This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/de5a5e6d-91ee-4497-b417-8d32f653e4b0/0/2B90BB17E78B62C15179029C6583E42BD7E18277.mft File: 2B90BB17E78B62C15179029C6583E42BD7E18277.mft (raw, json) Hash identifier: rz5V7Ayj21URzFKeQZ9ZRJNwEnLF0mjRQPGoqlwmIFY= Subject key identifier: FC:0B:46:65:6F:D9:47:13:A6:42:8F:89:2C:5A:78:94:E4:A1:28:5E Authority key identifier: 2B:90:BB:17:E7:8B:62:C1:51:79:02:9C:65:83:E4:2B:D7:E1:82:77 Certificate issuer: /CN=2B90BB17E78B62C15179029C6583E42BD7E18277 Certificate serial: 51DF4C24078FA440E69E635B5B8369074E175E16 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2B90BB17E78B62C15179029C6583E42BD7E18277.cer Subject info access: rsync://repo-rpki.idnic.net/repo/de5a5e6d-91ee-4497-b417-8d32f653e4b0/0/2B90BB17E78B62C15179029C6583E42BD7E18277.mft Manifest number: AE Signing time: Fri 19 Dec 2025 00:20:41 +0000 Manifest this update: Fri 19 Dec 2025 00:15:41 +0000 Manifest next update: Mon 22 Dec 2025 06:27:41 +0000 Files and hashes: 1: 3130332e38302e3231342e302f32342d3234203d3e20313533303932.roa (hash: E7LmVcTtrOc0QLca3OKgAjrGPUq24WcKvpibpJhqwMo=) 2: 3130332e38302e3231342e302f32332d3233203d3e20313533303932.roa (hash: /bOtG6Hq4cCxQBrZ1Nbmvs+Hrm8cpxmM7Q2j13q5aYY=) 3: 2B90BB17E78B62C15179029C6583E42BD7E18277.crl (hash: 08kpqn/BxF85MHbOD39OIPRBQa7zOAIP2FWM2rqNWyc=) 4: 3130332e38302e3231352e302f32342d3234203d3e20313533303932.roa (hash: E4Gvpo5D/NeUbbz+zUDpV78niTppp2APH+i1gYLD2PM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/de5a5e6d-91ee-4497-b417-8d32f653e4b0/0/2B90BB17E78B62C15179029C6583E42BD7E18277.crl rsync://repo-rpki.idnic.net/repo/de5a5e6d-91ee-4497-b417-8d32f653e4b0/0/2B90BB17E78B62C15179029C6583E42BD7E18277.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2B90BB17E78B62C15179029C6583E42BD7E18277.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 03:43:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:df:4c:24:07:8f:a4:40:e6:9e:63:5b:5b:83:69:07:4e:17:5e:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2B90BB17E78B62C15179029C6583E42BD7E18277 Validity Not Before: Dec 19 00:15:41 2025 GMT Not After : Dec 22 06:27:41 2025 GMT Subject: CN=FC0B46656FD94713A6428F892C5A7894E4A1285E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:f7:31:e0:83:8f:42:e9:b4:34:97:19:f9:29: 8c:98:9d:6a:e3:53:73:7a:7d:4a:cd:3f:89:3e:da: 9d:05:e5:71:ed:fe:2b:ed:34:e9:43:a7:98:e1:83: 35:bd:c8:b2:5b:b2:d6:7a:1b:44:1d:80:e7:84:4d: 74:d2:e3:8e:d4:e3:6e:ad:ed:b5:a2:f5:f5:c8:1d: 76:03:a2:30:47:09:a7:cd:35:9b:ee:c1:0a:cc:74: 1a:51:55:ea:ed:07:b2:b6:fd:84:96:8c:e2:28:d3: a0:48:e7:59:67:10:8b:a0:ed:05:4c:1a:6b:fe:1d: 9c:76:58:3f:18:11:03:25:1b:72:d6:2e:25:45:d9: e3:91:a9:72:34:60:a8:7b:b4:b5:5b:4d:77:4c:fe: 51:5b:7f:c7:b8:7a:9f:9c:9f:7b:71:f9:41:6d:6b: f5:2a:3d:06:8a:cc:85:e6:ba:d9:65:1c:96:d7:f1: fd:7a:09:94:ad:a4:59:3b:68:f1:a7:89:df:ea:ba: 4f:66:2d:7c:76:0a:89:c9:85:f7:68:96:0f:42:0e: 88:0f:1d:4f:69:7d:ab:bd:31:88:c9:3a:a1:39:63: 15:d6:12:95:79:3e:ac:3c:3b:28:32:f0:b3:94:f1: 92:ce:6c:ff:04:fd:68:86:9e:e4:07:2f:5c:db:75: cc:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:0B:46:65:6F:D9:47:13:A6:42:8F:89:2C:5A:78:94:E4:A1:28:5E X509v3 Authority Key Identifier: keyid:2B:90:BB:17:E7:8B:62:C1:51:79:02:9C:65:83:E4:2B:D7:E1:82:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/de5a5e6d-91ee-4497-b417-8d32f653e4b0/0/2B90BB17E78B62C15179029C6583E42BD7E18277.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2B90BB17E78B62C15179029C6583E42BD7E18277.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/de5a5e6d-91ee-4497-b417-8d32f653e4b0/0/2B90BB17E78B62C15179029C6583E42BD7E18277.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:3e:1c:22:b7:a9:c6:ac:c2:9b:ed:e7:c8:13:f5:ff:89:a0: 5d:cd:22:77:12:54:7d:45:08:18:05:c1:44:85:22:36:3b:16: fb:58:cb:b8:c2:60:0e:e7:06:26:33:8e:e8:f6:e3:2c:b6:ea: 1e:8a:55:6c:f6:42:20:75:23:d8:9d:d2:31:9f:79:df:a5:1c: 9e:f5:d2:74:fa:9b:09:6c:d0:aa:db:05:90:7d:65:3d:08:b4: 03:8b:c0:a0:68:72:39:62:60:27:6c:d7:7a:de:99:66:c9:24: 15:3f:4f:05:e6:bb:7b:1c:9f:4a:bf:6c:32:b1:a9:bc:f4:0b: 1c:60:ee:bc:d2:c6:83:93:de:d6:a3:bb:ba:b1:90:04:d8:1f: 4e:ba:0e:96:f2:36:6c:dd:5c:9b:d2:a2:94:de:b7:9c:0b:52: dc:22:10:4f:2b:59:08:13:98:b2:eb:69:a6:85:9c:f1:a8:36: ed:31:4e:bd:9c:61:10:c6:2f:1d:61:7c:06:9b:13:71:65:31: e5:3b:4b:33:7d:aa:e5:6d:90:0e:f1:5c:60:95:44:d0:8b:eb: de:bd:ae:8a:6b:54:2c:3c:72:5f:6a:c0:56:ec:c9:e4:01:6f: e2:2a:a5:1a:31:12:03:cc:b8:d2:d1:03:12:f5:48:af:04:e0: b5:d6:87:7d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUd9MJAePpEDmnmNbW4NpB04XXhYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkI5MEJCMTdFNzhCNjJDMTUxNzkwMjlDNjU4M0U0MkJE N0UxODI3NzAeFw0yNTEyMTkwMDE1NDFaFw0yNTEyMjIwNjI3NDFaMDMxMTAvBgNV BAMTKEZDMEI0NjY1NkZEOTQ3MTNBNjQyOEY4OTJDNUE3ODk0RTRBMTI4NUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF9zHgg49C6bQ0lxn5KYyYnWrj U3N6fUrNP4k+2p0F5XHt/ivtNOlDp5jhgzW9yLJbstZ6G0QdgOeETXTS447U426t 7bWi9fXIHXYDojBHCafNNZvuwQrMdBpRVertB7K2/YSWjOIo06BI51lnEIug7QVM Gmv+HZx2WD8YEQMlG3LWLiVF2eORqXI0YKh7tLVbTXdM/lFbf8e4ep+cn3tx+UFt a/UqPQaKzIXmutllHJbX8f16CZStpFk7aPGnid/quk9mLXx2ConJhfdolg9CDogP HU9pfau9MYjJOqE5YxXWEpV5Pqw8Oygy8LOU8ZLObP8E/WiGnuQHL1zbdcxFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/AtGZW/ZRxOmQo+JLFp4lOShKF4wHwYDVR0j BBgwFoAUK5C7F+eLYsFReQKcZYPkK9fhgncwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZTVhNWU2ZC05MWVlLTQ0OTctYjQxNy04ZDMyZjY1M2U0YjAvMC8yQjkwQkIxN0U3 OEI2MkMxNTE3OTAyOUM2NTgzRTQyQkQ3RTE4Mjc3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkI5MEJCMTdFNzhCNjJDMTUxNzkwMjlDNjU4M0U0MkJEN0Ux ODI3Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGU1YTVlNmQtOTFlZS00NDk3LWI0 MTctOGQzMmY2NTNlNGIwLzAvMkI5MEJCMTdFNzhCNjJDMTUxNzkwMjlDNjU4M0U0 MkJEN0UxODI3Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADw+HCK3qcaswpvt58gT9f+JoF3NIncSVH1F CBgFwUSFIjY7FvtYy7jCYA7nBiYzjuj24yy26h6KVWz2QiB1I9id0jGfed+lHJ71 0nT6mwls0KrbBZB9ZT0ItAOLwKBocjliYCds13remWbJJBU/TwXmu3scn0q/bDKx qbz0Cxxg7rzSxoOT3taju7qxkATYH066DpbyNmzdXJvSopTet5wLUtwiEE8rWQgT mLLraaaFnPGoNu0xTr2cYRDGLx1hfAabE3FlMeU7SzN9quVtkA7xXGCVRNCL6969 roprVCw8cl9qwFbsyeQBb+IqpRoxEgPMuNLRAxL1SK8E4LXWh30= -----END CERTIFICATE-----Generated at Fri Dec 19 11:21:30 2025 by rpki-client