This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/53b146a2-7715-459f-8244-8b32a364663c/0/98F94938EA9072872BE06639F79DC61C000F849C.mft File: 98F94938EA9072872BE06639F79DC61C000F849C.mft (raw, json) Hash identifier: eCyqQELC7gLhnz4iA/U80nYLyIvtTeDVp7kjEynhHZE= Subject key identifier: 4F:97:DA:33:D1:4F:17:42:C6:9B:61:D8:D7:BC:87:5C:B6:1F:8B:49 Authority key identifier: 98:F9:49:38:EA:90:72:87:2B:E0:66:39:F7:9D:C6:1C:00:0F:84:9C Certificate issuer: /CN=98F94938EA9072872BE06639F79DC61C000F849C Certificate serial: 0B4D7E2A9FF420F6A61D55AAC0AFB59972C8714C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98F94938EA9072872BE06639F79DC61C000F849C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/53b146a2-7715-459f-8244-8b32a364663c/0/98F94938EA9072872BE06639F79DC61C000F849C.mft Manifest number: 0535 Signing time: Thu 18 Dec 2025 19:30:10 +0000 Manifest this update: Thu 18 Dec 2025 19:25:10 +0000 Manifest next update: Sun 21 Dec 2025 20:52:10 +0000 Files and hashes: 1: 3130332e3132312e3134382e302f32332d3233203d3e203538333639.roa (hash: 1MO7kNfuZHEztN7LWlrlsKvsPX1c2EMnYyDa6xlPz/k=) 2: 3130332e3132312e3134392e302f32342d3234203d3e203538333639.roa (hash: M8bRC4wiSLB6e2iwcZHOvqYaGOdNzRxUPpYTKPxu050=) 3: 98F94938EA9072872BE06639F79DC61C000F849C.crl (hash: 9Y1lLHy8ZYTjazjMJdGngBP+MgcAqgWy2Q9v+BOmpZE=) 4: 3130332e3132312e3134382e302f32342d3234203d3e203538333639.roa (hash: sb1oa9JahKggAJqL+2P4wHzELfKnqVAcTcFhItAaTrg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/53b146a2-7715-459f-8244-8b32a364663c/0/98F94938EA9072872BE06639F79DC61C000F849C.crl rsync://repo-rpki.idnic.net/repo/53b146a2-7715-459f-8244-8b32a364663c/0/98F94938EA9072872BE06639F79DC61C000F849C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98F94938EA9072872BE06639F79DC61C000F849C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 20:52:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:4d:7e:2a:9f:f4:20:f6:a6:1d:55:aa:c0:af:b5:99:72:c8:71:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98F94938EA9072872BE06639F79DC61C000F849C Validity Not Before: Dec 18 19:25:10 2025 GMT Not After : Dec 21 20:52:10 2025 GMT Subject: CN=4F97DA33D14F1742C69B61D8D7BC875CB61F8B49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:d7:2e:b2:ee:81:78:d9:b2:5a:42:95:31:2a: f9:58:87:f2:c5:aa:43:af:2a:b8:36:e1:57:ac:0e: 84:3a:c9:44:bf:61:97:b6:f4:dd:76:71:c6:03:b5: 2e:1a:35:02:20:9b:4e:fa:f4:ba:ca:f8:16:28:a7: c6:67:f0:02:a4:68:75:9c:6c:55:d2:ca:d4:5a:bd: 81:c5:a6:03:8e:d8:b8:d4:f1:0f:14:8b:10:50:bf: d5:85:b2:70:68:6f:0a:34:7f:b5:6a:f2:dc:5a:86: f3:5b:a2:29:2b:43:d0:72:42:43:0a:b8:9b:23:77: be:4b:04:34:0f:bc:12:fd:ec:d5:2b:79:b7:fd:65: 4c:74:a0:0c:20:aa:28:46:72:1c:d6:c3:f8:28:8e: 1b:1a:0b:19:8d:15:71:eb:13:4b:49:83:9b:c3:17: 6e:06:5c:2e:e2:23:d4:02:96:ff:5f:7f:7f:69:39: 58:60:52:a8:6b:15:34:df:f4:42:3e:2a:53:49:1d: ca:59:90:8e:5f:34:60:e1:c3:7b:bf:ed:1a:f5:14: c3:1a:89:f8:87:c4:0f:ef:02:0a:45:f9:33:4a:c2: c3:78:f7:39:31:77:6c:e2:e6:b3:2d:d6:3f:b8:7b: ca:31:26:d6:a3:e1:b8:7d:20:31:9e:7d:c8:3e:ff: 4e:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:97:DA:33:D1:4F:17:42:C6:9B:61:D8:D7:BC:87:5C:B6:1F:8B:49 X509v3 Authority Key Identifier: keyid:98:F9:49:38:EA:90:72:87:2B:E0:66:39:F7:9D:C6:1C:00:0F:84:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/53b146a2-7715-459f-8244-8b32a364663c/0/98F94938EA9072872BE06639F79DC61C000F849C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98F94938EA9072872BE06639F79DC61C000F849C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/53b146a2-7715-459f-8244-8b32a364663c/0/98F94938EA9072872BE06639F79DC61C000F849C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:4b:0b:6b:e8:97:c6:25:38:88:73:6c:5d:94:26:b2:0d:29: a6:ef:3e:f2:cd:42:e8:a8:b5:9b:f0:b7:bd:48:1b:75:18:93: 3f:d2:d7:69:d0:ca:77:6a:94:e7:b0:aa:2b:01:5d:ed:5a:fb: 2c:ea:0d:f1:04:a2:e9:ab:de:6f:eb:9a:72:1f:9e:6b:db:9a: 48:06:c7:e3:0b:29:db:5b:7d:b4:70:c1:2d:f3:75:f3:93:db: b5:bb:00:5c:68:fb:de:8e:52:47:42:4c:f9:cd:53:29:e7:2d: e8:07:aa:92:98:1c:01:05:94:a6:7f:4b:c4:a4:88:3b:7a:5e: 08:52:aa:df:cb:6a:50:1c:a5:0d:15:97:db:5e:b8:38:67:e8: 1e:48:57:6d:81:b5:47:cb:c3:7e:23:e0:bb:f5:03:9e:1f:3c: b5:9c:8b:d5:6b:57:a5:f2:44:6c:70:08:ed:7d:d4:c2:bb:31: b5:28:e5:a4:b5:94:7c:ff:9d:3e:eb:2e:b4:c8:33:0f:85:e8: ee:8d:a9:42:91:37:d3:8f:b6:91:da:74:f6:92:a6:9b:94:74: db:5c:64:b0:59:13:e0:55:db:1e:7b:be:34:76:18:62:8b:7a: 9e:e9:9b:22:45:3b:2b:6d:fb:7c:0e:97:f9:86:39:b2:92:f2: 8a:6e:7b:fe -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC01+Kp/0IPamHVWqwK+1mXLIcUwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOThGOTQ5MzhFQTkwNzI4NzJCRTA2NjM5Rjc5REM2MUMw MDBGODQ5QzAeFw0yNTEyMTgxOTI1MTBaFw0yNTEyMjEyMDUyMTBaMDMxMTAvBgNV BAMTKDRGOTdEQTMzRDE0RjE3NDJDNjlCNjFEOEQ3QkM4NzVDQjYxRjhCNDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC91y6y7oF42bJaQpUxKvlYh/LF qkOvKrg24VesDoQ6yUS/YZe29N12ccYDtS4aNQIgm0769LrK+BYop8Zn8AKkaHWc bFXSytRavYHFpgOO2LjU8Q8UixBQv9WFsnBobwo0f7Vq8txahvNboikrQ9ByQkMK uJsjd75LBDQPvBL97NUrebf9ZUx0oAwgqihGchzWw/gojhsaCxmNFXHrE0tJg5vD F24GXC7iI9QClv9ff39pOVhgUqhrFTTf9EI+KlNJHcpZkI5fNGDhw3u/7Rr1FMMa ifiHxA/vAgpF+TNKwsN49zkxd2zi5rMt1j+4e8oxJtaj4bh9IDGefcg+/04tAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUT5faM9FPF0LGm2HY17yHXLYfi0kwHwYDVR0j BBgwFoAUmPlJOOqQcocr4GY5953GHAAPhJwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 M2IxNDZhMi03NzE1LTQ1OWYtODI0NC04YjMyYTM2NDY2M2MvMC85OEY5NDkzOEVB OTA3Mjg3MkJFMDY2MzlGNzlEQzYxQzAwMEY4NDlDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOThGOTQ5MzhFQTkwNzI4NzJCRTA2NjM5Rjc5REM2MUMwMDBG ODQ5Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTNiMTQ2YTItNzcxNS00NTlmLTgy NDQtOGIzMmEzNjQ2NjNjLzAvOThGOTQ5MzhFQTkwNzI4NzJCRTA2NjM5Rjc5REM2 MUMwMDBGODQ5Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKZLC2vol8YlOIhzbF2UJrINKabvPvLNQuio tZvwt71IG3UYkz/S12nQyndqlOewqisBXe1a+yzqDfEEoumr3m/rmnIfnmvbmkgG x+MLKdtbfbRwwS3zdfOT27W7AFxo+96OUkdCTPnNUynnLegHqpKYHAEFlKZ/S8Sk iDt6XghSqt/LalAcpQ0Vl9teuDhn6B5IV22BtUfLw34j4Lv1A54fPLWci9VrV6Xy RGxwCO191MK7MbUo5aS1lHz/nT7rLrTIMw+F6O6NqUKRN9OPtpHadPaSppuUdNtc ZLBZE+BV2x57vjR2GGKLep7pmyJFOytt+3wOl/mGObKS8opue/4= -----END CERTIFICATE-----Generated at Sun Dec 21 01:34:01 2025 by rpki-client