This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/53b146a2-7715-459f-8244-8b32a364663c/0/98F94938EA9072872BE06639F79DC61C000F849C.mft File: 98F94938EA9072872BE06639F79DC61C000F849C.mft (raw, json) Hash identifier: RAfyUVqhZYjmOEkI2lgFm0UE/LiGjw4aAPY1zh2ME2o= Subject key identifier: 83:9A:1A:F8:0D:A3:D7:DF:EA:5D:AA:DA:1F:DD:F4:97:1F:7A:6F:33 Authority key identifier: 98:F9:49:38:EA:90:72:87:2B:E0:66:39:F7:9D:C6:1C:00:0F:84:9C Certificate issuer: /CN=98F94938EA9072872BE06639F79DC61C000F849C Certificate serial: 1CAF46F22DE05E46983BDC1A1D04992E503B15E3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98F94938EA9072872BE06639F79DC61C000F849C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/53b146a2-7715-459f-8244-8b32a364663c/0/98F94938EA9072872BE06639F79DC61C000F849C.mft Manifest number: 0537 Signing time: Tue 23 Dec 2025 01:00:02 +0000 Manifest this update: Tue 23 Dec 2025 00:55:02 +0000 Manifest next update: Fri 26 Dec 2025 04:43:02 +0000 Files and hashes: 1: 3130332e3132312e3134392e302f32342d3234203d3e203538333639.roa (hash: M8bRC4wiSLB6e2iwcZHOvqYaGOdNzRxUPpYTKPxu050=) 2: 3130332e3132312e3134382e302f32332d3233203d3e203538333639.roa (hash: 1MO7kNfuZHEztN7LWlrlsKvsPX1c2EMnYyDa6xlPz/k=) 3: 98F94938EA9072872BE06639F79DC61C000F849C.crl (hash: Z5fFHaOKRbHxyTzyJ1/dJ87VXv3zQeI8Ej2SSIFX+Fw=) 4: 3130332e3132312e3134382e302f32342d3234203d3e203538333639.roa (hash: sb1oa9JahKggAJqL+2P4wHzELfKnqVAcTcFhItAaTrg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/53b146a2-7715-459f-8244-8b32a364663c/0/98F94938EA9072872BE06639F79DC61C000F849C.crl rsync://repo-rpki.idnic.net/repo/53b146a2-7715-459f-8244-8b32a364663c/0/98F94938EA9072872BE06639F79DC61C000F849C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98F94938EA9072872BE06639F79DC61C000F849C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 04:43:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:af:46:f2:2d:e0:5e:46:98:3b:dc:1a:1d:04:99:2e:50:3b:15:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98F94938EA9072872BE06639F79DC61C000F849C Validity Not Before: Dec 23 00:55:02 2025 GMT Not After : Dec 26 04:43:02 2025 GMT Subject: CN=839A1AF80DA3D7DFEA5DAADA1FDDF4971F7A6F33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:66:bf:3b:ac:32:98:92:aa:b2:9f:e0:a4:21: 25:64:e9:cd:90:bf:c2:cd:d4:7e:ca:54:f4:8c:df: d0:d7:ca:35:07:81:3f:5e:38:9b:01:76:09:b0:8b: 0e:54:41:d9:54:73:a4:c8:76:60:c6:9c:8c:fa:19: 1d:7e:45:08:1a:9f:c6:f6:06:ba:6c:1f:b5:b7:32: cb:3e:7e:0e:09:9b:f5:78:a1:9a:1e:70:2e:09:f1: a7:ab:45:f4:0a:ae:ba:5f:f7:d1:fb:1a:c9:83:c1: ff:c8:1a:6b:55:a7:36:91:28:56:9b:a8:e6:86:7c: b0:8e:ea:91:da:08:7d:01:83:77:48:72:54:a2:87: d9:96:b8:a2:b3:dc:6b:88:9f:48:3c:24:81:1b:ea: 58:11:94:3d:05:4c:52:2b:80:80:91:1d:cd:a3:0e: af:b4:84:b2:0c:9b:61:d6:97:32:fb:4e:fc:8d:37: b6:dd:37:26:07:02:2d:9b:ff:37:1a:32:ac:46:8a: 1b:27:0d:00:cc:01:83:02:75:20:86:29:58:e0:0f: 23:89:cb:6a:15:c8:2a:59:2b:46:f3:47:a0:4b:21: 25:7e:7b:32:95:2a:1f:f1:44:3e:b9:3c:24:5d:c4: 12:a1:99:38:e1:96:7c:3b:89:fa:2d:18:4b:8a:8a: 06:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:9A:1A:F8:0D:A3:D7:DF:EA:5D:AA:DA:1F:DD:F4:97:1F:7A:6F:33 X509v3 Authority Key Identifier: keyid:98:F9:49:38:EA:90:72:87:2B:E0:66:39:F7:9D:C6:1C:00:0F:84:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/53b146a2-7715-459f-8244-8b32a364663c/0/98F94938EA9072872BE06639F79DC61C000F849C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98F94938EA9072872BE06639F79DC61C000F849C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/53b146a2-7715-459f-8244-8b32a364663c/0/98F94938EA9072872BE06639F79DC61C000F849C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:c8:de:1b:5c:59:c5:b1:a6:dd:db:8c:a1:e4:4d:eb:d2:0a: 00:7f:0d:a2:01:96:b0:48:eb:68:64:34:0f:ce:12:4f:1b:1b: 86:e5:d9:44:bc:3a:97:bc:ba:b0:d7:1f:62:ff:56:b7:f6:2e: 38:97:b5:04:1e:40:2f:32:40:c6:d6:9e:30:41:51:03:d7:1f: 0c:b4:76:de:ec:22:ff:e3:45:fe:ca:83:d1:75:5c:98:95:00: 44:8b:12:d6:05:4f:65:60:c4:62:ee:24:38:ef:34:4b:c8:1b: ab:15:a2:7c:21:43:07:f9:bd:fd:7f:9e:1a:3b:0a:f3:80:d9: 09:4d:25:ac:16:53:67:87:15:e2:53:96:6e:12:50:16:d8:76: c9:29:b3:c1:8d:dc:28:43:3a:4e:81:53:71:e4:2c:a0:15:02: ec:5c:0f:d2:86:34:b9:10:cb:b6:26:a9:fe:a1:64:f4:46:91: bc:b8:66:dd:ae:1d:f8:19:55:d0:de:58:a9:72:b9:5c:23:c1: 61:c3:c9:b1:48:2e:4c:2e:81:1a:8a:d4:18:ab:4a:b8:32:e8: 4d:0f:69:f1:ed:3a:65:1f:68:e3:5c:22:56:3c:6a:6f:63:33: 35:da:ef:9e:a0:fc:5e:be:d9:bf:55:bf:c0:b6:60:da:c7:80: 13:d7:71:23 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHK9G8i3gXkaYO9waHQSZLlA7FeMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOThGOTQ5MzhFQTkwNzI4NzJCRTA2NjM5Rjc5REM2MUMw MDBGODQ5QzAeFw0yNTEyMjMwMDU1MDJaFw0yNTEyMjYwNDQzMDJaMDMxMTAvBgNV BAMTKDgzOUExQUY4MERBM0Q3REZFQTVEQUFEQTFGRERGNDk3MUY3QTZGMzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9Zr87rDKYkqqyn+CkISVk6c2Q v8LN1H7KVPSM39DXyjUHgT9eOJsBdgmwiw5UQdlUc6TIdmDGnIz6GR1+RQgan8b2 BrpsH7W3Mss+fg4Jm/V4oZoecC4J8aerRfQKrrpf99H7GsmDwf/IGmtVpzaRKFab qOaGfLCO6pHaCH0Bg3dIclSih9mWuKKz3GuIn0g8JIEb6lgRlD0FTFIrgICRHc2j Dq+0hLIMm2HWlzL7TvyNN7bdNyYHAi2b/zcaMqxGihsnDQDMAYMCdSCGKVjgDyOJ y2oVyCpZK0bzR6BLISV+ezKVKh/xRD65PCRdxBKhmTjhlnw7ifotGEuKigaHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUg5oa+A2j19/qXaraH930lx96bzMwHwYDVR0j BBgwFoAUmPlJOOqQcocr4GY5953GHAAPhJwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 M2IxNDZhMi03NzE1LTQ1OWYtODI0NC04YjMyYTM2NDY2M2MvMC85OEY5NDkzOEVB OTA3Mjg3MkJFMDY2MzlGNzlEQzYxQzAwMEY4NDlDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOThGOTQ5MzhFQTkwNzI4NzJCRTA2NjM5Rjc5REM2MUMwMDBG ODQ5Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTNiMTQ2YTItNzcxNS00NTlmLTgy NDQtOGIzMmEzNjQ2NjNjLzAvOThGOTQ5MzhFQTkwNzI4NzJCRTA2NjM5Rjc5REM2 MUMwMDBGODQ5Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAITI3htcWcWxpt3bjKHkTevSCgB/DaIBlrBI 62hkNA/OEk8bG4bl2US8Ope8urDXH2L/Vrf2LjiXtQQeQC8yQMbWnjBBUQPXHwy0 dt7sIv/jRf7Kg9F1XJiVAESLEtYFT2VgxGLuJDjvNEvIG6sVonwhQwf5vf1/nho7 CvOA2QlNJawWU2eHFeJTlm4SUBbYdskps8GN3ChDOk6BU3HkLKAVAuxcD9KGNLkQ y7Ymqf6hZPRGkby4Zt2uHfgZVdDeWKlyuVwjwWHDybFILkwugRqK1BirSrgy6E0P afHtOmUfaONcIlY8am9jMzXa756g/F6+2b9Vv8C2YNrHgBPXcSM= -----END CERTIFICATE-----Generated at Thu Dec 25 05:34:00 2025 by rpki-client