This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/0/D90C7042B5DC18341DCC77CA5CF8F4CA210D886B.mft File: D90C7042B5DC18341DCC77CA5CF8F4CA210D886B.mft (raw, json) Hash identifier: IBMgW8D1cr2dDTEQcXXnzmF0TclrsY08MvigWU+7Blk= Subject key identifier: 6C:07:5F:8C:D5:86:9E:97:A7:03:DF:BE:DE:9D:AA:04:3E:E3:95:FD Authority key identifier: D9:0C:70:42:B5:DC:18:34:1D:CC:77:CA:5C:F8:F4:CA:21:0D:88:6B Certificate issuer: /CN=D90C7042B5DC18341DCC77CA5CF8F4CA210D886B Certificate serial: 7E6C6334B1027989FFE50BD09207273C2F094A75 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D90C7042B5DC18341DCC77CA5CF8F4CA210D886B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/0/D90C7042B5DC18341DCC77CA5CF8F4CA210D886B.mft Manifest number: 0112 Signing time: Mon 01 Dec 2025 14:12:27 +0000 Manifest this update: Mon 01 Dec 2025 14:07:27 +0000 Manifest next update: Fri 05 Dec 2025 01:25:27 +0000 Files and hashes: 1: D90C7042B5DC18341DCC77CA5CF8F4CA210D886B.crl (hash: cQPxztnroK3P8/dGc6v7EcP2Jwd98wMuj91QN6M0TMs=) 2: 3135372e36362e372e302f32342d3234203d3e20313338383239.roa (hash: zM59QgzH/K8O4i/tzNe37zwwVnS65qf7DZJku3UKUIg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/0/D90C7042B5DC18341DCC77CA5CF8F4CA210D886B.crl rsync://repo-rpki.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/0/D90C7042B5DC18341DCC77CA5CF8F4CA210D886B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D90C7042B5DC18341DCC77CA5CF8F4CA210D886B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 01:25:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:6c:63:34:b1:02:79:89:ff:e5:0b:d0:92:07:27:3c:2f:09:4a:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D90C7042B5DC18341DCC77CA5CF8F4CA210D886B Validity Not Before: Dec 1 14:07:27 2025 GMT Not After : Dec 5 01:25:27 2025 GMT Subject: CN=6C075F8CD5869E97A703DFBEDE9DAA043EE395FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:a5:17:6c:56:97:4e:26:f2:05:98:fb:50:c0: df:c8:73:77:dd:60:93:5c:24:f8:2a:2b:a1:5a:cd: ef:e8:e5:73:40:be:1c:27:29:4d:c9:cf:ad:ed:74: cb:95:c5:01:06:66:75:4f:a2:33:f0:2f:2d:c4:f5: ef:0d:c9:42:19:fb:4a:17:43:e1:59:d1:1a:8a:a9: 4b:7e:de:d7:2e:dc:3d:7f:0d:4f:80:c4:d2:91:77: c3:08:7a:5f:48:0f:3b:85:72:90:bb:a1:67:37:2d: 0e:11:cb:04:de:af:68:9f:ba:35:23:b6:b2:8b:3e: b4:0e:4d:74:cf:e4:f1:f4:04:01:48:27:38:39:66: 6d:8f:33:29:0c:e8:25:9c:fa:6e:84:52:93:ca:eb: a6:14:df:21:ec:52:ef:7d:e5:ec:59:5b:f7:74:a5: a9:1e:d7:16:dd:ba:fd:9f:85:f1:74:26:4a:07:69: c5:55:3f:0f:9b:e2:90:91:a0:b3:fe:93:47:ab:6f: 3a:28:3c:23:9b:9a:e9:6c:ec:53:0a:81:1c:07:a5: dc:03:3e:ad:cf:99:ae:ca:67:66:33:98:99:09:8c: fd:9f:1e:0f:c2:e4:6f:69:77:ed:cd:99:ac:da:f7: ce:35:dc:f8:a6:1e:3a:45:7a:6f:26:95:01:95:be: 08:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:07:5F:8C:D5:86:9E:97:A7:03:DF:BE:DE:9D:AA:04:3E:E3:95:FD X509v3 Authority Key Identifier: keyid:D9:0C:70:42:B5:DC:18:34:1D:CC:77:CA:5C:F8:F4:CA:21:0D:88:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/0/D90C7042B5DC18341DCC77CA5CF8F4CA210D886B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D90C7042B5DC18341DCC77CA5CF8F4CA210D886B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/0/D90C7042B5DC18341DCC77CA5CF8F4CA210D886B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:f8:c2:e8:cc:35:fb:7e:88:5d:c7:1e:f0:8e:95:61:cb:8d: f2:56:bc:ff:7e:90:db:5d:ed:2d:5c:e8:77:6f:8f:4f:bd:8d: 65:08:7c:8b:d6:c8:36:0d:30:e4:cd:1b:46:7b:e4:07:06:79: 9b:ce:a2:77:d2:fb:64:55:12:4d:e3:93:3b:f4:6a:b1:62:ac: ed:b9:ce:68:b6:24:80:9e:1d:bd:cf:6d:76:c2:89:62:77:18: 63:d5:a2:db:96:40:4c:95:cb:88:38:e8:7e:89:2d:0d:12:4b: 73:98:17:c5:8b:c5:f8:e9:38:3d:6a:dd:09:fd:77:e8:cc:84: 70:eb:52:00:14:63:d7:61:1d:a9:8b:70:c2:36:a0:98:97:36: da:06:57:54:1f:d3:8d:40:ba:6f:fd:05:56:bb:d0:5b:bb:df: 8f:7c:b2:11:cc:49:b2:58:9b:b7:9b:c3:13:d7:73:70:0b:15: f6:de:70:98:dc:4b:42:92:38:a0:ea:f4:e6:cf:af:14:0c:9e: d0:ef:cf:37:69:b2:03:ef:2f:42:5f:f8:ec:91:3b:6a:1f:7f: 43:e7:a7:46:98:cc:e5:c8:a1:19:15:cf:43:f7:41:31:b7:d5: 47:73:03:7b:59:7f:5b:ac:44:73:99:b9:2e:dc:fd:04:9a:90: 8e:03:6e:07 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfmxjNLECeYn/5QvQkgcnPC8JSnUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDkwQzcwNDJCNURDMTgzNDFEQ0M3N0NBNUNGOEY0Q0Ey MTBEODg2QjAeFw0yNTEyMDExNDA3MjdaFw0yNTEyMDUwMTI1MjdaMDMxMTAvBgNV BAMTKDZDMDc1RjhDRDU4NjlFOTdBNzAzREZCRURFOURBQTA0M0VFMzk1RkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8pRdsVpdOJvIFmPtQwN/Ic3fd YJNcJPgqK6Faze/o5XNAvhwnKU3Jz63tdMuVxQEGZnVPojPwLy3E9e8NyUIZ+0oX Q+FZ0RqKqUt+3tcu3D1/DU+AxNKRd8MIel9IDzuFcpC7oWc3LQ4RywTer2ifujUj trKLPrQOTXTP5PH0BAFIJzg5Zm2PMykM6CWc+m6EUpPK66YU3yHsUu995exZW/d0 pake1xbduv2fhfF0JkoHacVVPw+b4pCRoLP+k0erbzooPCObmuls7FMKgRwHpdwD Pq3Pma7KZ2YzmJkJjP2fHg/C5G9pd+3Nmaza98413PimHjpFem8mlQGVvgh3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbAdfjNWGnpenA9++3p2qBD7jlf0wHwYDVR0j BBgwFoAU2QxwQrXcGDQdzHfKXPj0yiENiGswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MGE2ZmVhYS02YjRmLTQ3Y2YtOWUzYy0wMGFlYWM2N2EzMmEvMC9EOTBDNzA0MkI1 REMxODM0MURDQzc3Q0E1Q0Y4RjRDQTIxMEQ4ODZCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRDkwQzcwNDJCNURDMTgzNDFEQ0M3N0NBNUNGOEY0Q0EyMTBE ODg2Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDBhNmZlYWEtNmI0Zi00N2NmLTll M2MtMDBhZWFjNjdhMzJhLzAvRDkwQzcwNDJCNURDMTgzNDFEQ0M3N0NBNUNGOEY0 Q0EyMTBEODg2Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB74wujMNft+iF3HHvCOlWHLjfJWvP9+kNtd 7S1c6Hdvj0+9jWUIfIvWyDYNMOTNG0Z75AcGeZvOonfS+2RVEk3jkzv0arFirO25 zmi2JICeHb3PbXbCiWJ3GGPVotuWQEyVy4g46H6JLQ0SS3OYF8WLxfjpOD1q3Qn9 d+jMhHDrUgAUY9dhHamLcMI2oJiXNtoGV1Qf041Aum/9BVa70Fu73498shHMSbJY m7ebwxPXc3ALFfbecJjcS0KSOKDq9ObPrxQMntDvzzdpsgPvL0Jf+OyRO2off0Pn p0aYzOXIoRkVz0P3QTG31UdzA3tZf1usRHOZuS7c/QSakI4Dbgc= -----END CERTIFICATE-----Generated at Wed Dec 3 16:39:02 2025 by rpki-client