This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/5bd4340b-21c4-4fc7-a259-e2354c53fdd2/0/90173425DBB7D1DBD164BBA26F4657B17A266A97.mft File: 90173425DBB7D1DBD164BBA26F4657B17A266A97.mft (raw, json) Hash identifier: zee7V4ubrpZQMi1iz+mHT6Ub/amMjCEPqhzWZ/yYxZI= Subject key identifier: E7:78:27:47:CE:60:C5:3C:75:3E:FE:76:8E:B9:B9:86:5A:EC:B3:57 Authority key identifier: 90:17:34:25:DB:B7:D1:DB:D1:64:BB:A2:6F:46:57:B1:7A:26:6A:97 Certificate issuer: /CN=90173425DBB7D1DBD164BBA26F4657B17A266A97 Certificate serial: 1C3CC0C7BE5979069594CD847C5D4DEEFC833F4F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90173425DBB7D1DBD164BBA26F4657B17A266A97.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5bd4340b-21c4-4fc7-a259-e2354c53fdd2/0/90173425DBB7D1DBD164BBA26F4657B17A266A97.mft Manifest number: 0530 Signing time: Sun 07 Dec 2025 00:11:23 +0000 Manifest this update: Sun 07 Dec 2025 00:06:23 +0000 Manifest next update: Wed 10 Dec 2025 08:04:23 +0000 Files and hashes: 1: 323030313a6466373a376130303a3a2f34382d3438203d3e20313336303537.roa (hash: JVL+81yV9zQDwPcNgvThrCD77NCHFX7cSVK21vFtKao=) 2: 90173425DBB7D1DBD164BBA26F4657B17A266A97.crl (hash: t9a08qdL2fEINaorMCNk3CAzkIeskLqXD9pDOV2AAdE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5bd4340b-21c4-4fc7-a259-e2354c53fdd2/0/90173425DBB7D1DBD164BBA26F4657B17A266A97.crl rsync://repo-rpki.idnic.net/repo/5bd4340b-21c4-4fc7-a259-e2354c53fdd2/0/90173425DBB7D1DBD164BBA26F4657B17A266A97.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90173425DBB7D1DBD164BBA26F4657B17A266A97.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:3c:c0:c7:be:59:79:06:95:94:cd:84:7c:5d:4d:ee:fc:83:3f:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90173425DBB7D1DBD164BBA26F4657B17A266A97 Validity Not Before: Dec 7 00:06:23 2025 GMT Not After : Dec 10 08:04:23 2025 GMT Subject: CN=E7782747CE60C53C753EFE768EB9B9865AECB357 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:07:7a:3f:60:eb:ba:38:18:8c:30:61:46:a4: af:2b:9b:50:ff:f7:e0:39:b1:7a:77:1f:36:24:f9: e7:6b:12:ca:70:df:fb:02:71:08:81:6c:ec:eb:36: 0c:c4:26:2a:1e:23:6c:fc:c5:dd:a4:75:44:bc:0f: dc:d4:70:4a:bd:d6:45:8c:4e:ae:a5:1d:1e:2a:bb: 9e:53:0a:5c:f0:84:65:b4:71:02:99:62:2f:c2:f0: 54:fc:af:01:16:a2:5c:6c:5c:78:11:e9:a1:59:5e: 1c:fc:be:3c:86:4a:5a:a9:76:d5:5d:bc:38:80:42: fc:35:fa:90:93:8b:03:5c:cf:f9:5b:6a:f0:47:74: 80:3d:50:99:0e:41:91:a9:af:0d:ac:93:0b:30:fc: 75:f9:03:cf:8f:0f:68:26:37:51:11:e8:aa:54:ba: 63:da:0c:72:04:5c:07:e5:fc:73:1f:58:d2:3e:d2: e1:df:fb:43:0e:95:98:f9:ca:5e:51:7b:82:c2:24: f2:f2:60:e7:93:96:cc:2f:9b:cb:98:9b:6c:76:46: 15:53:fb:18:f6:e6:2b:a2:1e:9b:41:cb:1a:38:db: ce:e0:09:6e:f5:c7:f2:2c:0e:73:79:c8:5d:a9:da: 1c:f4:c4:9e:f3:d2:0e:d5:3d:c6:44:6e:19:2c:ef: 97:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:78:27:47:CE:60:C5:3C:75:3E:FE:76:8E:B9:B9:86:5A:EC:B3:57 X509v3 Authority Key Identifier: keyid:90:17:34:25:DB:B7:D1:DB:D1:64:BB:A2:6F:46:57:B1:7A:26:6A:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5bd4340b-21c4-4fc7-a259-e2354c53fdd2/0/90173425DBB7D1DBD164BBA26F4657B17A266A97.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90173425DBB7D1DBD164BBA26F4657B17A266A97.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5bd4340b-21c4-4fc7-a259-e2354c53fdd2/0/90173425DBB7D1DBD164BBA26F4657B17A266A97.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:de:7f:7f:12:3a:fb:03:83:b5:1a:6d:cc:16:66:02:04:64: bf:af:ae:5a:a5:57:e3:3e:9f:de:84:40:3b:85:eb:d8:20:34: a1:a6:87:e1:32:ea:de:aa:72:2a:02:4a:d3:24:8e:c8:c6:a1: 8b:0d:0f:39:b6:a1:cb:bd:db:de:86:1f:14:8f:ad:af:7c:ae: 42:e0:d5:72:0f:8a:8f:87:2e:bb:ac:b1:b1:38:78:cf:9b:8a: 67:96:a7:1f:63:fb:85:ed:3e:5e:31:42:4f:a6:5f:d7:52:55: a1:85:e5:25:cd:38:f9:dc:41:f0:4c:99:7a:01:d7:2b:50:dc: e9:8f:29:72:46:f9:6a:c3:18:d9:f2:c2:1b:d3:8a:cc:e5:65: 7a:2f:3c:af:98:9e:da:ef:03:c0:21:ec:58:4a:be:4e:c0:94: 97:bf:3f:10:7d:95:28:99:78:a1:bf:70:8d:15:28:c4:15:e7: 0a:48:3d:56:c1:18:ab:da:d3:60:6e:72:be:84:fe:c7:68:15: 1d:49:29:9c:76:7d:09:ec:b6:87:9a:04:7c:d3:c8:13:c5:69: e5:97:f4:4d:95:66:e6:a5:f0:e8:40:69:0d:74:50:d7:3c:02: c3:5f:b5:a5:62:e9:f2:a8:89:79:38:6c:b7:55:a7:02:d4:16: 66:f3:a6:88 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHDzAx75ZeQaVlM2EfF1N7vyDP08wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTAxNzM0MjVEQkI3RDFEQkQxNjRCQkEyNkY0NjU3QjE3 QTI2NkE5NzAeFw0yNTEyMDcwMDA2MjNaFw0yNTEyMTAwODA0MjNaMDMxMTAvBgNV BAMTKEU3NzgyNzQ3Q0U2MEM1M0M3NTNFRkU3NjhFQjlCOTg2NUFFQ0IzNTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD4B3o/YOu6OBiMMGFGpK8rm1D/ 9+A5sXp3HzYk+edrEspw3/sCcQiBbOzrNgzEJioeI2z8xd2kdUS8D9zUcEq91kWM Tq6lHR4qu55TClzwhGW0cQKZYi/C8FT8rwEWolxsXHgR6aFZXhz8vjyGSlqpdtVd vDiAQvw1+pCTiwNcz/lbavBHdIA9UJkOQZGprw2skwsw/HX5A8+PD2gmN1ER6KpU umPaDHIEXAfl/HMfWNI+0uHf+0MOlZj5yl5Re4LCJPLyYOeTlswvm8uYm2x2RhVT +xj25iuiHptByxo4287gCW71x/IsDnN5yF2p2hz0xJ7z0g7VPcZEbhks75ezAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU53gnR85gxTx1Pv52jrm5hlrss1cwHwYDVR0j BBgwFoAUkBc0Jdu30dvRZLuib0ZXsXomapcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YmQ0MzQwYi0yMWM0LTRmYzctYTI1OS1lMjM1NGM1M2ZkZDIvMC85MDE3MzQyNURC QjdEMURCRDE2NEJCQTI2RjQ2NTdCMTdBMjY2QTk3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTAxNzM0MjVEQkI3RDFEQkQxNjRCQkEyNkY0NjU3QjE3QTI2 NkE5Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWJkNDM0MGItMjFjNC00ZmM3LWEy NTktZTIzNTRjNTNmZGQyLzAvOTAxNzM0MjVEQkI3RDFEQkQxNjRCQkEyNkY0NjU3 QjE3QTI2NkE5Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAInef38SOvsDg7UabcwWZgIEZL+vrlqlV+M+ n96EQDuF69ggNKGmh+Ey6t6qcioCStMkjsjGoYsNDzm2ocu9296GHxSPra98rkLg 1XIPio+HLrussbE4eM+bimeWpx9j+4XtPl4xQk+mX9dSVaGF5SXNOPncQfBMmXoB 1ytQ3OmPKXJG+WrDGNnywhvTiszlZXovPK+YntrvA8Ah7FhKvk7AlJe/PxB9lSiZ eKG/cI0VKMQV5wpIPVbBGKva02Bucr6E/sdoFR1JKZx2fQnstoeaBHzTyBPFaeWX 9E2VZual8OhAaQ10UNc8AsNftaVi6fKoiXk4bLdVpwLUFmbzpog= -----END CERTIFICATE-----Generated at Sun Dec 7 06:41:21 2025 by rpki-client