This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/9e5060b8-f570-42d6-86ff-33ea7fdf2515/0/989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748.mft File: 989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748.mft (raw, json) Hash identifier: rRocbss6m3hkA6ahFrT+2MRyLOT20nU3ht5BF+SkuMQ= Subject key identifier: 4C:D3:83:25:31:10:78:23:B0:C1:93:2C:9A:BD:0B:97:8D:B6:C9:8B Authority key identifier: 98:9B:87:D4:0F:7C:9F:1B:A5:4A:BC:AE:9B:C7:97:A3:E6:B2:57:48 Certificate issuer: /CN=989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748 Certificate serial: 7A80EFA221F63DF8EC0940B1B77E2D9917DAD5AC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9e5060b8-f570-42d6-86ff-33ea7fdf2515/0/989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748.mft Manifest number: 0534 Signing time: Tue 16 Dec 2025 10:01:06 +0000 Manifest this update: Tue 16 Dec 2025 09:56:06 +0000 Manifest next update: Fri 19 Dec 2025 21:02:06 +0000 Files and hashes: 1: 323030313a6466363a313330303a3a2f34382d3438203d3e20313338313137.roa (hash: hzs93FaYaNphdZDJOy2a+k5Vr7J1TFpilPTw5TB+vyQ=) 2: 989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748.crl (hash: g1OogZEiLmflWm9GRXXTLvMZeltn9T2b5X4cw2YqptA=) 3: 3130332e3132302e3132342e302f32332d3234203d3e20313338313137.roa (hash: 9pTXaEmfCAIZ2elcDY8x5651yYxommQlVzX4FaEZZFs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9e5060b8-f570-42d6-86ff-33ea7fdf2515/0/989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748.crl rsync://repo-rpki.idnic.net/repo/9e5060b8-f570-42d6-86ff-33ea7fdf2515/0/989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Dec 2025 21:02:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:80:ef:a2:21:f6:3d:f8:ec:09:40:b1:b7:7e:2d:99:17:da:d5:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748 Validity Not Before: Dec 16 09:56:06 2025 GMT Not After : Dec 19 21:02:06 2025 GMT Subject: CN=4CD3832531107823B0C1932C9ABD0B978DB6C98B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:41:19:d5:93:5d:66:66:38:d4:44:96:6b:06: ae:bf:e3:e5:ab:74:56:d2:7c:52:d7:17:b2:fe:82: 31:bf:6e:35:15:8e:bd:ec:fc:9b:18:a4:a1:42:08: 95:73:d1:05:ab:60:07:57:3e:1c:af:24:8f:8f:10: 54:ba:bb:2e:14:40:90:c9:02:93:3d:b1:5e:6b:0b: c8:fa:2d:34:5f:7d:07:f1:8a:b7:6d:de:4e:de:23: d8:96:f3:01:a9:22:cf:d4:b2:6a:66:e8:88:69:81: d0:a9:51:e3:c9:32:30:6e:be:eb:e7:81:58:e3:5a: 1d:be:7a:e4:48:2e:02:a9:83:a3:2c:af:d2:71:50: 92:f3:78:11:41:5f:2b:91:a5:e1:eb:bc:dd:9e:8e: 58:79:c0:3b:72:c6:f2:98:96:a9:67:b5:75:ef:6f: 21:5c:d8:0a:95:da:de:c8:d3:e3:6c:14:7a:33:ea: 3c:90:b0:46:d5:18:02:88:d6:b3:8e:28:c9:ad:36: e3:5d:ca:6a:91:66:23:4b:0a:20:48:02:9f:b9:bd: 48:0b:c0:2d:8f:64:be:b1:7b:90:ab:1d:71:0e:67: c8:62:7f:ac:70:98:2b:a0:29:a8:6e:ec:15:e8:69: 4d:be:2b:8f:e6:29:8c:e6:05:98:af:b6:0e:96:cd: 66:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:D3:83:25:31:10:78:23:B0:C1:93:2C:9A:BD:0B:97:8D:B6:C9:8B X509v3 Authority Key Identifier: keyid:98:9B:87:D4:0F:7C:9F:1B:A5:4A:BC:AE:9B:C7:97:A3:E6:B2:57:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9e5060b8-f570-42d6-86ff-33ea7fdf2515/0/989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9e5060b8-f570-42d6-86ff-33ea7fdf2515/0/989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:33:d9:f4:08:cf:d6:48:1c:df:ed:bc:4d:b6:be:17:05:1f: 8e:08:e9:43:4a:5a:7b:6a:56:36:ca:38:c4:98:ca:59:53:14: 65:20:cd:88:32:a2:05:5d:ba:60:ed:91:4e:b7:aa:06:98:6b: 02:c8:14:ea:f5:08:0c:c9:ca:eb:a5:29:21:fd:bd:cf:8f:a5: 5c:da:b2:60:05:ef:bc:c9:1b:8d:34:ed:ef:a7:75:91:46:50: d0:1e:f8:4e:35:e1:40:8d:d9:8b:e3:81:76:0a:25:42:19:bf: 40:56:ff:93:2a:e4:19:0f:d8:d8:ac:36:7b:ef:ff:fd:35:72: 0b:c9:be:7c:33:d6:a5:64:de:29:1f:1d:71:f9:0e:2e:a4:8a: 9d:84:17:47:51:0a:ca:f9:2c:54:5e:2e:95:69:ab:df:54:c9: aa:64:b7:a3:fa:99:ea:a1:3b:34:d7:db:cb:62:af:cf:b6:bb: 2d:30:d3:63:75:68:30:70:14:00:06:fd:f3:c1:16:2d:79:b2: 85:b9:ac:1c:df:e2:ec:2b:0a:0c:d8:3a:ad:ca:34:c6:74:fe: 23:fb:d4:95:eb:c0:9f:29:d7:89:88:b6:c9:b2:f3:60:f1:66: 6f:d6:17:84:60:f7:e1:32:d1:1d:9f:d7:a4:2b:fd:d5:3b:46: e0:a5:c3:5e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeoDvoiH2PfjsCUCxt34tmRfa1awwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTg5Qjg3RDQwRjdDOUYxQkE1NEFCQ0FFOUJDNzk3QTNF NkIyNTc0ODAeFw0yNTEyMTYwOTU2MDZaFw0yNTEyMTkyMTAyMDZaMDMxMTAvBgNV BAMTKDRDRDM4MzI1MzExMDc4MjNCMEMxOTMyQzlBQkQwQjk3OERCNkM5OEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8QRnVk11mZjjURJZrBq6/4+Wr dFbSfFLXF7L+gjG/bjUVjr3s/JsYpKFCCJVz0QWrYAdXPhyvJI+PEFS6uy4UQJDJ ApM9sV5rC8j6LTRffQfxirdt3k7eI9iW8wGpIs/Usmpm6IhpgdCpUePJMjBuvuvn gVjjWh2+euRILgKpg6Msr9JxUJLzeBFBXyuRpeHrvN2ejlh5wDtyxvKYlqlntXXv byFc2AqV2t7I0+NsFHoz6jyQsEbVGAKI1rOOKMmtNuNdymqRZiNLCiBIAp+5vUgL wC2PZL6xe5CrHXEOZ8hif6xwmCugKahu7BXoaU2+K4/mKYzmBZivtg6WzWa/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTNODJTEQeCOwwZMsmr0Ll422yYswHwYDVR0j BBgwFoAUmJuH1A98nxulSryum8eXo+ayV0gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZTUwNjBiOC1mNTcwLTQyZDYtODZmZi0zM2VhN2ZkZjI1MTUvMC85ODlCODdENDBG N0M5RjFCQTU0QUJDQUU5QkM3OTdBM0U2QjI1NzQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTg5Qjg3RDQwRjdDOUYxQkE1NEFCQ0FFOUJDNzk3QTNFNkIy NTc0OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWU1MDYwYjgtZjU3MC00MmQ2LTg2 ZmYtMzNlYTdmZGYyNTE1LzAvOTg5Qjg3RDQwRjdDOUYxQkE1NEFCQ0FFOUJDNzk3 QTNFNkIyNTc0OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEEz2fQIz9ZIHN/tvE22vhcFH44I6UNKWntq VjbKOMSYyllTFGUgzYgyogVdumDtkU63qgaYawLIFOr1CAzJyuulKSH9vc+PpVza smAF77zJG4007e+ndZFGUNAe+E414UCN2YvjgXYKJUIZv0BW/5Mq5BkP2NisNnvv //01cgvJvnwz1qVk3ikfHXH5Di6kip2EF0dRCsr5LFReLpVpq99Uyapkt6P6meqh OzTX28tir8+2uy0w02N1aDBwFAAG/fPBFi15soW5rBzf4uwrCgzYOq3KNMZ0/iP7 1JXrwJ8p14mItsmy82DxZm/WF4Rg9+Ey0R2f16Qr/dU7RuClw14= -----END CERTIFICATE-----Generated at Wed Dec 17 21:58:43 2025 by rpki-client