This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/56fd9a58-a906-4029-92e2-adcb56ae18bd/0/90EF20986B3061451D9F1178EB4D439522186281.mft File: 90EF20986B3061451D9F1178EB4D439522186281.mft (raw, json) Hash identifier: xl771K0GATC+Jgxo1L//5KSf+sGAhwsKUglOMhXV3x0= Subject key identifier: F7:2E:F7:10:48:29:8F:36:55:C7:45:4E:07:0C:AB:17:D0:AE:77:ED Authority key identifier: 90:EF:20:98:6B:30:61:45:1D:9F:11:78:EB:4D:43:95:22:18:62:81 Certificate issuer: /CN=90EF20986B3061451D9F1178EB4D439522186281 Certificate serial: 4D14BAFC3E644B8D91604F11695B4C26F3B61ADF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90EF20986B3061451D9F1178EB4D439522186281.cer Subject info access: rsync://repo-rpki.idnic.net/repo/56fd9a58-a906-4029-92e2-adcb56ae18bd/0/90EF20986B3061451D9F1178EB4D439522186281.mft Manifest number: 02BE Signing time: Thu 18 Dec 2025 06:12:02 +0000 Manifest this update: Thu 18 Dec 2025 06:07:02 +0000 Manifest next update: Sun 21 Dec 2025 12:47:02 +0000 Files and hashes: 1: 3130332e3137382e32302e302f32332d3233203d3e20313439333139.roa (hash: /g+5nQoioDTt8teej8QvN1daXZtQyJ0RCEnJEqM8tz8=) 2: 90EF20986B3061451D9F1178EB4D439522186281.crl (hash: 8dLCLfCVTzRWl27lULM5IGorTrBfe2mhNvTj9LJ+QKE=) 3: 3130332e3137382e32302e302f32342d3234203d3e20313439333139.roa (hash: juxqVk4Pjv7HWg3rc7qy+poTuVXup5lljxn80d82VOs=) 4: 3130332e3137382e32312e302f32342d3234203d3e20313439333139.roa (hash: n2eHTuRPz7VRKqIm4y6ERY38jrtnwA1mKjZRAuLNji8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/56fd9a58-a906-4029-92e2-adcb56ae18bd/0/90EF20986B3061451D9F1178EB4D439522186281.crl rsync://repo-rpki.idnic.net/repo/56fd9a58-a906-4029-92e2-adcb56ae18bd/0/90EF20986B3061451D9F1178EB4D439522186281.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90EF20986B3061451D9F1178EB4D439522186281.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 12:47:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:14:ba:fc:3e:64:4b:8d:91:60:4f:11:69:5b:4c:26:f3:b6:1a:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90EF20986B3061451D9F1178EB4D439522186281 Validity Not Before: Dec 18 06:07:02 2025 GMT Not After : Dec 21 12:47:02 2025 GMT Subject: CN=F72EF71048298F3655C7454E070CAB17D0AE77ED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:cb:2d:89:b3:c1:38:ad:39:01:9e:53:80:37: 0d:f8:77:bb:49:17:56:9e:2c:9e:33:8f:8c:56:86: 79:b4:2c:40:ec:6e:62:93:35:3e:34:d3:bf:53:a8: 99:ec:09:a6:54:10:dc:8c:f3:55:97:c0:5e:32:29: 53:d8:c4:8d:44:f7:d1:9a:2b:e5:9c:14:62:0a:c3: 9e:21:bf:16:94:15:5b:b4:ec:20:ff:f7:68:bf:ee: 62:ff:36:7e:93:b4:54:89:de:b6:d9:ac:8e:10:38: a0:4e:65:30:54:2d:9f:47:76:5e:a7:a3:1e:94:15: bb:31:f4:f1:12:53:d2:d9:4a:6f:b5:ab:e5:6d:33: fb:a7:c0:c6:09:c3:7b:53:83:2e:11:e0:f3:04:2f: 3e:20:70:21:ae:2d:99:e1:4b:6b:b4:ec:a9:47:70: e0:42:c8:be:25:6e:05:93:9a:f7:45:28:7c:e3:0d: f9:32:5d:bf:e2:a4:e5:7c:6d:75:e7:ca:88:ec:0d: bf:e1:30:ec:e9:5a:7e:18:ab:19:fb:d5:1a:c2:7e: 41:de:8d:41:ef:00:e4:c1:b0:fb:a2:0b:e8:86:dd: df:7f:3e:2f:10:64:42:20:41:27:5c:26:a8:65:f6: 45:f2:ba:02:12:fa:95:ed:a2:db:75:b1:93:d1:34: 94:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:2E:F7:10:48:29:8F:36:55:C7:45:4E:07:0C:AB:17:D0:AE:77:ED X509v3 Authority Key Identifier: keyid:90:EF:20:98:6B:30:61:45:1D:9F:11:78:EB:4D:43:95:22:18:62:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/56fd9a58-a906-4029-92e2-adcb56ae18bd/0/90EF20986B3061451D9F1178EB4D439522186281.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90EF20986B3061451D9F1178EB4D439522186281.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/56fd9a58-a906-4029-92e2-adcb56ae18bd/0/90EF20986B3061451D9F1178EB4D439522186281.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:92:b6:55:65:03:3d:13:67:b8:22:14:9c:7a:aa:20:72:d0: 50:eb:a8:a8:f4:e2:e8:d3:bd:20:12:bf:a2:48:ce:ae:2b:8c: 1e:83:7a:dc:6d:1d:cf:7d:9e:59:ab:da:c9:0c:7f:8a:b5:c8: 93:7c:b4:4c:4f:c3:26:a0:2f:3c:69:8b:e3:85:80:be:71:35: e4:c3:85:57:be:19:8e:89:4b:10:84:86:51:2b:f8:f5:90:4d: 6c:34:42:66:3a:85:fb:d3:a6:29:0b:2d:bd:06:b8:ea:b6:7a: 24:18:83:e3:24:22:9b:4b:e5:62:af:e0:5f:03:52:f4:f3:31: 9a:bc:6f:74:7a:b1:55:53:ef:ea:d4:4b:6d:d2:91:3a:b2:af: dc:09:3e:f9:ff:31:e7:03:54:6c:4b:10:de:5f:67:4b:d8:f8: 5a:af:b9:27:4a:a8:e0:d0:46:22:d0:2b:40:60:6f:4e:ca:ae: af:4b:41:c9:85:8c:ec:f6:df:fc:4a:e7:64:15:9b:01:a4:ec: 2c:7a:19:61:b1:b7:4f:2b:dc:4b:37:0e:43:9b:6c:4a:1a:e9: 75:87:e1:26:1d:10:f2:a3:c4:41:06:c8:7c:a0:2c:52:73:68: 6a:82:96:5d:45:e8:04:f0:86:9b:dd:c1:0b:f6:05:0a:ae:00: b1:ca:86:e1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTRS6/D5kS42RYE8RaVtMJvO2Gt8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTBFRjIwOTg2QjMwNjE0NTFEOUYxMTc4RUI0RDQzOTUy MjE4NjI4MTAeFw0yNTEyMTgwNjA3MDJaFw0yNTEyMjExMjQ3MDJaMDMxMTAvBgNV BAMTKEY3MkVGNzEwNDgyOThGMzY1NUM3NDU0RTA3MENBQjE3RDBBRTc3RUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDryy2Js8E4rTkBnlOANw34d7tJ F1aeLJ4zj4xWhnm0LEDsbmKTNT40079TqJnsCaZUENyM81WXwF4yKVPYxI1E99Ga K+WcFGIKw54hvxaUFVu07CD/92i/7mL/Nn6TtFSJ3rbZrI4QOKBOZTBULZ9Hdl6n ox6UFbsx9PESU9LZSm+1q+VtM/unwMYJw3tTgy4R4PMELz4gcCGuLZnhS2u07KlH cOBCyL4lbgWTmvdFKHzjDfkyXb/ipOV8bXXnyojsDb/hMOzpWn4Yqxn71RrCfkHe jUHvAOTBsPuiC+iG3d9/Pi8QZEIgQSdcJqhl9kXyugIS+pXtott1sZPRNJRXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9y73EEgpjzZVx0VOBwyrF9Cud+0wHwYDVR0j BBgwFoAUkO8gmGswYUUdnxF4601DlSIYYoEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NmZkOWE1OC1hOTA2LTQwMjktOTJlMi1hZGNiNTZhZTE4YmQvMC85MEVGMjA5ODZC MzA2MTQ1MUQ5RjExNzhFQjRENDM5NTIyMTg2MjgxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTBFRjIwOTg2QjMwNjE0NTFEOUYxMTc4RUI0RDQzOTUyMjE4 NjI4MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTZmZDlhNTgtYTkwNi00MDI5LTky ZTItYWRjYjU2YWUxOGJkLzAvOTBFRjIwOTg2QjMwNjE0NTFEOUYxMTc4RUI0RDQz OTUyMjE4NjI4MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKSStlVlAz0TZ7giFJx6qiBy0FDrqKj04ujT vSASv6JIzq4rjB6DetxtHc99nlmr2skMf4q1yJN8tExPwyagLzxpi+OFgL5xNeTD hVe+GY6JSxCEhlEr+PWQTWw0QmY6hfvTpikLLb0GuOq2eiQYg+MkIptL5WKv4F8D UvTzMZq8b3R6sVVT7+rUS23SkTqyr9wJPvn/MecDVGxLEN5fZ0vY+FqvuSdKqODQ RiLQK0Bgb07Krq9LQcmFjOz23/xK52QVmwGk7Cx6GWGxt08r3Es3DkObbEoa6XWH 4SYdEPKjxEEGyHygLFJzaGqCll1F6ATwhpvdwQv2BQquALHKhuE= -----END CERTIFICATE-----Generated at Fri Dec 19 11:23:43 2025 by rpki-client