This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/14258e5c-0456-46a3-9632-709c767104bb/0/89DCD9E9EB542D202BA36CB44CE75AD743EF544E.mft File: 89DCD9E9EB542D202BA36CB44CE75AD743EF544E.mft (raw, json) Hash identifier: mOpsmuV8wGLb7gMSA7BgQm9hhDSHcqq8mbXWiD3wFQA= Subject key identifier: 93:EC:B8:C6:2E:72:94:1F:36:82:65:EA:5B:BA:C9:C3:39:12:60:C6 Authority key identifier: 89:DC:D9:E9:EB:54:2D:20:2B:A3:6C:B4:4C:E7:5A:D7:43:EF:54:4E Certificate issuer: /CN=89DCD9E9EB542D202BA36CB44CE75AD743EF544E Certificate serial: 3DB3EC7EB481A1CEAF08144AF35C0F43944A87BE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/89DCD9E9EB542D202BA36CB44CE75AD743EF544E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/14258e5c-0456-46a3-9632-709c767104bb/0/89DCD9E9EB542D202BA36CB44CE75AD743EF544E.mft Manifest number: 0131 Signing time: Wed 24 Dec 2025 16:20:24 +0000 Manifest this update: Wed 24 Dec 2025 16:15:24 +0000 Manifest next update: Sun 28 Dec 2025 02:11:24 +0000 Files and hashes: 1: 89DCD9E9EB542D202BA36CB44CE75AD743EF544E.crl (hash: b2FoanNldVVjmcNt9DmtcMfXOabToXFrUUWtx3enuys=) 2: 3135372e31302e3135382e302f32332d3233203d3e20313532333535.roa (hash: SUamCO6hFRRECd6YOsV3frJr4xTHA6yMIWiVBv2Urhg=) 3: 3135372e31302e3135392e302f32342d3234203d3e20313532333535.roa (hash: s2utPuT9/Rrfn+3q49rkE18sSG/2dm9VSsVmVu4LpF4=) 4: 3135372e31302e3135382e302f32342d3234203d3e20313532333535.roa (hash: aAScp8IjqsY2CuVPSrU8aKaQppxc8AjfgFBueh9FUNg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/14258e5c-0456-46a3-9632-709c767104bb/0/89DCD9E9EB542D202BA36CB44CE75AD743EF544E.crl rsync://repo-rpki.idnic.net/repo/14258e5c-0456-46a3-9632-709c767104bb/0/89DCD9E9EB542D202BA36CB44CE75AD743EF544E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/89DCD9E9EB542D202BA36CB44CE75AD743EF544E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 21:07:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:b3:ec:7e:b4:81:a1:ce:af:08:14:4a:f3:5c:0f:43:94:4a:87:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89DCD9E9EB542D202BA36CB44CE75AD743EF544E Validity Not Before: Dec 24 16:15:24 2025 GMT Not After : Dec 28 02:11:24 2025 GMT Subject: CN=93ECB8C62E72941F368265EA5BBAC9C3391260C6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:f4:d1:0e:d0:7e:79:eb:91:1b:19:1f:73:12: 79:23:9d:76:a6:7f:b0:79:b8:98:02:de:17:0c:1d: 9c:40:88:af:6f:d1:93:d1:4e:0d:03:7c:c8:f9:da: 13:9c:50:f8:64:f7:7d:31:b6:69:9c:8d:98:e4:43: 8a:3d:87:6b:f9:c9:be:21:e1:0b:1b:be:1e:5d:54: 1c:08:20:6e:47:de:64:49:65:88:a9:ec:50:0a:d6: 7b:32:b6:5a:08:86:f0:76:33:2f:62:58:40:ea:2d: a0:bd:fb:73:a9:7b:21:71:da:96:e8:3f:d9:a1:22: dc:e3:7c:a3:52:f2:9e:35:17:cb:29:bf:e9:23:c5: e6:1f:73:80:08:b2:a1:8b:07:ee:7d:07:e0:0d:b1: 1b:cf:0a:83:1a:14:f9:4f:e0:83:8b:7f:c1:ee:12: c5:8c:89:ce:4b:ba:9a:16:ab:d5:96:15:7e:5f:be: 4d:df:39:9f:1a:f3:38:fe:11:5a:6d:57:52:86:6c: 13:0c:86:cd:5c:c0:7a:cd:6f:61:f1:7f:82:4b:76: d2:d9:75:7a:7f:97:0d:f4:9d:45:ae:0c:19:f1:1e: 34:02:d4:3c:cf:d5:dc:62:6d:ac:9e:35:30:c7:d1: 10:8a:b3:71:ae:48:8c:7e:16:58:88:4f:db:e7:d6: fa:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:EC:B8:C6:2E:72:94:1F:36:82:65:EA:5B:BA:C9:C3:39:12:60:C6 X509v3 Authority Key Identifier: keyid:89:DC:D9:E9:EB:54:2D:20:2B:A3:6C:B4:4C:E7:5A:D7:43:EF:54:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/14258e5c-0456-46a3-9632-709c767104bb/0/89DCD9E9EB542D202BA36CB44CE75AD743EF544E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/89DCD9E9EB542D202BA36CB44CE75AD743EF544E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/14258e5c-0456-46a3-9632-709c767104bb/0/89DCD9E9EB542D202BA36CB44CE75AD743EF544E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:2e:3c:f2:1e:cb:6e:de:16:38:8d:c6:06:de:df:49:1f:c3: c5:1e:81:40:bd:3a:bc:52:de:61:02:b4:b9:fd:3b:25:98:6e: 86:4d:a6:f2:c7:e5:c6:3c:39:25:df:ec:98:9c:75:02:ea:78: 26:3f:71:dc:2d:36:9d:ef:1b:a6:41:96:5d:b9:82:ec:96:dd: a3:22:92:45:77:4f:2a:d1:3b:a1:0b:cc:0b:c2:95:04:22:7e: 60:7a:d8:09:7b:64:6e:d4:87:1f:fb:93:e4:8c:12:d5:8e:54: ce:96:e1:49:00:86:30:c9:60:9d:51:d5:25:03:bf:28:6e:7e: db:03:61:db:de:dd:17:3d:d6:19:71:25:f1:74:9e:7c:a7:bb: 41:e0:ea:f0:ed:78:df:8f:49:c9:75:9b:c7:b6:0c:2e:a5:90: 24:77:c4:3f:cb:5d:85:57:f3:c1:c1:5f:ed:fd:96:b1:47:e6: bb:70:2e:e7:23:f7:d4:55:b1:88:a5:46:7f:65:4d:5d:d0:c5: 3b:b7:d6:b8:56:31:5b:c2:ef:2e:d1:12:9f:55:1a:13:74:75: 0d:61:c7:a9:ae:09:5e:67:9c:ec:47:81:b9:56:7e:77:93:15: 45:c4:ef:5f:bb:42:37:f7:f8:13:c4:48:cc:bb:db:72:e6:76: da:ce:d5:21 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPbPsfrSBoc6vCBRK81wPQ5RKh74wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODlEQ0Q5RTlFQjU0MkQyMDJCQTM2Q0I0NENFNzVBRDc0 M0VGNTQ0RTAeFw0yNTEyMjQxNjE1MjRaFw0yNTEyMjgwMjExMjRaMDMxMTAvBgNV BAMTKDkzRUNCOEM2MkU3Mjk0MUYzNjgyNjVFQTVCQkFDOUMzMzkxMjYwQzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB9NEO0H5565EbGR9zEnkjnXam f7B5uJgC3hcMHZxAiK9v0ZPRTg0DfMj52hOcUPhk930xtmmcjZjkQ4o9h2v5yb4h 4Qsbvh5dVBwIIG5H3mRJZYip7FAK1nsytloIhvB2My9iWEDqLaC9+3OpeyFx2pbo P9mhItzjfKNS8p41F8spv+kjxeYfc4AIsqGLB+59B+ANsRvPCoMaFPlP4IOLf8Hu EsWMic5LupoWq9WWFX5fvk3fOZ8a8zj+EVptV1KGbBMMhs1cwHrNb2Hxf4JLdtLZ dXp/lw30nUWuDBnxHjQC1DzP1dxibayeNTDH0RCKs3GuSIx+FliIT9vn1vrHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUk+y4xi5ylB82gmXqW7rJwzkSYMYwHwYDVR0j BBgwFoAUidzZ6etULSAro2y0TOda10PvVE4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NDI1OGU1Yy0wNDU2LTQ2YTMtOTYzMi03MDljNzY3MTA0YmIvMC84OURDRDlFOUVC NTQyRDIwMkJBMzZDQjQ0Q0U3NUFENzQzRUY1NDRFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvODlEQ0Q5RTlFQjU0MkQyMDJCQTM2Q0I0NENFNzVBRDc0M0VG NTQ0RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTQyNThlNWMtMDQ1Ni00NmEzLTk2 MzItNzA5Yzc2NzEwNGJiLzAvODlEQ0Q5RTlFQjU0MkQyMDJCQTM2Q0I0NENFNzVB RDc0M0VGNTQ0RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKguPPIey27eFjiNxgbe30kfw8UegUC9OrxS 3mECtLn9OyWYboZNpvLH5cY8OSXf7JicdQLqeCY/cdwtNp3vG6ZBll25guyW3aMi kkV3TyrRO6ELzAvClQQifmB62Al7ZG7Uhx/7k+SMEtWOVM6W4UkAhjDJYJ1R1SUD vyhuftsDYdve3Rc91hlxJfF0nnynu0Hg6vDteN+PScl1m8e2DC6lkCR3xD/LXYVX 88HBX+39lrFH5rtwLucj99RVsYilRn9lTV3QxTu31rhWMVvC7y7REp9VGhN0dQ1h x6muCV5nnOxHgblWfneTFUXE71+7Qjf3+BPESMy723LmdtrO1SE= -----END CERTIFICATE-----Generated at Thu Dec 25 07:10:58 2025 by rpki-client