This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/5bd4340b-21c4-4fc7-a259-e2354c53fdd2/0/90173425DBB7D1DBD164BBA26F4657B17A266A97.mft File: 90173425DBB7D1DBD164BBA26F4657B17A266A97.mft (raw, json) Hash identifier: vesNNVeu9Nl8EvWivNM86YsKJiqFkETlZEvR3vadm5Q= Subject key identifier: 24:C4:36:33:DA:5A:6A:48:59:A4:A6:9B:AB:90:71:01:04:D3:06:E0 Authority key identifier: 90:17:34:25:DB:B7:D1:DB:D1:64:BB:A2:6F:46:57:B1:7A:26:6A:97 Certificate issuer: /CN=90173425DBB7D1DBD164BBA26F4657B17A266A97 Certificate serial: 08E8F21CC70C31EF372C53E31EFC1A0150183F5F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90173425DBB7D1DBD164BBA26F4657B17A266A97.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5bd4340b-21c4-4fc7-a259-e2354c53fdd2/0/90173425DBB7D1DBD164BBA26F4657B17A266A97.mft Manifest number: 0545 Signing time: Fri 23 Jan 2026 18:31:22 +0000 Manifest this update: Fri 23 Jan 2026 18:26:22 +0000 Manifest next update: Tue 27 Jan 2026 04:32:22 +0000 Files and hashes: 1: 90173425DBB7D1DBD164BBA26F4657B17A266A97.crl (hash: iCnqkHjaCmv8OmLYMRDE+urtvlXiXBNt4jI0QHzkN58=) 2: 323030313a6466373a376130303a3a2f34382d3438203d3e20313336303537.roa (hash: JVL+81yV9zQDwPcNgvThrCD77NCHFX7cSVK21vFtKao=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5bd4340b-21c4-4fc7-a259-e2354c53fdd2/0/90173425DBB7D1DBD164BBA26F4657B17A266A97.crl rsync://repo-rpki.idnic.net/repo/5bd4340b-21c4-4fc7-a259-e2354c53fdd2/0/90173425DBB7D1DBD164BBA26F4657B17A266A97.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90173425DBB7D1DBD164BBA26F4657B17A266A97.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 04:32:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:e8:f2:1c:c7:0c:31:ef:37:2c:53:e3:1e:fc:1a:01:50:18:3f:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90173425DBB7D1DBD164BBA26F4657B17A266A97 Validity Not Before: Jan 23 18:26:22 2026 GMT Not After : Jan 27 04:32:22 2026 GMT Subject: CN=24C43633DA5A6A4859A4A69BAB90710104D306E0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:0e:0c:a1:e3:54:98:76:b9:0e:59:75:ce:91: bd:65:71:4d:40:b5:a7:05:a2:3a:cf:89:2e:68:60: df:07:13:a4:24:9c:53:eb:9a:f0:6a:b9:8a:d3:63: 64:90:07:6b:2a:29:4a:48:b7:f3:de:5b:8a:1a:2b: 3c:39:10:fa:81:49:cf:d9:a1:ef:ef:c1:19:14:34: 01:b5:75:f1:5e:9e:ed:c0:2f:25:77:2b:e1:74:ba: 6d:3b:87:44:eb:e9:8c:19:30:09:ed:09:c1:52:ca: 65:42:d6:49:87:76:84:2c:7f:ce:ff:56:55:c1:a6: 69:b0:15:44:0e:d2:57:ef:54:9e:9e:d8:3c:89:95: 14:f8:5a:fb:bf:1a:73:c1:46:2e:ec:dd:78:a6:66: 87:d2:90:59:06:06:ae:02:7c:ff:88:04:78:d5:09: 94:f0:20:bc:2b:b2:fa:da:38:a3:e8:f5:71:7e:75: 32:1e:04:0a:2e:37:02:58:5d:a6:7a:79:ad:14:00: 64:6a:4a:20:62:ef:87:3b:0b:33:98:30:35:c5:47: 93:3c:e8:19:d6:a4:e8:b7:63:89:29:13:02:1b:3a: a6:76:6b:bd:ff:89:ea:bd:a5:bb:7a:55:fa:5f:7b: 26:f3:bd:2d:ce:84:19:0a:94:7c:78:1f:e3:09:a3: 16:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:C4:36:33:DA:5A:6A:48:59:A4:A6:9B:AB:90:71:01:04:D3:06:E0 X509v3 Authority Key Identifier: keyid:90:17:34:25:DB:B7:D1:DB:D1:64:BB:A2:6F:46:57:B1:7A:26:6A:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5bd4340b-21c4-4fc7-a259-e2354c53fdd2/0/90173425DBB7D1DBD164BBA26F4657B17A266A97.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90173425DBB7D1DBD164BBA26F4657B17A266A97.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5bd4340b-21c4-4fc7-a259-e2354c53fdd2/0/90173425DBB7D1DBD164BBA26F4657B17A266A97.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:ef:d3:d2:9f:e6:73:91:81:c3:5c:b1:d8:53:51:77:84:3d: 64:96:a1:9d:ec:c8:53:74:bc:4b:85:96:48:5c:8e:90:ac:1f: a9:2e:43:78:a4:6c:67:4e:dc:7e:a7:af:34:56:87:d4:ea:59: 75:e2:ad:6d:a9:32:e5:63:0c:85:10:fc:76:fc:23:4a:3b:f6: ea:f6:03:47:31:b9:c3:69:82:33:ec:cd:b6:b6:cf:ac:40:b3: e2:5f:eb:4a:09:75:05:57:2e:83:64:8b:dd:7e:6b:d0:9c:58: bb:b7:5c:5f:03:7a:69:2b:c8:89:5b:36:56:70:78:f0:84:54: 0b:7b:18:22:0a:2f:72:03:9a:b7:8f:04:0a:89:ec:a3:79:e7: d7:74:d2:14:93:dd:2e:fb:84:ce:31:97:2e:bd:1c:3c:83:0b: 9e:0b:23:57:c2:09:85:c7:87:f1:d5:66:d9:1d:1b:2a:8d:1c: 0f:76:23:50:de:81:b2:5d:b6:8f:98:0c:08:16:6d:3a:5c:40: 98:10:63:85:d5:9f:d7:42:3c:a7:2a:eb:48:f9:20:11:fb:91: 8e:fc:c7:85:f0:5d:97:e1:e1:9d:ba:7b:c2:a8:f1:55:99:73: 1c:45:35:6e:05:20:66:67:20:23:93:42:2e:7f:ba:4b:b2:2c: 1e:78:07:c5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCOjyHMcMMe83LFPjHvwaAVAYP18wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTAxNzM0MjVEQkI3RDFEQkQxNjRCQkEyNkY0NjU3QjE3 QTI2NkE5NzAeFw0yNjAxMjMxODI2MjJaFw0yNjAxMjcwNDMyMjJaMDMxMTAvBgNV BAMTKDI0QzQzNjMzREE1QTZBNDg1OUE0QTY5QkFCOTA3MTAxMDREMzA2RTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0Dgyh41SYdrkOWXXOkb1lcU1A tacFojrPiS5oYN8HE6QknFPrmvBquYrTY2SQB2sqKUpIt/PeW4oaKzw5EPqBSc/Z oe/vwRkUNAG1dfFenu3ALyV3K+F0um07h0Tr6YwZMAntCcFSymVC1kmHdoQsf87/ VlXBpmmwFUQO0lfvVJ6e2DyJlRT4Wvu/GnPBRi7s3XimZofSkFkGBq4CfP+IBHjV CZTwILwrsvraOKPo9XF+dTIeBAouNwJYXaZ6ea0UAGRqSiBi74c7CzOYMDXFR5M8 6BnWpOi3Y4kpEwIbOqZ2a73/ieq9pbt6VfpfeybzvS3OhBkKlHx4H+MJoxZhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJMQ2M9paakhZpKabq5BxAQTTBuAwHwYDVR0j BBgwFoAUkBc0Jdu30dvRZLuib0ZXsXomapcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YmQ0MzQwYi0yMWM0LTRmYzctYTI1OS1lMjM1NGM1M2ZkZDIvMC85MDE3MzQyNURC QjdEMURCRDE2NEJCQTI2RjQ2NTdCMTdBMjY2QTk3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTAxNzM0MjVEQkI3RDFEQkQxNjRCQkEyNkY0NjU3QjE3QTI2 NkE5Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWJkNDM0MGItMjFjNC00ZmM3LWEy NTktZTIzNTRjNTNmZGQyLzAvOTAxNzM0MjVEQkI3RDFEQkQxNjRCQkEyNkY0NjU3 QjE3QTI2NkE5Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFfv09Kf5nORgcNcsdhTUXeEPWSWoZ3syFN0 vEuFlkhcjpCsH6kuQ3ikbGdO3H6nrzRWh9TqWXXirW2pMuVjDIUQ/Hb8I0o79ur2 A0cxucNpgjPszba2z6xAs+Jf60oJdQVXLoNki91+a9CcWLu3XF8DemkryIlbNlZw ePCEVAt7GCIKL3IDmrePBAqJ7KN559d00hST3S77hM4xly69HDyDC54LI1fCCYXH h/HVZtkdGyqNHA92I1DegbJdto+YDAgWbTpcQJgQY4XVn9dCPKcq60j5IBH7kY78 x4XwXZfh4Z26e8Ko8VWZcxxFNW4FIGZnICOTQi5/ukuyLB54B8U= -----END CERTIFICATE-----Generated at Sun Jan 25 18:53:03 2026 by rpki-client