This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/3162d15b-102b-431f-a539-0a932b31366c/0/986EFE1C2BB8B0E4E1472E9DAA5B775AA4F6689F.mft File: 986EFE1C2BB8B0E4E1472E9DAA5B775AA4F6689F.mft (raw, json) Hash identifier: stkxq6HQbW5YNtHHnQ8Xe4fQ1g3dRzftjqG+GAxpHLE= Subject key identifier: 37:63:39:5F:FC:F2:AE:66:8F:06:1F:A1:6C:95:56:E0:E8:B5:E0:A2 Authority key identifier: 98:6E:FE:1C:2B:B8:B0:E4:E1:47:2E:9D:AA:5B:77:5A:A4:F6:68:9F Certificate issuer: /CN=986EFE1C2BB8B0E4E1472E9DAA5B775AA4F6689F Certificate serial: 55BC873067029F93D23323692291161DD53271B8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/986EFE1C2BB8B0E4E1472E9DAA5B775AA4F6689F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3162d15b-102b-431f-a539-0a932b31366c/0/986EFE1C2BB8B0E4E1472E9DAA5B775AA4F6689F.mft Manifest number: 0534 Signing time: Wed 24 Dec 2025 21:31:43 +0000 Manifest this update: Wed 24 Dec 2025 21:26:43 +0000 Manifest next update: Sun 28 Dec 2025 08:42:43 +0000 Files and hashes: 1: 986EFE1C2BB8B0E4E1472E9DAA5B775AA4F6689F.crl (hash: VDub3gBIO+3T4+RYuEFoXfcdhbsQh3xSwovHRPTh+sE=) 2: 323030313a6466373a336230303a3a2f34382d3438203d3e20313338313037.roa (hash: 5ZMFCFB2Z2k1wsOQD3WlLnfBqmNmCDqFjaN+cKeJCYg=) 3: 3130332e3132362e35362e302f32322d3234203d3e20313338313037.roa (hash: PNy2Ky9qBufKbv/f4p4dFdjvMCRYXe8YTpQCXZbAHQM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3162d15b-102b-431f-a539-0a932b31366c/0/986EFE1C2BB8B0E4E1472E9DAA5B775AA4F6689F.crl rsync://repo-rpki.idnic.net/repo/3162d15b-102b-431f-a539-0a932b31366c/0/986EFE1C2BB8B0E4E1472E9DAA5B775AA4F6689F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/986EFE1C2BB8B0E4E1472E9DAA5B775AA4F6689F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 02:37:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:bc:87:30:67:02:9f:93:d2:33:23:69:22:91:16:1d:d5:32:71:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=986EFE1C2BB8B0E4E1472E9DAA5B775AA4F6689F Validity Not Before: Dec 24 21:26:43 2025 GMT Not After : Dec 28 08:42:43 2025 GMT Subject: CN=3763395FFCF2AE668F061FA16C9556E0E8B5E0A2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:1e:2e:a7:35:72:c4:bc:ad:aa:16:14:70:51: 34:7e:ff:ed:c8:75:93:d7:5a:9b:ae:3b:78:d0:ae: f1:db:c1:9a:5d:45:ad:82:05:10:07:ae:98:d5:0e: e1:ad:0e:05:39:3c:a7:11:12:77:20:7d:f1:e5:e3: cc:62:47:12:45:6f:c6:fd:04:87:24:c9:a7:fd:a1: a9:3f:4f:30:47:ca:b0:ed:24:72:15:37:cf:0a:9a: 86:ae:31:ea:23:de:9e:d3:6a:4d:ad:11:7f:87:1f: c2:9e:12:b4:60:0d:f8:8f:6c:58:dd:d4:d0:9a:fd: f2:20:d8:cc:cc:54:24:d5:7b:c0:e1:13:c4:51:ad: 8d:05:f0:9d:8c:51:28:00:7e:cf:31:54:52:3a:1c: cd:b2:b2:d4:0a:03:ae:6c:34:ed:ca:00:4d:2a:36: c1:3b:27:7d:9c:42:ba:1a:b4:f2:32:38:12:ab:dd: 41:0f:2c:5d:52:e0:14:c1:94:ec:3d:e5:18:e4:eb: b5:37:a9:2c:44:d2:87:22:18:24:b1:1f:c6:a4:47: 2b:82:3f:38:3c:d8:b4:ba:09:29:af:85:77:49:73: 6c:b6:70:6a:28:43:cc:ad:68:85:44:56:45:20:c2: 35:9e:ef:04:d4:5c:49:36:7d:a7:6b:95:7b:49:d3: 93:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:63:39:5F:FC:F2:AE:66:8F:06:1F:A1:6C:95:56:E0:E8:B5:E0:A2 X509v3 Authority Key Identifier: keyid:98:6E:FE:1C:2B:B8:B0:E4:E1:47:2E:9D:AA:5B:77:5A:A4:F6:68:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3162d15b-102b-431f-a539-0a932b31366c/0/986EFE1C2BB8B0E4E1472E9DAA5B775AA4F6689F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/986EFE1C2BB8B0E4E1472E9DAA5B775AA4F6689F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3162d15b-102b-431f-a539-0a932b31366c/0/986EFE1C2BB8B0E4E1472E9DAA5B775AA4F6689F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:6a:a1:ae:8e:d4:7d:93:34:6a:ba:6b:fa:8a:f9:13:35:c8: 4b:a0:32:f3:3a:63:05:23:9d:a7:91:90:11:43:fa:0e:14:aa: 41:7c:46:a8:cb:c7:33:5b:37:e4:ef:c9:fb:fb:1e:1b:77:67: 0f:7d:bc:ce:91:fc:f8:71:28:9b:50:f7:a4:6f:13:64:19:8d: 41:ca:e8:df:34:a3:c6:3e:fe:0a:94:22:84:1b:2d:8e:dc:18: 5b:7b:55:df:23:2b:a4:17:af:83:84:0c:2b:b0:4b:5a:aa:88: 41:91:50:60:f8:b8:3c:c6:11:0f:f8:a3:9f:78:bc:65:a0:b5: 9c:87:ca:5f:d7:3a:09:24:cc:25:4a:eb:2f:6b:93:46:14:9b: cb:e5:eb:2e:59:2a:62:97:ae:da:83:aa:07:4c:2a:71:11:f3: 5b:c5:ea:24:7f:e9:50:56:23:d9:ac:30:98:9f:49:44:1c:0f: bc:84:0e:80:17:c5:c0:7e:cd:cf:72:63:10:2e:2e:d8:c9:bc: 46:d5:4c:94:0f:39:d1:ed:80:ef:20:87:71:ab:1b:07:66:4d: 71:3b:c3:84:ad:f0:f8:50:a3:0e:6b:12:63:39:b3:4f:9d:77: aa:f5:c4:d0:a0:8d:ec:07:a1:f0:0f:05:b0:78:38:1e:46:f7: e1:01:8d:03 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVbyHMGcCn5PSMyNpIpEWHdUycbgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTg2RUZFMUMyQkI4QjBFNEUxNDcyRTlEQUE1Qjc3NUFB NEY2Njg5RjAeFw0yNTEyMjQyMTI2NDNaFw0yNTEyMjgwODQyNDNaMDMxMTAvBgNV BAMTKDM3NjMzOTVGRkNGMkFFNjY4RjA2MUZBMTZDOTU1NkUwRThCNUUwQTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMHi6nNXLEvK2qFhRwUTR+/+3I dZPXWpuuO3jQrvHbwZpdRa2CBRAHrpjVDuGtDgU5PKcREncgffHl48xiRxJFb8b9 BIckyaf9oak/TzBHyrDtJHIVN88KmoauMeoj3p7Tak2tEX+HH8KeErRgDfiPbFjd 1NCa/fIg2MzMVCTVe8DhE8RRrY0F8J2MUSgAfs8xVFI6HM2ystQKA65sNO3KAE0q NsE7J32cQroatPIyOBKr3UEPLF1S4BTBlOw95Rjk67U3qSxE0ociGCSxH8akRyuC Pzg82LS6CSmvhXdJc2y2cGooQ8ytaIVEVkUgwjWe7wTUXEk2fadrlXtJ05PrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUN2M5X/zyrmaPBh+hbJVW4Oi14KIwHwYDVR0j BBgwFoAUmG7+HCu4sOThRy6dqlt3WqT2aJ8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MTYyZDE1Yi0xMDJiLTQzMWYtYTUzOS0wYTkzMmIzMTM2NmMvMC85ODZFRkUxQzJC QjhCMEU0RTE0NzJFOURBQTVCNzc1QUE0RjY2ODlGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTg2RUZFMUMyQkI4QjBFNEUxNDcyRTlEQUE1Qjc3NUFBNEY2 Njg5Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzE2MmQxNWItMTAyYi00MzFmLWE1 MzktMGE5MzJiMzEzNjZjLzAvOTg2RUZFMUMyQkI4QjBFNEUxNDcyRTlEQUE1Qjc3 NUFBNEY2Njg5Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAZqoa6O1H2TNGq6a/qK+RM1yEugMvM6YwUj naeRkBFD+g4UqkF8RqjLxzNbN+Tvyfv7Hht3Zw99vM6R/PhxKJtQ96RvE2QZjUHK 6N80o8Y+/gqUIoQbLY7cGFt7Vd8jK6QXr4OEDCuwS1qqiEGRUGD4uDzGEQ/4o594 vGWgtZyHyl/XOgkkzCVK6y9rk0YUm8vl6y5ZKmKXrtqDqgdMKnER81vF6iR/6VBW I9msMJifSUQcD7yEDoAXxcB+zc9yYxAuLtjJvEbVTJQPOdHtgO8gh3GrGwdmTXE7 w4St8PhQow5rEmM5s0+dd6r1xNCgjewHofAPBbB4OB5G9+EBjQM= -----END CERTIFICATE-----Generated at Thu Dec 25 00:42:32 2025 by rpki-client