This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/dbff1b3f-1190-4119-bbc6-1417df8aa258/0/89B98D1F135A7FC66C0284C34477C19604645554.mft File: 89B98D1F135A7FC66C0284C34477C19604645554.mft (raw, json) Hash identifier: MpK7OK7hww6rRzJo2/xDUSuZUkcAQ1siwEvr74CLar8= Subject key identifier: AA:DD:4C:0F:6A:89:0F:C4:11:47:29:3B:2A:62:83:44:C8:01:20:EC Authority key identifier: 89:B9:8D:1F:13:5A:7F:C6:6C:02:84:C3:44:77:C1:96:04:64:55:54 Certificate issuer: /CN=89B98D1F135A7FC66C0284C34477C19604645554 Certificate serial: 6765F0E86750D3B750F0928261E402880888F595 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/89B98D1F135A7FC66C0284C34477C19604645554.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dbff1b3f-1190-4119-bbc6-1417df8aa258/0/89B98D1F135A7FC66C0284C34477C19604645554.mft Manifest number: 01BF Signing time: Tue 30 Dec 2025 12:22:23 +0000 Manifest this update: Tue 30 Dec 2025 12:17:23 +0000 Manifest next update: Fri 02 Jan 2026 22:17:23 +0000 Files and hashes: 1: 3130332e37392e3233362e302f32332d3233203d3e20313530393535.roa (hash: ThDgpbBTSfRRealh0FHjoyTHcEPiBLGvmWH7tSYcxdE=) 2: 3130332e37392e3233372e302f32342d3234203d3e20313530393535.roa (hash: 2IWnXxowwOlz7I18Z25U30dGHsj5oRHYQH7WRuuUzKo=) 3: 3130332e37392e3233362e302f32342d3234203d3e20313530393535.roa (hash: onZqAL56YoMix5wpV03h5e8xuAaImMliGkPVBv6grnU=) 4: 89B98D1F135A7FC66C0284C34477C19604645554.crl (hash: mfGB0PSSWQrx1OVnqSgz/2QZzLR7ufKtBTk+WBwHBew=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dbff1b3f-1190-4119-bbc6-1417df8aa258/0/89B98D1F135A7FC66C0284C34477C19604645554.crl rsync://repo-rpki.idnic.net/repo/dbff1b3f-1190-4119-bbc6-1417df8aa258/0/89B98D1F135A7FC66C0284C34477C19604645554.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/89B98D1F135A7FC66C0284C34477C19604645554.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Jan 2026 22:17:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:65:f0:e8:67:50:d3:b7:50:f0:92:82:61:e4:02:88:08:88:f5:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89B98D1F135A7FC66C0284C34477C19604645554 Validity Not Before: Dec 30 12:17:23 2025 GMT Not After : Jan 2 22:17:23 2026 GMT Subject: CN=AADD4C0F6A890FC41147293B2A628344C80120EC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:59:20:cc:45:38:9c:bd:80:e5:ed:ee:21:b8: a5:b4:b6:80:ea:53:17:ce:e6:03:af:53:18:84:d0: 1c:d7:85:67:1d:16:b6:3a:4b:41:3f:de:4b:aa:f4: de:cc:63:f5:12:f2:ee:d6:ab:8d:98:73:58:8a:f2: 60:39:92:0f:03:ce:8d:f4:81:74:3d:d1:a7:61:9a: 46:ae:b1:6e:0a:0c:30:ee:fa:f9:31:2c:b5:e4:2f: a7:5a:0e:bb:a2:49:38:f3:bf:4d:07:11:39:b7:7f: 63:7b:da:2c:2b:b2:66:6b:a1:b3:8e:69:05:61:ac: 7e:b1:d7:65:7f:3b:01:1b:20:ce:44:d4:12:e4:7a: d6:8e:48:c3:4d:c7:2a:42:e1:72:7d:ac:d7:42:91: 77:dc:35:02:7b:37:c4:b1:c7:56:a1:dc:b2:57:a9: cd:b7:38:95:ee:cd:9b:d5:7c:32:93:a1:13:03:1b: cd:3c:2e:85:fc:99:bb:f8:26:95:10:85:7d:f0:50: 1d:d9:88:a5:5b:8f:73:ec:c8:5b:7c:6e:10:cf:99: 3f:ec:e6:39:e2:6f:14:84:30:10:e0:27:65:26:e4: 8b:08:80:c2:ba:6f:c7:3b:12:bf:76:26:86:f1:1f: c5:2e:f1:12:2d:7a:5e:cf:ec:46:03:3a:38:5f:d5: dd:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:DD:4C:0F:6A:89:0F:C4:11:47:29:3B:2A:62:83:44:C8:01:20:EC X509v3 Authority Key Identifier: keyid:89:B9:8D:1F:13:5A:7F:C6:6C:02:84:C3:44:77:C1:96:04:64:55:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dbff1b3f-1190-4119-bbc6-1417df8aa258/0/89B98D1F135A7FC66C0284C34477C19604645554.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/89B98D1F135A7FC66C0284C34477C19604645554.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dbff1b3f-1190-4119-bbc6-1417df8aa258/0/89B98D1F135A7FC66C0284C34477C19604645554.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:49:89:50:4b:c2:69:81:48:23:38:c4:0c:c0:da:5c:94:45: bf:eb:f4:e2:cf:99:19:d4:f8:a7:07:fb:d5:46:27:69:58:c4: 52:11:f5:53:fe:92:76:1c:f7:e5:56:d8:a5:71:51:83:21:4b: 4b:b2:18:e2:d8:96:95:7b:82:b6:08:44:0c:9c:a5:c4:fe:c8: 13:0b:44:4f:5d:b1:cb:1e:24:7d:c7:6b:bc:47:eb:51:b8:ef: 9b:a2:3f:f1:b3:43:42:ea:be:3f:34:05:ea:71:8f:0a:c8:f7: c8:79:26:93:32:19:cd:c4:a6:81:a7:86:73:d7:e6:19:76:fa: 73:d5:3d:a8:d8:3f:c3:05:97:5c:b9:a0:2b:0c:d8:58:36:5c: 1c:11:79:c3:8c:61:52:37:5f:af:0d:2a:1a:e7:41:54:6c:56: 82:ea:b3:55:50:dc:2f:ca:80:52:bf:a9:24:a1:6c:ab:8d:5f: 1f:4f:56:d6:5e:7c:ce:0d:bd:f4:c5:a2:91:3b:f9:ea:d9:bc: 58:ca:39:d1:f0:aa:82:db:46:8a:4f:2d:bd:58:55:eb:3e:57: e1:6a:4c:eb:42:72:f6:dc:4f:82:4f:20:9f:2f:0f:ae:9c:3c: 79:36:e7:d7:00:4e:01:1e:60:b7:aa:0e:9b:5e:f5:9c:a7:c7: a4:9b:d7:1c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZ2Xw6GdQ07dQ8JKCYeQCiAiI9ZUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODlCOThEMUYxMzVBN0ZDNjZDMDI4NEMzNDQ3N0MxOTYw NDY0NTU1NDAeFw0yNTEyMzAxMjE3MjNaFw0yNjAxMDIyMjE3MjNaMDMxMTAvBgNV BAMTKEFBREQ0QzBGNkE4OTBGQzQxMTQ3MjkzQjJBNjI4MzQ0QzgwMTIwRUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPWSDMRTicvYDl7e4huKW0toDq UxfO5gOvUxiE0BzXhWcdFrY6S0E/3kuq9N7MY/US8u7Wq42Yc1iK8mA5kg8Dzo30 gXQ90adhmkausW4KDDDu+vkxLLXkL6daDruiSTjzv00HETm3f2N72iwrsmZrobOO aQVhrH6x12V/OwEbIM5E1BLketaOSMNNxypC4XJ9rNdCkXfcNQJ7N8Sxx1ah3LJX qc23OJXuzZvVfDKToRMDG808LoX8mbv4JpUQhX3wUB3ZiKVbj3PsyFt8bhDPmT/s 5jnibxSEMBDgJ2Um5IsIgMK6b8c7Er92JobxH8Uu8RItel7P7EYDOjhf1d2FAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqt1MD2qJD8QRRyk7KmKDRMgBIOwwHwYDVR0j BBgwFoAUibmNHxNaf8ZsAoTDRHfBlgRkVVQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YmZmMWIzZi0xMTkwLTQxMTktYmJjNi0xNDE3ZGY4YWEyNTgvMC84OUI5OEQxRjEz NUE3RkM2NkMwMjg0QzM0NDc3QzE5NjA0NjQ1NTU0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODlCOThEMUYxMzVBN0ZDNjZDMDI4NEMzNDQ3N0MxOTYwNDY0 NTU1NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGJmZjFiM2YtMTE5MC00MTE5LWJi YzYtMTQxN2RmOGFhMjU4LzAvODlCOThEMUYxMzVBN0ZDNjZDMDI4NEMzNDQ3N0Mx OTYwNDY0NTU1NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGpJiVBLwmmBSCM4xAzA2lyURb/r9OLPmRnU +KcH+9VGJ2lYxFIR9VP+knYc9+VW2KVxUYMhS0uyGOLYlpV7grYIRAycpcT+yBML RE9dscseJH3Ha7xH61G475uiP/GzQ0Lqvj80BepxjwrI98h5JpMyGc3EpoGnhnPX 5hl2+nPVPajYP8MFl1y5oCsM2Fg2XBwRecOMYVI3X68NKhrnQVRsVoLqs1VQ3C/K gFK/qSShbKuNXx9PVtZefM4NvfTFopE7+erZvFjKOdHwqoLbRopPLb1YVes+V+Fq TOtCcvbcT4JPIJ8vD66cPHk259cATgEeYLeqDpte9Zynx6Sb1xw= -----END CERTIFICATE-----Generated at Wed Dec 31 03:44:06 2025 by rpki-client