This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/5679cbf6-0913-4821-8ae1-bb511eaf088f/0/98707B7EB65D38E2EDDB5746D7CF77C81BFC6743.mft File: 98707B7EB65D38E2EDDB5746D7CF77C81BFC6743.mft (raw, json) Hash identifier: 53c7QPG5VGfX3NJ3pkPsFaC1Lfdwohe1KLjArysywsw= Subject key identifier: 81:27:92:00:F4:56:95:90:37:26:0B:C7:54:DB:2D:33:A5:BE:4E:EF Authority key identifier: 98:70:7B:7E:B6:5D:38:E2:ED:DB:57:46:D7:CF:77:C8:1B:FC:67:43 Certificate issuer: /CN=98707B7EB65D38E2EDDB5746D7CF77C81BFC6743 Certificate serial: 6D15A81057A14171749F33CAEBDA91231E73F502 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98707B7EB65D38E2EDDB5746D7CF77C81BFC6743.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5679cbf6-0913-4821-8ae1-bb511eaf088f/0/98707B7EB65D38E2EDDB5746D7CF77C81BFC6743.mft Manifest number: 0253 Signing time: Fri 19 Dec 2025 17:00:57 +0000 Manifest this update: Fri 19 Dec 2025 16:55:57 +0000 Manifest next update: Mon 22 Dec 2025 22:39:57 +0000 Files and hashes: 1: 98707B7EB65D38E2EDDB5746D7CF77C81BFC6743.crl (hash: rtVPgbjPpvDaGfDyUn85A8aXa1+pWrlhBypHYA7TZ+s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5679cbf6-0913-4821-8ae1-bb511eaf088f/0/98707B7EB65D38E2EDDB5746D7CF77C81BFC6743.crl rsync://repo-rpki.idnic.net/repo/5679cbf6-0913-4821-8ae1-bb511eaf088f/0/98707B7EB65D38E2EDDB5746D7CF77C81BFC6743.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98707B7EB65D38E2EDDB5746D7CF77C81BFC6743.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 22:39:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:15:a8:10:57:a1:41:71:74:9f:33:ca:eb:da:91:23:1e:73:f5:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98707B7EB65D38E2EDDB5746D7CF77C81BFC6743 Validity Not Before: Dec 19 16:55:57 2025 GMT Not After : Dec 22 22:39:57 2025 GMT Subject: CN=81279200F456959037260BC754DB2D33A5BE4EEF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:cb:47:00:ca:cc:da:e9:76:0f:66:a8:2f:de: 72:b3:f2:2c:c1:13:cd:80:41:8f:d4:df:07:90:d9: 85:b2:02:c6:28:5b:c1:b2:1c:8d:40:1d:17:cc:8f: 3c:a4:99:6f:59:16:50:40:89:91:4a:7d:34:d7:86: ee:dd:58:1c:c3:5c:90:25:c6:b5:71:70:c8:e9:9c: 68:6c:c9:77:17:38:f5:34:74:68:14:7b:5f:89:83: 6d:ab:fd:be:16:7c:61:3c:ea:b3:51:e9:fc:22:b2: 9e:b5:4e:7a:c0:90:eb:97:a6:0c:e9:13:dd:ae:4f: 59:ec:d4:99:33:ad:96:ad:71:d5:f1:8a:d4:97:52: 3d:e9:e9:a8:e0:3e:35:e8:04:5f:4b:34:73:cc:8d: 64:d7:f4:6b:f2:1c:1d:d4:01:5f:67:93:49:5c:e8: 49:ef:b7:d9:1c:a9:8f:d9:be:f7:9c:0d:6d:ef:a2: 92:62:0a:05:e2:33:23:eb:bf:3e:05:e2:74:c8:4c: 6b:24:a0:03:11:32:d4:1b:99:6c:c0:6e:16:9e:23: f2:d6:1e:81:d0:58:2e:09:40:c2:05:55:43:21:17: 61:70:99:35:be:6f:43:e7:23:ca:c1:3d:76:d8:a5: 53:d5:ec:ad:b5:56:ed:05:4f:a9:51:49:21:ef:89: b3:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:27:92:00:F4:56:95:90:37:26:0B:C7:54:DB:2D:33:A5:BE:4E:EF X509v3 Authority Key Identifier: keyid:98:70:7B:7E:B6:5D:38:E2:ED:DB:57:46:D7:CF:77:C8:1B:FC:67:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5679cbf6-0913-4821-8ae1-bb511eaf088f/0/98707B7EB65D38E2EDDB5746D7CF77C81BFC6743.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98707B7EB65D38E2EDDB5746D7CF77C81BFC6743.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5679cbf6-0913-4821-8ae1-bb511eaf088f/0/98707B7EB65D38E2EDDB5746D7CF77C81BFC6743.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c0:85:b2:ff:ca:03:2d:f8:89:f4:63:24:21:16:e3:60:51:3a: 12:a8:f3:f7:fc:70:e1:85:57:1e:6b:4d:0b:dd:7d:3d:e1:f9: 25:0f:60:0e:19:19:e2:33:a5:2f:92:1f:e1:65:72:e3:3e:c1: 26:c5:7d:a6:1f:cd:1b:5a:e1:83:03:3a:a4:0f:25:c2:73:06: e1:62:6d:97:0b:ca:06:37:6c:ee:f5:fe:b3:3c:de:58:2c:50: 42:8c:f0:22:7e:b0:6d:9f:88:aa:f0:33:e7:d8:5f:44:65:39: 13:f1:40:23:e2:8c:2d:3f:6d:9e:8e:09:6e:94:24:5b:74:3b: 62:d7:7d:56:5d:c3:f5:a3:a3:d1:97:e5:0c:92:1b:06:2e:b9: 12:59:4b:66:91:9b:d8:11:f2:c3:d1:e9:b2:f3:0e:63:17:c3: db:03:5b:6d:68:fa:06:6a:ed:ae:00:f2:3a:50:06:a7:09:4c: a8:dc:33:72:af:df:df:9c:fc:8f:0b:07:03:dc:22:17:cc:00: 85:e2:e0:9c:e0:92:05:ea:12:5f:66:cc:4f:be:7f:fd:42:f0: 6c:17:8e:91:c0:76:e6:01:94:52:77:1b:f9:f2:ad:a7:05:73: a7:d2:f3:a4:5b:cc:3e:6d:cf:16:0e:12:7d:48:4f:76:2c:db: 99:f4:81:be -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbRWoEFehQXF0nzPK69qRIx5z9QIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTg3MDdCN0VCNjVEMzhFMkVEREI1NzQ2RDdDRjc3Qzgx QkZDNjc0MzAeFw0yNTEyMTkxNjU1NTdaFw0yNTEyMjIyMjM5NTdaMDMxMTAvBgNV BAMTKDgxMjc5MjAwRjQ1Njk1OTAzNzI2MEJDNzU0REIyRDMzQTVCRTRFRUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjy0cAysza6XYPZqgv3nKz8izB E82AQY/U3weQ2YWyAsYoW8GyHI1AHRfMjzykmW9ZFlBAiZFKfTTXhu7dWBzDXJAl xrVxcMjpnGhsyXcXOPU0dGgUe1+Jg22r/b4WfGE86rNR6fwisp61TnrAkOuXpgzp E92uT1ns1JkzrZatcdXxitSXUj3p6ajgPjXoBF9LNHPMjWTX9GvyHB3UAV9nk0lc 6Envt9kcqY/ZvvecDW3vopJiCgXiMyPrvz4F4nTITGskoAMRMtQbmWzAbhaeI/LW HoHQWC4JQMIFVUMhF2FwmTW+b0PnI8rBPXbYpVPV7K21Vu0FT6lRSSHvibOjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgSeSAPRWlZA3JgvHVNstM6W+Tu8wHwYDVR0j BBgwFoAUmHB7frZdOOLt21dG1893yBv8Z0MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 Njc5Y2JmNi0wOTEzLTQ4MjEtOGFlMS1iYjUxMWVhZjA4OGYvMC85ODcwN0I3RUI2 NUQzOEUyRUREQjU3NDZEN0NGNzdDODFCRkM2NzQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTg3MDdCN0VCNjVEMzhFMkVEREI1NzQ2RDdDRjc3QzgxQkZD Njc0My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTY3OWNiZjYtMDkxMy00ODIxLThh ZTEtYmI1MTFlYWYwODhmLzAvOTg3MDdCN0VCNjVEMzhFMkVEREI1NzQ2RDdDRjc3 QzgxQkZDNjc0My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMCFsv/KAy34ifRjJCEW42BROhKo8/f8cOGF Vx5rTQvdfT3h+SUPYA4ZGeIzpS+SH+FlcuM+wSbFfaYfzRta4YMDOqQPJcJzBuFi bZcLygY3bO71/rM83lgsUEKM8CJ+sG2fiKrwM+fYX0RlORPxQCPijC0/bZ6OCW6U JFt0O2LXfVZdw/Wjo9GX5QySGwYuuRJZS2aRm9gR8sPR6bLzDmMXw9sDW21o+gZq 7a4A8jpQBqcJTKjcM3Kv39+c/I8LBwPcIhfMAIXi4JzgkgXqEl9mzE++f/1C8GwX jpHAduYBlFJ3G/nyracFc6fS86RbzD5tzxYOEn1IT3Ys25n0gb4= -----END CERTIFICATE-----Generated at Sat Dec 20 22:06:47 2025 by rpki-client