This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d7db6c4f-9fdf-47f6-b24c-033fe3a44d50/0/98F4C6575CF8F756A44BFFD461A09A3F38D00F04.mft File: 98F4C6575CF8F756A44BFFD461A09A3F38D00F04.mft (raw, json) Hash identifier: UTIunY+LbBXV5Bi2py+BYuX+nGCiSzoCpPBbVePvO1M= Subject key identifier: 41:E0:CA:E5:1A:FA:23:4C:2C:7D:6C:03:A4:AD:05:3A:4F:B7:C0:98 Authority key identifier: 98:F4:C6:57:5C:F8:F7:56:A4:4B:FF:D4:61:A0:9A:3F:38:D0:0F:04 Certificate issuer: /CN=98F4C6575CF8F756A44BFFD461A09A3F38D00F04 Certificate serial: 7F444656806DBA71AF2DDC7AAC069712C7632446 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98F4C6575CF8F756A44BFFD461A09A3F38D00F04.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d7db6c4f-9fdf-47f6-b24c-033fe3a44d50/0/98F4C6575CF8F756A44BFFD461A09A3F38D00F04.mft Manifest number: D1 Signing time: Thu 18 Dec 2025 18:00:43 +0000 Manifest this update: Thu 18 Dec 2025 17:55:43 +0000 Manifest next update: Sun 21 Dec 2025 19:30:43 +0000 Files and hashes: 1: 3230332e3134322e32362e302f32342d3234203d3e20313339333731.roa (hash: rpH9eA5JvXGhTPWutHU3TmV5ebwAEez1NYeLhnW9eIM=) 2: 98F4C6575CF8F756A44BFFD461A09A3F38D00F04.crl (hash: vCHrJ0Oopb0n/O6f1dDONNn5Fvj1Rj5XH9WYQA/FH78=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d7db6c4f-9fdf-47f6-b24c-033fe3a44d50/0/98F4C6575CF8F756A44BFFD461A09A3F38D00F04.crl rsync://repo-rpki.idnic.net/repo/d7db6c4f-9fdf-47f6-b24c-033fe3a44d50/0/98F4C6575CF8F756A44BFFD461A09A3F38D00F04.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98F4C6575CF8F756A44BFFD461A09A3F38D00F04.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 19:30:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:44:46:56:80:6d:ba:71:af:2d:dc:7a:ac:06:97:12:c7:63:24:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98F4C6575CF8F756A44BFFD461A09A3F38D00F04 Validity Not Before: Dec 18 17:55:43 2025 GMT Not After : Dec 21 19:30:43 2025 GMT Subject: CN=41E0CAE51AFA234C2C7D6C03A4AD053A4FB7C098 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:52:fb:c5:94:ef:70:98:3e:4b:57:d2:58:00: 9b:9b:15:2f:cb:45:ce:ac:d5:06:b4:d8:86:4c:79: e0:8d:f0:e4:b6:57:89:2f:fb:84:2a:17:1d:0b:42: a3:fe:4e:a3:65:fa:3e:db:8d:1a:75:ce:b5:87:ee: bc:39:3c:64:10:5b:b7:38:14:a7:3b:64:2c:64:76: 5b:c5:be:79:e2:b0:a3:b9:e5:48:62:b7:cc:84:e5: a4:8c:55:55:24:e0:80:c7:d0:f9:ef:ff:b1:d0:dd: 0f:cd:c9:cd:ac:c7:95:b2:fa:f0:6d:04:d9:d7:4a: 8a:6c:a0:29:50:76:00:47:94:59:72:84:37:74:d8: dd:91:08:54:08:70:25:ae:d5:bc:bd:74:8d:e9:51: 3f:5e:af:f3:9a:74:f6:7d:6b:3c:ed:5c:d8:4f:57: e5:2d:31:c2:ae:61:f1:88:31:64:4b:64:5c:0f:62: 88:e6:8c:78:d2:29:5e:d4:d4:60:6c:f9:31:bf:14: a7:25:ad:35:10:68:6a:b7:57:05:b6:2b:ac:d9:7e: a7:e5:fc:e5:a1:c3:da:aa:df:b7:f1:57:67:e0:ad: 49:1f:f3:47:19:eb:d1:57:c1:de:2f:d3:e5:e1:36: 56:5d:80:19:f4:2a:15:43:ba:cf:09:03:57:3a:81: 3c:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:E0:CA:E5:1A:FA:23:4C:2C:7D:6C:03:A4:AD:05:3A:4F:B7:C0:98 X509v3 Authority Key Identifier: keyid:98:F4:C6:57:5C:F8:F7:56:A4:4B:FF:D4:61:A0:9A:3F:38:D0:0F:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d7db6c4f-9fdf-47f6-b24c-033fe3a44d50/0/98F4C6575CF8F756A44BFFD461A09A3F38D00F04.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98F4C6575CF8F756A44BFFD461A09A3F38D00F04.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d7db6c4f-9fdf-47f6-b24c-033fe3a44d50/0/98F4C6575CF8F756A44BFFD461A09A3F38D00F04.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:ca:61:19:5b:02:53:71:55:38:97:57:c2:b3:b0:bc:a7:0c: ac:83:0e:8f:fe:83:72:e6:4c:d2:f1:9b:59:a3:d4:1b:60:73: c0:5f:c8:e4:66:54:ef:97:e3:7b:17:a6:11:5a:c8:e8:7d:a9: d4:2f:a1:d6:f8:0a:39:35:61:c0:1f:56:33:f3:fe:db:17:4b: 90:f9:20:2a:28:a4:fb:1e:45:84:9f:f9:48:82:e6:b3:81:55: 8d:63:be:78:0e:4e:e7:8c:d7:5e:14:a4:52:5e:de:0d:55:39: eb:bb:fe:ea:e7:c5:7e:51:37:6f:3d:a0:e3:3d:c9:e3:67:42: f3:1b:10:29:cc:b7:e9:82:f5:27:46:f1:f9:6b:26:09:35:fb: 15:e7:88:2a:80:e5:c5:aa:18:df:56:b3:a8:7f:5c:3c:6b:4b: fe:f7:82:ec:44:3b:5d:bd:99:fe:36:0c:a4:38:f2:ef:d0:b8: 73:c0:59:59:0c:aa:42:a0:2d:fe:29:91:56:8e:f3:df:30:dc: 59:3d:46:e2:b8:97:b4:29:42:b9:a8:47:ec:33:ed:65:0a:3d: 41:f0:f1:08:af:19:04:98:c9:e2:be:ab:8f:3f:42:a9:e4:1d: fe:70:d7:ee:e4:00:44:20:58:18:50:79:8c:b7:2a:0b:a0:28: 7b:28:fb:42 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUf0RGVoBtunGvLdx6rAaXEsdjJEYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOThGNEM2NTc1Q0Y4Rjc1NkE0NEJGRkQ0NjFBMDlBM0Yz OEQwMEYwNDAeFw0yNTEyMTgxNzU1NDNaFw0yNTEyMjExOTMwNDNaMDMxMTAvBgNV BAMTKDQxRTBDQUU1MUFGQTIzNEMyQzdENkMwM0E0QUQwNTNBNEZCN0MwOTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwUvvFlO9wmD5LV9JYAJubFS/L Rc6s1Qa02IZMeeCN8OS2V4kv+4QqFx0LQqP+TqNl+j7bjRp1zrWH7rw5PGQQW7c4 FKc7ZCxkdlvFvnnisKO55Uhit8yE5aSMVVUk4IDH0Pnv/7HQ3Q/Nyc2sx5Wy+vBt BNnXSopsoClQdgBHlFlyhDd02N2RCFQIcCWu1by9dI3pUT9er/OadPZ9azztXNhP V+UtMcKuYfGIMWRLZFwPYojmjHjSKV7U1GBs+TG/FKclrTUQaGq3VwW2K6zZfqfl /OWhw9qq37fxV2fgrUkf80cZ69FXwd4v0+XhNlZdgBn0KhVDus8JA1c6gTyXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQeDK5Rr6I0wsfWwDpK0FOk+3wJgwHwYDVR0j BBgwFoAUmPTGV1z491akS//UYaCaPzjQDwQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k N2RiNmM0Zi05ZmRmLTQ3ZjYtYjI0Yy0wMzNmZTNhNDRkNTAvMC85OEY0QzY1NzVD RjhGNzU2QTQ0QkZGRDQ2MUEwOUEzRjM4RDAwRjA0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOThGNEM2NTc1Q0Y4Rjc1NkE0NEJGRkQ0NjFBMDlBM0YzOEQw MEYwNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDdkYjZjNGYtOWZkZi00N2Y2LWIy NGMtMDMzZmUzYTQ0ZDUwLzAvOThGNEM2NTc1Q0Y4Rjc1NkE0NEJGRkQ0NjFBMDlB M0YzOEQwMEYwNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABLKYRlbAlNxVTiXV8KzsLynDKyDDo/+g3Lm TNLxm1mj1Btgc8BfyORmVO+X43sXphFayOh9qdQvodb4Cjk1YcAfVjPz/tsXS5D5 ICoopPseRYSf+UiC5rOBVY1jvngOTueM114UpFJe3g1VOeu7/urnxX5RN289oOM9 yeNnQvMbECnMt+mC9SdG8flrJgk1+xXniCqA5cWqGN9Ws6h/XDxrS/73guxEO129 mf42DKQ48u/QuHPAWVkMqkKgLf4pkVaO898w3Fk9RuK4l7QpQrmoR+wz7WUKPUHw 8QivGQSYyeK+q48/QqnkHf5w1+7kAEQgWBhQeYy3KgugKHso+0I= -----END CERTIFICATE-----Generated at Fri Dec 19 11:33:00 2025 by rpki-client