This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/56fd9a58-a906-4029-92e2-adcb56ae18bd/0/90EF20986B3061451D9F1178EB4D439522186281.mft File: 90EF20986B3061451D9F1178EB4D439522186281.mft (raw, json) Hash identifier: A3npqDT3CeeBaAr9e7QNHklQrTN8U2N4LfdVzvg+Rec= Subject key identifier: 4F:6F:91:A0:2A:BE:8A:D5:1D:1F:87:D3:70:6B:8F:CD:D3:36:0C:44 Authority key identifier: 90:EF:20:98:6B:30:61:45:1D:9F:11:78:EB:4D:43:95:22:18:62:81 Certificate issuer: /CN=90EF20986B3061451D9F1178EB4D439522186281 Certificate serial: 02C686100417D6935839BDAECF8F5E03917A3BDA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90EF20986B3061451D9F1178EB4D439522186281.cer Subject info access: rsync://repo-rpki.idnic.net/repo/56fd9a58-a906-4029-92e2-adcb56ae18bd/0/90EF20986B3061451D9F1178EB4D439522186281.mft Manifest number: 02CF Signing time: Sun 25 Jan 2026 11:32:03 +0000 Manifest this update: Sun 25 Jan 2026 11:27:03 +0000 Manifest next update: Wed 28 Jan 2026 18:05:03 +0000 Files and hashes: 1: 3130332e3137382e32312e302f32342d3234203d3e20313439333139.roa (hash: n2eHTuRPz7VRKqIm4y6ERY38jrtnwA1mKjZRAuLNji8=) 2: 3130332e3137382e32302e302f32342d3234203d3e20313439333139.roa (hash: juxqVk4Pjv7HWg3rc7qy+poTuVXup5lljxn80d82VOs=) 3: 90EF20986B3061451D9F1178EB4D439522186281.crl (hash: 0BiCbvO9tiz2g7CTeBpwL5Mdag96Ynj2L5DkTDvBXII=) 4: 3130332e3137382e32302e302f32332d3233203d3e20313439333139.roa (hash: /g+5nQoioDTt8teej8QvN1daXZtQyJ0RCEnJEqM8tz8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/56fd9a58-a906-4029-92e2-adcb56ae18bd/0/90EF20986B3061451D9F1178EB4D439522186281.crl rsync://repo-rpki.idnic.net/repo/56fd9a58-a906-4029-92e2-adcb56ae18bd/0/90EF20986B3061451D9F1178EB4D439522186281.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90EF20986B3061451D9F1178EB4D439522186281.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 14:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:c6:86:10:04:17:d6:93:58:39:bd:ae:cf:8f:5e:03:91:7a:3b:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90EF20986B3061451D9F1178EB4D439522186281 Validity Not Before: Jan 25 11:27:03 2026 GMT Not After : Jan 28 18:05:03 2026 GMT Subject: CN=4F6F91A02ABE8AD51D1F87D3706B8FCDD3360C44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:97:21:8a:de:fa:a6:cd:34:18:2f:29:d6:71: 90:6d:dd:50:20:cf:23:4f:11:5a:1e:2e:56:4b:2a: ed:10:b1:29:a7:a5:de:6f:dd:45:d8:e8:a4:52:c9: 38:4c:bb:31:ee:13:c7:5e:9b:bf:0f:f8:d8:55:fd: 41:e7:54:1f:bb:e9:ae:d4:b1:86:df:f4:d9:93:81: 51:85:b2:6d:8d:f7:4c:86:3f:8c:0e:bc:fb:63:81: d9:b2:88:a5:4a:dc:4a:5e:bb:c6:29:49:09:9c:5d: ed:04:ca:f1:c0:ac:9a:fd:bb:b7:6f:c1:2e:dc:45: 41:4f:ab:97:8c:0c:d2:48:22:24:3f:38:85:55:12: e1:2f:6c:78:60:1a:71:00:cb:0a:82:3f:44:c6:c6: 79:0e:59:0c:50:34:ce:7d:4c:95:73:59:d7:7e:7c: fb:35:42:d9:6f:ae:4f:1e:f0:91:05:af:fa:4f:fa: c7:fb:e1:a5:91:d6:8e:9b:cf:11:c3:9e:93:42:59: 46:29:37:4f:f8:60:cc:a3:db:05:b2:99:a8:d6:2f: b0:60:a0:3b:78:fa:62:4c:3a:59:50:69:18:4a:7a: 69:07:18:9e:7f:e7:cd:8c:57:6d:67:72:62:3d:91: 18:2e:54:4a:c5:50:76:4e:5a:28:10:99:f7:01:ee: f7:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:6F:91:A0:2A:BE:8A:D5:1D:1F:87:D3:70:6B:8F:CD:D3:36:0C:44 X509v3 Authority Key Identifier: keyid:90:EF:20:98:6B:30:61:45:1D:9F:11:78:EB:4D:43:95:22:18:62:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/56fd9a58-a906-4029-92e2-adcb56ae18bd/0/90EF20986B3061451D9F1178EB4D439522186281.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90EF20986B3061451D9F1178EB4D439522186281.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/56fd9a58-a906-4029-92e2-adcb56ae18bd/0/90EF20986B3061451D9F1178EB4D439522186281.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:be:cc:84:e8:e6:72:11:b9:94:38:86:b9:ac:ec:14:c5:92: 80:9f:41:9f:82:e0:cc:99:a8:db:00:fe:5a:1b:9e:52:1c:0f: 6a:00:c3:5d:f2:e1:7e:3a:00:24:2e:80:cf:e2:9d:68:02:73: 76:a2:64:fb:cc:f6:d3:ed:20:76:00:bc:f0:53:90:1e:d9:4c: c5:4e:39:b9:a7:d2:b8:b5:f7:4b:f1:90:24:52:37:8d:27:30: 12:6a:d7:9c:89:db:c3:8d:88:9e:33:87:af:da:fd:bb:fa:94: dd:a2:d8:75:57:f1:03:c9:ea:38:a2:84:72:f3:ab:f0:a3:17: 0f:fc:fd:65:67:4d:5d:c5:8a:df:11:fe:86:e9:9a:0d:59:7f: 06:5e:0d:4b:62:c8:3d:6d:cf:78:20:ab:8d:ff:6a:3e:0c:08: a5:66:ed:c0:f1:1f:5e:c0:03:1a:86:7c:95:0a:01:b1:72:5d: ff:fb:39:b2:a4:75:cb:f9:b6:a3:9d:74:cb:1c:3a:22:2a:c0: 81:b6:86:8f:8c:3f:32:73:7b:04:45:5f:78:13:19:37:fa:0f: e6:cf:8c:c6:54:69:3b:cb:2f:4e:46:59:b9:a8:cf:74:91:c5: 32:8a:93:01:57:a7:63:ba:1e:01:9a:ab:ca:c2:1d:1a:ec:36: 55:ce:34:66 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAsaGEAQX1pNYOb2uz49eA5F6O9owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTBFRjIwOTg2QjMwNjE0NTFEOUYxMTc4RUI0RDQzOTUy MjE4NjI4MTAeFw0yNjAxMjUxMTI3MDNaFw0yNjAxMjgxODA1MDNaMDMxMTAvBgNV BAMTKDRGNkY5MUEwMkFCRThBRDUxRDFGODdEMzcwNkI4RkNERDMzNjBDNDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCllyGK3vqmzTQYLynWcZBt3VAg zyNPEVoeLlZLKu0QsSmnpd5v3UXY6KRSyThMuzHuE8dem78P+NhV/UHnVB+76a7U sYbf9NmTgVGFsm2N90yGP4wOvPtjgdmyiKVK3Epeu8YpSQmcXe0EyvHArJr9u7dv wS7cRUFPq5eMDNJIIiQ/OIVVEuEvbHhgGnEAywqCP0TGxnkOWQxQNM59TJVzWdd+ fPs1Qtlvrk8e8JEFr/pP+sf74aWR1o6bzxHDnpNCWUYpN0/4YMyj2wWymajWL7Bg oDt4+mJMOllQaRhKemkHGJ5/582MV21ncmI9kRguVErFUHZOWigQmfcB7vdlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUT2+RoCq+itUdH4fTcGuPzdM2DEQwHwYDVR0j BBgwFoAUkO8gmGswYUUdnxF4601DlSIYYoEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NmZkOWE1OC1hOTA2LTQwMjktOTJlMi1hZGNiNTZhZTE4YmQvMC85MEVGMjA5ODZC MzA2MTQ1MUQ5RjExNzhFQjRENDM5NTIyMTg2MjgxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTBFRjIwOTg2QjMwNjE0NTFEOUYxMTc4RUI0RDQzOTUyMjE4 NjI4MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTZmZDlhNTgtYTkwNi00MDI5LTky ZTItYWRjYjU2YWUxOGJkLzAvOTBFRjIwOTg2QjMwNjE0NTFEOUYxMTc4RUI0RDQz OTUyMjE4NjI4MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFe+zITo5nIRuZQ4hrms7BTFkoCfQZ+C4MyZ qNsA/lobnlIcD2oAw13y4X46ACQugM/inWgCc3aiZPvM9tPtIHYAvPBTkB7ZTMVO Obmn0ri190vxkCRSN40nMBJq15yJ28ONiJ4zh6/a/bv6lN2i2HVX8QPJ6jiihHLz q/CjFw/8/WVnTV3Fit8R/obpmg1ZfwZeDUtiyD1tz3ggq43/aj4MCKVm7cDxH17A AxqGfJUKAbFyXf/7ObKkdcv5tqOddMscOiIqwIG2ho+MPzJzewRFX3gTGTf6D+bP jMZUaTvLL05GWbmoz3SRxTKKkwFXp2O6HgGaq8rCHRrsNlXONGY= -----END CERTIFICATE-----Generated at Mon Jan 26 05:38:41 2026 by rpki-client