This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/56fd9a58-a906-4029-92e2-adcb56ae18bd/0/90EF20986B3061451D9F1178EB4D439522186281.mft File: 90EF20986B3061451D9F1178EB4D439522186281.mft (raw, json) Hash identifier: B34CkMNALYrU/CZL6hFPfI3r2lT9BFz7i48qKDpx4zg= Subject key identifier: B5:CF:3C:14:5B:2C:9D:C7:66:FC:58:39:35:12:44:01:0B:16:0E:0F Authority key identifier: 90:EF:20:98:6B:30:61:45:1D:9F:11:78:EB:4D:43:95:22:18:62:81 Certificate issuer: /CN=90EF20986B3061451D9F1178EB4D439522186281 Certificate serial: 1BAC1360EFD3FC4818157B1E89B1FF6B0DD83CDC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90EF20986B3061451D9F1178EB4D439522186281.cer Subject info access: rsync://repo-rpki.idnic.net/repo/56fd9a58-a906-4029-92e2-adcb56ae18bd/0/90EF20986B3061451D9F1178EB4D439522186281.mft Manifest number: 02D2 Signing time: Sun 01 Feb 2026 01:42:02 +0000 Manifest this update: Sun 01 Feb 2026 01:37:02 +0000 Manifest next update: Wed 04 Feb 2026 02:03:02 +0000 Files and hashes: 1: 3130332e3137382e32312e302f32342d3234203d3e20313439333139.roa (hash: n2eHTuRPz7VRKqIm4y6ERY38jrtnwA1mKjZRAuLNji8=) 2: 3130332e3137382e32302e302f32342d3234203d3e20313439333139.roa (hash: juxqVk4Pjv7HWg3rc7qy+poTuVXup5lljxn80d82VOs=) 3: 3130332e3137382e32302e302f32332d3233203d3e20313439333139.roa (hash: /g+5nQoioDTt8teej8QvN1daXZtQyJ0RCEnJEqM8tz8=) 4: 90EF20986B3061451D9F1178EB4D439522186281.crl (hash: wKisedxxKMEB5T4DJJNsd0bz5buBV6Z0+99K7KLvypw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/56fd9a58-a906-4029-92e2-adcb56ae18bd/0/90EF20986B3061451D9F1178EB4D439522186281.crl rsync://repo-rpki.idnic.net/repo/56fd9a58-a906-4029-92e2-adcb56ae18bd/0/90EF20986B3061451D9F1178EB4D439522186281.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90EF20986B3061451D9F1178EB4D439522186281.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Feb 2026 02:03:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:ac:13:60:ef:d3:fc:48:18:15:7b:1e:89:b1:ff:6b:0d:d8:3c:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90EF20986B3061451D9F1178EB4D439522186281 Validity Not Before: Feb 1 01:37:02 2026 GMT Not After : Feb 4 02:03:02 2026 GMT Subject: CN=B5CF3C145B2C9DC766FC5839351244010B160E0F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:b8:6f:6d:83:88:16:15:eb:c5:05:3f:1c:72: 0c:eb:32:bb:b3:77:82:8f:61:57:1d:7d:2f:2d:41: 23:95:90:80:84:c7:bf:45:d4:7e:e8:5f:c7:33:ed: 1d:0c:d2:b8:85:88:02:bf:fc:06:fe:79:80:99:43: be:cf:6d:7d:6c:a4:1c:71:e1:21:6c:78:41:5c:19: 41:06:d4:63:b0:f1:c5:80:48:18:54:ac:ba:fd:36: 36:46:3d:62:7f:1c:ca:ac:e9:9a:bf:7f:6e:33:c7: 9f:32:db:49:aa:da:9f:8a:7d:45:dc:73:c3:9c:73: 1c:7c:5a:d7:40:b9:6f:2a:1f:ee:11:ac:e1:a0:c3: f7:94:89:23:1c:83:d4:1c:60:7a:ba:ee:e3:c9:6e: 80:e4:b1:65:57:16:a0:70:72:ea:59:d7:d5:5c:1c: bf:30:99:83:5c:ce:b1:13:c9:1f:3e:7a:5f:63:0d: 53:53:57:6b:f8:cd:a7:6b:b4:07:be:2c:d7:12:c0: 98:2c:f4:63:f1:66:08:19:1f:72:ea:2e:aa:82:6a: 27:60:b5:86:58:05:d2:b4:71:e2:03:32:25:80:6d: d7:7a:2a:a5:79:1c:4a:ba:e0:8f:6b:bc:be:b5:70: 29:1f:14:6a:cf:07:8e:29:24:27:7b:bc:4f:50:59: 23:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:CF:3C:14:5B:2C:9D:C7:66:FC:58:39:35:12:44:01:0B:16:0E:0F X509v3 Authority Key Identifier: keyid:90:EF:20:98:6B:30:61:45:1D:9F:11:78:EB:4D:43:95:22:18:62:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/56fd9a58-a906-4029-92e2-adcb56ae18bd/0/90EF20986B3061451D9F1178EB4D439522186281.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90EF20986B3061451D9F1178EB4D439522186281.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/56fd9a58-a906-4029-92e2-adcb56ae18bd/0/90EF20986B3061451D9F1178EB4D439522186281.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:af:0a:b2:58:d6:79:96:6e:a5:0b:2c:c8:6c:99:c8:d0:e5: ea:17:ce:b1:ca:e3:83:01:b5:c0:d5:b8:cc:f0:74:71:6d:3d: 87:73:44:80:76:df:65:6e:85:c0:6b:ae:70:0c:79:48:c5:e7: 73:bc:2d:8c:45:86:0d:33:f2:19:1e:33:03:f0:73:4f:26:a9: 68:a6:17:f4:16:53:40:50:c1:57:86:31:4d:58:10:49:d8:6f: 09:f9:5e:8c:8f:d8:30:93:25:68:05:1c:82:2f:c8:8e:95:d0: d0:4e:fa:4e:aa:86:43:ce:e3:ed:6c:30:d8:f0:75:4a:49:c3: a3:02:2f:ba:f0:82:27:38:86:e1:8e:9c:79:b1:10:b3:22:a5: b2:70:1a:78:f3:b8:49:0a:0b:21:bc:ec:7a:4a:a8:89:e2:cc: 84:e2:b2:73:70:47:56:ba:37:dc:2f:15:9e:ac:17:53:a0:92: 40:1d:b1:d0:cf:40:8c:c6:19:de:10:10:56:7e:46:1c:d0:6d: 2f:03:6c:a2:e9:fb:be:7d:85:b3:79:97:0f:49:03:94:f5:6f: a6:9c:53:f3:57:27:0b:11:21:25:b9:c5:6d:4b:a3:da:ca:b7: 07:a0:70:ea:94:0d:99:c9:b8:e6:03:1b:ee:e0:22:85:ff:5a: 7f:29:48:c3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG6wTYO/T/EgYFXseibH/aw3YPNwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTBFRjIwOTg2QjMwNjE0NTFEOUYxMTc4RUI0RDQzOTUy MjE4NjI4MTAeFw0yNjAyMDEwMTM3MDJaFw0yNjAyMDQwMjAzMDJaMDMxMTAvBgNV BAMTKEI1Q0YzQzE0NUIyQzlEQzc2NkZDNTgzOTM1MTI0NDAxMEIxNjBFMEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChuG9tg4gWFevFBT8ccgzrMruz d4KPYVcdfS8tQSOVkICEx79F1H7oX8cz7R0M0riFiAK//Ab+eYCZQ77PbX1spBxx 4SFseEFcGUEG1GOw8cWASBhUrLr9NjZGPWJ/HMqs6Zq/f24zx58y20mq2p+KfUXc c8Occxx8WtdAuW8qH+4RrOGgw/eUiSMcg9QcYHq67uPJboDksWVXFqBwcupZ19Vc HL8wmYNczrETyR8+el9jDVNTV2v4zadrtAe+LNcSwJgs9GPxZggZH3LqLqqCaidg tYZYBdK0ceIDMiWAbdd6KqV5HEq64I9rvL61cCkfFGrPB44pJCd7vE9QWSORAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtc88FFssncdm/Fg5NRJEAQsWDg8wHwYDVR0j BBgwFoAUkO8gmGswYUUdnxF4601DlSIYYoEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NmZkOWE1OC1hOTA2LTQwMjktOTJlMi1hZGNiNTZhZTE4YmQvMC85MEVGMjA5ODZC MzA2MTQ1MUQ5RjExNzhFQjRENDM5NTIyMTg2MjgxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTBFRjIwOTg2QjMwNjE0NTFEOUYxMTc4RUI0RDQzOTUyMjE4 NjI4MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTZmZDlhNTgtYTkwNi00MDI5LTky ZTItYWRjYjU2YWUxOGJkLzAvOTBFRjIwOTg2QjMwNjE0NTFEOUYxMTc4RUI0RDQz OTUyMjE4NjI4MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJOvCrJY1nmWbqULLMhsmcjQ5eoXzrHK44MB tcDVuMzwdHFtPYdzRIB232VuhcBrrnAMeUjF53O8LYxFhg0z8hkeMwPwc08mqWim F/QWU0BQwVeGMU1YEEnYbwn5XoyP2DCTJWgFHIIvyI6V0NBO+k6qhkPO4+1sMNjw dUpJw6MCL7rwgic4huGOnHmxELMipbJwGnjzuEkKCyG87HpKqInizITisnNwR1a6 N9wvFZ6sF1OgkkAdsdDPQIzGGd4QEFZ+RhzQbS8DbKLp+759hbN5lw9JA5T1b6ac U/NXJwsRISW5xW1Lo9rKtwegcOqUDZnJuOYDG+7gIoX/Wn8pSMM= -----END CERTIFICATE-----Generated at Mon Feb 2 10:05:28 2026 by rpki-client