This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/53b858f6-de20-4121-bcea-9076edccc097/0/90317E269FFE9F713F20CFBACE642A6F60F78FCA.mft File: 90317E269FFE9F713F20CFBACE642A6F60F78FCA.mft (raw, json) Hash identifier: yooV8GEAQYQd2oFITA1Fx7F3huTPuGFM1en7mryc2J0= Subject key identifier: 5D:7A:C2:49:2A:40:FE:3C:60:6F:94:2E:99:31:BD:0D:54:BA:E4:45 Authority key identifier: 90:31:7E:26:9F:FE:9F:71:3F:20:CF:BA:CE:64:2A:6F:60:F7:8F:CA Certificate issuer: /CN=90317E269FFE9F713F20CFBACE642A6F60F78FCA Certificate serial: 02BC80E6F23F7E32DD109AD783D40157C3C7B7E6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90317E269FFE9F713F20CFBACE642A6F60F78FCA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/53b858f6-de20-4121-bcea-9076edccc097/0/90317E269FFE9F713F20CFBACE642A6F60F78FCA.mft Manifest number: DD Signing time: Thu 18 Dec 2025 13:20:05 +0000 Manifest this update: Thu 18 Dec 2025 13:15:05 +0000 Manifest next update: Sun 21 Dec 2025 19:40:05 +0000 Files and hashes: 1: 3130332e33362e3235302e302f32342d3234203d3e20313431303538.roa (hash: 1HxtFIC2mDpdIVeFSCE5SBjVAm1XOnzukjpVGUq9Opw=) 2: 90317E269FFE9F713F20CFBACE642A6F60F78FCA.crl (hash: TQUJb/uDn2RnCTmDciViek9wgvhOvx72lNqdvx8OtMQ=) 3: 323430313a633432303a3a2f33322d3438203d3e20313431303538.roa (hash: Ys/Ac2N5+uLGmk3R0LquRKwlaYjjmhHi3Oz1JgWuapk=) 4: 3130332e3135352e3131332e302f32342d3234203d3e20313431303538.roa (hash: eDVLkqfk43S08o9qz9LRiZEdW7qlzbDriZ0upji6wSE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/53b858f6-de20-4121-bcea-9076edccc097/0/90317E269FFE9F713F20CFBACE642A6F60F78FCA.crl rsync://repo-rpki.idnic.net/repo/53b858f6-de20-4121-bcea-9076edccc097/0/90317E269FFE9F713F20CFBACE642A6F60F78FCA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90317E269FFE9F713F20CFBACE642A6F60F78FCA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 19:40:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:bc:80:e6:f2:3f:7e:32:dd:10:9a:d7:83:d4:01:57:c3:c7:b7:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90317E269FFE9F713F20CFBACE642A6F60F78FCA Validity Not Before: Dec 18 13:15:05 2025 GMT Not After : Dec 21 19:40:05 2025 GMT Subject: CN=5D7AC2492A40FE3C606F942E9931BD0D54BAE445 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:07:97:75:4b:c4:c5:12:86:c4:3b:53:4f:57: 70:ed:7f:61:54:f5:c9:cf:f6:a4:48:cc:15:2c:4a: 58:e3:79:21:eb:fb:34:77:bd:19:94:a7:56:1f:bd: 45:ca:93:be:dc:10:9f:00:44:c1:35:ea:e6:3a:5d: c8:45:42:74:e4:45:bb:1f:10:df:bd:a0:3e:49:de: ff:89:e2:d3:bc:30:9a:c8:a3:b8:02:30:77:1c:86: af:08:ba:db:46:9e:0a:9b:4a:d0:4e:8a:ec:73:25: b3:44:49:b7:40:b6:30:78:31:3c:ff:83:69:a5:3a: 1c:a6:4f:2f:e7:c1:a3:b9:5d:46:d9:9a:93:a2:04: 39:74:bf:b4:a8:0b:37:35:c9:52:4d:9e:cd:6a:19: 28:e8:c0:ca:55:be:56:9b:26:3e:9d:08:19:5a:cd: 72:12:b5:40:5a:13:23:7f:22:d7:3d:f1:9c:1d:ef: cf:e9:c6:74:e7:58:59:7a:49:dd:30:3d:38:da:d5: 27:1b:2e:1c:98:81:b5:72:10:98:4c:4b:c0:49:9d: d6:24:01:f3:63:03:bf:84:73:b9:aa:dd:6a:39:1b: cd:ef:3b:e9:48:10:86:e2:97:e8:1d:3c:60:ba:bc: f9:7f:86:cc:f5:97:36:a0:72:58:6c:c1:76:30:c8: 6c:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:7A:C2:49:2A:40:FE:3C:60:6F:94:2E:99:31:BD:0D:54:BA:E4:45 X509v3 Authority Key Identifier: keyid:90:31:7E:26:9F:FE:9F:71:3F:20:CF:BA:CE:64:2A:6F:60:F7:8F:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/53b858f6-de20-4121-bcea-9076edccc097/0/90317E269FFE9F713F20CFBACE642A6F60F78FCA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90317E269FFE9F713F20CFBACE642A6F60F78FCA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/53b858f6-de20-4121-bcea-9076edccc097/0/90317E269FFE9F713F20CFBACE642A6F60F78FCA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:09:51:f3:b1:dc:47:aa:1d:b9:ac:1e:f7:c0:b9:b8:d7:fa: ce:5a:89:94:a4:83:26:95:fe:29:bb:32:51:56:1a:c3:53:ff: 8a:51:e1:12:7b:dc:63:4b:45:54:03:fb:d6:91:2a:97:e9:c8: d4:20:7c:fd:60:92:5b:73:a5:b1:8c:04:1f:df:da:35:03:67: 4c:df:d7:62:a6:00:a8:1f:ce:fa:52:80:69:62:ee:52:6c:0a: 3f:9c:84:ee:9c:f8:b7:cc:ee:d2:58:c6:29:bf:22:c6:49:3e: 75:1c:8c:2d:6c:8e:9b:b7:ca:3f:dd:2d:28:f1:6b:c3:36:32: d3:5c:29:d2:8a:0b:6f:81:c9:95:36:28:7c:a7:5a:15:d7:c9: 36:3d:33:a9:70:0e:e3:b7:8d:69:3d:2f:a4:30:52:dd:ad:1f: bf:5e:c1:0a:29:c3:73:ac:a9:57:6f:29:21:f6:6e:61:76:66: 5d:c3:bc:07:16:3b:5c:b7:b2:2c:ff:29:dc:6d:31:0b:44:ac: f6:1b:38:62:5d:a9:8d:67:83:65:bc:dd:59:3a:dc:d2:bc:fd: 75:e5:8e:e7:a3:91:4a:46:b6:10:8a:77:4c:12:a6:29:a3:73: 48:29:e1:41:bd:e4:2e:f0:11:2c:5c:be:63:a8:c0:6b:3f:13: b1:8c:c4:d4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAryA5vI/fjLdEJrXg9QBV8PHt+YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTAzMTdFMjY5RkZFOUY3MTNGMjBDRkJBQ0U2NDJBNkY2 MEY3OEZDQTAeFw0yNTEyMTgxMzE1MDVaFw0yNTEyMjExOTQwMDVaMDMxMTAvBgNV BAMTKDVEN0FDMjQ5MkE0MEZFM0M2MDZGOTQyRTk5MzFCRDBENTRCQUU0NDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1B5d1S8TFEobEO1NPV3Dtf2FU 9cnP9qRIzBUsSljjeSHr+zR3vRmUp1YfvUXKk77cEJ8ARME16uY6XchFQnTkRbsf EN+9oD5J3v+J4tO8MJrIo7gCMHcchq8IuttGngqbStBOiuxzJbNESbdAtjB4MTz/ g2mlOhymTy/nwaO5XUbZmpOiBDl0v7SoCzc1yVJNns1qGSjowMpVvlabJj6dCBla zXIStUBaEyN/Itc98Zwd78/pxnTnWFl6Sd0wPTja1ScbLhyYgbVyEJhMS8BJndYk AfNjA7+Ec7mq3Wo5G83vO+lIEIbil+gdPGC6vPl/hsz1lzagclhswXYwyGzJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXXrCSSpA/jxgb5QumTG9DVS65EUwHwYDVR0j BBgwFoAUkDF+Jp/+n3E/IM+6zmQqb2D3j8owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 M2I4NThmNi1kZTIwLTQxMjEtYmNlYS05MDc2ZWRjY2MwOTcvMC85MDMxN0UyNjlG RkU5RjcxM0YyMENGQkFDRTY0MkE2RjYwRjc4RkNBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTAzMTdFMjY5RkZFOUY3MTNGMjBDRkJBQ0U2NDJBNkY2MEY3 OEZDQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTNiODU4ZjYtZGUyMC00MTIxLWJj ZWEtOTA3NmVkY2NjMDk3LzAvOTAzMTdFMjY5RkZFOUY3MTNGMjBDRkJBQ0U2NDJB NkY2MEY3OEZDQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH4JUfOx3EeqHbmsHvfAubjX+s5aiZSkgyaV /im7MlFWGsNT/4pR4RJ73GNLRVQD+9aRKpfpyNQgfP1gkltzpbGMBB/f2jUDZ0zf 12KmAKgfzvpSgGli7lJsCj+chO6c+LfM7tJYxim/IsZJPnUcjC1sjpu3yj/dLSjx a8M2MtNcKdKKC2+ByZU2KHynWhXXyTY9M6lwDuO3jWk9L6QwUt2tH79ewQopw3Os qVdvKSH2bmF2Zl3DvAcWO1y3siz/KdxtMQtErPYbOGJdqY1ng2W83Vk63NK8/XXl juejkUpGthCKd0wSpimjc0gp4UG95C7wESxcvmOowGs/E7GMxNQ= -----END CERTIFICATE-----Generated at Fri Dec 19 21:07:11 2025 by rpki-client