This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/53b858f6-de20-4121-bcea-9076edccc097/0/90317E269FFE9F713F20CFBACE642A6F60F78FCA.mft File: 90317E269FFE9F713F20CFBACE642A6F60F78FCA.mft (raw, json) Hash identifier: FJbBL5sIRjUwxzGqcsPlsibDb1YoN0UMgUG5MXI46w4= Subject key identifier: 5A:72:0C:56:84:84:12:DC:6B:9A:56:03:67:2D:39:15:97:60:09:BC Authority key identifier: 90:31:7E:26:9F:FE:9F:71:3F:20:CF:BA:CE:64:2A:6F:60:F7:8F:CA Certificate issuer: /CN=90317E269FFE9F713F20CFBACE642A6F60F78FCA Certificate serial: 4976F69E8D97129EAE6C7C241E839EEA5F724066 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90317E269FFE9F713F20CFBACE642A6F60F78FCA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/53b858f6-de20-4121-bcea-9076edccc097/0/90317E269FFE9F713F20CFBACE642A6F60F78FCA.mft Manifest number: D0 Signing time: Tue 02 Dec 2025 16:10:05 +0000 Manifest this update: Tue 02 Dec 2025 16:05:05 +0000 Manifest next update: Sat 06 Dec 2025 00:35:05 +0000 Files and hashes: 1: 90317E269FFE9F713F20CFBACE642A6F60F78FCA.crl (hash: jaJJ4U7VYP+i2aPMpdf02w+yChN/hnHsA2xaI6DgwyI=) 2: 3130332e33362e3235302e302f32342d3234203d3e20313431303538.roa (hash: oYJ/bJTCwN/+BegUT28xw/nhCI6ZgY0zlwjKdKcCdiQ=) 3: 323430313a633432303a3a2f33322d3438203d3e20313431303538.roa (hash: /agLGw0c81cHF8Topn/a9INtTEJnrvSh7/oHynB8qR0=) 4: 3130332e3135352e3131332e302f32342d3234203d3e20313431303538.roa (hash: Y3pOvFfrtyRbRGGWe5RbSl3GyhFyt942LzAk5FIpr9c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/53b858f6-de20-4121-bcea-9076edccc097/0/90317E269FFE9F713F20CFBACE642A6F60F78FCA.crl rsync://repo-rpki.idnic.net/repo/53b858f6-de20-4121-bcea-9076edccc097/0/90317E269FFE9F713F20CFBACE642A6F60F78FCA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90317E269FFE9F713F20CFBACE642A6F60F78FCA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 00:35:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:76:f6:9e:8d:97:12:9e:ae:6c:7c:24:1e:83:9e:ea:5f:72:40:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90317E269FFE9F713F20CFBACE642A6F60F78FCA Validity Not Before: Dec 2 16:05:05 2025 GMT Not After : Dec 6 00:35:05 2025 GMT Subject: CN=5A720C56848412DC6B9A5603672D3915976009BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:c5:f6:79:9c:9e:79:f7:84:3b:a4:29:ce:c4: f1:0a:f5:1f:00:83:b0:69:46:1d:b6:83:41:69:d9: df:11:df:9d:bf:7a:9e:20:99:57:f8:8f:c7:64:eb: cd:97:4b:df:50:6f:33:91:4b:03:de:45:58:47:1f: a6:38:c1:1a:14:bc:0d:36:3e:43:78:ea:d8:c1:a6: 3b:30:58:97:2b:49:5b:b8:f3:91:67:c8:66:63:75: b9:c9:92:47:a9:94:e3:3e:fe:a4:c2:66:c5:4f:c9: 85:56:e3:bb:39:5e:46:74:c0:f3:17:90:a2:1a:e7: fb:f1:fb:4c:e5:01:e3:93:ee:1a:9d:76:6f:05:01: 49:a4:e6:5a:da:7a:41:93:8c:6c:6d:44:f2:ac:a8: 63:18:f2:b9:98:41:6a:13:22:47:09:54:0c:e8:1d: 54:db:ae:b7:78:83:ed:bb:0f:03:9f:3c:3e:9d:ac: 6d:4b:4a:31:0a:85:24:32:72:b4:d2:a0:d9:aa:9c: 1f:b1:0f:21:89:0e:2e:1c:43:64:ca:b8:3e:f9:06: cd:4a:98:b5:8b:06:13:13:70:6a:e7:c1:2b:a0:87: 55:6b:9d:4d:28:52:3d:a1:1a:76:58:ae:8a:eb:fe: 6a:82:bc:01:25:f4:0b:2c:d7:93:25:63:65:4d:a4: 4a:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:72:0C:56:84:84:12:DC:6B:9A:56:03:67:2D:39:15:97:60:09:BC X509v3 Authority Key Identifier: keyid:90:31:7E:26:9F:FE:9F:71:3F:20:CF:BA:CE:64:2A:6F:60:F7:8F:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/53b858f6-de20-4121-bcea-9076edccc097/0/90317E269FFE9F713F20CFBACE642A6F60F78FCA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90317E269FFE9F713F20CFBACE642A6F60F78FCA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/53b858f6-de20-4121-bcea-9076edccc097/0/90317E269FFE9F713F20CFBACE642A6F60F78FCA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e6:04:0d:d8:8e:8c:99:bb:b6:48:bb:c8:2c:47:b8:ba:cc:b5: d4:f2:11:ef:4e:dd:cd:1e:75:01:ee:6b:79:3e:dc:1b:44:0c: af:c4:e9:2a:67:ae:1a:f2:e7:87:c3:b3:95:fb:b5:4e:1b:b2: ee:e9:bd:d8:55:6e:60:f2:82:04:9d:ec:8d:19:aa:44:b6:86: a5:32:41:12:75:7c:e1:65:4e:fe:bc:31:b4:fa:79:9b:ca:91: 2e:84:46:5d:c8:de:c0:3a:c0:fd:0b:96:2f:59:86:60:ce:03: 87:56:a0:7c:44:fb:36:30:cb:a9:0e:1e:89:6f:d8:fd:d4:0e: f2:84:80:58:5c:7e:f9:07:0a:8a:50:ad:a8:26:47:82:3e:27: 8c:36:b2:4d:4b:23:06:68:c5:cf:55:fb:d8:1d:16:ed:64:1f: 99:ba:de:08:97:5f:88:fb:22:4c:38:1c:1a:d0:16:7a:e6:03: ac:06:df:e4:45:a2:62:67:6a:b6:a8:20:2f:02:01:9b:7d:94: 79:95:7c:0a:d4:fe:90:cd:b4:8d:01:8f:2b:12:11:6f:c6:94: 4a:f8:df:68:f7:67:13:af:83:03:37:a8:22:30:63:2f:61:4b: 3e:36:0b:35:3a:ff:b1:e4:3b:68:71:31:6a:61:d9:49:e8:f9: 60:e2:08:05 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSXb2no2XEp6ubHwkHoOe6l9yQGYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTAzMTdFMjY5RkZFOUY3MTNGMjBDRkJBQ0U2NDJBNkY2 MEY3OEZDQTAeFw0yNTEyMDIxNjA1MDVaFw0yNTEyMDYwMDM1MDVaMDMxMTAvBgNV BAMTKDVBNzIwQzU2ODQ4NDEyREM2QjlBNTYwMzY3MkQzOTE1OTc2MDA5QkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0xfZ5nJ5594Q7pCnOxPEK9R8A g7BpRh22g0Fp2d8R352/ep4gmVf4j8dk682XS99QbzORSwPeRVhHH6Y4wRoUvA02 PkN46tjBpjswWJcrSVu485FnyGZjdbnJkkeplOM+/qTCZsVPyYVW47s5XkZ0wPMX kKIa5/vx+0zlAeOT7hqddm8FAUmk5lraekGTjGxtRPKsqGMY8rmYQWoTIkcJVAzo HVTbrrd4g+27DwOfPD6drG1LSjEKhSQycrTSoNmqnB+xDyGJDi4cQ2TKuD75Bs1K mLWLBhMTcGrnwSugh1VrnU0oUj2hGnZYrorr/mqCvAEl9Ass15MlY2VNpEo3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWnIMVoSEEtxrmlYDZy05FZdgCbwwHwYDVR0j BBgwFoAUkDF+Jp/+n3E/IM+6zmQqb2D3j8owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 M2I4NThmNi1kZTIwLTQxMjEtYmNlYS05MDc2ZWRjY2MwOTcvMC85MDMxN0UyNjlG RkU5RjcxM0YyMENGQkFDRTY0MkE2RjYwRjc4RkNBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTAzMTdFMjY5RkZFOUY3MTNGMjBDRkJBQ0U2NDJBNkY2MEY3 OEZDQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTNiODU4ZjYtZGUyMC00MTIxLWJj ZWEtOTA3NmVkY2NjMDk3LzAvOTAzMTdFMjY5RkZFOUY3MTNGMjBDRkJBQ0U2NDJB NkY2MEY3OEZDQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAOYEDdiOjJm7tki7yCxHuLrMtdTyEe9O3c0e dQHua3k+3BtEDK/E6Spnrhry54fDs5X7tU4bsu7pvdhVbmDyggSd7I0ZqkS2hqUy QRJ1fOFlTv68MbT6eZvKkS6ERl3I3sA6wP0Lli9ZhmDOA4dWoHxE+zYwy6kOHolv 2P3UDvKEgFhcfvkHCopQragmR4I+J4w2sk1LIwZoxc9V+9gdFu1kH5m63giXX4j7 Ikw4HBrQFnrmA6wG3+RFomJnaraoIC8CAZt9lHmVfArU/pDNtI0BjysSEW/GlEr4 32j3ZxOvgwM3qCIwYy9hSz42CzU6/7HkO2hxMWph2Uno+WDiCAU= -----END CERTIFICATE-----Generated at Wed Dec 3 14:14:28 2025 by rpki-client