This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/31bb66d0-a933-4110-a093-038da9ec8b7e/0/98BF0C90429CA12CE1425374F5765263297D61F1.mft File: 98BF0C90429CA12CE1425374F5765263297D61F1.mft (raw, json) Hash identifier: VYs7V4s7YRcAAua9+lsjIh7k9N0VG8kw1MJmpUz+WOA= Subject key identifier: F8:92:BF:4E:B0:E2:00:52:6E:AA:21:19:9A:FC:8C:92:0A:1E:F1:FE Authority key identifier: 98:BF:0C:90:42:9C:A1:2C:E1:42:53:74:F5:76:52:63:29:7D:61:F1 Certificate issuer: /CN=98BF0C90429CA12CE1425374F5765263297D61F1 Certificate serial: 2AB06BD7E73DF4D397473A28EBA51F9EDE72A9B3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98BF0C90429CA12CE1425374F5765263297D61F1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/31bb66d0-a933-4110-a093-038da9ec8b7e/0/98BF0C90429CA12CE1425374F5765263297D61F1.mft Manifest number: 0140 Signing time: Tue 23 Dec 2025 08:21:27 +0000 Manifest this update: Tue 23 Dec 2025 08:16:27 +0000 Manifest next update: Fri 26 Dec 2025 17:48:27 +0000 Files and hashes: 1: 3231302e37392e3134372e302f32342d3234203d3e20313532303435.roa (hash: hSqv2eoQTO7JNJFj3qq3n7+1XfpnN6lz7ioOJ9M/TEg=) 2: 98BF0C90429CA12CE1425374F5765263297D61F1.crl (hash: dXI7AEaXqp5pK7/P1ZNW8NLog3/TCBGb/nY1o86hMP4=) 3: 3231302e37392e3134362e302f32342d3234203d3e20313532303435.roa (hash: Lpc33YMBjJ9T7VbHHDqwImeBd6L01sxZlRa+x954AOo=) 4: 3231302e37392e3134362e302f32332d3233203d3e20313532303435.roa (hash: z0AijCCK1naTP5YmFbSs1RtXYY5T/kLC9Gc+ZK8h2kA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/31bb66d0-a933-4110-a093-038da9ec8b7e/0/98BF0C90429CA12CE1425374F5765263297D61F1.crl rsync://repo-rpki.idnic.net/repo/31bb66d0-a933-4110-a093-038da9ec8b7e/0/98BF0C90429CA12CE1425374F5765263297D61F1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98BF0C90429CA12CE1425374F5765263297D61F1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 17:48:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:b0:6b:d7:e7:3d:f4:d3:97:47:3a:28:eb:a5:1f:9e:de:72:a9:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98BF0C90429CA12CE1425374F5765263297D61F1 Validity Not Before: Dec 23 08:16:27 2025 GMT Not After : Dec 26 17:48:27 2025 GMT Subject: CN=F892BF4EB0E200526EAA21199AFC8C920A1EF1FE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:a6:6b:ac:6d:7b:fd:35:f7:d4:7f:b4:fd:0d: e5:df:0f:49:fd:db:37:1d:e8:ae:47:47:7f:d6:b2: f3:bc:99:1e:44:1b:a2:d1:56:64:aa:d2:f9:c1:82: f1:2b:27:0d:0f:a6:de:05:8e:4b:36:c7:58:79:70: 38:2b:5b:d2:4c:a7:ca:c7:c2:87:96:b5:43:c0:f2: 5c:c1:6e:bc:47:19:72:d0:8d:31:4d:24:4b:1c:4e: fa:bd:75:78:67:8f:0c:04:00:5a:2b:2b:eb:ac:67: 8d:9d:f5:be:e2:a5:6c:84:6b:ef:ac:3d:10:35:51: 54:fd:ef:65:99:c2:45:d6:c0:66:57:1a:d5:45:4c: df:c9:e9:03:b0:14:10:7c:10:13:03:d4:b3:df:5b: bf:0a:7a:a2:a9:ea:c1:97:2c:9d:6f:df:cd:0a:e5: fe:f6:1b:00:0b:1b:e4:43:c7:eb:d6:52:4b:48:50: 03:95:fb:d7:ce:18:e8:0a:50:63:ce:a2:5e:5e:c9: e6:af:63:8f:d1:e7:d5:ff:f9:b5:7a:5f:59:c2:b8: ee:12:4c:14:dd:44:93:54:2a:7b:4a:42:0c:44:98: 89:bb:46:3f:01:e4:ad:3f:2b:ca:4d:7d:52:ec:89: a2:72:76:47:cf:e0:29:e8:a3:13:42:dd:2a:6c:45: 5f:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:92:BF:4E:B0:E2:00:52:6E:AA:21:19:9A:FC:8C:92:0A:1E:F1:FE X509v3 Authority Key Identifier: keyid:98:BF:0C:90:42:9C:A1:2C:E1:42:53:74:F5:76:52:63:29:7D:61:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/31bb66d0-a933-4110-a093-038da9ec8b7e/0/98BF0C90429CA12CE1425374F5765263297D61F1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98BF0C90429CA12CE1425374F5765263297D61F1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/31bb66d0-a933-4110-a093-038da9ec8b7e/0/98BF0C90429CA12CE1425374F5765263297D61F1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:23:bc:e5:35:bb:ca:14:b0:8e:21:66:1c:dc:a0:43:e9:d4: 6b:81:00:1d:44:14:f3:3e:bf:91:ff:45:23:b1:be:9e:cb:7c: 4f:69:74:b5:3c:ae:9a:3a:86:69:35:83:30:a0:69:47:67:8f: 11:8f:76:c9:f0:02:e4:ec:c9:a0:52:08:9b:74:b1:df:cc:2c: 54:6c:3e:ea:13:78:1a:97:94:55:88:53:ba:05:5d:dc:b1:73: 7c:bf:2c:3d:c1:ab:6f:c8:b3:7d:c0:2b:07:62:ba:86:81:59: ab:b0:1d:c4:8a:13:62:d1:1e:96:1c:2c:48:a5:50:ea:57:fe: 0a:c7:10:96:d5:55:5a:89:de:1e:92:c2:4d:52:e1:a2:27:91: 1d:0c:b6:e6:ad:87:18:82:32:9a:b3:be:a0:2c:0e:bb:32:a6: f1:76:af:ab:35:13:00:71:db:fc:79:bf:25:34:0b:6c:f3:c5: 58:2a:23:8f:e4:14:e3:ce:08:3d:38:48:46:30:1e:63:dc:ba: d8:64:5e:10:22:d4:ca:de:75:75:11:13:10:af:45:2c:a8:0b: c7:36:08:44:5d:37:d8:65:18:14:6e:d4:67:d0:2e:e8:43:05: 81:89:8f:cd:ad:51:9a:6a:36:61:a3:17:5e:30:1f:f4:7c:03: c5:7b:50:b9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKrBr1+c99NOXRzoo66Ufnt5yqbMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOThCRjBDOTA0MjlDQTEyQ0UxNDI1Mzc0RjU3NjUyNjMy OTdENjFGMTAeFw0yNTEyMjMwODE2MjdaFw0yNTEyMjYxNzQ4MjdaMDMxMTAvBgNV BAMTKEY4OTJCRjRFQjBFMjAwNTI2RUFBMjExOTlBRkM4QzkyMEExRUYxRkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2pmusbXv9NffUf7T9DeXfD0n9 2zcd6K5HR3/WsvO8mR5EG6LRVmSq0vnBgvErJw0Ppt4Fjks2x1h5cDgrW9JMp8rH woeWtUPA8lzBbrxHGXLQjTFNJEscTvq9dXhnjwwEAForK+usZ42d9b7ipWyEa++s PRA1UVT972WZwkXWwGZXGtVFTN/J6QOwFBB8EBMD1LPfW78KeqKp6sGXLJ1v380K 5f72GwALG+RDx+vWUktIUAOV+9fOGOgKUGPOol5eyeavY4/R59X/+bV6X1nCuO4S TBTdRJNUKntKQgxEmIm7Rj8B5K0/K8pNfVLsiaJydkfP4CnooxNC3SpsRV9NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+JK/TrDiAFJuqiEZmvyMkgoe8f4wHwYDVR0j BBgwFoAUmL8MkEKcoSzhQlN09XZSYyl9YfEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MWJiNjZkMC1hOTMzLTQxMTAtYTA5My0wMzhkYTllYzhiN2UvMC85OEJGMEM5MDQy OUNBMTJDRTE0MjUzNzRGNTc2NTI2MzI5N0Q2MUYxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOThCRjBDOTA0MjlDQTEyQ0UxNDI1Mzc0RjU3NjUyNjMyOTdE NjFGMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzFiYjY2ZDAtYTkzMy00MTEwLWEw OTMtMDM4ZGE5ZWM4YjdlLzAvOThCRjBDOTA0MjlDQTEyQ0UxNDI1Mzc0RjU3NjUy NjMyOTdENjFGMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJkjvOU1u8oUsI4hZhzcoEPp1GuBAB1EFPM+ v5H/RSOxvp7LfE9pdLU8rpo6hmk1gzCgaUdnjxGPdsnwAuTsyaBSCJt0sd/MLFRs PuoTeBqXlFWIU7oFXdyxc3y/LD3Bq2/Is33AKwdiuoaBWauwHcSKE2LRHpYcLEil UOpX/grHEJbVVVqJ3h6Swk1S4aInkR0MtuathxiCMpqzvqAsDrsypvF2r6s1EwBx 2/x5vyU0C2zzxVgqI4/kFOPOCD04SEYwHmPcuthkXhAi1MredXURExCvRSyoC8c2 CERdN9hlGBRu1GfQLuhDBYGJj82tUZpqNmGjF14wH/R8A8V7ULk= -----END CERTIFICATE-----Generated at Thu Dec 25 00:41:47 2025 by rpki-client