This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7d02a58d-b958-4219-86d3-61e43cee319a/0/AA90F6A6378710CD695B4CC742651F235E503C5B.mft File: AA90F6A6378710CD695B4CC742651F235E503C5B.mft (raw, json) Hash identifier: +bQZQK4nHif2Aar40t91s6fC4zWRcNFlUIe83Yczpd0= Subject key identifier: 97:0A:77:56:B6:2B:99:49:91:A5:55:23:B2:A8:A4:87:8E:4A:61:66 Authority key identifier: AA:90:F6:A6:37:87:10:CD:69:5B:4C:C7:42:65:1F:23:5E:50:3C:5B Certificate issuer: /CN=AA90F6A6378710CD695B4CC742651F235E503C5B Certificate serial: 5553FDF9E3DFB43FEEE5F7BE9A84510E22B5DA5F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AA90F6A6378710CD695B4CC742651F235E503C5B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7d02a58d-b958-4219-86d3-61e43cee319a/0/AA90F6A6378710CD695B4CC742651F235E503C5B.mft Manifest number: 0154 Signing time: Wed 24 Dec 2025 18:40:47 +0000 Manifest this update: Wed 24 Dec 2025 18:35:47 +0000 Manifest next update: Sun 28 Dec 2025 04:25:47 +0000 Files and hashes: 1: 3138302e3133312e3132382e302f32342d3234203d3e20313532303136.roa (hash: VFWMiazWmoGEVLtcrf1dTJMRZzx900Rx4cZwTnY4Hao=) 2: AA90F6A6378710CD695B4CC742651F235E503C5B.crl (hash: D5AMYnLcdWMYf21lGck8bqm0DeG6nuEVqiFH76nPeMs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7d02a58d-b958-4219-86d3-61e43cee319a/0/AA90F6A6378710CD695B4CC742651F235E503C5B.crl rsync://repo-rpki.idnic.net/repo/7d02a58d-b958-4219-86d3-61e43cee319a/0/AA90F6A6378710CD695B4CC742651F235E503C5B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AA90F6A6378710CD695B4CC742651F235E503C5B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 17:20:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:53:fd:f9:e3:df:b4:3f:ee:e5:f7:be:9a:84:51:0e:22:b5:da:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AA90F6A6378710CD695B4CC742651F235E503C5B Validity Not Before: Dec 24 18:35:47 2025 GMT Not After : Dec 28 04:25:47 2025 GMT Subject: CN=970A7756B62B994991A55523B2A8A4878E4A6166 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:91:70:95:4d:69:a9:4a:f9:71:c3:08:fe:19: 00:6c:3a:76:57:43:c4:3c:94:43:ba:fc:17:6c:0b: 80:cb:18:60:e8:1e:99:32:49:d6:5b:d3:71:88:1b: ea:bc:e4:0f:91:8c:8d:94:2b:04:4f:88:7f:69:75: 8e:d0:f9:dc:79:56:8e:a7:2d:18:e2:91:3b:cb:60: 56:05:89:fa:a7:06:c7:95:fd:14:5c:a0:2d:7a:c6: 6a:01:c6:6f:ed:90:43:fe:ab:19:e7:45:b3:0c:b0: 4f:25:3c:75:f9:f5:8d:11:95:0b:42:ca:49:44:72: 25:1f:0c:dc:63:3c:d1:c1:dd:ca:1d:9b:d8:e2:34: f7:f9:c4:05:8f:3e:20:52:ea:9c:c0:b4:e3:36:d2: dc:d2:23:42:8d:c9:a0:0c:0b:5d:f9:a1:7f:34:d7: 7e:3f:3a:3b:30:f2:4c:ab:10:2a:ec:96:4e:28:93: b5:37:24:32:9a:99:76:5c:6c:c9:1e:02:3e:1d:c0: fd:d3:36:4a:64:9d:0a:a2:00:dd:b8:60:cf:87:2e: 8d:96:a1:89:c7:c9:1a:6d:9b:1e:16:f9:89:4f:f2: d8:43:16:13:a5:78:07:99:75:58:69:d3:6e:f1:62: b5:c3:9e:3d:9f:bd:b0:2f:e2:49:f3:00:86:fa:a9: c4:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:0A:77:56:B6:2B:99:49:91:A5:55:23:B2:A8:A4:87:8E:4A:61:66 X509v3 Authority Key Identifier: keyid:AA:90:F6:A6:37:87:10:CD:69:5B:4C:C7:42:65:1F:23:5E:50:3C:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7d02a58d-b958-4219-86d3-61e43cee319a/0/AA90F6A6378710CD695B4CC742651F235E503C5B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AA90F6A6378710CD695B4CC742651F235E503C5B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d02a58d-b958-4219-86d3-61e43cee319a/0/AA90F6A6378710CD695B4CC742651F235E503C5B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:43:6f:3c:f2:17:d8:b9:f7:af:f3:c7:c6:3c:f2:34:be:06: f1:59:78:51:84:a1:21:91:7c:c7:0b:dd:9d:29:35:50:f7:f4: 34:b1:0f:11:f2:1d:05:c4:b6:14:d4:a2:3c:99:4f:f7:d7:55: fe:e7:44:36:e3:b9:6d:da:e1:1d:d8:1b:a6:f2:5e:b5:ba:bc: 4c:2f:da:ba:72:bd:42:8d:38:00:e7:b0:03:45:07:1b:ad:0b: 78:8e:4a:83:29:76:6e:8b:3d:05:60:67:3d:5a:b9:21:52:7c: 02:5e:5b:c4:fe:23:28:06:cf:a0:5a:cb:41:37:5f:87:7a:c4: 83:19:c2:b7:56:69:47:08:0c:8e:c7:2a:be:ae:1b:63:ef:86: 9f:a5:52:de:b1:43:21:69:26:d2:90:5f:eb:2e:f4:c4:e6:7a: cf:2c:57:80:4e:e3:d7:6a:d5:c8:2c:00:4f:67:1b:71:dc:00: 50:51:76:79:8b:c2:dd:cd:93:b8:d0:af:5c:76:73:28:7a:79: ce:19:d0:3f:97:92:6e:09:86:38:e3:4a:83:ff:be:2e:8b:e6: 28:d0:4c:3d:82:5b:6b:e5:22:f7:4c:49:08:0b:09:02:e7:29: 38:4e:4f:eb:a1:fc:cf:64:91:ba:df:b8:dd:2e:a5:fd:32:6e: 15:32:40:f6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVVP9+ePftD/u5fe+moRRDiK12l8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUE5MEY2QTYzNzg3MTBDRDY5NUI0Q0M3NDI2NTFGMjM1 RTUwM0M1QjAeFw0yNTEyMjQxODM1NDdaFw0yNTEyMjgwNDI1NDdaMDMxMTAvBgNV BAMTKDk3MEE3NzU2QjYyQjk5NDk5MUE1NTUyM0IyQThBNDg3OEU0QTYxNjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/kXCVTWmpSvlxwwj+GQBsOnZX Q8Q8lEO6/BdsC4DLGGDoHpkySdZb03GIG+q85A+RjI2UKwRPiH9pdY7Q+dx5Vo6n LRjikTvLYFYFifqnBseV/RRcoC16xmoBxm/tkEP+qxnnRbMMsE8lPHX59Y0RlQtC yklEciUfDNxjPNHB3codm9jiNPf5xAWPPiBS6pzAtOM20tzSI0KNyaAMC135oX80 134/Ojsw8kyrECrslk4ok7U3JDKamXZcbMkeAj4dwP3TNkpknQqiAN24YM+HLo2W oYnHyRptmx4W+YlP8thDFhOleAeZdVhp027xYrXDnj2fvbAv4knzAIb6qcR7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlwp3VrYrmUmRpVUjsqikh45KYWYwHwYDVR0j BBgwFoAUqpD2pjeHEM1pW0zHQmUfI15QPFswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZDAyYTU4ZC1iOTU4LTQyMTktODZkMy02MWU0M2NlZTMxOWEvMC9BQTkwRjZBNjM3 ODcxMENENjk1QjRDQzc0MjY1MUYyMzVFNTAzQzVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUE5MEY2QTYzNzg3MTBDRDY5NUI0Q0M3NDI2NTFGMjM1RTUw M0M1Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2QwMmE1OGQtYjk1OC00MjE5LTg2 ZDMtNjFlNDNjZWUzMTlhLzAvQUE5MEY2QTYzNzg3MTBDRDY5NUI0Q0M3NDI2NTFG MjM1RTUwM0M1Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACdDbzzyF9i596/zx8Y88jS+BvFZeFGEoSGR fMcL3Z0pNVD39DSxDxHyHQXEthTUojyZT/fXVf7nRDbjuW3a4R3YG6byXrW6vEwv 2rpyvUKNOADnsANFBxutC3iOSoMpdm6LPQVgZz1auSFSfAJeW8T+IygGz6Bay0E3 X4d6xIMZwrdWaUcIDI7HKr6uG2Pvhp+lUt6xQyFpJtKQX+su9MTmes8sV4BO49dq 1cgsAE9nG3HcAFBRdnmLwt3Nk7jQr1x2cyh6ec4Z0D+Xkm4JhjjjSoP/vi6L5ijQ TD2CW2vlIvdMSQgLCQLnKThOT+uh/M9kkbrfuN0upf0ybhUyQPY= -----END CERTIFICATE-----Generated at Wed Dec 24 22:06:24 2025 by rpki-client