This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/aae6379e-b886-436e-b0ed-3aaff9c08501/0/B90B0AED87ECD7C87066450AB56ADE2996647CD5.mft File: B90B0AED87ECD7C87066450AB56ADE2996647CD5.mft (raw, json) Hash identifier: JpqtFUzcIRtQCoq/sbEZo9DhuaiQfDnCz2L4GlN/3pU= Subject key identifier: 54:AC:9F:D8:51:E8:6C:07:70:01:54:07:AD:65:F0:8D:D7:63:9D:B2 Authority key identifier: B9:0B:0A:ED:87:EC:D7:C8:70:66:45:0A:B5:6A:DE:29:96:64:7C:D5 Certificate issuer: /CN=B90B0AED87ECD7C87066450AB56ADE2996647CD5 Certificate serial: 636BA1CC1506D34FD411AE9F9E5993DAC1824542 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B90B0AED87ECD7C87066450AB56ADE2996647CD5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aae6379e-b886-436e-b0ed-3aaff9c08501/0/B90B0AED87ECD7C87066450AB56ADE2996647CD5.mft Manifest number: 02B4 Signing time: Sun 25 Jan 2026 16:11:35 +0000 Manifest this update: Sun 25 Jan 2026 16:06:35 +0000 Manifest next update: Wed 28 Jan 2026 20:44:35 +0000 Files and hashes: 1: B90B0AED87ECD7C87066450AB56ADE2996647CD5.crl (hash: 7rK0wsEqXYTWShsvr1RzMOQjrIosfHN30fklFR893hA=) 2: 3130332e3137302e33322e302f32332d3234203d3e20313432333631.roa (hash: 3ZtCwnCQD5p9GJGLBXeZADVLlPJnY+bs7SHq9opzmnQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aae6379e-b886-436e-b0ed-3aaff9c08501/0/B90B0AED87ECD7C87066450AB56ADE2996647CD5.crl rsync://repo-rpki.idnic.net/repo/aae6379e-b886-436e-b0ed-3aaff9c08501/0/B90B0AED87ECD7C87066450AB56ADE2996647CD5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B90B0AED87ECD7C87066450AB56ADE2996647CD5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 14:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:6b:a1:cc:15:06:d3:4f:d4:11:ae:9f:9e:59:93:da:c1:82:45:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B90B0AED87ECD7C87066450AB56ADE2996647CD5 Validity Not Before: Jan 25 16:06:35 2026 GMT Not After : Jan 28 20:44:35 2026 GMT Subject: CN=54AC9FD851E86C0770015407AD65F08DD7639DB2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:c3:44:7a:e0:22:4c:28:40:16:f8:0d:f4:1b: 08:6d:bc:28:99:5f:c2:de:55:39:54:81:ab:c3:fe: b4:99:94:bc:28:d5:d1:34:17:1c:04:0d:ed:ba:36: 34:43:7e:1f:1e:dd:67:42:4e:d4:0d:de:6f:f4:2a: 72:9e:af:04:b8:0c:b2:98:ed:34:57:34:86:7f:9a: bd:19:53:80:26:df:44:ca:51:53:8b:23:16:db:5f: ef:20:85:95:a2:76:2b:c3:41:6d:99:04:0f:05:84: 0a:a2:c3:82:a8:d2:93:bb:2c:cc:da:3c:fb:ed:0a: 41:cd:58:25:6e:a3:e7:e9:d7:a5:25:1b:8b:f5:50: 86:44:f2:d2:8d:0f:39:e9:3f:1b:ef:8f:bc:69:a4: e3:5d:a4:d2:ee:35:4b:58:a7:11:4d:d3:1f:5f:f8: 02:2b:db:75:2b:2a:f9:b0:3a:e7:1e:17:c7:53:c3: 08:50:1f:de:85:98:e9:87:60:de:5b:1d:bf:62:44: b1:eb:13:4f:a2:9f:5f:04:85:ae:7b:4b:5a:8e:cd: 47:3f:23:a2:d0:0e:67:ec:16:a0:21:b8:98:36:54: fa:63:06:19:6c:f5:9e:52:77:fe:a4:4c:79:5a:04: 6f:85:6f:4b:4d:79:ac:9e:30:42:9e:db:3b:8d:67: 39:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:AC:9F:D8:51:E8:6C:07:70:01:54:07:AD:65:F0:8D:D7:63:9D:B2 X509v3 Authority Key Identifier: keyid:B9:0B:0A:ED:87:EC:D7:C8:70:66:45:0A:B5:6A:DE:29:96:64:7C:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aae6379e-b886-436e-b0ed-3aaff9c08501/0/B90B0AED87ECD7C87066450AB56ADE2996647CD5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B90B0AED87ECD7C87066450AB56ADE2996647CD5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aae6379e-b886-436e-b0ed-3aaff9c08501/0/B90B0AED87ECD7C87066450AB56ADE2996647CD5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:8a:57:43:c8:9c:2d:6d:9b:11:1c:cb:66:01:21:22:c0:2e: 79:bd:1f:62:a1:48:26:f1:03:20:e5:0e:db:41:7a:91:cf:1c: 87:82:e6:5f:a0:71:65:ad:50:34:2c:ff:d5:24:b6:67:60:eb: 91:04:6f:83:ee:81:6e:1e:84:0e:f6:76:0d:8d:23:ad:1d:4c: f0:cc:bd:29:d8:c6:c7:96:cf:e0:98:6e:c5:7a:06:d4:9f:99: ee:89:40:8e:4c:31:e6:87:48:10:1c:39:8b:06:35:6a:0f:3e: 46:a3:b5:ad:5c:52:61:5f:93:21:d9:73:60:32:f0:5c:59:09: 9a:55:3b:62:b4:f4:00:7c:61:71:02:e0:30:34:2f:d0:29:a3: 49:76:df:c5:c6:2e:e7:7b:57:88:65:6d:d8:48:d4:0c:55:d2: 1d:5d:a5:57:fc:13:5d:82:32:65:d1:1c:73:53:26:cb:5e:4e: 67:d2:77:8d:b0:8a:2b:33:6e:c9:f8:9c:f5:51:0e:74:fe:6c: e2:9d:e9:20:3a:10:ff:24:7f:ce:9c:4e:67:77:b1:42:e3:ba: 6f:55:ed:1a:5f:70:0e:45:27:2d:e8:46:f2:e0:28:f4:f7:c5: 82:3c:cc:98:43:bf:7c:40:94:56:45:9d:0d:dd:a2:cb:0b:3c: 24:3d:ae:3b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUY2uhzBUG00/UEa6fnlmT2sGCRUIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjkwQjBBRUQ4N0VDRDdDODcwNjY0NTBBQjU2QURFMjk5 NjY0N0NENTAeFw0yNjAxMjUxNjA2MzVaFw0yNjAxMjgyMDQ0MzVaMDMxMTAvBgNV BAMTKDU0QUM5RkQ4NTFFODZDMDc3MDAxNTQwN0FENjVGMDhERDc2MzlEQjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWw0R64CJMKEAW+A30GwhtvCiZ X8LeVTlUgavD/rSZlLwo1dE0FxwEDe26NjRDfh8e3WdCTtQN3m/0KnKerwS4DLKY 7TRXNIZ/mr0ZU4Am30TKUVOLIxbbX+8ghZWidivDQW2ZBA8FhAqiw4Ko0pO7LMza PPvtCkHNWCVuo+fp16UlG4v1UIZE8tKNDznpPxvvj7xppONdpNLuNUtYpxFN0x9f +AIr23UrKvmwOuceF8dTwwhQH96FmOmHYN5bHb9iRLHrE0+in18Eha57S1qOzUc/ I6LQDmfsFqAhuJg2VPpjBhls9Z5Sd/6kTHlaBG+Fb0tNeayeMEKe2zuNZznXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVKyf2FHobAdwAVQHrWXwjddjnbIwHwYDVR0j BBgwFoAUuQsK7Yfs18hwZkUKtWreKZZkfNUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YWU2Mzc5ZS1iODg2LTQzNmUtYjBlZC0zYWFmZjljMDg1MDEvMC9COTBCMEFFRDg3 RUNEN0M4NzA2NjQ1MEFCNTZBREUyOTk2NjQ3Q0Q1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjkwQjBBRUQ4N0VDRDdDODcwNjY0NTBBQjU2QURFMjk5NjY0 N0NENS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWFlNjM3OWUtYjg4Ni00MzZlLWIw ZWQtM2FhZmY5YzA4NTAxLzAvQjkwQjBBRUQ4N0VDRDdDODcwNjY0NTBBQjU2QURF Mjk5NjY0N0NENS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABeKV0PInC1tmxEcy2YBISLALnm9H2KhSCbx AyDlDttBepHPHIeC5l+gcWWtUDQs/9Uktmdg65EEb4PugW4ehA72dg2NI60dTPDM vSnYxseWz+CYbsV6BtSfme6JQI5MMeaHSBAcOYsGNWoPPkajta1cUmFfkyHZc2Ay 8FxZCZpVO2K09AB8YXEC4DA0L9Apo0l238XGLud7V4hlbdhI1AxV0h1dpVf8E12C MmXRHHNTJsteTmfSd42wiiszbsn4nPVRDnT+bOKd6SA6EP8kf86cTmd3sULjum9V 7RpfcA5FJy3oRvLgKPT3xYI8zJhDv3xAlFZFnQ3dossLPCQ9rjs= -----END CERTIFICATE-----Generated at Sun Jan 25 20:33:15 2026 by rpki-client