This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/56fd9a58-a906-4029-92e2-adcb56ae18bd/0/90EF20986B3061451D9F1178EB4D439522186281.mft File: 90EF20986B3061451D9F1178EB4D439522186281.mft (raw, json) Hash identifier: h0kD33uUb62iMJFPwTbqHKRs2XGNM1eSGN9jVXUfzeM= Subject key identifier: 78:9F:E7:73:16:04:D6:BB:7E:30:D5:12:F0:68:43:83:34:D0:1F:82 Authority key identifier: 90:EF:20:98:6B:30:61:45:1D:9F:11:78:EB:4D:43:95:22:18:62:81 Certificate issuer: /CN=90EF20986B3061451D9F1178EB4D439522186281 Certificate serial: 1D7D92FE7B7D7AD4F3F86D023C1D48CD3123B15E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90EF20986B3061451D9F1178EB4D439522186281.cer Subject info access: rsync://repo-rpki.idnic.net/repo/56fd9a58-a906-4029-92e2-adcb56ae18bd/0/90EF20986B3061451D9F1178EB4D439522186281.mft Manifest number: 02B9 Signing time: Sat 06 Dec 2025 16:42:01 +0000 Manifest this update: Sat 06 Dec 2025 16:37:01 +0000 Manifest next update: Wed 10 Dec 2025 03:25:01 +0000 Files and hashes: 1: 3130332e3137382e32302e302f32332d3233203d3e20313439333139.roa (hash: /g+5nQoioDTt8teej8QvN1daXZtQyJ0RCEnJEqM8tz8=) 2: 3130332e3137382e32302e302f32342d3234203d3e20313439333139.roa (hash: juxqVk4Pjv7HWg3rc7qy+poTuVXup5lljxn80d82VOs=) 3: 3130332e3137382e32312e302f32342d3234203d3e20313439333139.roa (hash: n2eHTuRPz7VRKqIm4y6ERY38jrtnwA1mKjZRAuLNji8=) 4: 90EF20986B3061451D9F1178EB4D439522186281.crl (hash: grHuQWg4Y5dR2mfJXPeXSICLIXcNhCfOK7RlNiWmFHA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/56fd9a58-a906-4029-92e2-adcb56ae18bd/0/90EF20986B3061451D9F1178EB4D439522186281.crl rsync://repo-rpki.idnic.net/repo/56fd9a58-a906-4029-92e2-adcb56ae18bd/0/90EF20986B3061451D9F1178EB4D439522186281.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90EF20986B3061451D9F1178EB4D439522186281.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:7d:92:fe:7b:7d:7a:d4:f3:f8:6d:02:3c:1d:48:cd:31:23:b1:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90EF20986B3061451D9F1178EB4D439522186281 Validity Not Before: Dec 6 16:37:01 2025 GMT Not After : Dec 10 03:25:01 2025 GMT Subject: CN=789FE7731604D6BB7E30D512F068438334D01F82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:da:ad:9d:61:02:a5:d8:8a:56:7b:eb:4a:ff: 48:6b:06:04:5e:32:b1:ef:70:cf:6a:5c:78:31:68: 31:fc:f7:a2:85:06:c0:1e:8b:b0:96:df:80:92:f2: ee:6c:2f:e6:76:5f:52:7e:1f:7f:de:2d:8f:f2:fb: 20:00:e3:0e:e6:88:2d:9d:de:bb:5b:eb:71:c8:61: c6:e7:0c:63:12:15:59:03:d4:9c:87:80:2c:21:66: 36:a5:bc:7d:a3:07:e9:9c:29:f5:1e:2c:31:59:d3: 5d:00:c7:4b:99:13:1e:fe:ca:e0:e5:df:f0:02:53: 9e:9f:8f:91:8f:b7:b5:40:3b:5f:dc:f7:cb:9e:ed: 8a:7c:85:02:89:7f:a9:9a:40:a6:ac:5a:fb:f7:67: 53:a1:94:6d:24:6b:24:50:28:9f:60:2e:e6:26:5a: 6d:b4:33:a8:89:90:ef:b4:19:76:cc:4d:74:59:9e: d9:c5:e8:02:fd:dd:5b:89:81:15:d1:45:d4:99:ca: 93:39:5c:df:40:03:58:1a:51:06:a8:2b:99:b4:e4: d8:b0:38:05:ac:dc:b2:49:0d:6f:5d:6f:04:30:09: 25:cb:0c:d4:d0:5f:a3:7f:c6:db:2e:c6:34:aa:5a: 70:5e:39:66:7e:48:fa:03:e4:2d:a7:33:4e:2f:89: 64:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:9F:E7:73:16:04:D6:BB:7E:30:D5:12:F0:68:43:83:34:D0:1F:82 X509v3 Authority Key Identifier: keyid:90:EF:20:98:6B:30:61:45:1D:9F:11:78:EB:4D:43:95:22:18:62:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/56fd9a58-a906-4029-92e2-adcb56ae18bd/0/90EF20986B3061451D9F1178EB4D439522186281.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90EF20986B3061451D9F1178EB4D439522186281.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/56fd9a58-a906-4029-92e2-adcb56ae18bd/0/90EF20986B3061451D9F1178EB4D439522186281.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:26:61:38:f6:73:18:1f:04:4f:05:10:97:ea:e7:1b:10:31: a1:72:fe:63:fb:b3:a4:7b:d9:3b:b9:c9:ef:27:a3:8d:17:59: 0c:2a:0c:35:fb:06:ef:76:b1:69:22:55:5e:ca:fa:51:e9:c6: bf:95:87:77:d4:3c:17:9c:fe:b3:58:a7:25:76:4f:2e:b3:a2: 3e:1b:97:3c:75:a2:97:20:0d:95:b0:80:43:8e:0b:37:07:96: 9d:d0:f2:17:30:c1:ca:ae:02:1a:65:4d:13:89:35:41:72:bd: 50:23:c6:ed:46:e4:74:4d:c9:5e:b5:53:0f:f9:b4:a3:cf:22: db:53:1f:34:4b:bb:72:6a:73:69:aa:76:bb:ce:c0:8f:d9:93: dd:cd:1d:05:ef:74:37:ce:8d:93:89:a8:f6:a7:62:41:c9:cb: d6:e8:b5:03:4c:70:13:98:63:f9:26:3c:6e:d3:44:69:5b:13: 5e:8b:cb:70:5d:83:7e:0a:33:b5:38:4f:3f:82:38:9d:9c:ba: 88:f7:fb:11:f9:89:bc:ac:22:bb:f6:ca:f7:30:5b:de:0d:bf: f0:14:f6:cf:c8:0d:7a:42:70:67:09:4a:8a:f1:bb:18:be:17: 6e:35:38:7c:c4:6e:a2:88:7a:ab:3c:98:ac:82:47:e0:42:74: e3:1f:67:14 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHX2S/nt9etTz+G0CPB1IzTEjsV4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTBFRjIwOTg2QjMwNjE0NTFEOUYxMTc4RUI0RDQzOTUy MjE4NjI4MTAeFw0yNTEyMDYxNjM3MDFaFw0yNTEyMTAwMzI1MDFaMDMxMTAvBgNV BAMTKDc4OUZFNzczMTYwNEQ2QkI3RTMwRDUxMkYwNjg0MzgzMzREMDFGODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDS2q2dYQKl2IpWe+tK/0hrBgRe MrHvcM9qXHgxaDH896KFBsAei7CW34CS8u5sL+Z2X1J+H3/eLY/y+yAA4w7miC2d 3rtb63HIYcbnDGMSFVkD1JyHgCwhZjalvH2jB+mcKfUeLDFZ010Ax0uZEx7+yuDl 3/ACU56fj5GPt7VAO1/c98ue7Yp8hQKJf6maQKasWvv3Z1OhlG0kayRQKJ9gLuYm Wm20M6iJkO+0GXbMTXRZntnF6AL93VuJgRXRRdSZypM5XN9AA1gaUQaoK5m05Niw OAWs3LJJDW9dbwQwCSXLDNTQX6N/xtsuxjSqWnBeOWZ+SPoD5C2nM04viWTdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeJ/ncxYE1rt+MNUS8GhDgzTQH4IwHwYDVR0j BBgwFoAUkO8gmGswYUUdnxF4601DlSIYYoEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NmZkOWE1OC1hOTA2LTQwMjktOTJlMi1hZGNiNTZhZTE4YmQvMC85MEVGMjA5ODZC MzA2MTQ1MUQ5RjExNzhFQjRENDM5NTIyMTg2MjgxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTBFRjIwOTg2QjMwNjE0NTFEOUYxMTc4RUI0RDQzOTUyMjE4 NjI4MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTZmZDlhNTgtYTkwNi00MDI5LTky ZTItYWRjYjU2YWUxOGJkLzAvOTBFRjIwOTg2QjMwNjE0NTFEOUYxMTc4RUI0RDQz OTUyMjE4NjI4MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD4mYTj2cxgfBE8FEJfq5xsQMaFy/mP7s6R7 2Tu5ye8no40XWQwqDDX7Bu92sWkiVV7K+lHpxr+Vh3fUPBec/rNYpyV2Ty6zoj4b lzx1opcgDZWwgEOOCzcHlp3Q8hcwwcquAhplTROJNUFyvVAjxu1G5HRNyV61Uw/5 tKPPIttTHzRLu3Jqc2mqdrvOwI/Zk93NHQXvdDfOjZOJqPanYkHJy9botQNMcBOY Y/kmPG7TRGlbE16Ly3Bdg34KM7U4Tz+COJ2cuoj3+xH5ibysIrv2yvcwW94Nv/AU 9s/IDXpCcGcJSorxuxi+F241OHzEbqKIeqs8mKyCR+BCdOMfZxQ= -----END CERTIFICATE-----Generated at Sat Dec 6 23:52:07 2025 by rpki-client