This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/0/D90C7042B5DC18341DCC77CA5CF8F4CA210D886B.mft File: D90C7042B5DC18341DCC77CA5CF8F4CA210D886B.mft (raw, json) Hash identifier: vSrQR63nTpX2am8CG/cNstJj7mWnb+IzVlKxxEibFBs= Subject key identifier: 2B:5F:70:27:97:E4:4B:CE:78:FB:0F:80:93:79:31:3B:6A:20:0A:92 Authority key identifier: D9:0C:70:42:B5:DC:18:34:1D:CC:77:CA:5C:F8:F4:CA:21:0D:88:6B Certificate issuer: /CN=D90C7042B5DC18341DCC77CA5CF8F4CA210D886B Certificate serial: 37DAE9F1EB64C34842DEF5B7DA187CB2312B085E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D90C7042B5DC18341DCC77CA5CF8F4CA210D886B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/0/D90C7042B5DC18341DCC77CA5CF8F4CA210D886B.mft Manifest number: 0114 Signing time: Sat 06 Dec 2025 05:52:28 +0000 Manifest this update: Sat 06 Dec 2025 05:47:27 +0000 Manifest next update: Tue 09 Dec 2025 08:36:27 +0000 Files and hashes: 1: D90C7042B5DC18341DCC77CA5CF8F4CA210D886B.crl (hash: Ta/OzTZFCWKaeK54yPfDr31vFj84zVbdJnuaXKxDnUM=) 2: 3135372e36362e372e302f32342d3234203d3e20313338383239.roa (hash: zM59QgzH/K8O4i/tzNe37zwwVnS65qf7DZJku3UKUIg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/0/D90C7042B5DC18341DCC77CA5CF8F4CA210D886B.crl rsync://repo-rpki.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/0/D90C7042B5DC18341DCC77CA5CF8F4CA210D886B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D90C7042B5DC18341DCC77CA5CF8F4CA210D886B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 06:55:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:da:e9:f1:eb:64:c3:48:42:de:f5:b7:da:18:7c:b2:31:2b:08:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D90C7042B5DC18341DCC77CA5CF8F4CA210D886B Validity Not Before: Dec 6 05:47:27 2025 GMT Not After : Dec 9 08:36:27 2025 GMT Subject: CN=2B5F702797E44BCE78FB0F809379313B6A200A92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:7a:bc:05:61:b9:91:2f:b8:ca:5d:b7:79:1a: 3c:43:0b:a7:c4:ff:68:7f:78:4c:55:af:52:c2:1a: a6:f9:be:fa:0c:5f:d1:65:00:7f:bc:95:86:5b:bb: fd:9d:81:9b:85:d1:b4:fb:9e:5a:b6:81:87:e0:25: 32:b8:c5:d0:18:6c:f0:6d:89:ec:ef:80:4e:d3:90: 72:e0:a5:a1:a8:e3:6f:98:dc:44:4e:e4:da:b2:16: d2:4b:54:e7:05:62:2b:ef:2b:3a:b2:6b:e3:ec:57: 2f:32:f8:15:86:59:5c:0e:cb:b5:bb:d3:69:af:29: e3:bd:c6:fb:da:5b:57:5f:0d:e3:1c:f9:e7:bd:0b: f6:ad:6c:8c:6d:02:14:96:11:30:49:4b:4a:6a:90: 21:96:8e:ff:e6:ab:f6:40:51:e7:0e:5a:5e:86:97: 61:83:e9:0e:27:cd:15:44:71:0b:23:a8:5e:4d:3c: 37:d2:80:67:8c:e6:e9:8a:f0:76:75:a2:e4:a6:f2: 23:d9:d4:97:0a:0b:3e:0f:3b:ca:7f:75:e6:d3:fd: 62:27:4f:10:ac:b2:b0:34:66:04:ef:2c:2d:12:cd: 9b:2d:47:aa:29:8a:48:2d:6b:0a:dc:32:ad:c9:2d: 86:9c:7c:32:95:2d:65:57:46:17:b8:2c:90:6c:fd: df:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:5F:70:27:97:E4:4B:CE:78:FB:0F:80:93:79:31:3B:6A:20:0A:92 X509v3 Authority Key Identifier: keyid:D9:0C:70:42:B5:DC:18:34:1D:CC:77:CA:5C:F8:F4:CA:21:0D:88:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/0/D90C7042B5DC18341DCC77CA5CF8F4CA210D886B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D90C7042B5DC18341DCC77CA5CF8F4CA210D886B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/0/D90C7042B5DC18341DCC77CA5CF8F4CA210D886B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:21:4e:89:3d:9a:85:6d:a7:3c:02:cc:4d:7d:e9:42:09:ca: 75:e9:08:c3:91:c6:ff:2c:77:ec:55:cf:82:93:43:28:d3:a3: 44:71:22:89:19:78:4a:8d:06:73:dc:dd:62:66:26:55:c4:ea: fa:a8:ca:b1:99:eb:b2:00:4c:76:60:61:91:02:ab:58:80:ec: 6f:6e:3e:24:7f:71:f1:a9:e1:f4:e3:8c:3b:77:c0:dc:74:7d: 78:a3:8b:a7:6d:58:e6:57:4a:58:a1:8d:b0:e4:ff:40:b1:81: 28:64:58:38:09:4d:b8:d8:2a:15:ce:7f:a2:d4:54:70:a4:f8: 84:c1:1e:18:31:59:23:bd:4c:ae:74:51:98:1e:1d:9f:f2:a4: d8:7d:78:ed:97:b0:46:01:e6:66:f6:80:2a:37:ec:48:3e:90: 1f:f0:3c:64:9d:29:ea:82:95:5d:ef:21:da:d1:17:3a:15:ca: fa:2a:57:fb:3e:61:7e:c3:73:5e:1e:a0:49:21:fa:da:c4:cb: b8:da:61:9e:63:48:67:e7:e3:5b:4b:2f:a5:6f:5e:00:4a:c2: c5:ce:77:67:8f:c1:5a:d3:e3:9e:85:25:c6:dc:54:4f:e6:af: 18:62:58:37:21:e8:c1:47:ec:76:1b:25:b1:ff:bc:c4:43:67: 6d:f6:f2:ea -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUN9rp8etkw0hC3vW32hh8sjErCF4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDkwQzcwNDJCNURDMTgzNDFEQ0M3N0NBNUNGOEY0Q0Ey MTBEODg2QjAeFw0yNTEyMDYwNTQ3MjdaFw0yNTEyMDkwODM2MjdaMDMxMTAvBgNV BAMTKDJCNUY3MDI3OTdFNDRCQ0U3OEZCMEY4MDkzNzkzMTNCNkEyMDBBOTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmerwFYbmRL7jKXbd5GjxDC6fE /2h/eExVr1LCGqb5vvoMX9FlAH+8lYZbu/2dgZuF0bT7nlq2gYfgJTK4xdAYbPBt iezvgE7TkHLgpaGo42+Y3ERO5NqyFtJLVOcFYivvKzqya+PsVy8y+BWGWVwOy7W7 02mvKeO9xvvaW1dfDeMc+ee9C/atbIxtAhSWETBJS0pqkCGWjv/mq/ZAUecOWl6G l2GD6Q4nzRVEcQsjqF5NPDfSgGeM5umK8HZ1ouSm8iPZ1JcKCz4PO8p/debT/WIn TxCssrA0ZgTvLC0SzZstR6opikgtawrcMq3JLYacfDKVLWVXRhe4LJBs/d+hAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUK19wJ5fkS854+w+Ak3kxO2ogCpIwHwYDVR0j BBgwFoAU2QxwQrXcGDQdzHfKXPj0yiENiGswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MGE2ZmVhYS02YjRmLTQ3Y2YtOWUzYy0wMGFlYWM2N2EzMmEvMC9EOTBDNzA0MkI1 REMxODM0MURDQzc3Q0E1Q0Y4RjRDQTIxMEQ4ODZCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRDkwQzcwNDJCNURDMTgzNDFEQ0M3N0NBNUNGOEY0Q0EyMTBE ODg2Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDBhNmZlYWEtNmI0Zi00N2NmLTll M2MtMDBhZWFjNjdhMzJhLzAvRDkwQzcwNDJCNURDMTgzNDFEQ0M3N0NBNUNGOEY0 Q0EyMTBEODg2Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACghTok9moVtpzwCzE196UIJynXpCMORxv8s d+xVz4KTQyjTo0RxIokZeEqNBnPc3WJmJlXE6vqoyrGZ67IATHZgYZECq1iA7G9u PiR/cfGp4fTjjDt3wNx0fXiji6dtWOZXSlihjbDk/0CxgShkWDgJTbjYKhXOf6LU VHCk+ITBHhgxWSO9TK50UZgeHZ/ypNh9eO2XsEYB5mb2gCo37Eg+kB/wPGSdKeqC lV3vIdrRFzoVyvoqV/s+YX7Dc14eoEkh+trEy7jaYZ5jSGfn41tLL6VvXgBKwsXO d2ePwVrT456FJcbcVE/mrxhiWDch6MFH7HYbJbH/vMRDZ2328uo= -----END CERTIFICATE-----Generated at Sat Dec 6 14:59:59 2025 by rpki-client