This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/f77ffe2a-31e4-4800-97d4-7874c1231911/0/90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3.mft File: 90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3.mft (raw, json) Hash identifier: UlcygHflmrOiUB4x0z1DL0FzF9wR9al53KHl2ifaAaM= Subject key identifier: AE:30:6C:80:A0:DA:B8:2C:9A:2F:67:21:EA:70:4E:6B:16:5F:C8:BE Authority key identifier: 90:E2:CC:AC:A3:23:EA:B2:14:5F:54:B7:CF:65:C5:FA:EC:EF:83:A3 Certificate issuer: /CN=90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3 Certificate serial: 6659B26CDEC79FE610F00B93036E5FD51CA84B58 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f77ffe2a-31e4-4800-97d4-7874c1231911/0/90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3.mft Manifest number: 01EC Signing time: Wed 17 Dec 2025 17:21:23 +0000 Manifest this update: Wed 17 Dec 2025 17:16:23 +0000 Manifest next update: Sat 20 Dec 2025 18:08:23 +0000 Files and hashes: 1: 3130332e3134352e35332e302f32342d3234203d3e20313339343535.roa (hash: t0f8hH0p5YUalqHFkiu1kyX28Ot7aEHcWn8PNYVXvq0=) 2: 3130332e3134352e35322e302f32332d3233203d3e20313339343535.roa (hash: 7DJwBHtzGlb/NDl1/3zGyCjwc3DhiipUzCGFUXWXjoE=) 3: 3130332e3134352e35322e302f32342d3234203d3e20313339343535.roa (hash: AnirtwiQcqhih7uqF14RHtBvHcWSRInmlpBmELQD3Bc=) 4: 90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3.crl (hash: n99Gti97w6G0zz3Qlz/qivkvigsLgX0EEXLdE4546RY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f77ffe2a-31e4-4800-97d4-7874c1231911/0/90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3.crl rsync://repo-rpki.idnic.net/repo/f77ffe2a-31e4-4800-97d4-7874c1231911/0/90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 18:08:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:59:b2:6c:de:c7:9f:e6:10:f0:0b:93:03:6e:5f:d5:1c:a8:4b:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3 Validity Not Before: Dec 17 17:16:23 2025 GMT Not After : Dec 20 18:08:23 2025 GMT Subject: CN=AE306C80A0DAB82C9A2F6721EA704E6B165FC8BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:43:16:11:02:91:d4:10:f8:bf:e4:cd:d7:69: 3f:6f:84:d7:a3:9e:4f:ae:92:48:1d:83:0c:39:ff: 03:32:5d:44:1f:6b:f3:76:aa:d5:c3:55:be:41:ab: bd:2b:e0:91:8d:e4:eb:f7:3c:d8:2b:4a:b2:e0:bd: 5a:aa:5c:1c:d6:34:74:3f:f3:ed:b1:36:8c:e6:a2: d4:85:fc:e9:ce:1b:d8:3d:c2:43:cf:e2:c1:7b:ff: b3:f4:34:c5:11:5b:25:14:13:8e:84:6f:70:8e:2f: 0e:6d:53:82:c8:7d:18:e5:8f:d8:12:3b:e2:17:7d: 5e:e6:1c:d7:1f:dd:cc:2d:b1:e3:5c:cd:e5:d8:02: a5:19:2a:d5:6e:a9:83:0d:c2:9b:3b:51:bd:75:2b: 1b:ab:4e:b8:35:19:22:29:cf:e7:3a:8d:db:f5:56: bc:f9:1f:dc:31:8f:43:ec:87:52:4b:54:6f:6b:98: 59:97:3c:b8:b0:35:48:96:2f:60:54:96:54:c8:db: e2:b9:e4:1d:2a:b8:59:bc:11:72:2b:f0:b2:08:b8: 4d:cd:af:34:92:d3:16:d3:fc:35:dd:fe:0d:49:4b: dc:1f:a2:a9:73:3d:28:38:18:d3:d3:b0:ea:c2:fb: d9:2a:51:7f:0b:f9:ce:d3:06:5b:75:33:6d:3e:31: 39:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:30:6C:80:A0:DA:B8:2C:9A:2F:67:21:EA:70:4E:6B:16:5F:C8:BE X509v3 Authority Key Identifier: keyid:90:E2:CC:AC:A3:23:EA:B2:14:5F:54:B7:CF:65:C5:FA:EC:EF:83:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f77ffe2a-31e4-4800-97d4-7874c1231911/0/90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f77ffe2a-31e4-4800-97d4-7874c1231911/0/90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:72:85:16:c0:50:ab:b5:fb:68:c5:90:bd:73:0d:1c:9f:4b: 44:a0:a4:13:40:5b:57:6d:d2:df:5b:fe:bb:02:11:93:ef:a7: 95:cc:53:bf:dc:9a:30:b5:4a:5f:f3:b1:b5:31:2a:53:5e:6f: 73:d1:8d:2a:14:ea:4a:61:e6:0d:3d:50:8a:60:78:48:eb:4a: 70:5e:20:c6:cf:34:06:3d:fe:b5:41:9b:9f:45:00:79:14:b6: 7f:ea:58:d1:31:f0:a2:ee:5f:b0:a8:43:d6:ca:a1:5c:3b:78: 00:df:9d:86:e0:11:c8:7b:9f:ad:ac:77:1b:24:3e:f1:9d:bc: 0e:78:95:02:5e:60:2c:41:16:c2:da:bc:6f:3f:4c:29:a9:14: fa:21:6f:8e:22:2a:59:2e:df:7a:05:26:58:4a:83:b4:48:0e: 7b:88:bc:1d:24:b5:0b:d4:b4:fa:a6:f6:f9:54:98:82:96:09: f1:44:c2:cd:1d:39:0a:9e:58:d4:67:85:b8:4d:a8:81:ea:f8: 22:52:34:64:b5:61:dc:82:f2:9f:8a:21:d9:24:4e:36:34:79: 81:36:66:d9:7b:fe:80:a2:42:86:5f:b4:6a:19:5f:27:12:55: e3:79:95:45:8a:b0:ce:5b:80:73:a5:27:5c:94:93:ac:c5:bd: 86:d4:eb:e0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZlmybN7Hn+YQ8AuTA25f1RyoS1gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTBFMkNDQUNBMzIzRUFCMjE0NUY1NEI3Q0Y2NUM1RkFF Q0VGODNBMzAeFw0yNTEyMTcxNzE2MjNaFw0yNTEyMjAxODA4MjNaMDMxMTAvBgNV BAMTKEFFMzA2QzgwQTBEQUI4MkM5QTJGNjcyMUVBNzA0RTZCMTY1RkM4QkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAQxYRApHUEPi/5M3XaT9vhNej nk+ukkgdgww5/wMyXUQfa/N2qtXDVb5Bq70r4JGN5Ov3PNgrSrLgvVqqXBzWNHQ/ 8+2xNozmotSF/OnOG9g9wkPP4sF7/7P0NMURWyUUE46Eb3COLw5tU4LIfRjlj9gS O+IXfV7mHNcf3cwtseNczeXYAqUZKtVuqYMNwps7Ub11KxurTrg1GSIpz+c6jdv1 Vrz5H9wxj0Psh1JLVG9rmFmXPLiwNUiWL2BUllTI2+K55B0quFm8EXIr8LIIuE3N rzSS0xbT/DXd/g1JS9wfoqlzPSg4GNPTsOrC+9kqUX8L+c7TBlt1M20+MTl/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrjBsgKDauCyaL2ch6nBOaxZfyL4wHwYDVR0j BBgwFoAUkOLMrKMj6rIUX1S3z2XF+uzvg6MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NzdmZmUyYS0zMWU0LTQ4MDAtOTdkNC03ODc0YzEyMzE5MTEvMC85MEUyQ0NBQ0Ez MjNFQUIyMTQ1RjU0QjdDRjY1QzVGQUVDRUY4M0EzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTBFMkNDQUNBMzIzRUFCMjE0NUY1NEI3Q0Y2NUM1RkFFQ0VG ODNBMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjc3ZmZlMmEtMzFlNC00ODAwLTk3 ZDQtNzg3NGMxMjMxOTExLzAvOTBFMkNDQUNBMzIzRUFCMjE0NUY1NEI3Q0Y2NUM1 RkFFQ0VGODNBMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE1yhRbAUKu1+2jFkL1zDRyfS0SgpBNAW1dt 0t9b/rsCEZPvp5XMU7/cmjC1Sl/zsbUxKlNeb3PRjSoU6kph5g09UIpgeEjrSnBe IMbPNAY9/rVBm59FAHkUtn/qWNEx8KLuX7CoQ9bKoVw7eADfnYbgEch7n62sdxsk PvGdvA54lQJeYCxBFsLavG8/TCmpFPohb44iKlku33oFJlhKg7RIDnuIvB0ktQvU tPqm9vlUmIKWCfFEws0dOQqeWNRnhbhNqIHq+CJSNGS1YdyC8p+KIdkkTjY0eYE2 Ztl7/oCiQoZftGoZXycSVeN5lUWKsM5bgHOlJ1yUk6zFvYbU6+A= -----END CERTIFICATE-----Generated at Fri Dec 19 00:49:58 2025 by rpki-client