48:DE:9C:5F:8D:92:13:E7:97:EE:3B:D3:9D:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fb0074cf-76dd-4097-a19b-e37e62858b24/0/C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fb0074cf-76dd-4097-a19b-e37e62858b24/0/C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:c9:86:36:7d:58:58:52:6a:41:9d:c8:46:d1:78:ec:b2:78: 33:c2:d1:d3:77:9b:37:0b:87:40:33:42:ae:41:78:a8:0b:e9: 5b:a9:17:83:c6:01:70:f3:16:16:2c:d8:c1:15:b0:53:ea:b9: 72:af:c4:31:d0:37:c5:72:67:b4:6a:14:48:83:50:ff:72:71: f5:1a:a5:1d:cb:7a:e2:cc:b5:7a:ac:1b:04:44:00:dd:29:03: e3:6c:18:9f:39:bc:5c:16:93:db:2f:2b:b4:21:ea:47:1e:26: 1d:bb:d8:93:28:35:cf:4c:92:39:c8:93:7d:af:27:a2:48:7b: 90:1e:57:79:ab:db:8e:36:f9:8c:20:36:9a:c2:ca:f6:fb:09: c3:f3:e3:e8:e9:69:d6:76:d8:b6:13:c6:b0:29:b2:1a:97:34: 99:cd:14:cc:21:b4:ff:f3:d9:27:79:6e:f9:51:9c:df:7f:9f: 99:c9:cc:3c:a7:5c:cb:58:e9:dc:18:6a:a7:0c:68:1c:a7:61: a9:ec:34:bb:49:ff:66:51:ce:9a:5b:26:a6:b5:fb:83:00:0f: 43:fc:90:aa:78:a8:6a:75:b6:67:6e:7a:b9:a0:00:5f:cb:b9: b4:04:d4:62:f1:3a:a8:70:14:db:cd:74:70:54:6d:71:ef:04: 70:3e:78:45 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSCQtFQscfPLa0wIKUSyyJmC46aEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzk4RDY0QThDNTgzNDhERTlDNUY4RDkyMTNFNzk3RUUz QkQzOURBNDAeFw0yNTEyMDEwNzI2NDNaFw0yNTEyMDQxNzEwNDNaMDMxMTAvBgNV BAMTKDU3Q0JEMjA5RDkzQTg4RkIzRkY3MkFGQkE4MEVGMjdGNTE4NkZDNDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMMLsOueyAc9UL3gxIX5/a+cSz +Yq2KFFIyGvyUZhZAa5vHgKVAL9mVosuOOUk6u7FhOLvGEMRfjIQ3nfpg8IwBlND wiBMVTMs5AXUMTWxA420k05W/0dHuVdniFf+VZuAUU6yBYxayY6sNRdNzthN9hXv 3zwVPnSw3JX9PnNV/rwu6NEZql7kCvt3jkwa5XwB9gl4AAMsrKuey4cNLHq8zlm4 PzzjPCIOuac2cvV0AesWn2LcULGUV3uB9FY4wmIpY1l41hEQqoj5OIqAknz/DEMK /ZNa8tH6i+cY6ozLo5pNGZn4mP5k72tK8wp+DVHKDCHM1zSkMx6T5DK20rjDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUV8vSCdk6iPs/9yr7qA7yf1GG/EIwHwYDVR0j BBgwFoAUyY1kqMWDSN6cX42SE+eX7jvTnaQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YjAwNzRjZi03NmRkLTQwOTctYTE5Yi1lMzdlNjI4NThiMjQvMC9DOThENjRBOEM1 ODM0OERFOUM1RjhEOTIxM0U3OTdFRTNCRDM5REE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzk4RDY0QThDNTgzNDhERTlDNUY4RDkyMTNFNzk3RUUzQkQz OURBNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmIwMDc0Y2YtNzZkZC00MDk3LWEx OWItZTM3ZTYyODU4YjI0LzAvQzk4RDY0QThDNTgzNDhERTlDNUY4RDkyMTNFNzk3 RUUzQkQzOURBNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACjJhjZ9WFhSakGdyEbReOyyeDPC0dN3mzcL h0AzQq5BeKgL6VupF4PGAXDzFhYs2MEVsFPquXKvxDHQN8VyZ7RqFEiDUP9ycfUa pR3LeuLMtXqsGwREAN0pA+NsGJ85vFwWk9svK7Qh6kceJh272JMoNc9MkjnIk32v J6JIe5AeV3mr2442+YwgNprCyvb7CcPz4+jpadZ22LYTxrApshqXNJnNFMwhtP/z 2Sd5bvlRnN9/n5nJzDynXMtY6dwYaqcMaBynYansNLtJ/2ZRzppbJqa1+4MAD0P8 kKp4qGp1tmduermgAF/LubQE1GLxOqhwFNvNdHBUbXHvBHA+eEU= -----END CERTIFICATE-----Generated at Wed Dec 3 14:42:34 2025 by rpki-client