This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7d02a58d-b958-4219-86d3-61e43cee319a/0/AA90F6A6378710CD695B4CC742651F235E503C5B.mft File: AA90F6A6378710CD695B4CC742651F235E503C5B.mft (raw, json) Hash identifier: bSAMY9mEzOUHRE1hO3gUk87O9uQyULnugnARu3Jm1F0= Subject key identifier: 5E:B6:E9:F0:E9:CF:14:03:6B:9F:A8:61:78:73:7B:C5:6A:07:A3:86 Authority key identifier: AA:90:F6:A6:37:87:10:CD:69:5B:4C:C7:42:65:1F:23:5E:50:3C:5B Certificate issuer: /CN=AA90F6A6378710CD695B4CC742651F235E503C5B Certificate serial: 14158D3F53963EFC3DCBEBF84E4823EE29815D25 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AA90F6A6378710CD695B4CC742651F235E503C5B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7d02a58d-b958-4219-86d3-61e43cee319a/0/AA90F6A6378710CD695B4CC742651F235E503C5B.mft Manifest number: 014C Signing time: Sat 06 Dec 2025 17:00:47 +0000 Manifest this update: Sat 06 Dec 2025 16:55:47 +0000 Manifest next update: Tue 09 Dec 2025 20:23:47 +0000 Files and hashes: 1: 3138302e3133312e3132382e302f32342d3234203d3e20313532303136.roa (hash: VFWMiazWmoGEVLtcrf1dTJMRZzx900Rx4cZwTnY4Hao=) 2: AA90F6A6378710CD695B4CC742651F235E503C5B.crl (hash: XteY/9MmssRaNZ0wPliTQt/nuGKh3Nra+WqhxPSHW1g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7d02a58d-b958-4219-86d3-61e43cee319a/0/AA90F6A6378710CD695B4CC742651F235E503C5B.crl rsync://repo-rpki.idnic.net/repo/7d02a58d-b958-4219-86d3-61e43cee319a/0/AA90F6A6378710CD695B4CC742651F235E503C5B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AA90F6A6378710CD695B4CC742651F235E503C5B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:15:8d:3f:53:96:3e:fc:3d:cb:eb:f8:4e:48:23:ee:29:81:5d:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AA90F6A6378710CD695B4CC742651F235E503C5B Validity Not Before: Dec 6 16:55:47 2025 GMT Not After : Dec 9 20:23:47 2025 GMT Subject: CN=5EB6E9F0E9CF14036B9FA86178737BC56A07A386 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:2c:4c:a2:ac:65:12:a9:9b:92:de:10:97:d1: f4:60:4a:ee:08:69:82:15:e7:33:e1:a5:69:48:62: 34:35:17:f2:cd:31:33:87:a5:fc:fe:85:92:cc:7d: 6d:3c:c1:25:22:07:e4:dd:3e:e1:37:51:81:66:56: 1e:2d:a0:ac:56:32:93:81:6f:62:9a:3e:80:7d:f2: a4:84:2b:13:7f:9d:2c:fd:e2:02:2c:2b:e5:b2:6d: 50:89:0b:a7:eb:4e:70:53:d4:b3:0b:f5:01:10:b9: 62:ae:30:94:44:df:3f:ec:a7:6f:2f:8c:00:ef:7f: 23:5d:a5:d3:96:0e:ab:6f:10:5b:1d:56:4f:f5:bc: 0a:af:14:4a:e9:42:ae:31:bd:1d:87:1f:60:d1:db: 65:d6:3a:bf:b3:e9:d8:0c:ba:88:32:09:28:84:17: e8:d6:9d:8d:26:2a:19:28:51:59:71:14:e7:e1:4f: 5c:14:31:30:8a:aa:2a:6f:6c:56:31:f2:1b:d3:55: 20:61:21:b3:aa:ca:56:fb:4e:56:78:5f:d3:e9:72: 3f:f8:84:d1:ec:29:5c:5c:7a:94:46:ad:ef:81:bf: 8a:3a:f8:c0:ef:eb:32:89:63:e5:bd:9d:0d:42:8c: a0:a7:63:7b:6b:47:8a:d2:2f:26:d7:ec:59:3e:fc: b8:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:B6:E9:F0:E9:CF:14:03:6B:9F:A8:61:78:73:7B:C5:6A:07:A3:86 X509v3 Authority Key Identifier: keyid:AA:90:F6:A6:37:87:10:CD:69:5B:4C:C7:42:65:1F:23:5E:50:3C:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7d02a58d-b958-4219-86d3-61e43cee319a/0/AA90F6A6378710CD695B4CC742651F235E503C5B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AA90F6A6378710CD695B4CC742651F235E503C5B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d02a58d-b958-4219-86d3-61e43cee319a/0/AA90F6A6378710CD695B4CC742651F235E503C5B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:53:12:88:92:78:4f:d4:74:15:c3:14:9f:2a:4a:f9:32:d4: f0:2d:28:63:f1:be:db:51:dd:9e:8c:0b:50:3b:76:d2:3d:60: 53:4a:0c:58:8b:63:7b:bf:d3:03:a3:cc:93:69:71:8d:21:7d: 96:a2:d5:35:d5:ff:90:96:a7:fe:7d:ab:29:e7:b4:78:25:c8: d8:eb:7b:f6:b1:7e:30:2d:68:c9:0a:c0:75:3c:f1:e3:22:17: 5a:6f:34:bf:3c:bb:3a:e4:2b:a4:c4:cc:42:7f:6c:fe:78:8d: eb:5d:af:92:1c:1e:d9:bc:9e:76:7c:f9:ee:68:8e:8a:a3:4c: d3:2f:8c:65:77:49:4a:99:12:16:3a:72:fa:9f:88:4e:28:78: 88:a0:77:01:73:15:fa:26:4d:31:b6:c3:1a:2c:8e:ba:fd:ff: 2e:8f:dd:0d:ee:e9:9c:ec:93:8d:15:6d:a4:78:d8:0a:55:17: 86:ff:54:10:0b:86:41:5a:dd:55:3e:65:3b:28:ea:23:97:4c: 83:21:17:8e:a1:48:32:17:fb:4b:de:9f:88:15:c8:f4:a7:da: 19:cf:f6:0e:e1:41:98:b9:9f:37:29:b2:36:57:38:6b:5a:59: 7f:21:46:95:d5:eb:7f:bd:7d:b8:8f:0a:51:7b:15:cd:23:bd: c5:97:93:ea -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFBWNP1OWPvw9y+v4Tkgj7imBXSUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUE5MEY2QTYzNzg3MTBDRDY5NUI0Q0M3NDI2NTFGMjM1 RTUwM0M1QjAeFw0yNTEyMDYxNjU1NDdaFw0yNTEyMDkyMDIzNDdaMDMxMTAvBgNV BAMTKDVFQjZFOUYwRTlDRjE0MDM2QjlGQTg2MTc4NzM3QkM1NkEwN0EzODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVLEyirGUSqZuS3hCX0fRgSu4I aYIV5zPhpWlIYjQ1F/LNMTOHpfz+hZLMfW08wSUiB+TdPuE3UYFmVh4toKxWMpOB b2KaPoB98qSEKxN/nSz94gIsK+WybVCJC6frTnBT1LML9QEQuWKuMJRE3z/sp28v jADvfyNdpdOWDqtvEFsdVk/1vAqvFErpQq4xvR2HH2DR22XWOr+z6dgMuogyCSiE F+jWnY0mKhkoUVlxFOfhT1wUMTCKqipvbFYx8hvTVSBhIbOqylb7TlZ4X9Ppcj/4 hNHsKVxcepRGre+Bv4o6+MDv6zKJY+W9nQ1CjKCnY3trR4rSLybX7Fk+/LjLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXrbp8OnPFANrn6hheHN7xWoHo4YwHwYDVR0j BBgwFoAUqpD2pjeHEM1pW0zHQmUfI15QPFswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZDAyYTU4ZC1iOTU4LTQyMTktODZkMy02MWU0M2NlZTMxOWEvMC9BQTkwRjZBNjM3 ODcxMENENjk1QjRDQzc0MjY1MUYyMzVFNTAzQzVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUE5MEY2QTYzNzg3MTBDRDY5NUI0Q0M3NDI2NTFGMjM1RTUw M0M1Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2QwMmE1OGQtYjk1OC00MjE5LTg2 ZDMtNjFlNDNjZWUzMTlhLzAvQUE5MEY2QTYzNzg3MTBDRDY5NUI0Q0M3NDI2NTFG MjM1RTUwM0M1Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHhTEoiSeE/UdBXDFJ8qSvky1PAtKGPxvttR 3Z6MC1A7dtI9YFNKDFiLY3u/0wOjzJNpcY0hfZai1TXV/5CWp/59qynntHglyNjr e/axfjAtaMkKwHU88eMiF1pvNL88uzrkK6TEzEJ/bP54jetdr5IcHtm8nnZ8+e5o joqjTNMvjGV3SUqZEhY6cvqfiE4oeIigdwFzFfomTTG2wxosjrr9/y6P3Q3u6Zzs k40VbaR42ApVF4b/VBALhkFa3VU+ZTso6iOXTIMhF46hSDIX+0ven4gVyPSn2hnP 9g7hQZi5nzcpsjZXOGtaWX8hRpXV63+9fbiPClF7Fc0jvcWXk+o= -----END CERTIFICATE-----Generated at Sun Dec 7 04:35:25 2025 by rpki-client