This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/aae6379e-b886-436e-b0ed-3aaff9c08501/0/B90B0AED87ECD7C87066450AB56ADE2996647CD5.mft File: B90B0AED87ECD7C87066450AB56ADE2996647CD5.mft (raw, json) Hash identifier: zvMqrcXd6ha4RnY3t4tXeI8oAqRQhV5W10etVPsjaiE= Subject key identifier: F3:18:66:7B:62:37:2E:71:EC:2B:D2:FA:75:88:6C:AE:1E:D5:C5:6F Authority key identifier: B9:0B:0A:ED:87:EC:D7:C8:70:66:45:0A:B5:6A:DE:29:96:64:7C:D5 Certificate issuer: /CN=B90B0AED87ECD7C87066450AB56ADE2996647CD5 Certificate serial: 3BAF5F6FE099D56E59F140BBF39D5FD64A4F4473 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B90B0AED87ECD7C87066450AB56ADE2996647CD5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aae6379e-b886-436e-b0ed-3aaff9c08501/0/B90B0AED87ECD7C87066450AB56ADE2996647CD5.mft Manifest number: 029C Signing time: Wed 17 Dec 2025 22:11:32 +0000 Manifest this update: Wed 17 Dec 2025 22:06:32 +0000 Manifest next update: Sun 21 Dec 2025 02:12:32 +0000 Files and hashes: 1: B90B0AED87ECD7C87066450AB56ADE2996647CD5.crl (hash: T4Go3scyFMCQJWw833+C5meFH5/JTh6rUbP+HaWurBE=) 2: 3130332e3137302e33332e302f32342d3234203d3e20313432333933.roa (hash: Y898pFGpBLNuRCPjm01v0/pmUXmwJOu+OeM8IgqOT94=) 3: 3130332e3137302e33322e302f32342d3234203d3e20313432333631.roa (hash: lzUMPrw8n3pOIcK3z918mZsLDeZOm1wMYf7ktj1KFkU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aae6379e-b886-436e-b0ed-3aaff9c08501/0/B90B0AED87ECD7C87066450AB56ADE2996647CD5.crl rsync://repo-rpki.idnic.net/repo/aae6379e-b886-436e-b0ed-3aaff9c08501/0/B90B0AED87ECD7C87066450AB56ADE2996647CD5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B90B0AED87ECD7C87066450AB56ADE2996647CD5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 02:12:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:af:5f:6f:e0:99:d5:6e:59:f1:40:bb:f3:9d:5f:d6:4a:4f:44:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B90B0AED87ECD7C87066450AB56ADE2996647CD5 Validity Not Before: Dec 17 22:06:32 2025 GMT Not After : Dec 21 02:12:32 2025 GMT Subject: CN=F318667B62372E71EC2BD2FA75886CAE1ED5C56F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:21:d7:c5:f6:54:75:46:de:14:36:73:fa:4f: a3:15:e5:8b:6d:f2:f9:bb:28:fc:90:13:8b:8c:d2: 30:a6:d2:eb:a6:8e:14:ba:a0:e8:b1:fe:e8:3b:53: b5:06:f2:2e:8d:90:46:3f:c3:96:ee:bd:fe:77:b7: 81:85:f2:2b:ab:16:70:59:40:bf:34:4e:0d:0c:eb: bc:32:d1:57:c6:81:46:ff:da:85:36:17:f6:19:90: 71:25:f1:3e:2c:08:d0:b6:f5:23:b3:87:68:63:e5: fb:62:98:68:4a:d3:e6:40:f4:0a:82:06:0d:f4:a1: 58:22:ea:08:ad:90:6a:56:76:70:31:a1:86:c4:9c: 0a:d3:68:3c:d4:8c:b2:93:f7:f1:5f:8a:59:9b:c7: d7:8b:bb:a8:90:32:c8:17:76:6c:e9:1a:ff:8d:d7: 34:c2:41:02:78:30:b3:ca:a2:26:2f:21:43:4d:c1: d0:5b:9a:3c:ab:b4:9a:a0:9b:07:52:3a:a5:6f:93: ef:34:c3:47:78:e4:5e:b6:f0:22:9e:f4:27:66:94: bf:20:71:52:44:61:3d:cb:c2:6b:f3:d5:7e:bd:27: dc:af:d5:b3:ca:e6:73:2a:43:d4:9f:c4:2a:04:d0: 70:5e:2f:0b:31:95:dc:e6:a0:26:d0:ab:f2:83:93: 64:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:18:66:7B:62:37:2E:71:EC:2B:D2:FA:75:88:6C:AE:1E:D5:C5:6F X509v3 Authority Key Identifier: keyid:B9:0B:0A:ED:87:EC:D7:C8:70:66:45:0A:B5:6A:DE:29:96:64:7C:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aae6379e-b886-436e-b0ed-3aaff9c08501/0/B90B0AED87ECD7C87066450AB56ADE2996647CD5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B90B0AED87ECD7C87066450AB56ADE2996647CD5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aae6379e-b886-436e-b0ed-3aaff9c08501/0/B90B0AED87ECD7C87066450AB56ADE2996647CD5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:36:e5:76:12:71:c9:98:6d:97:00:38:8d:84:75:ed:bd:7c: 99:aa:58:3c:69:23:04:60:a7:89:56:2a:80:4e:4a:b6:48:f8: fd:62:aa:01:e5:9b:98:a2:a7:24:3c:a2:ee:4a:e1:62:9b:61: d8:78:e6:21:45:88:97:fc:e8:f5:a6:a5:c9:c7:13:14:a5:ef: 34:fa:c1:f2:ca:0c:b3:80:04:2f:c9:d2:4b:45:1c:59:78:b3: 8a:0a:35:73:e2:cb:5a:7b:98:8a:dc:a7:dc:d1:ea:12:95:ee: 74:a2:b9:e0:b0:f7:af:c9:0f:b9:31:68:20:4b:4e:b5:06:3c: f2:ab:5c:49:1a:32:f8:52:a8:30:5c:3d:04:53:e9:f9:79:b6: 76:b0:03:10:16:b3:f6:da:2d:01:2c:41:4a:ec:2c:3c:02:1b: 2b:19:3b:12:5a:b1:6f:56:73:03:a8:3e:70:4d:6e:e6:93:28: 6d:c1:35:d7:d4:3a:c9:19:93:14:24:74:4c:6a:1e:54:b0:b2: 94:30:a8:d9:90:97:f8:9d:b3:48:ec:30:ab:0a:fe:7c:1f:03: 18:27:6f:86:13:de:5e:2d:e5:1b:1d:0a:55:14:1e:64:cc:b0: ac:4b:9c:bc:80:c6:1a:4c:2c:5a:f2:c8:ae:a3:70:14:f3:72: 9a:37:9e:60 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO69fb+CZ1W5Z8UC7851f1kpPRHMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjkwQjBBRUQ4N0VDRDdDODcwNjY0NTBBQjU2QURFMjk5 NjY0N0NENTAeFw0yNTEyMTcyMjA2MzJaFw0yNTEyMjEwMjEyMzJaMDMxMTAvBgNV BAMTKEYzMTg2NjdCNjIzNzJFNzFFQzJCRDJGQTc1ODg2Q0FFMUVENUM1NkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGIdfF9lR1Rt4UNnP6T6MV5Ytt 8vm7KPyQE4uM0jCm0uumjhS6oOix/ug7U7UG8i6NkEY/w5buvf53t4GF8iurFnBZ QL80Tg0M67wy0VfGgUb/2oU2F/YZkHEl8T4sCNC29SOzh2hj5ftimGhK0+ZA9AqC Bg30oVgi6gitkGpWdnAxoYbEnArTaDzUjLKT9/Ffilmbx9eLu6iQMsgXdmzpGv+N 1zTCQQJ4MLPKoiYvIUNNwdBbmjyrtJqgmwdSOqVvk+80w0d45F628CKe9CdmlL8g cVJEYT3Lwmvz1X69J9yv1bPK5nMqQ9SfxCoE0HBeLwsxldzmoCbQq/KDk2SlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8xhme2I3LnHsK9L6dYhsrh7VxW8wHwYDVR0j BBgwFoAUuQsK7Yfs18hwZkUKtWreKZZkfNUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YWU2Mzc5ZS1iODg2LTQzNmUtYjBlZC0zYWFmZjljMDg1MDEvMC9COTBCMEFFRDg3 RUNEN0M4NzA2NjQ1MEFCNTZBREUyOTk2NjQ3Q0Q1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjkwQjBBRUQ4N0VDRDdDODcwNjY0NTBBQjU2QURFMjk5NjY0 N0NENS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWFlNjM3OWUtYjg4Ni00MzZlLWIw ZWQtM2FhZmY5YzA4NTAxLzAvQjkwQjBBRUQ4N0VDRDdDODcwNjY0NTBBQjU2QURF Mjk5NjY0N0NENS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK025XYSccmYbZcAOI2Ede29fJmqWDxpIwRg p4lWKoBOSrZI+P1iqgHlm5iipyQ8ou5K4WKbYdh45iFFiJf86PWmpcnHExSl7zT6 wfLKDLOABC/J0ktFHFl4s4oKNXPiy1p7mIrcp9zR6hKV7nSiueCw96/JD7kxaCBL TrUGPPKrXEkaMvhSqDBcPQRT6fl5tnawAxAWs/baLQEsQUrsLDwCGysZOxJasW9W cwOoPnBNbuaTKG3BNdfUOskZkxQkdExqHlSwspQwqNmQl/ids0jsMKsK/nwfAxgn b4YT3l4t5RsdClUUHmTMsKxLnLyAxhpMLFryyK6jcBTzcpo3nmA= -----END CERTIFICATE-----Generated at Fri Dec 19 11:35:12 2025 by rpki-client