This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/56fd9a58-a906-4029-92e2-adcb56ae18bd/0/90EF20986B3061451D9F1178EB4D439522186281.mft File: 90EF20986B3061451D9F1178EB4D439522186281.mft (raw, json) Hash identifier: lttU8koi0GNyknfFRvpZy35AdwmVFarnq1QI5fwbvO0= Subject key identifier: 9D:94:B3:30:A5:81:4B:5B:B9:F4:DE:6B:ED:D0:2B:68:5B:2D:E4:1B Authority key identifier: 90:EF:20:98:6B:30:61:45:1D:9F:11:78:EB:4D:43:95:22:18:62:81 Certificate issuer: /CN=90EF20986B3061451D9F1178EB4D439522186281 Certificate serial: 27EC42F12441D22558591C9BAD654752199179F1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90EF20986B3061451D9F1178EB4D439522186281.cer Subject info access: rsync://repo-rpki.idnic.net/repo/56fd9a58-a906-4029-92e2-adcb56ae18bd/0/90EF20986B3061451D9F1178EB4D439522186281.mft Manifest number: 02B7 Signing time: Mon 01 Dec 2025 20:32:03 +0000 Manifest this update: Mon 01 Dec 2025 20:27:03 +0000 Manifest next update: Fri 05 Dec 2025 06:34:03 +0000 Files and hashes: 1: 90EF20986B3061451D9F1178EB4D439522186281.crl (hash: uDQQNNHtzL1T44wPXy21my5WrdnuK234QrmX3nQ6LRc=) 2: 3130332e3137382e32312e302f32342d3234203d3e20313439333139.roa (hash: n2eHTuRPz7VRKqIm4y6ERY38jrtnwA1mKjZRAuLNji8=) 3: 3130332e3137382e32302e302f32342d3234203d3e20313439333139.roa (hash: juxqVk4Pjv7HWg3rc7qy+poTuVXup5lljxn80d82VOs=) 4: 3130332e3137382e32302e302f32332d3233203d3e20313439333139.roa (hash: /g+5nQoioDTt8teej8QvN1daXZtQyJ0RCEnJEqM8tz8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/56fd9a58-a906-4029-92e2-adcb56ae18bd/0/90EF20986B3061451D9F1178EB4D439522186281.crl rsync://repo-rpki.idnic.net/repo/56fd9a58-a906-4029-92e2-adcb56ae18bd/0/90EF20986B3061451D9F1178EB4D439522186281.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90EF20986B3061451D9F1178EB4D439522186281.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 06:34:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:ec:42:f1:24:41:d2:25:58:59:1c:9b:ad:65:47:52:19:91:79:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90EF20986B3061451D9F1178EB4D439522186281 Validity Not Before: Dec 1 20:27:03 2025 GMT Not After : Dec 5 06:34:03 2025 GMT Subject: CN=9D94B330A5814B5BB9F4DE6BEDD02B685B2DE41B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:6c:15:50:43:b3:b7:d5:cd:f4:1f:59:0d:1e: 04:55:33:f3:a2:72:bd:5b:f8:bd:87:6a:b6:f8:ce: 8e:16:1d:eb:f9:7a:e4:dd:87:30:8d:ac:23:24:ee: ac:f6:50:6d:57:c7:90:fc:bd:33:00:b5:24:06:0a: 71:9c:8a:75:5a:e2:66:74:b7:1e:89:86:54:fb:86: 84:01:85:5f:bb:f8:ce:32:6f:f2:68:e0:d9:30:a0: 51:47:22:05:a8:d0:e0:eb:d7:17:56:32:f6:60:2b: 81:4a:db:ce:9e:a3:f3:bd:b1:a0:ed:a0:8f:ae:e5: 8c:9a:ef:15:d4:22:c4:e0:82:b2:03:98:67:d2:d2: 77:6d:98:f1:f7:bc:13:bd:53:77:88:3e:da:ce:f3: d1:a7:66:b9:b6:69:3f:eb:9d:e3:21:ea:cc:00:78: 5e:06:13:73:8e:3a:fc:ee:39:1f:46:b9:a8:96:92: a0:8f:82:d7:fc:e2:1d:84:1b:3f:e2:06:20:68:0d: e6:23:cf:ac:80:ab:77:4a:0c:f5:73:e9:24:46:93: fd:73:bb:70:a3:11:09:bb:38:b0:9a:56:ff:b6:b0: bb:44:85:6a:76:bf:48:9e:1a:f9:72:67:36:88:11: f6:1c:ed:07:bb:67:d9:54:b6:89:d3:87:cd:0d:f6: 4c:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:94:B3:30:A5:81:4B:5B:B9:F4:DE:6B:ED:D0:2B:68:5B:2D:E4:1B X509v3 Authority Key Identifier: keyid:90:EF:20:98:6B:30:61:45:1D:9F:11:78:EB:4D:43:95:22:18:62:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/56fd9a58-a906-4029-92e2-adcb56ae18bd/0/90EF20986B3061451D9F1178EB4D439522186281.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90EF20986B3061451D9F1178EB4D439522186281.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/56fd9a58-a906-4029-92e2-adcb56ae18bd/0/90EF20986B3061451D9F1178EB4D439522186281.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:1d:bd:56:f1:af:0c:56:19:8f:28:d8:5e:71:b0:ff:e6:b2: a5:e2:12:8c:7c:69:4d:f9:6a:d3:3b:5f:d6:b2:77:c9:3e:96: f8:e6:36:17:3d:74:09:c8:74:06:d4:3c:ee:72:ef:62:19:de: 8f:6b:59:92:53:d6:a3:17:e4:29:53:5e:76:b2:45:fd:57:54: 37:bb:3f:55:85:05:73:7b:06:f9:64:7a:dd:17:fd:a5:7f:f0: 93:fc:30:0a:6c:71:b5:0c:f3:7f:9b:6a:56:f6:c9:3a:c3:fe: 65:54:6c:91:00:df:b5:d1:5d:48:3b:24:cc:14:78:c4:b2:9e: 60:6a:bd:9c:e6:8b:b1:ab:a0:74:d6:93:85:cd:06:e7:ff:b9: 60:8e:db:65:59:8d:1f:2b:90:01:e3:1e:ff:6a:c5:1b:44:29: 1b:51:23:98:3b:50:92:1a:82:f9:5d:5d:4e:be:a2:cc:cc:d1: be:34:7e:52:19:e4:9e:fc:06:89:93:54:b7:5e:6c:e2:b8:5b: 3a:17:4f:7e:2f:71:29:e0:24:0c:6c:61:1a:fc:3f:58:a7:1b: 65:ce:9e:c5:9a:7e:40:49:9e:3e:69:7b:12:1c:c6:a4:d4:7f: 21:84:76:42:e0:6e:91:0b:43:6b:eb:d8:f2:d5:08:d1:4c:81: f7:ce:ed:5f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJ+xC8SRB0iVYWRybrWVHUhmRefEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTBFRjIwOTg2QjMwNjE0NTFEOUYxMTc4RUI0RDQzOTUy MjE4NjI4MTAeFw0yNTEyMDEyMDI3MDNaFw0yNTEyMDUwNjM0MDNaMDMxMTAvBgNV BAMTKDlEOTRCMzMwQTU4MTRCNUJCOUY0REU2QkVERDAyQjY4NUIyREU0MUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCebBVQQ7O31c30H1kNHgRVM/Oi cr1b+L2Harb4zo4WHev5euTdhzCNrCMk7qz2UG1Xx5D8vTMAtSQGCnGcinVa4mZ0 tx6JhlT7hoQBhV+7+M4yb/Jo4NkwoFFHIgWo0ODr1xdWMvZgK4FK286eo/O9saDt oI+u5Yya7xXUIsTggrIDmGfS0ndtmPH3vBO9U3eIPtrO89GnZrm2aT/rneMh6swA eF4GE3OOOvzuOR9GuaiWkqCPgtf84h2EGz/iBiBoDeYjz6yAq3dKDPVz6SRGk/1z u3CjEQm7OLCaVv+2sLtEhWp2v0ieGvlyZzaIEfYc7Qe7Z9lUtonTh80N9kytAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnZSzMKWBS1u59N5r7dAraFst5BswHwYDVR0j BBgwFoAUkO8gmGswYUUdnxF4601DlSIYYoEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NmZkOWE1OC1hOTA2LTQwMjktOTJlMi1hZGNiNTZhZTE4YmQvMC85MEVGMjA5ODZC MzA2MTQ1MUQ5RjExNzhFQjRENDM5NTIyMTg2MjgxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTBFRjIwOTg2QjMwNjE0NTFEOUYxMTc4RUI0RDQzOTUyMjE4 NjI4MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTZmZDlhNTgtYTkwNi00MDI5LTky ZTItYWRjYjU2YWUxOGJkLzAvOTBFRjIwOTg2QjMwNjE0NTFEOUYxMTc4RUI0RDQz OTUyMjE4NjI4MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB0dvVbxrwxWGY8o2F5xsP/msqXiEox8aU35 atM7X9ayd8k+lvjmNhc9dAnIdAbUPO5y72IZ3o9rWZJT1qMX5ClTXnayRf1XVDe7 P1WFBXN7Bvlket0X/aV/8JP8MApscbUM83+balb2yTrD/mVUbJEA37XRXUg7JMwU eMSynmBqvZzmi7GroHTWk4XNBuf/uWCO22VZjR8rkAHjHv9qxRtEKRtRI5g7UJIa gvldXU6+oszM0b40flIZ5J78BomTVLdebOK4WzoXT34vcSngJAxsYRr8P1inG2XO nsWafkBJnj5pexIcxqTUfyGEdkLgbpELQ2vr2PLVCNFMgffO7V8= -----END CERTIFICATE-----Generated at Wed Dec 3 14:44:23 2025 by rpki-client