This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/53b146a2-7715-459f-8244-8b32a364663c/0/98F94938EA9072872BE06639F79DC61C000F849C.mft File: 98F94938EA9072872BE06639F79DC61C000F849C.mft (raw, json) Hash identifier: jTkwxeK2sHuANi397mGW926NYy2tl7k9Oj/MQNHDhBU= Subject key identifier: 1C:1B:3A:BF:10:AE:79:03:72:E1:45:10:9F:BC:49:E4:41:BA:43:C1 Authority key identifier: 98:F9:49:38:EA:90:72:87:2B:E0:66:39:F7:9D:C6:1C:00:0F:84:9C Certificate issuer: /CN=98F94938EA9072872BE06639F79DC61C000F849C Certificate serial: 1652F3FBC35534D546A731B8ACE3E040F95F6187 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98F94938EA9072872BE06639F79DC61C000F849C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/53b146a2-7715-459f-8244-8b32a364663c/0/98F94938EA9072872BE06639F79DC61C000F849C.mft Manifest number: 0536 Signing time: Sat 20 Dec 2025 21:00:18 +0000 Manifest this update: Sat 20 Dec 2025 20:55:18 +0000 Manifest next update: Wed 24 Dec 2025 00:52:18 +0000 Files and hashes: 1: 3130332e3132312e3134382e302f32332d3233203d3e203538333639.roa (hash: 1MO7kNfuZHEztN7LWlrlsKvsPX1c2EMnYyDa6xlPz/k=) 2: 3130332e3132312e3134392e302f32342d3234203d3e203538333639.roa (hash: M8bRC4wiSLB6e2iwcZHOvqYaGOdNzRxUPpYTKPxu050=) 3: 98F94938EA9072872BE06639F79DC61C000F849C.crl (hash: 7Kq+c3tBD9qxF74j4n7u5HRUFZV7f7g74CrcGY2XepE=) 4: 3130332e3132312e3134382e302f32342d3234203d3e203538333639.roa (hash: sb1oa9JahKggAJqL+2P4wHzELfKnqVAcTcFhItAaTrg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/53b146a2-7715-459f-8244-8b32a364663c/0/98F94938EA9072872BE06639F79DC61C000F849C.crl rsync://repo-rpki.idnic.net/repo/53b146a2-7715-459f-8244-8b32a364663c/0/98F94938EA9072872BE06639F79DC61C000F849C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98F94938EA9072872BE06639F79DC61C000F849C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Dec 2025 00:52:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:52:f3:fb:c3:55:34:d5:46:a7:31:b8:ac:e3:e0:40:f9:5f:61:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98F94938EA9072872BE06639F79DC61C000F849C Validity Not Before: Dec 20 20:55:18 2025 GMT Not After : Dec 24 00:52:18 2025 GMT Subject: CN=1C1B3ABF10AE790372E145109FBC49E441BA43C1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:9b:bd:ba:fb:d8:60:22:82:eb:e9:31:4f:36: e4:cc:dc:2c:8f:67:e0:b8:78:aa:c6:06:9f:21:a6: c1:b2:01:f4:a4:10:dc:d4:2c:4b:fd:a5:8a:b8:4b: ff:8e:18:a5:4d:e5:9e:57:a4:2e:2d:a1:52:60:df: d7:22:75:61:d1:ce:b0:78:12:0c:fd:4d:5f:3f:e3: 5a:2e:42:fe:8e:a9:03:89:d5:00:5a:aa:cb:7a:6f: 93:7f:88:15:64:0d:3c:fe:99:74:2c:73:a1:71:59: b2:28:55:4f:02:b0:e4:c4:93:73:95:7e:32:32:74: 9f:5e:35:fd:06:82:57:28:95:a2:b1:c5:b8:2f:43: a3:1b:c9:27:fa:e7:b0:92:23:93:62:f2:43:7e:60: f8:0a:76:0a:d0:ba:47:71:22:03:ac:6f:89:6a:be: 80:92:d2:37:1d:70:c7:d5:fe:9d:60:bb:58:62:24: 73:ef:e2:e9:6f:5a:8c:c2:c6:52:f8:85:35:d1:62: e5:ba:55:5c:4d:05:73:4d:5c:c1:7b:67:e8:c8:d2: ad:07:ff:ec:2d:b3:df:bf:cd:d2:44:51:f0:f9:27: 68:c4:23:80:4f:97:90:26:4e:22:04:04:de:77:f2: 60:f5:41:75:44:b5:99:dd:91:39:0d:fa:cb:ef:f6: b9:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:1B:3A:BF:10:AE:79:03:72:E1:45:10:9F:BC:49:E4:41:BA:43:C1 X509v3 Authority Key Identifier: keyid:98:F9:49:38:EA:90:72:87:2B:E0:66:39:F7:9D:C6:1C:00:0F:84:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/53b146a2-7715-459f-8244-8b32a364663c/0/98F94938EA9072872BE06639F79DC61C000F849C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98F94938EA9072872BE06639F79DC61C000F849C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/53b146a2-7715-459f-8244-8b32a364663c/0/98F94938EA9072872BE06639F79DC61C000F849C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:f9:99:32:5e:70:fd:16:89:c9:bb:d3:d5:70:5c:b6:8c:88: ad:71:df:94:82:91:d7:28:ba:36:4a:96:c2:57:30:d7:ea:07: 1f:1f:2f:7b:3b:93:bd:77:52:07:30:40:7e:c8:80:2f:4f:f7: 1a:ad:d8:63:dc:2b:a4:e4:18:9f:cf:0b:74:e8:ae:49:3e:39: 43:4b:a9:cc:88:7e:c2:c3:94:d3:5a:62:48:16:f2:b4:4b:cc: e4:fc:c9:d5:1f:9d:d5:c8:cd:69:cc:b7:74:67:77:ec:12:b9: da:22:80:e9:57:ee:9e:01:6a:5c:16:1e:bb:ed:06:de:7c:8e: 9c:a3:3d:a0:31:c4:21:a3:cd:b4:85:91:26:be:22:b9:9e:c5: d5:68:7d:a8:df:82:9a:1c:c7:e3:a7:15:a2:3e:2b:93:ba:12: 79:9c:ae:b2:07:07:58:9d:75:85:cc:75:9c:d5:27:7a:47:78: a2:b7:5c:cf:c8:dd:f0:89:5e:46:66:40:e4:c6:4d:40:41:89: f2:08:c6:34:ed:d4:a6:35:e8:e9:c3:92:0f:aa:c6:01:49:58: d2:49:3a:c1:40:15:de:27:a4:0d:f5:90:27:8f:b6:88:a2:4b: d1:ca:3b:53:2c:1a:77:d6:c7:12:1d:bd:e6:8f:18:e9:76:2c: 12:eb:90:6c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFlLz+8NVNNVGpzG4rOPgQPlfYYcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOThGOTQ5MzhFQTkwNzI4NzJCRTA2NjM5Rjc5REM2MUMw MDBGODQ5QzAeFw0yNTEyMjAyMDU1MThaFw0yNTEyMjQwMDUyMThaMDMxMTAvBgNV BAMTKDFDMUIzQUJGMTBBRTc5MDM3MkUxNDUxMDlGQkM0OUU0NDFCQTQzQzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChm726+9hgIoLr6TFPNuTM3CyP Z+C4eKrGBp8hpsGyAfSkENzULEv9pYq4S/+OGKVN5Z5XpC4toVJg39cidWHRzrB4 Egz9TV8/41ouQv6OqQOJ1QBaqst6b5N/iBVkDTz+mXQsc6FxWbIoVU8CsOTEk3OV fjIydJ9eNf0GglcolaKxxbgvQ6MbySf657CSI5Ni8kN+YPgKdgrQukdxIgOsb4lq voCS0jcdcMfV/p1gu1hiJHPv4ulvWozCxlL4hTXRYuW6VVxNBXNNXMF7Z+jI0q0H /+wts9+/zdJEUfD5J2jEI4BPl5AmTiIEBN538mD1QXVEtZndkTkN+svv9rl9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHBs6vxCueQNy4UUQn7xJ5EG6Q8EwHwYDVR0j BBgwFoAUmPlJOOqQcocr4GY5953GHAAPhJwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 M2IxNDZhMi03NzE1LTQ1OWYtODI0NC04YjMyYTM2NDY2M2MvMC85OEY5NDkzOEVB OTA3Mjg3MkJFMDY2MzlGNzlEQzYxQzAwMEY4NDlDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOThGOTQ5MzhFQTkwNzI4NzJCRTA2NjM5Rjc5REM2MUMwMDBG ODQ5Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTNiMTQ2YTItNzcxNS00NTlmLTgy NDQtOGIzMmEzNjQ2NjNjLzAvOThGOTQ5MzhFQTkwNzI4NzJCRTA2NjM5Rjc5REM2 MUMwMDBGODQ5Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAb5mTJecP0Wicm709VwXLaMiK1x35SCkdco ujZKlsJXMNfqBx8fL3s7k713UgcwQH7IgC9P9xqt2GPcK6TkGJ/PC3Torkk+OUNL qcyIfsLDlNNaYkgW8rRLzOT8ydUfndXIzWnMt3Rnd+wSudoigOlX7p4BalwWHrvt Bt58jpyjPaAxxCGjzbSFkSa+IrmexdVofajfgpocx+OnFaI+K5O6EnmcrrIHB1id dYXMdZzVJ3pHeKK3XM/I3fCJXkZmQOTGTUBBifIIxjTt1KY16OnDkg+qxgFJWNJJ OsFAFd4npA31kCePtoiiS9HKO1MsGnfWxxIdveaPGOl2LBLrkGw= -----END CERTIFICATE-----Generated at Sun Dec 21 02:08:16 2025 by rpki-client