This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/5bd4340b-21c4-4fc7-a259-e2354c53fdd2/0/90173425DBB7D1DBD164BBA26F4657B17A266A97.mft File: 90173425DBB7D1DBD164BBA26F4657B17A266A97.mft (raw, json) Hash identifier: 62ygYfyyFNdJu7LXrtBIRQAcbOU34ZQb/e5JFWgjois= Subject key identifier: 8A:41:5C:11:6D:6A:74:9D:B7:7F:A1:3E:18:FA:FA:48:EA:A9:59:43 Authority key identifier: 90:17:34:25:DB:B7:D1:DB:D1:64:BB:A2:6F:46:57:B1:7A:26:6A:97 Certificate issuer: /CN=90173425DBB7D1DBD164BBA26F4657B17A266A97 Certificate serial: 09ACF617E07F591B3CC4718EFC0F20F548C809A8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90173425DBB7D1DBD164BBA26F4657B17A266A97.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5bd4340b-21c4-4fc7-a259-e2354c53fdd2/0/90173425DBB7D1DBD164BBA26F4657B17A266A97.mft Manifest number: 0535 Signing time: Thu 18 Dec 2025 06:01:22 +0000 Manifest this update: Thu 18 Dec 2025 05:56:22 +0000 Manifest next update: Sun 21 Dec 2025 12:54:22 +0000 Files and hashes: 1: 90173425DBB7D1DBD164BBA26F4657B17A266A97.crl (hash: xZcSlxDoMqJ+vrLwN/C6HtIBtjif51rTB0eyPlGvKvg=) 2: 323030313a6466373a376130303a3a2f34382d3438203d3e20313336303537.roa (hash: JVL+81yV9zQDwPcNgvThrCD77NCHFX7cSVK21vFtKao=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5bd4340b-21c4-4fc7-a259-e2354c53fdd2/0/90173425DBB7D1DBD164BBA26F4657B17A266A97.crl rsync://repo-rpki.idnic.net/repo/5bd4340b-21c4-4fc7-a259-e2354c53fdd2/0/90173425DBB7D1DBD164BBA26F4657B17A266A97.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90173425DBB7D1DBD164BBA26F4657B17A266A97.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 12:54:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:ac:f6:17:e0:7f:59:1b:3c:c4:71:8e:fc:0f:20:f5:48:c8:09:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90173425DBB7D1DBD164BBA26F4657B17A266A97 Validity Not Before: Dec 18 05:56:22 2025 GMT Not After : Dec 21 12:54:22 2025 GMT Subject: CN=8A415C116D6A749DB77FA13E18FAFA48EAA95943 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:70:e1:0c:47:73:02:09:24:55:84:1a:48:1c: 9d:ac:ee:66:b2:8c:45:41:39:f9:b1:48:9c:6b:a0: 1c:b3:3c:35:13:66:d8:9c:70:c9:78:1d:e9:3b:96: 7f:66:ca:f9:14:08:35:d8:07:79:3e:b8:72:68:5b: a1:58:2f:bb:89:76:8f:f5:8f:5c:60:f5:d8:41:64: 78:84:ff:69:04:d6:cb:ea:6c:76:5a:b1:bf:4e:d5: d6:91:b3:6f:01:dd:86:b5:2d:09:9c:d5:1a:ac:33: 0a:1b:b5:c6:0f:f8:d6:60:22:13:e6:fa:08:b7:54: d6:b6:e9:00:3d:58:23:fc:56:96:65:eb:ca:dc:ab: 78:e1:c9:b2:03:10:fc:e4:27:89:0a:99:f1:f9:70: 8f:88:39:e6:8a:20:e3:2c:a8:46:7a:21:c6:0d:23: ba:91:0e:1a:5f:67:02:da:a3:a8:73:e7:74:46:f7: 83:b2:dd:91:d3:14:a1:90:0e:c7:5c:68:45:40:e0: 86:6a:6c:92:96:a1:11:12:d7:44:16:4c:71:f2:ed: 97:48:3b:7e:ef:33:f7:a6:60:d9:40:cb:9f:f3:06: 96:bc:60:f7:cc:d7:6a:6b:ab:43:1f:25:42:eb:68: 1d:d0:4d:fb:33:9e:92:ec:c1:7b:a9:f7:4d:62:b4: af:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:41:5C:11:6D:6A:74:9D:B7:7F:A1:3E:18:FA:FA:48:EA:A9:59:43 X509v3 Authority Key Identifier: keyid:90:17:34:25:DB:B7:D1:DB:D1:64:BB:A2:6F:46:57:B1:7A:26:6A:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5bd4340b-21c4-4fc7-a259-e2354c53fdd2/0/90173425DBB7D1DBD164BBA26F4657B17A266A97.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90173425DBB7D1DBD164BBA26F4657B17A266A97.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5bd4340b-21c4-4fc7-a259-e2354c53fdd2/0/90173425DBB7D1DBD164BBA26F4657B17A266A97.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:2f:96:32:91:c0:c8:34:eb:90:7a:09:8c:53:1d:51:73:32: d9:7b:19:7f:88:36:a5:d3:90:b6:93:82:7c:a1:38:f9:73:78: bc:94:21:a9:c5:3e:0e:62:e9:1c:76:2f:02:e1:2e:2d:73:81: 62:d5:a4:bf:2a:cd:f2:ad:2d:b9:5d:cb:c0:fd:22:de:08:be: 00:00:64:14:c5:07:01:58:4d:27:50:05:b3:d7:f9:42:4f:24: 87:fb:9d:74:d2:8a:43:72:50:75:53:af:b4:5e:69:b4:2a:fd: 82:9e:92:20:2d:83:a5:ba:91:d7:a7:ca:f9:43:a2:a9:50:e6: d1:cc:23:d1:c2:db:94:00:64:e5:41:f7:ef:78:9c:f8:a5:82: d0:ad:30:c7:69:3c:ab:34:a2:6e:81:91:89:9b:5a:82:02:f5: 5c:d0:24:54:58:05:af:1e:2f:22:9c:d5:95:b3:70:b4:57:9d: ec:36:eb:6e:6c:f3:de:93:cc:bc:76:3c:9c:12:9f:ea:99:4b: 25:db:90:d6:11:dd:1c:fe:5f:da:ed:8a:c1:98:57:97:7c:d0: e7:9f:65:18:3f:a5:49:26:3f:53:a6:59:bd:e9:bc:0e:76:c6: 03:e1:ba:29:d0:7c:f0:6a:ba:62:b0:32:2d:84:40:5d:90:1e: c0:93:ed:dd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCaz2F+B/WRs8xHGO/A8g9UjICagwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTAxNzM0MjVEQkI3RDFEQkQxNjRCQkEyNkY0NjU3QjE3 QTI2NkE5NzAeFw0yNTEyMTgwNTU2MjJaFw0yNTEyMjExMjU0MjJaMDMxMTAvBgNV BAMTKDhBNDE1QzExNkQ2QTc0OURCNzdGQTEzRTE4RkFGQTQ4RUFBOTU5NDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0cOEMR3MCCSRVhBpIHJ2s7may jEVBOfmxSJxroByzPDUTZticcMl4Hek7ln9myvkUCDXYB3k+uHJoW6FYL7uJdo/1 j1xg9dhBZHiE/2kE1svqbHZasb9O1daRs28B3Ya1LQmc1RqsMwobtcYP+NZgIhPm +gi3VNa26QA9WCP8VpZl68rcq3jhybIDEPzkJ4kKmfH5cI+IOeaKIOMsqEZ6IcYN I7qRDhpfZwLao6hz53RG94Oy3ZHTFKGQDsdcaEVA4IZqbJKWoRES10QWTHHy7ZdI O37vM/emYNlAy5/zBpa8YPfM12prq0MfJULraB3QTfsznpLswXup901itK8BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUikFcEW1qdJ23f6E+GPr6SOqpWUMwHwYDVR0j BBgwFoAUkBc0Jdu30dvRZLuib0ZXsXomapcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YmQ0MzQwYi0yMWM0LTRmYzctYTI1OS1lMjM1NGM1M2ZkZDIvMC85MDE3MzQyNURC QjdEMURCRDE2NEJCQTI2RjQ2NTdCMTdBMjY2QTk3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTAxNzM0MjVEQkI3RDFEQkQxNjRCQkEyNkY0NjU3QjE3QTI2 NkE5Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWJkNDM0MGItMjFjNC00ZmM3LWEy NTktZTIzNTRjNTNmZGQyLzAvOTAxNzM0MjVEQkI3RDFEQkQxNjRCQkEyNkY0NjU3 QjE3QTI2NkE5Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI0vljKRwMg065B6CYxTHVFzMtl7GX+INqXT kLaTgnyhOPlzeLyUIanFPg5i6Rx2LwLhLi1zgWLVpL8qzfKtLbldy8D9It4IvgAA ZBTFBwFYTSdQBbPX+UJPJIf7nXTSikNyUHVTr7ReabQq/YKekiAtg6W6kdenyvlD oqlQ5tHMI9HC25QAZOVB9+94nPilgtCtMMdpPKs0om6BkYmbWoIC9VzQJFRYBa8e LyKc1ZWzcLRXnew2625s896TzLx2PJwSn+qZSyXbkNYR3Rz+X9rtisGYV5d80Oef ZRg/pUkmP1OmWb3pvA52xgPhuinQfPBqumKwMi2EQF2QHsCT7d0= -----END CERTIFICATE-----Generated at Fri Dec 19 11:16:55 2025 by rpki-client