This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/f77ffe2a-31e4-4800-97d4-7874c1231911/0/90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3.mft File: 90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3.mft (raw, json) Hash identifier: YDRnQDeGVF2LnKPkrdeajasGGDpEHZkKdnfXFz38s0g= Subject key identifier: AB:14:12:06:4E:EC:CE:CF:47:3F:3A:69:D6:E5:54:74:C5:CE:80:65 Authority key identifier: 90:E2:CC:AC:A3:23:EA:B2:14:5F:54:B7:CF:65:C5:FA:EC:EF:83:A3 Certificate issuer: /CN=90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3 Certificate serial: 379C31C69EEFFC409C63491F8261A639CF2EF57D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f77ffe2a-31e4-4800-97d4-7874c1231911/0/90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3.mft Manifest number: 01E7 Signing time: Sat 06 Dec 2025 22:41:24 +0000 Manifest this update: Sat 06 Dec 2025 22:36:24 +0000 Manifest next update: Wed 10 Dec 2025 01:44:24 +0000 Files and hashes: 1: 3130332e3134352e35322e302f32342d3234203d3e20313339343535.roa (hash: AnirtwiQcqhih7uqF14RHtBvHcWSRInmlpBmELQD3Bc=) 2: 3130332e3134352e35322e302f32332d3233203d3e20313339343535.roa (hash: 7DJwBHtzGlb/NDl1/3zGyCjwc3DhiipUzCGFUXWXjoE=) 3: 90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3.crl (hash: Vw9HaWnL3rjh8Wx8TRveHzXEhP5dWupaqOs3ED5oEFE=) 4: 3130332e3134352e35332e302f32342d3234203d3e20313339343535.roa (hash: t0f8hH0p5YUalqHFkiu1kyX28Ot7aEHcWn8PNYVXvq0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f77ffe2a-31e4-4800-97d4-7874c1231911/0/90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3.crl rsync://repo-rpki.idnic.net/repo/f77ffe2a-31e4-4800-97d4-7874c1231911/0/90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:9c:31:c6:9e:ef:fc:40:9c:63:49:1f:82:61:a6:39:cf:2e:f5:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3 Validity Not Before: Dec 6 22:36:24 2025 GMT Not After : Dec 10 01:44:24 2025 GMT Subject: CN=AB1412064EECCECF473F3A69D6E55474C5CE8065 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:93:8c:74:20:43:87:17:1b:15:40:76:d2:42: cb:c7:ad:de:6f:01:12:90:75:70:44:89:7f:95:a9: d4:66:4e:59:67:13:8d:5a:50:8c:87:34:80:ea:cc: 30:71:30:86:24:00:87:41:11:1d:6e:03:8e:26:0e: 43:23:1b:e8:0e:96:4e:e3:7a:58:cd:09:5d:98:d3: 8d:0c:47:ab:d4:1a:05:a0:86:da:44:55:f6:fb:25: c7:4c:9e:80:b0:31:3c:d9:5a:c1:d4:a9:f4:ab:d5: 87:57:d9:06:4c:2c:63:a0:a8:e3:c9:3f:33:7d:f8: 68:0b:19:b3:3f:80:0b:12:81:b2:ec:b4:26:20:e4: f1:01:60:e8:81:c1:19:56:32:70:b2:1a:c3:cc:96: 48:8f:6c:f6:2f:ad:6b:24:f4:13:e6:40:43:55:d1: ac:de:05:34:e1:ad:8a:43:e0:0a:71:a7:02:e8:84: 4e:4e:05:52:67:60:35:f5:42:c9:79:21:95:cb:53: 5c:74:46:72:05:55:3b:e2:02:a5:de:77:d1:f0:0e: 6c:44:7f:a8:d9:c8:0e:9b:f8:51:74:41:f3:15:a3: 52:69:78:0b:a8:31:22:8c:43:07:5e:fb:a8:ec:22: 85:6a:f0:ef:b7:6e:67:77:14:1e:96:e5:da:19:31: 6a:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:14:12:06:4E:EC:CE:CF:47:3F:3A:69:D6:E5:54:74:C5:CE:80:65 X509v3 Authority Key Identifier: keyid:90:E2:CC:AC:A3:23:EA:B2:14:5F:54:B7:CF:65:C5:FA:EC:EF:83:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f77ffe2a-31e4-4800-97d4-7874c1231911/0/90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f77ffe2a-31e4-4800-97d4-7874c1231911/0/90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:ab:d4:b1:42:c5:c8:02:12:97:3a:ab:08:39:bf:da:47:94: e1:61:e6:f7:85:03:98:9d:46:b2:68:fa:c1:f6:e7:46:0a:00: 1f:bb:69:51:86:5d:f2:57:0e:b8:e6:7d:1a:2c:17:0b:3f:5a: 27:2d:09:99:d0:79:a0:99:dc:b6:2d:05:ab:1e:b9:b1:cf:33: 6a:f8:ea:22:d9:a5:f1:56:2f:84:29:27:4f:6f:fe:dd:0e:13: 20:92:b3:3e:32:2b:f9:e8:4d:a0:6a:dc:e3:5c:cb:6a:01:af: c6:50:ac:95:f4:09:c8:a5:c0:8e:0f:3f:ba:bd:16:ed:a2:f9: 2e:16:42:6e:33:e8:ec:9f:66:98:9a:8a:95:af:d8:6d:aa:ae: bb:d1:87:99:a5:8c:40:08:08:e4:fc:c5:3c:20:33:a3:fb:23: 45:a6:fe:93:d7:ac:be:c2:37:e6:c5:4c:3e:ad:8f:f1:ba:3a: de:ac:80:d4:18:80:6a:3f:64:69:a4:e4:53:2b:74:46:b1:7e: 0b:d3:ac:d8:6e:ac:ad:22:e9:59:1c:c0:02:9c:f2:56:06:48: 9e:e5:17:9d:16:d5:92:3e:d6:9a:9b:9d:92:c8:45:23:3d:7c: 92:74:e8:8f:81:1f:e0:f7:24:84:f0:f4:f6:04:9e:e2:59:80: 3e:e0:99:94 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUN5wxxp7v/ECcY0kfgmGmOc8u9X0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTBFMkNDQUNBMzIzRUFCMjE0NUY1NEI3Q0Y2NUM1RkFF Q0VGODNBMzAeFw0yNTEyMDYyMjM2MjRaFw0yNTEyMTAwMTQ0MjRaMDMxMTAvBgNV BAMTKEFCMTQxMjA2NEVFQ0NFQ0Y0NzNGM0E2OUQ2RTU1NDc0QzVDRTgwNjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzk4x0IEOHFxsVQHbSQsvHrd5v ARKQdXBEiX+VqdRmTllnE41aUIyHNIDqzDBxMIYkAIdBER1uA44mDkMjG+gOlk7j eljNCV2Y040MR6vUGgWghtpEVfb7JcdMnoCwMTzZWsHUqfSr1YdX2QZMLGOgqOPJ PzN9+GgLGbM/gAsSgbLstCYg5PEBYOiBwRlWMnCyGsPMlkiPbPYvrWsk9BPmQENV 0azeBTThrYpD4ApxpwLohE5OBVJnYDX1Qsl5IZXLU1x0RnIFVTviAqXed9HwDmxE f6jZyA6b+FF0QfMVo1JpeAuoMSKMQwde+6jsIoVq8O+3bmd3FB6W5doZMWqpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqxQSBk7szs9HPzpp1uVUdMXOgGUwHwYDVR0j BBgwFoAUkOLMrKMj6rIUX1S3z2XF+uzvg6MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NzdmZmUyYS0zMWU0LTQ4MDAtOTdkNC03ODc0YzEyMzE5MTEvMC85MEUyQ0NBQ0Ez MjNFQUIyMTQ1RjU0QjdDRjY1QzVGQUVDRUY4M0EzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTBFMkNDQUNBMzIzRUFCMjE0NUY1NEI3Q0Y2NUM1RkFFQ0VG ODNBMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjc3ZmZlMmEtMzFlNC00ODAwLTk3 ZDQtNzg3NGMxMjMxOTExLzAvOTBFMkNDQUNBMzIzRUFCMjE0NUY1NEI3Q0Y2NUM1 RkFFQ0VGODNBMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIyr1LFCxcgCEpc6qwg5v9pHlOFh5veFA5id RrJo+sH250YKAB+7aVGGXfJXDrjmfRosFws/WictCZnQeaCZ3LYtBaseubHPM2r4 6iLZpfFWL4QpJ09v/t0OEyCSsz4yK/noTaBq3ONcy2oBr8ZQrJX0CcilwI4PP7q9 Fu2i+S4WQm4z6OyfZpiaipWv2G2qrrvRh5mljEAICOT8xTwgM6P7I0Wm/pPXrL7C N+bFTD6tj/G6Ot6sgNQYgGo/ZGmk5FMrdEaxfgvTrNhurK0i6VkcwAKc8lYGSJ7l F50W1ZI+1pqbnZLIRSM9fJJ06I+BH+D3JITw9PYEnuJZgD7gmZQ= -----END CERTIFICATE-----Generated at Sun Dec 7 03:59:43 2025 by rpki-client