This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/dea79340-4db2-458d-95dd-af20b4fcdb3d/0/B89398BA603C43BDF711A2B31FADC8CDFFC9CC16.mft File: B89398BA603C43BDF711A2B31FADC8CDFFC9CC16.mft (raw, json) Hash identifier: pBMd9uhQ3XdwSDVoOkT6ObjwBt04B2DNXCYUwG6DlY0= Subject key identifier: 54:0D:0B:55:40:FF:7A:EB:27:4A:E8:EA:35:EC:B1:2B:44:A7:BB:FF Authority key identifier: B8:93:98:BA:60:3C:43:BD:F7:11:A2:B3:1F:AD:C8:CD:FF:C9:CC:16 Certificate issuer: /CN=B89398BA603C43BDF711A2B31FADC8CDFFC9CC16 Certificate serial: 62F0C6F5C94DCE5A92BF9DC6172716B19EB77317 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B89398BA603C43BDF711A2B31FADC8CDFFC9CC16.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dea79340-4db2-458d-95dd-af20b4fcdb3d/0/B89398BA603C43BDF711A2B31FADC8CDFFC9CC16.mft Manifest number: 052F Signing time: Mon 15 Dec 2025 22:21:48 +0000 Manifest this update: Mon 15 Dec 2025 22:16:48 +0000 Manifest next update: Fri 19 Dec 2025 04:53:48 +0000 Files and hashes: 1: 323030313a6466323a346238303a3a2f34382d3438203d3e20313339343537.roa (hash: O/T9Xztwa1eZpftLg0Xl5KOsLOQM47dFO4VcGsJ1wDg=) 2: B89398BA603C43BDF711A2B31FADC8CDFFC9CC16.crl (hash: qwnkGVUp57eb4EzOJaIJo76t1HOkC9HVTvQ4DGFmOVg=) 3: 3130332e3134362e36322e302f32332d3234203d3e20313339343537.roa (hash: J9nhXOhW6jatN3t2cMwD6dQ3cCJrOL1soCUmU7Ehehg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dea79340-4db2-458d-95dd-af20b4fcdb3d/0/B89398BA603C43BDF711A2B31FADC8CDFFC9CC16.crl rsync://repo-rpki.idnic.net/repo/dea79340-4db2-458d-95dd-af20b4fcdb3d/0/B89398BA603C43BDF711A2B31FADC8CDFFC9CC16.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B89398BA603C43BDF711A2B31FADC8CDFFC9CC16.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Dec 2025 04:53:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:f0:c6:f5:c9:4d:ce:5a:92:bf:9d:c6:17:27:16:b1:9e:b7:73:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B89398BA603C43BDF711A2B31FADC8CDFFC9CC16 Validity Not Before: Dec 15 22:16:48 2025 GMT Not After : Dec 19 04:53:48 2025 GMT Subject: CN=540D0B5540FF7AEB274AE8EA35ECB12B44A7BBFF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:2b:30:75:50:9b:5f:08:ee:6e:0b:94:a8:45: 72:92:24:5c:1d:1e:cc:e7:cc:f5:e5:94:4c:07:fa: 1f:fe:14:ed:8b:e4:54:0e:d9:b7:45:dd:0e:c3:d8: 12:5b:c7:81:f1:ff:18:cc:44:e1:f5:60:8c:45:30: 9f:31:d8:68:e8:88:e6:5a:61:de:e5:4e:79:e6:d5: c3:4f:0c:96:5d:77:d4:89:a9:a4:df:f2:8b:75:b5: 6b:de:2b:fd:9a:4c:26:f5:ca:3e:27:ac:b3:29:32: fd:49:c9:da:36:41:04:23:01:39:0f:e1:1e:ae:92: 51:59:96:cb:9a:47:a7:f5:ad:3f:8f:5b:02:02:92: 9c:48:dc:f7:5a:aa:6d:1f:89:77:21:31:ea:ca:a3: e4:7a:21:ac:79:cf:d6:be:cf:11:a8:0d:a5:f5:1e: a1:2a:6f:a0:0e:86:6c:4c:87:bf:ec:1c:5f:2f:eb: 09:c7:fc:63:db:cf:66:00:10:4a:e6:6e:9a:88:3d: fe:c0:79:20:53:79:3e:4e:fa:97:f8:c3:a9:72:1c: 0e:5a:e8:4d:53:b3:01:9e:f2:f4:f7:8f:7f:b7:5a: a3:5f:c2:33:db:65:04:a2:e1:69:99:01:66:ae:c1: b7:31:24:01:5d:85:44:0a:35:ae:8b:be:a2:ee:2d: 1a:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:0D:0B:55:40:FF:7A:EB:27:4A:E8:EA:35:EC:B1:2B:44:A7:BB:FF X509v3 Authority Key Identifier: keyid:B8:93:98:BA:60:3C:43:BD:F7:11:A2:B3:1F:AD:C8:CD:FF:C9:CC:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dea79340-4db2-458d-95dd-af20b4fcdb3d/0/B89398BA603C43BDF711A2B31FADC8CDFFC9CC16.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B89398BA603C43BDF711A2B31FADC8CDFFC9CC16.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dea79340-4db2-458d-95dd-af20b4fcdb3d/0/B89398BA603C43BDF711A2B31FADC8CDFFC9CC16.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:22:24:bc:ae:0b:f5:08:eb:ad:e8:b6:29:7e:24:cc:98:18: ac:21:32:f4:a2:d3:42:8b:53:a7:2d:ee:a7:3b:db:a9:e2:fd: 48:dc:26:a2:0d:2f:3c:d3:95:75:f5:8a:c4:96:9b:7b:4c:dc: 46:df:c9:91:b1:84:48:eb:a9:1f:0a:69:03:63:b6:a8:5e:e0: 93:c3:80:c5:c9:6b:1a:e3:f9:c9:28:c9:39:7b:12:25:89:b3: 66:d7:e1:6e:bb:de:02:fd:ca:2f:5d:3a:b3:53:6a:19:99:16: f2:7a:c6:b7:59:eb:f6:1f:2b:0f:fa:a8:66:28:50:0a:8e:97: bb:84:1f:98:bb:59:32:fb:1c:74:5c:01:72:69:59:a8:55:41: 42:64:d6:0b:dd:c8:37:5f:3e:cc:7d:58:2f:18:7d:59:a3:b7: ce:9a:4e:5a:0a:fc:50:97:93:e5:2d:d6:d1:ce:ed:f4:0e:c6: 84:99:09:6a:7d:47:b1:9a:e6:d3:a2:68:83:0a:aa:4c:48:07: af:a3:ab:6c:78:53:87:de:74:c2:85:aa:ea:27:da:79:9e:ee: 57:65:a1:4d:46:52:ab:b3:8d:f4:79:3e:99:d2:51:24:a4:72: 44:28:80:2a:8c:01:1d:99:00:93:4e:bd:36:c9:7e:83:6e:ec: dc:80:6f:5b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYvDG9clNzlqSv53GFycWsZ63cxcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjg5Mzk4QkE2MDNDNDNCREY3MTFBMkIzMUZBREM4Q0RG RkM5Q0MxNjAeFw0yNTEyMTUyMjE2NDhaFw0yNTEyMTkwNDUzNDhaMDMxMTAvBgNV BAMTKDU0MEQwQjU1NDBGRjdBRUIyNzRBRThFQTM1RUNCMTJCNDRBN0JCRkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9KzB1UJtfCO5uC5SoRXKSJFwd HsznzPXllEwH+h/+FO2L5FQO2bdF3Q7D2BJbx4Hx/xjMROH1YIxFMJ8x2GjoiOZa Yd7lTnnm1cNPDJZdd9SJqaTf8ot1tWveK/2aTCb1yj4nrLMpMv1Jydo2QQQjATkP 4R6uklFZlsuaR6f1rT+PWwICkpxI3Pdaqm0fiXchMerKo+R6Iax5z9a+zxGoDaX1 HqEqb6AOhmxMh7/sHF8v6wnH/GPbz2YAEErmbpqIPf7AeSBTeT5O+pf4w6lyHA5a 6E1TswGe8vT3j3+3WqNfwjPbZQSi4WmZAWauwbcxJAFdhUQKNa6LvqLuLRqbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVA0LVUD/eusnSujqNeyxK0Snu/8wHwYDVR0j BBgwFoAUuJOYumA8Q733EaKzH63Izf/JzBYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZWE3OTM0MC00ZGIyLTQ1OGQtOTVkZC1hZjIwYjRmY2RiM2QvMC9CODkzOThCQTYw M0M0M0JERjcxMUEyQjMxRkFEQzhDREZGQzlDQzE2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjg5Mzk4QkE2MDNDNDNCREY3MTFBMkIzMUZBREM4Q0RGRkM5 Q0MxNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGVhNzkzNDAtNGRiMi00NThkLTk1 ZGQtYWYyMGI0ZmNkYjNkLzAvQjg5Mzk4QkE2MDNDNDNCREY3MTFBMkIzMUZBREM4 Q0RGRkM5Q0MxNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABYiJLyuC/UI663otil+JMyYGKwhMvSi00KL U6ct7qc726ni/UjcJqINLzzTlXX1isSWm3tM3EbfyZGxhEjrqR8KaQNjtqhe4JPD gMXJaxrj+ckoyTl7EiWJs2bX4W673gL9yi9dOrNTahmZFvJ6xrdZ6/YfKw/6qGYo UAqOl7uEH5i7WTL7HHRcAXJpWahVQUJk1gvdyDdfPsx9WC8YfVmjt86aTloK/FCX k+Ut1tHO7fQOxoSZCWp9R7Ga5tOiaIMKqkxIB6+jq2x4U4fedMKFquon2nme7ldl oU1GUquzjfR5PpnSUSSkckQogCqMAR2ZAJNOvTbJfoNu7NyAb1s= -----END CERTIFICATE-----Generated at Tue Dec 16 22:36:50 2025 by rpki-client