This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/5679cbf6-0913-4821-8ae1-bb511eaf088f/0/98707B7EB65D38E2EDDB5746D7CF77C81BFC6743.mft File: 98707B7EB65D38E2EDDB5746D7CF77C81BFC6743.mft (raw, json) Hash identifier: O3vmgGBtPWBUMWhqo8sv9mX+fy74/lC3Y36mfkKVNq4= Subject key identifier: 77:05:E7:79:02:BE:B4:4E:09:55:DC:4A:0A:9A:31:5F:F3:98:C3:82 Authority key identifier: 98:70:7B:7E:B6:5D:38:E2:ED:DB:57:46:D7:CF:77:C8:1B:FC:67:43 Certificate issuer: /CN=98707B7EB65D38E2EDDB5746D7CF77C81BFC6743 Certificate serial: 10CE0C8DE3E67989A091BCF28BE9E82D4258625D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98707B7EB65D38E2EDDB5746D7CF77C81BFC6743.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5679cbf6-0913-4821-8ae1-bb511eaf088f/0/98707B7EB65D38E2EDDB5746D7CF77C81BFC6743.mft Manifest number: 0252 Signing time: Wed 17 Dec 2025 09:30:53 +0000 Manifest this update: Wed 17 Dec 2025 09:25:53 +0000 Manifest next update: Sat 20 Dec 2025 16:59:53 +0000 Files and hashes: 1: 98707B7EB65D38E2EDDB5746D7CF77C81BFC6743.crl (hash: AnfKwLnU3f0KMYkzNo2YeQdUqqYpxyvO6D6BswLUYCE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5679cbf6-0913-4821-8ae1-bb511eaf088f/0/98707B7EB65D38E2EDDB5746D7CF77C81BFC6743.crl rsync://repo-rpki.idnic.net/repo/5679cbf6-0913-4821-8ae1-bb511eaf088f/0/98707B7EB65D38E2EDDB5746D7CF77C81BFC6743.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98707B7EB65D38E2EDDB5746D7CF77C81BFC6743.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 16:59:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:ce:0c:8d:e3:e6:79:89:a0:91:bc:f2:8b:e9:e8:2d:42:58:62:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98707B7EB65D38E2EDDB5746D7CF77C81BFC6743 Validity Not Before: Dec 17 09:25:53 2025 GMT Not After : Dec 20 16:59:53 2025 GMT Subject: CN=7705E77902BEB44E0955DC4A0A9A315FF398C382 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:ac:ee:a0:4f:51:f9:dd:35:6a:66:0c:7d:47: 64:19:a1:e3:e3:30:37:94:6b:fb:53:5e:80:cf:b4: 23:13:03:d7:9d:b7:f4:b9:1e:fa:67:73:7a:8a:9c: bc:fe:17:a4:d9:da:58:bb:b0:7f:76:de:7e:b6:f8: 50:21:83:30:73:88:49:73:1f:14:17:7d:af:b5:44: ca:e8:94:ae:bf:a5:fe:cf:b7:bb:9c:d0:f1:1f:4d: d2:00:ca:ad:0f:47:5a:71:dd:8a:69:30:5f:b3:15: c7:29:6a:6e:63:8b:3c:a2:4d:20:9f:c0:64:b3:4c: ba:33:6b:c6:6f:6e:90:b5:a1:5e:5c:05:79:41:9c: 6e:4f:49:e2:c9:59:88:d6:76:fc:34:c0:18:e1:a5: f6:5d:ec:5b:80:e0:cb:f9:ef:97:49:ae:45:90:90: 27:22:ba:a9:9e:cb:40:db:57:0f:ff:8d:4b:fc:51: 60:ee:ce:b2:cc:e1:43:fb:ed:62:17:c7:54:91:9d: f7:20:b6:d8:9b:5d:9a:cc:7d:82:7e:4e:4f:f0:46: 0d:dd:62:6f:36:c3:d2:a9:65:ad:00:4b:ea:09:95: 69:85:92:0d:ad:47:4d:a6:1f:69:93:09:b9:e3:0c: a6:23:f0:8a:7e:6e:e1:65:86:50:0e:6c:22:30:b8: f1:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:05:E7:79:02:BE:B4:4E:09:55:DC:4A:0A:9A:31:5F:F3:98:C3:82 X509v3 Authority Key Identifier: keyid:98:70:7B:7E:B6:5D:38:E2:ED:DB:57:46:D7:CF:77:C8:1B:FC:67:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5679cbf6-0913-4821-8ae1-bb511eaf088f/0/98707B7EB65D38E2EDDB5746D7CF77C81BFC6743.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98707B7EB65D38E2EDDB5746D7CF77C81BFC6743.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5679cbf6-0913-4821-8ae1-bb511eaf088f/0/98707B7EB65D38E2EDDB5746D7CF77C81BFC6743.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:f5:47:fe:7c:66:ad:ff:16:55:ff:e9:eb:7c:0b:4e:e3:0d: cc:91:b9:d2:9a:30:aa:86:1c:fa:01:d0:e4:f8:12:f9:ab:80: 6d:df:c0:c7:04:d7:05:7e:e6:99:c5:59:6f:bf:db:b4:fa:3f: b8:41:e7:1f:0c:32:d1:22:d8:f0:83:da:07:c5:e9:65:1d:54: 95:20:d6:41:c5:b8:ab:d6:95:69:fc:d6:87:74:94:fc:37:49: 0e:b5:e4:da:32:0f:25:b0:68:bb:b2:50:6a:30:31:82:c5:f1: 81:a5:ca:36:d2:7b:d9:46:cc:de:0f:28:35:5e:d8:df:dc:f0: 48:8b:65:60:cc:53:e2:e7:d2:b3:22:a4:05:fb:3d:5c:af:6a: 20:2e:b8:97:ed:fd:17:41:1b:94:45:10:d6:1f:90:d9:97:4e: 2c:12:3f:b8:93:95:51:b4:3f:b2:35:19:13:1f:bb:32:b7:80: 94:37:fe:b9:f6:bf:68:d1:30:4e:c9:07:09:dc:86:d0:96:3d: 56:1a:c4:88:3e:90:a5:79:3a:41:81:2f:d5:6c:e1:e1:82:ed: 70:7e:fc:d0:5e:1d:6d:0d:bf:99:2f:d2:fd:e7:11:c6:eb:69: 80:7e:84:24:43:b6:f0:59:b7:15:e7:2d:ee:80:8d:5d:fc:41: 6f:bb:37:ac -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEM4MjePmeYmgkbzyi+noLUJYYl0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTg3MDdCN0VCNjVEMzhFMkVEREI1NzQ2RDdDRjc3Qzgx QkZDNjc0MzAeFw0yNTEyMTcwOTI1NTNaFw0yNTEyMjAxNjU5NTNaMDMxMTAvBgNV BAMTKDc3MDVFNzc5MDJCRUI0NEUwOTU1REM0QTBBOUEzMTVGRjM5OEMzODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmrO6gT1H53TVqZgx9R2QZoePj MDeUa/tTXoDPtCMTA9edt/S5Hvpnc3qKnLz+F6TZ2li7sH923n62+FAhgzBziElz HxQXfa+1RMrolK6/pf7Pt7uc0PEfTdIAyq0PR1px3YppMF+zFccpam5jizyiTSCf wGSzTLoza8ZvbpC1oV5cBXlBnG5PSeLJWYjWdvw0wBjhpfZd7FuA4Mv575dJrkWQ kCciuqmey0DbVw//jUv8UWDuzrLM4UP77WIXx1SRnfcgttibXZrMfYJ+Tk/wRg3d Ym82w9KpZa0AS+oJlWmFkg2tR02mH2mTCbnjDKYj8Ip+buFlhlAObCIwuPGtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdwXneQK+tE4JVdxKCpoxX/OYw4IwHwYDVR0j BBgwFoAUmHB7frZdOOLt21dG1893yBv8Z0MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 Njc5Y2JmNi0wOTEzLTQ4MjEtOGFlMS1iYjUxMWVhZjA4OGYvMC85ODcwN0I3RUI2 NUQzOEUyRUREQjU3NDZEN0NGNzdDODFCRkM2NzQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTg3MDdCN0VCNjVEMzhFMkVEREI1NzQ2RDdDRjc3QzgxQkZD Njc0My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTY3OWNiZjYtMDkxMy00ODIxLThh ZTEtYmI1MTFlYWYwODhmLzAvOTg3MDdCN0VCNjVEMzhFMkVEREI1NzQ2RDdDRjc3 QzgxQkZDNjc0My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALT1R/58Zq3/FlX/6et8C07jDcyRudKaMKqG HPoB0OT4EvmrgG3fwMcE1wV+5pnFWW+/27T6P7hB5x8MMtEi2PCD2gfF6WUdVJUg 1kHFuKvWlWn81od0lPw3SQ615NoyDyWwaLuyUGowMYLF8YGlyjbSe9lGzN4PKDVe 2N/c8EiLZWDMU+Ln0rMipAX7PVyvaiAuuJft/RdBG5RFENYfkNmXTiwSP7iTlVG0 P7I1GRMfuzK3gJQ3/rn2v2jRME7JBwnchtCWPVYaxIg+kKV5OkGBL9Vs4eGC7XB+ /NBeHW0Nv5kv0v3nEcbraYB+hCRDtvBZtxXnLe6AjV38QW+7N6w= -----END CERTIFICATE-----Generated at Fri Dec 19 03:14:23 2025 by rpki-client