This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/53b858f6-de20-4121-bcea-9076edccc097/0/90317E269FFE9F713F20CFBACE642A6F60F78FCA.mft
File: 90317E269FFE9F713F20CFBACE642A6F60F78FCA.mft (raw, json)
Hash identifier: qBCvyhJHoMBE+bLKY2hb2b1EFfZAx26nNf/OPd+CYfM=
Subject key identifier: 68:53:E8:47:FE:10:4B:52:86:2A:64:52:B5:24:C0:BF:39:3D:F2:42
Authority key identifier: 90:31:7E:26:9F:FE:9F:71:3F:20:CF:BA:CE:64:2A:6F:60:F7:8F:CA
Certificate issuer: /CN=90317E269FFE9F713F20CFBACE642A6F60F78FCA
Certificate serial: 02A78D6B506908F8CFE993571B8ABCDF04EF6C1F
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90317E269FFE9F713F20CFBACE642A6F60F78FCA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/53b858f6-de20-4121-bcea-9076edccc097/0/90317E269FFE9F713F20CFBACE642A6F60F78FCA.mft
Manifest number: ED
Signing time: Sat 24 Jan 2026 03:50:05 +0000
Manifest this update: Sat 24 Jan 2026 03:45:05 +0000
Manifest next update: Tue 27 Jan 2026 06:16:05 +0000
Files and hashes: 1: 90317E269FFE9F713F20CFBACE642A6F60F78FCA.crl (hash: XdsEMpPD6yUEkd3NCFrV9V45nS4jaEY5m1Xxy6Cn2Yc=)
2: 3130332e33362e3235302e302f32342d3234203d3e20313431303538.roa (hash: 1HxtFIC2mDpdIVeFSCE5SBjVAm1XOnzukjpVGUq9Opw=)
3: 3130332e3135352e3131332e302f32342d3234203d3e20313431303538.roa (hash: eDVLkqfk43S08o9qz9LRiZEdW7qlzbDriZ0upji6wSE=)
4: 323430313a633432303a3a2f33322d3438203d3e20313431303538.roa (hash: Ys/Ac2N5+uLGmk3R0LquRKwlaYjjmhHi3Oz1JgWuapk=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/53b858f6-de20-4121-bcea-9076edccc097/0/90317E269FFE9F713F20CFBACE642A6F60F78FCA.crl
rsync://repo-rpki.idnic.net/repo/53b858f6-de20-4121-bcea-9076edccc097/0/90317E269FFE9F713F20CFBACE642A6F60F78FCA.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90317E269FFE9F713F20CFBACE642A6F60F78FCA.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 27 Jan 2026 06:16:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:a7:8d:6b:50:69:08:f8:cf:e9:93:57:1b:8a:bc:df:04:ef:6c:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90317E269FFE9F713F20CFBACE642A6F60F78FCA
Validity
Not Before: Jan 24 03:45:05 2026 GMT
Not After : Jan 27 06:16:05 2026 GMT
Subject: CN=6853E847FE104B52862A6452B524C0BF393DF242
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:52:aa:4f:e5:83:71:42:66:df:70:88:62:31:
a1:ce:6f:50:87:88:eb:10:57:d2:b8:01:25:ca:f2:
dc:01:a2:c2:1c:c1:b5:7d:dd:c3:c0:cd:32:cc:b0:
71:bd:a0:9e:39:5f:5a:b7:00:84:ce:89:b2:ce:d9:
be:e1:ff:4f:10:3c:31:52:e8:7c:04:2b:b0:0a:27:
af:73:e9:42:4b:42:f4:1f:67:13:65:b7:49:ca:49:
04:53:13:c4:62:65:55:a2:ff:62:c6:51:a0:fb:0a:
e7:63:31:0d:20:04:1a:6f:30:53:6d:3c:c2:fe:92:
ad:36:ac:4a:8e:e7:95:30:f3:89:15:e0:e4:1b:6d:
15:9a:33:ed:33:f3:2e:e4:98:7c:4f:42:f3:3e:a9:
11:aa:84:62:c3:7b:04:5d:1d:3e:72:9e:94:67:3f:
e7:0a:f3:89:77:f5:32:99:2a:c7:96:40:5a:5e:af:
dd:49:71:85:8a:80:4b:be:6e:5c:31:cc:b2:13:aa:
68:97:0b:5f:c5:55:70:41:19:77:65:69:fc:53:96:
9e:4a:ac:de:10:38:a4:4d:46:5c:86:19:ec:87:a0:
30:ed:95:68:7b:17:34:41:f6:b2:b6:18:99:e1:97:
2a:8c:2d:7d:1a:99:16:db:b1:8e:33:7e:72:5c:2e:
6a:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:53:E8:47:FE:10:4B:52:86:2A:64:52:B5:24:C0:BF:39:3D:F2:42
X509v3 Authority Key Identifier:
keyid:90:31:7E:26:9F:FE:9F:71:3F:20:CF:BA:CE:64:2A:6F:60:F7:8F:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/53b858f6-de20-4121-bcea-9076edccc097/0/90317E269FFE9F713F20CFBACE642A6F60F78FCA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90317E269FFE9F713F20CFBACE642A6F60F78FCA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/53b858f6-de20-4121-bcea-9076edccc097/0/90317E269FFE9F713F20CFBACE642A6F60F78FCA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:23:3f:46:50:72:6a:72:72:77:75:51:84:5c:e9:11:35:c0:
54:26:ac:da:41:be:1d:36:d6:ac:57:c3:e1:5b:4c:66:02:95:
a8:b1:bf:92:0d:d9:74:89:e3:2f:3d:64:70:67:51:e0:59:d5:
45:a3:da:a7:4c:75:81:1e:37:6b:9c:e1:21:17:12:40:b0:f2:
83:be:ab:37:bb:98:59:c6:22:69:da:1f:a2:bf:9d:9d:a1:dc:
5b:ff:42:f2:2c:2e:96:bd:bc:55:e1:5b:33:d1:75:37:6b:93:
f5:a9:fe:28:94:3d:0f:39:97:96:8a:96:b8:2e:fd:36:ea:38:
08:88:48:f7:cb:e3:fa:be:6b:17:e3:29:76:11:d7:46:65:b5:
75:26:a0:50:13:92:f6:f1:12:0d:b0:43:d2:e2:56:0b:e4:8e:
4a:c4:07:64:1a:02:35:7e:7b:37:7c:4f:23:21:5a:49:12:8c:
5f:ec:84:49:e4:d0:bc:85:25:6e:33:d7:3c:72:fe:5f:8b:1a:
d2:17:1a:3c:3c:fb:64:07:22:b6:d2:7e:a5:6e:d1:46:44:93:
ab:35:2e:5a:a2:1e:92:27:94:97:53:7a:79:bc:61:13:7f:2b:
de:89:48:7b:02:8b:a7:f5:d9:e2:fe:9c:e3:d3:fe:c9:ae:34:
44:a3:4a:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:58:34 2026 by rpki-client