This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/dbff1b3f-1190-4119-bbc6-1417df8aa258/0/89B98D1F135A7FC66C0284C34477C19604645554.mft File: 89B98D1F135A7FC66C0284C34477C19604645554.mft (raw, json) Hash identifier: rI6ovxtIpsF43NGwTi89SnRMRpAlajxXXntWOk9/+tY= Subject key identifier: C2:3F:71:BF:F9:67:71:01:74:90:5D:8A:02:65:16:80:4E:59:E1:53 Authority key identifier: 89:B9:8D:1F:13:5A:7F:C6:6C:02:84:C3:44:77:C1:96:04:64:55:54 Certificate issuer: /CN=89B98D1F135A7FC66C0284C34477C19604645554 Certificate serial: 620B49ADCF6CAC4A8129B1167A2F8006483B8BA1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/89B98D1F135A7FC66C0284C34477C19604645554.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dbff1b3f-1190-4119-bbc6-1417df8aa258/0/89B98D1F135A7FC66C0284C34477C19604645554.mft Manifest number: 01BA Signing time: Thu 18 Dec 2025 19:32:41 +0000 Manifest this update: Thu 18 Dec 2025 19:27:41 +0000 Manifest next update: Mon 22 Dec 2025 06:36:41 +0000 Files and hashes: 1: 89B98D1F135A7FC66C0284C34477C19604645554.crl (hash: lYw8tswA149A6MUnMTVDY6l+mZUFtSQCuuGCAbqc8es=) 2: 3130332e37392e3233372e302f32342d3234203d3e20313530393535.roa (hash: 2IWnXxowwOlz7I18Z25U30dGHsj5oRHYQH7WRuuUzKo=) 3: 3130332e37392e3233362e302f32332d3233203d3e20313530393535.roa (hash: ThDgpbBTSfRRealh0FHjoyTHcEPiBLGvmWH7tSYcxdE=) 4: 3130332e37392e3233362e302f32342d3234203d3e20313530393535.roa (hash: onZqAL56YoMix5wpV03h5e8xuAaImMliGkPVBv6grnU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dbff1b3f-1190-4119-bbc6-1417df8aa258/0/89B98D1F135A7FC66C0284C34477C19604645554.crl rsync://repo-rpki.idnic.net/repo/dbff1b3f-1190-4119-bbc6-1417df8aa258/0/89B98D1F135A7FC66C0284C34477C19604645554.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/89B98D1F135A7FC66C0284C34477C19604645554.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 03:43:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:0b:49:ad:cf:6c:ac:4a:81:29:b1:16:7a:2f:80:06:48:3b:8b:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89B98D1F135A7FC66C0284C34477C19604645554 Validity Not Before: Dec 18 19:27:41 2025 GMT Not After : Dec 22 06:36:41 2025 GMT Subject: CN=C23F71BFF967710174905D8A026516804E59E153 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:a0:d4:e0:83:be:9a:a5:f9:69:e3:ec:03:de: 3c:0a:8f:66:51:94:fc:24:30:b5:26:d1:4e:57:29: f9:7a:ac:b6:8c:71:b0:81:fc:9f:10:c9:33:b5:77: 0f:58:d6:c8:1a:4f:ba:bc:c0:5a:88:24:41:c7:18: ba:ef:ee:dd:9a:18:34:39:ba:dc:b7:00:9c:f0:30: e8:92:53:9b:cf:0d:56:e1:90:f1:c7:22:c7:d7:50: de:62:93:09:da:83:38:70:b6:62:81:57:02:58:37: c7:6e:6c:6e:29:c3:9d:bd:37:6a:ae:f5:32:8f:d8: 2c:f1:ea:8e:72:a4:9a:d0:52:0d:75:a9:31:c1:9f: 73:4b:9a:ad:77:c0:41:7c:c9:77:9b:bc:1f:b8:aa: c0:c5:31:64:cb:57:98:84:eb:25:85:87:82:22:bf: f7:ed:d8:71:30:0c:14:e6:99:51:2d:98:13:9e:88: c4:f0:95:5a:5d:9a:91:20:f2:0e:b5:e6:9a:8f:5e: d4:2f:2b:9d:3a:a5:c8:96:26:87:62:29:b2:2a:a2: b2:42:bc:28:67:5e:34:8c:3a:49:65:06:66:17:db: 8d:8d:4f:1c:56:4e:49:14:38:b8:ee:2f:7a:e2:23: 79:fa:66:ed:92:dd:17:8f:6a:55:59:42:1b:bb:e5: 61:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:3F:71:BF:F9:67:71:01:74:90:5D:8A:02:65:16:80:4E:59:E1:53 X509v3 Authority Key Identifier: keyid:89:B9:8D:1F:13:5A:7F:C6:6C:02:84:C3:44:77:C1:96:04:64:55:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dbff1b3f-1190-4119-bbc6-1417df8aa258/0/89B98D1F135A7FC66C0284C34477C19604645554.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/89B98D1F135A7FC66C0284C34477C19604645554.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dbff1b3f-1190-4119-bbc6-1417df8aa258/0/89B98D1F135A7FC66C0284C34477C19604645554.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:df:e5:81:ce:46:a1:00:bc:4f:5c:47:99:46:30:3f:41:db: 79:2c:88:0d:4f:89:fc:2d:2d:bd:72:87:89:97:61:b8:aa:e4: 34:ab:a2:85:bc:45:83:4f:78:d7:0c:10:f5:49:f0:6a:d1:22: b1:f8:c8:8f:f6:30:60:1b:af:d7:9d:87:2d:79:12:1e:55:aa: 26:f9:dc:cf:69:1c:5c:b9:5b:22:40:70:88:c4:25:88:ee:78: 49:69:10:d1:dd:73:d2:7e:b9:43:7c:ee:03:14:06:41:fd:b1: c2:84:b5:b5:b9:f2:c3:1f:dd:c9:00:50:84:ec:a3:0a:30:24: b0:92:fc:cb:6d:cc:ff:36:4f:4c:3b:f8:3d:02:09:cf:94:90: f4:0f:b3:67:ab:aa:63:3f:a9:ec:a2:89:f8:83:10:a3:34:d2: f2:4c:3b:45:52:ca:cf:0d:d8:5c:b8:f7:2b:c1:bb:0e:85:8f: 0c:ae:6d:9d:74:a7:45:d4:4e:33:66:cb:69:d1:52:f8:c2:e3: 77:b4:30:34:f8:d0:8c:3f:f4:a2:4e:06:62:af:64:b2:98:7b: 9b:17:3a:e3:e7:68:80:04:5b:5c:ad:7e:59:58:93:07:80:96: c8:9a:f8:2d:7a:ba:f4:69:e6:ac:f5:a6:9f:50:95:7c:6f:ec: 0e:45:21:ee -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYgtJrc9srEqBKbEWei+ABkg7i6EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODlCOThEMUYxMzVBN0ZDNjZDMDI4NEMzNDQ3N0MxOTYw NDY0NTU1NDAeFw0yNTEyMTgxOTI3NDFaFw0yNTEyMjIwNjM2NDFaMDMxMTAvBgNV BAMTKEMyM0Y3MUJGRjk2NzcxMDE3NDkwNUQ4QTAyNjUxNjgwNEU1OUUxNTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFoNTgg76apflp4+wD3jwKj2ZR lPwkMLUm0U5XKfl6rLaMcbCB/J8QyTO1dw9Y1sgaT7q8wFqIJEHHGLrv7t2aGDQ5 uty3AJzwMOiSU5vPDVbhkPHHIsfXUN5ikwnagzhwtmKBVwJYN8dubG4pw529N2qu 9TKP2Czx6o5ypJrQUg11qTHBn3NLmq13wEF8yXebvB+4qsDFMWTLV5iE6yWFh4Ii v/ft2HEwDBTmmVEtmBOeiMTwlVpdmpEg8g615pqPXtQvK506pciWJodiKbIqorJC vChnXjSMOkllBmYX242NTxxWTkkUOLjuL3riI3n6Zu2S3RePalVZQhu75WHdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwj9xv/lncQF0kF2KAmUWgE5Z4VMwHwYDVR0j BBgwFoAUibmNHxNaf8ZsAoTDRHfBlgRkVVQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YmZmMWIzZi0xMTkwLTQxMTktYmJjNi0xNDE3ZGY4YWEyNTgvMC84OUI5OEQxRjEz NUE3RkM2NkMwMjg0QzM0NDc3QzE5NjA0NjQ1NTU0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODlCOThEMUYxMzVBN0ZDNjZDMDI4NEMzNDQ3N0MxOTYwNDY0 NTU1NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGJmZjFiM2YtMTE5MC00MTE5LWJi YzYtMTQxN2RmOGFhMjU4LzAvODlCOThEMUYxMzVBN0ZDNjZDMDI4NEMzNDQ3N0Mx OTYwNDY0NTU1NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACzf5YHORqEAvE9cR5lGMD9B23ksiA1Pifwt Lb1yh4mXYbiq5DSrooW8RYNPeNcMEPVJ8GrRIrH4yI/2MGAbr9edhy15Eh5Vqib5 3M9pHFy5WyJAcIjEJYjueElpENHdc9J+uUN87gMUBkH9scKEtbW58sMf3ckAUITs owowJLCS/MttzP82T0w7+D0CCc+UkPQPs2erqmM/qeyiifiDEKM00vJMO0VSys8N 2Fy49yvBuw6FjwyubZ10p0XUTjNmy2nRUvjC43e0MDT40Iw/9KJOBmKvZLKYe5sX OuPnaIAEW1ytfllYkweAlsia+C16uvRp5qz1pp9QlXxv7A5FIe4= -----END CERTIFICATE-----Generated at Fri Dec 19 18:17:19 2025 by rpki-client