This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/5bd4340b-21c4-4fc7-a259-e2354c53fdd2/0/90173425DBB7D1DBD164BBA26F4657B17A266A97.mft File: 90173425DBB7D1DBD164BBA26F4657B17A266A97.mft (raw, json) Hash identifier: iQWZAdaARVnqUoHfuKawewwVNO+eTs2ohGYEp/lHko0= Subject key identifier: 10:B0:CC:02:7E:D2:B8:2C:FE:91:00:BB:99:15:B4:EA:C8:4D:8C:80 Authority key identifier: 90:17:34:25:DB:B7:D1:DB:D1:64:BB:A2:6F:46:57:B1:7A:26:6A:97 Certificate issuer: /CN=90173425DBB7D1DBD164BBA26F4657B17A266A97 Certificate serial: 4B7773438EC9043EC5240BD5E70A3F381A0624ED Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90173425DBB7D1DBD164BBA26F4657B17A266A97.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5bd4340b-21c4-4fc7-a259-e2354c53fdd2/0/90173425DBB7D1DBD164BBA26F4657B17A266A97.mft Manifest number: 0548 Signing time: Sat 31 Jan 2026 01:01:23 +0000 Manifest this update: Sat 31 Jan 2026 00:56:23 +0000 Manifest next update: Tue 03 Feb 2026 09:32:23 +0000 Files and hashes: 1: 323030313a6466373a376130303a3a2f34382d3438203d3e20313336303537.roa (hash: JVL+81yV9zQDwPcNgvThrCD77NCHFX7cSVK21vFtKao=) 2: 90173425DBB7D1DBD164BBA26F4657B17A266A97.crl (hash: Pwa34vGdarnsgIZiPRQXyaNzB9PmCnyaJxgso2S6iDk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5bd4340b-21c4-4fc7-a259-e2354c53fdd2/0/90173425DBB7D1DBD164BBA26F4657B17A266A97.crl rsync://repo-rpki.idnic.net/repo/5bd4340b-21c4-4fc7-a259-e2354c53fdd2/0/90173425DBB7D1DBD164BBA26F4657B17A266A97.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90173425DBB7D1DBD164BBA26F4657B17A266A97.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Feb 2026 09:32:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:77:73:43:8e:c9:04:3e:c5:24:0b:d5:e7:0a:3f:38:1a:06:24:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90173425DBB7D1DBD164BBA26F4657B17A266A97 Validity Not Before: Jan 31 00:56:23 2026 GMT Not After : Feb 3 09:32:23 2026 GMT Subject: CN=10B0CC027ED2B82CFE9100BB9915B4EAC84D8C80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:27:e0:08:18:92:5e:c5:07:84:9b:a2:e7:9d: d5:a3:39:d7:85:fc:df:e2:ee:e7:2a:d7:49:2f:a4: 65:0e:ad:4f:05:cd:4f:8d:8e:76:39:0d:fb:ff:e2: 8c:a3:5a:68:3b:ae:5b:20:78:a3:a2:21:5b:b3:0f: 66:17:e7:37:81:2c:7a:36:f2:a4:97:be:b7:b7:1d: ef:b4:13:6a:6b:dc:44:55:c4:e1:c2:f6:6f:8d:75: 49:5d:55:f8:fb:12:3d:b2:4a:7e:a6:a0:0b:ad:be: 72:2a:52:49:f9:4f:33:0c:5e:ed:8f:b9:b0:1d:14: 92:53:40:fd:8e:8a:25:15:49:5f:b5:0e:e6:d0:c5: 2c:f9:a9:08:6c:75:a0:f7:c0:53:42:ec:b0:b2:d1: f2:ac:81:0a:30:06:ac:aa:cd:e6:99:ed:81:8b:2c: f1:ba:44:b8:1b:25:61:5b:c6:f5:95:c3:b1:39:fb: 66:5e:fa:72:9f:bb:1b:7a:d8:02:5a:1d:0f:85:83: 0b:55:8e:07:b0:24:dc:0d:94:82:d0:a3:2e:75:c9: 51:f5:41:4d:ff:fd:bf:9b:b5:61:aa:03:f9:03:ac: dc:b7:3c:ef:a3:d3:3c:40:72:3b:01:91:81:8d:a9: e9:5c:39:0c:66:3b:10:c8:60:0a:4b:09:fc:b9:40: 77:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:B0:CC:02:7E:D2:B8:2C:FE:91:00:BB:99:15:B4:EA:C8:4D:8C:80 X509v3 Authority Key Identifier: keyid:90:17:34:25:DB:B7:D1:DB:D1:64:BB:A2:6F:46:57:B1:7A:26:6A:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5bd4340b-21c4-4fc7-a259-e2354c53fdd2/0/90173425DBB7D1DBD164BBA26F4657B17A266A97.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90173425DBB7D1DBD164BBA26F4657B17A266A97.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5bd4340b-21c4-4fc7-a259-e2354c53fdd2/0/90173425DBB7D1DBD164BBA26F4657B17A266A97.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:3d:47:c9:f2:ff:03:7c:c5:7f:40:fe:ac:79:76:59:91:ae: 8d:dd:fc:56:77:8f:63:f0:08:4a:3c:c5:ec:5d:47:41:92:fb: 8a:34:66:b7:b8:e2:69:84:c6:67:20:12:10:b4:b3:7c:8f:77: 2b:46:04:be:40:62:d2:58:73:fa:16:28:9b:8d:b9:5a:b1:d0: c4:86:94:93:f7:4a:de:e7:f9:3f:a6:c2:6a:6f:d8:10:29:9f: 58:70:02:61:af:07:fc:01:42:57:bc:0e:bc:01:16:20:04:29: 92:92:8c:19:a6:95:c6:f1:82:41:f0:05:b3:83:95:09:87:b5: 78:aa:53:d4:18:5a:1a:6d:72:34:f1:64:72:a1:19:43:b5:f5: 26:d2:81:32:30:a7:51:e7:41:92:80:b3:af:02:62:81:89:0e: 55:b9:d5:c5:de:e6:50:93:b2:fb:70:02:5a:7b:da:8d:9f:22: 2b:14:9c:38:f3:24:24:9f:44:6b:40:59:2f:53:b3:15:73:8e: ae:6c:57:78:ab:4b:98:25:70:37:1a:45:0e:00:b5:28:f1:89: 20:1d:2d:aa:87:b8:b0:8b:42:1a:f5:6a:35:b5:f3:ad:90:93: 00:d2:da:b3:dd:a3:0c:c2:6b:f1:a0:98:32:a8:a3:da:29:cc: c8:c6:03:a9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS3dzQ47JBD7FJAvV5wo/OBoGJO0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTAxNzM0MjVEQkI3RDFEQkQxNjRCQkEyNkY0NjU3QjE3 QTI2NkE5NzAeFw0yNjAxMzEwMDU2MjNaFw0yNjAyMDMwOTMyMjNaMDMxMTAvBgNV BAMTKDEwQjBDQzAyN0VEMkI4MkNGRTkxMDBCQjk5MTVCNEVBQzg0RDhDODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWJ+AIGJJexQeEm6LnndWjOdeF /N/i7ucq10kvpGUOrU8FzU+NjnY5Dfv/4oyjWmg7rlsgeKOiIVuzD2YX5zeBLHo2 8qSXvre3He+0E2pr3ERVxOHC9m+NdUldVfj7Ej2ySn6moAutvnIqUkn5TzMMXu2P ubAdFJJTQP2OiiUVSV+1DubQxSz5qQhsdaD3wFNC7LCy0fKsgQowBqyqzeaZ7YGL LPG6RLgbJWFbxvWVw7E5+2Ze+nKfuxt62AJaHQ+FgwtVjgewJNwNlILQoy51yVH1 QU3//b+btWGqA/kDrNy3PO+j0zxAcjsBkYGNqelcOQxmOxDIYApLCfy5QHddAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUELDMAn7SuCz+kQC7mRW06shNjIAwHwYDVR0j BBgwFoAUkBc0Jdu30dvRZLuib0ZXsXomapcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YmQ0MzQwYi0yMWM0LTRmYzctYTI1OS1lMjM1NGM1M2ZkZDIvMC85MDE3MzQyNURC QjdEMURCRDE2NEJCQTI2RjQ2NTdCMTdBMjY2QTk3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTAxNzM0MjVEQkI3RDFEQkQxNjRCQkEyNkY0NjU3QjE3QTI2 NkE5Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWJkNDM0MGItMjFjNC00ZmM3LWEy NTktZTIzNTRjNTNmZGQyLzAvOTAxNzM0MjVEQkI3RDFEQkQxNjRCQkEyNkY0NjU3 QjE3QTI2NkE5Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD49R8ny/wN8xX9A/qx5dlmRro3d/FZ3j2Pw CEo8xexdR0GS+4o0Zre44mmExmcgEhC0s3yPdytGBL5AYtJYc/oWKJuNuVqx0MSG lJP3St7n+T+mwmpv2BApn1hwAmGvB/wBQle8DrwBFiAEKZKSjBmmlcbxgkHwBbOD lQmHtXiqU9QYWhptcjTxZHKhGUO19SbSgTIwp1HnQZKAs68CYoGJDlW51cXe5lCT svtwAlp72o2fIisUnDjzJCSfRGtAWS9TsxVzjq5sV3irS5glcDcaRQ4AtSjxiSAd LaqHuLCLQhr1ajW1862QkwDS2rPdowzCa/GgmDKoo9opzMjGA6k= -----END CERTIFICATE-----Generated at Mon Feb 2 09:42:16 2026 by rpki-client