This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/fb0074cf-76dd-4097-a19b-e37e62858b24/0/C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4.mft File: C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4.mft (raw, json) Hash identifier: xSHD7zkAyH6/04b1Ie6dElUtoQ9rVj/JWGRRlm3MD/E= Subject key identifier: B7:64:E4:D2:1A:3B:11:B4:B0:61:1B:B2:61:52:EB:A2:EE:B8:E1:08 Authority key identifier: C9:8D:64:A8:C5:83:48:DE:9C:5F:8D:92:13:E7:97:EE:3B:D3:9D:A4 Certificate issuer: /CN=C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4 Certificate serial: 604463B45E9ECE6F648A88B065C5B8916A234A20 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fb0074cf-76dd-4097-a19b-e37e62858b24/0/C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4.mft Manifest number: 0223 Signing time: Tue 23 Dec 2025 05:12:18 +0000 Manifest this update: Tue 23 Dec 2025 05:07:18 +0000 Manifest next update: Fri 26 Dec 2025 16:19:18 +0000 Files and hashes: 1: 3130332e3139312e3132372e302f32342d3234203d3e203233393534.roa (hash: VTTQAgRENeOwajLS/6KGqVtYtu8gKZsiy/3ONlUdfPM=) 2: 3130332e3139312e3132362e302f32342d3234203d3e203233393534.roa (hash: udVekUn4TWBKeQkQYpGcF2rohkU6UK3TsyCyh6Sm1SQ=) 3: C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4.crl (hash: +iBvT3mUQkegRmTco8sO91tweSgtDDEP5dABKMCUFMk=) 4: 3130332e3139312e3132362e302f32332d3234203d3e203233393534.roa (hash: tBWugiwQMjtC5piuUMK7QRT4X1helIOcbLU7F6gO8Ao=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fb0074cf-76dd-4097-a19b-e37e62858b24/0/C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4.crl rsync://repo-rpki.idnic.net/repo/fb0074cf-76dd-4097-a19b-e37e62858b24/0/C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 16:19:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:44:63:b4:5e:9e:ce:6f:64:8a:88:b0:65:c5:b8:91:6a:23:4a:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4 Validity Not Before: Dec 23 05:07:18 2025 GMT Not After : Dec 26 16:19:18 2025 GMT Subject: CN=B764E4D21A3B11B4B0611BB26152EBA2EEB8E108 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:9d:62:e1:26:fe:f1:eb:6a:69:2c:9d:d9:37: 1c:bd:0d:ec:56:0c:49:4e:3a:14:04:d5:99:62:73: 3d:07:1e:80:96:f0:44:4e:68:1c:e9:e9:57:10:94: b2:8b:11:d9:1f:f1:40:91:04:57:2f:f6:bf:97:05: 0a:f1:37:52:09:7d:c0:c7:6f:4c:fe:2e:2f:91:34: bb:32:3d:8f:44:a2:9f:2c:42:f3:c2:7b:41:b0:f2: 11:f0:20:bb:3f:e9:f8:bd:8d:8e:70:c2:42:6e:5d: 50:f0:9f:41:bc:fa:3c:b2:8c:d5:25:b7:41:c9:9b: 6d:88:eb:0e:36:f4:d2:de:af:dd:6b:c0:dc:57:11: da:8c:1d:43:80:fa:e3:b9:3b:ff:85:c9:67:56:6e: 59:75:0a:31:a6:fd:21:64:cc:cb:ee:08:9e:dd:1a: d3:ca:a5:91:7c:d1:76:5a:a8:b6:eb:d7:63:5b:7b: 3c:7f:5c:18:96:f9:88:94:4a:e8:7e:5b:6b:cc:db: e6:59:01:5a:bf:c2:0a:8b:8e:57:c8:81:01:09:1c: 0b:dd:41:e4:b1:78:87:74:54:57:d2:e1:b7:d6:fb: bc:de:8e:c1:51:a2:66:46:03:c8:b0:6e:36:f9:ef: 8a:86:00:14:8f:ec:b7:77:be:3f:1e:96:f1:7b:a6: da:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:64:E4:D2:1A:3B:11:B4:B0:61:1B:B2:61:52:EB:A2:EE:B8:E1:08 X509v3 Authority Key Identifier: keyid:C9:8D:64:A8:C5:83:48:DE:9C:5F:8D:92:13:E7:97:EE:3B:D3:9D:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fb0074cf-76dd-4097-a19b-e37e62858b24/0/C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fb0074cf-76dd-4097-a19b-e37e62858b24/0/C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:b4:bc:03:91:30:cf:6a:05:a0:bb:a8:b8:9e:c0:6b:aa:c4: cc:a7:92:98:bb:3c:e7:e8:44:69:16:76:40:08:e9:13:ea:a9: 1d:f1:2b:ac:84:11:4a:ac:46:67:27:96:4f:a7:aa:3a:ea:22: 94:c3:6d:21:31:3d:e0:40:80:55:b9:15:dd:49:de:5b:9e:a3: 2e:66:8c:f7:28:ea:de:e0:e8:f6:c5:14:60:1b:92:7e:ec:8d: bc:ad:77:30:db:bf:6e:db:8f:ac:1b:12:b0:13:52:79:81:2b: 55:e9:91:17:52:25:4c:12:dd:d9:31:83:5d:7e:33:7d:a4:71: 76:71:49:49:2c:fc:f6:24:59:99:0f:60:70:32:fe:3e:75:ed: e6:de:94:c8:a1:11:c6:59:fc:e6:bb:73:09:da:19:af:f4:7c: 51:f6:b9:5a:bc:b9:c9:7b:49:dd:0b:66:a0:7c:9f:01:88:5a: 79:20:f1:f7:15:e9:0e:85:ce:36:28:98:f2:5b:dc:4a:c4:e9: b1:93:ec:e7:ec:f7:6b:c1:80:56:38:41:64:a9:81:48:e2:bb: 74:ba:60:bc:60:32:7f:76:72:49:04:d5:5b:f2:62:80:56:6e: b0:d0:6a:b1:75:bd:ab:df:6f:ab:4d:65:0f:b5:b3:0a:fe:d5: 1e:2d:6e:f2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYERjtF6ezm9kioiwZcW4kWojSiAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzk4RDY0QThDNTgzNDhERTlDNUY4RDkyMTNFNzk3RUUz QkQzOURBNDAeFw0yNTEyMjMwNTA3MThaFw0yNTEyMjYxNjE5MThaMDMxMTAvBgNV BAMTKEI3NjRFNEQyMUEzQjExQjRCMDYxMUJCMjYxNTJFQkEyRUVCOEUxMDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8nWLhJv7x62ppLJ3ZNxy9DexW DElOOhQE1Zlicz0HHoCW8EROaBzp6VcQlLKLEdkf8UCRBFcv9r+XBQrxN1IJfcDH b0z+Li+RNLsyPY9Eop8sQvPCe0Gw8hHwILs/6fi9jY5wwkJuXVDwn0G8+jyyjNUl t0HJm22I6w429NLer91rwNxXEdqMHUOA+uO5O/+FyWdWbll1CjGm/SFkzMvuCJ7d GtPKpZF80XZaqLbr12Nbezx/XBiW+YiUSuh+W2vM2+ZZAVq/wgqLjlfIgQEJHAvd QeSxeId0VFfS4bfW+7zejsFRomZGA8iwbjb574qGABSP7Ld3vj8elvF7ptrtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUt2Tk0ho7EbSwYRuyYVLrou644QgwHwYDVR0j BBgwFoAUyY1kqMWDSN6cX42SE+eX7jvTnaQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YjAwNzRjZi03NmRkLTQwOTctYTE5Yi1lMzdlNjI4NThiMjQvMC9DOThENjRBOEM1 ODM0OERFOUM1RjhEOTIxM0U3OTdFRTNCRDM5REE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzk4RDY0QThDNTgzNDhERTlDNUY4RDkyMTNFNzk3RUUzQkQz OURBNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmIwMDc0Y2YtNzZkZC00MDk3LWEx OWItZTM3ZTYyODU4YjI0LzAvQzk4RDY0QThDNTgzNDhERTlDNUY4RDkyMTNFNzk3 RUUzQkQzOURBNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG20vAORMM9qBaC7qLiewGuqxMynkpi7POfo RGkWdkAI6RPqqR3xK6yEEUqsRmcnlk+nqjrqIpTDbSExPeBAgFW5Fd1J3lueoy5m jPco6t7g6PbFFGAbkn7sjbytdzDbv27bj6wbErATUnmBK1XpkRdSJUwS3dkxg11+ M32kcXZxSUks/PYkWZkPYHAy/j517ebelMihEcZZ/Oa7cwnaGa/0fFH2uVq8ucl7 Sd0LZqB8nwGIWnkg8fcV6Q6FzjYomPJb3ErE6bGT7Ofs92vBgFY4QWSpgUjiu3S6 YLxgMn92ckkE1VvyYoBWbrDQarF1vavfb6tNZQ+1swr+1R4tbvI= -----END CERTIFICATE-----Generated at Wed Dec 24 20:23:51 2025 by rpki-client