This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/b883e3be-57e2-4125-a0c5-9a9ea501bf05/0/90508FF980097E19CEF65ED72A856616A6F690AB.mft File: 90508FF980097E19CEF65ED72A856616A6F690AB.mft (raw, json) Hash identifier: CLw2MBmIt6FmL4V7mfb5Izjdmx2B1bVJiwA7u1qW+2Y= Subject key identifier: 8D:25:43:0D:54:6A:96:08:A8:CD:2A:96:63:58:AD:B6:0E:4E:CB:D3 Authority key identifier: 90:50:8F:F9:80:09:7E:19:CE:F6:5E:D7:2A:85:66:16:A6:F6:90:AB Certificate issuer: /CN=90508FF980097E19CEF65ED72A856616A6F690AB Certificate serial: 211727CF51E2602C7668F2B254BDFF217B82EFF1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90508FF980097E19CEF65ED72A856616A6F690AB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b883e3be-57e2-4125-a0c5-9a9ea501bf05/0/90508FF980097E19CEF65ED72A856616A6F690AB.mft Manifest number: 052E Signing time: Sat 06 Dec 2025 10:42:09 +0000 Manifest this update: Sat 06 Dec 2025 10:37:09 +0000 Manifest next update: Tue 09 Dec 2025 17:17:09 +0000 Files and hashes: 1: 3130332e3131392e3233312e302f32342d3234203d3e203634333135.roa (hash: Yz5xkZY0xzo/trvfbAdTc4aF9ack7BIeyFzB+WOAYgQ=) 2: 3130332e3131392e3233302e302f32342d3234203d3e203634333135.roa (hash: NUlokuFe9GARtT8KTw9qoKUuu+MeiOKu86jOn++3TJ0=) 3: 3130332e3131392e3232382e302f32332d3234203d3e203634333135.roa (hash: JNjDlAZZhJPbXz9QnoPN2kXEdVorueRNiZ3y4BzRO+s=) 4: 90508FF980097E19CEF65ED72A856616A6F690AB.crl (hash: 619Gnv0lwDpkjgWIhuJOFdu66H6ZWjWgNNd7h1WDLZM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b883e3be-57e2-4125-a0c5-9a9ea501bf05/0/90508FF980097E19CEF65ED72A856616A6F690AB.crl rsync://repo-rpki.idnic.net/repo/b883e3be-57e2-4125-a0c5-9a9ea501bf05/0/90508FF980097E19CEF65ED72A856616A6F690AB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90508FF980097E19CEF65ED72A856616A6F690AB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:17:27:cf:51:e2:60:2c:76:68:f2:b2:54:bd:ff:21:7b:82:ef:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90508FF980097E19CEF65ED72A856616A6F690AB Validity Not Before: Dec 6 10:37:09 2025 GMT Not After : Dec 9 17:17:09 2025 GMT Subject: CN=8D25430D546A9608A8CD2A966358ADB60E4ECBD3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:b9:69:e4:e6:52:8b:72:27:c2:f6:3b:ab:d6: 66:ae:fe:dd:e6:36:db:32:39:a0:8f:09:e8:19:23: 12:98:3b:f2:23:c0:dc:95:b1:a3:29:aa:fa:44:6d: 9d:9c:54:65:e8:cb:7b:fb:90:df:f2:ea:1f:53:ae: 4b:e3:7e:85:59:46:01:29:e7:bf:a4:76:5d:ea:48: 74:4a:67:04:68:16:9f:49:f9:0e:3b:74:db:51:f5: 7c:86:0f:97:20:d5:f3:15:46:ca:84:c2:21:c7:f3: f7:47:90:54:c7:7b:9c:a5:87:fc:d3:7a:a8:c2:93: 01:08:e0:67:c4:66:a1:01:76:8f:8a:03:dc:c9:f8: e2:c2:3e:27:75:29:ae:a3:5f:fa:7d:61:23:9f:71: 15:94:5a:a1:c5:3b:a3:99:9c:06:be:ec:44:f4:aa: 0a:90:29:4f:a8:0d:f1:da:19:68:df:14:02:66:49: 5f:d7:5a:a6:9e:d4:b9:38:ca:fd:72:fd:22:13:86: b1:2b:d2:ff:a9:64:86:cf:03:12:d9:49:c7:5a:a1: 5d:c7:55:ac:f6:07:53:ff:b2:e2:62:ee:2b:c9:c3: cb:58:fe:42:a9:22:55:d2:4d:13:be:e4:21:17:3d: 4a:5d:1b:c3:23:dc:6d:49:18:f7:8a:c6:41:63:7b: be:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:25:43:0D:54:6A:96:08:A8:CD:2A:96:63:58:AD:B6:0E:4E:CB:D3 X509v3 Authority Key Identifier: keyid:90:50:8F:F9:80:09:7E:19:CE:F6:5E:D7:2A:85:66:16:A6:F6:90:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b883e3be-57e2-4125-a0c5-9a9ea501bf05/0/90508FF980097E19CEF65ED72A856616A6F690AB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90508FF980097E19CEF65ED72A856616A6F690AB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b883e3be-57e2-4125-a0c5-9a9ea501bf05/0/90508FF980097E19CEF65ED72A856616A6F690AB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:f9:b4:dd:b1:1c:e2:ed:6e:a0:12:ad:8d:23:3b:1b:c1:31: 6c:19:b3:e6:b5:ee:9c:9b:d3:6e:97:34:dd:c4:00:88:2e:cd: 76:3e:d9:81:b4:71:4a:00:46:ba:5c:7f:c2:08:d2:fd:b1:93: 5f:2f:e8:24:31:79:55:95:1b:1a:de:18:b2:45:66:a9:4b:25: a2:94:84:c1:71:08:3e:36:d6:7e:86:48:49:80:c3:75:4c:e4: b9:9c:c2:60:a3:e2:e5:a6:99:01:21:dc:43:6f:ab:23:41:5b: e2:50:df:df:3e:61:c7:4d:03:2d:42:ef:9c:14:82:99:83:e0: d9:b4:9f:76:fa:8a:2f:ec:ba:bd:dd:7d:fe:95:c8:56:27:00: f5:36:60:ef:48:ac:84:61:86:5c:1f:11:28:09:f6:05:62:53: a7:42:48:3a:40:cc:05:1c:63:6a:57:2d:28:2a:57:3b:3f:be: a3:b4:46:1a:ad:6d:8d:63:17:90:7e:39:c4:2d:95:d3:f8:ed: 8a:f2:0d:84:19:3c:d3:b5:5b:77:f3:45:de:34:15:b2:d5:53: e2:d5:7c:1d:cc:5d:07:73:cf:50:c5:2f:45:08:0a:3a:11:39: 74:0b:1d:0c:23:1b:14:97:75:aa:2c:e6:f6:cf:fd:6e:04:ab: a6:41:63:13 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIRcnz1HiYCx2aPKyVL3/IXuC7/EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTA1MDhGRjk4MDA5N0UxOUNFRjY1RUQ3MkE4NTY2MTZB NkY2OTBBQjAeFw0yNTEyMDYxMDM3MDlaFw0yNTEyMDkxNzE3MDlaMDMxMTAvBgNV BAMTKDhEMjU0MzBENTQ2QTk2MDhBOENEMkE5NjYzNThBREI2MEU0RUNCRDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4uWnk5lKLcifC9jur1mau/t3m NtsyOaCPCegZIxKYO/IjwNyVsaMpqvpEbZ2cVGXoy3v7kN/y6h9TrkvjfoVZRgEp 57+kdl3qSHRKZwRoFp9J+Q47dNtR9XyGD5cg1fMVRsqEwiHH8/dHkFTHe5ylh/zT eqjCkwEI4GfEZqEBdo+KA9zJ+OLCPid1Ka6jX/p9YSOfcRWUWqHFO6OZnAa+7ET0 qgqQKU+oDfHaGWjfFAJmSV/XWqae1Lk4yv1y/SIThrEr0v+pZIbPAxLZScdaoV3H Vaz2B1P/suJi7ivJw8tY/kKpIlXSTRO+5CEXPUpdG8Mj3G1JGPeKxkFje741AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjSVDDVRqlgiozSqWY1ittg5Oy9MwHwYDVR0j BBgwFoAUkFCP+YAJfhnO9l7XKoVmFqb2kKswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ODgzZTNiZS01N2UyLTQxMjUtYTBjNS05YTllYTUwMWJmMDUvMC85MDUwOEZGOTgw MDk3RTE5Q0VGNjVFRDcyQTg1NjYxNkE2RjY5MEFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTA1MDhGRjk4MDA5N0UxOUNFRjY1RUQ3MkE4NTY2MTZBNkY2 OTBBQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjg4M2UzYmUtNTdlMi00MTI1LWEw YzUtOWE5ZWE1MDFiZjA1LzAvOTA1MDhGRjk4MDA5N0UxOUNFRjY1RUQ3MkE4NTY2 MTZBNkY2OTBBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGn5tN2xHOLtbqASrY0jOxvBMWwZs+a17pyb 026XNN3EAIguzXY+2YG0cUoARrpcf8II0v2xk18v6CQxeVWVGxreGLJFZqlLJaKU hMFxCD421n6GSEmAw3VM5LmcwmCj4uWmmQEh3ENvqyNBW+JQ398+YcdNAy1C75wU gpmD4Nm0n3b6ii/sur3dff6VyFYnAPU2YO9IrIRhhlwfESgJ9gViU6dCSDpAzAUc Y2pXLSgqVzs/vqO0RhqtbY1jF5B+OcQtldP47YryDYQZPNO1W3fzRd40FbLVU+LV fB3MXQdzz1DFL0UICjoROXQLHQwjGxSXdaos5vbP/W4Eq6ZBYxM= -----END CERTIFICATE-----Generated at Sun Dec 7 00:49:10 2025 by rpki-client