This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/5bd4340b-21c4-4fc7-a259-e2354c53fdd2/0/90173425DBB7D1DBD164BBA26F4657B17A266A97.mft File: 90173425DBB7D1DBD164BBA26F4657B17A266A97.mft (raw, json) Hash identifier: eDMXZ33Nd9qRqoZ6Un0tAOXj4MnptR5JTtnfm28zegI= Subject key identifier: 81:35:CF:85:01:42:CB:E1:B5:E1:C9:96:BE:45:FD:61:C6:5F:77:9F Authority key identifier: 90:17:34:25:DB:B7:D1:DB:D1:64:BB:A2:6F:46:57:B1:7A:26:6A:97 Certificate issuer: /CN=90173425DBB7D1DBD164BBA26F4657B17A266A97 Certificate serial: 4EE33E0D0A276313CAA53599C1023E8714297237 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90173425DBB7D1DBD164BBA26F4657B17A266A97.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5bd4340b-21c4-4fc7-a259-e2354c53fdd2/0/90173425DBB7D1DBD164BBA26F4657B17A266A97.mft Manifest number: 0533 Signing time: Sat 13 Dec 2025 19:41:24 +0000 Manifest this update: Sat 13 Dec 2025 19:36:24 +0000 Manifest next update: Wed 17 Dec 2025 03:30:24 +0000 Files and hashes: 1: 90173425DBB7D1DBD164BBA26F4657B17A266A97.crl (hash: ayACkdNv4HOzViXl76B6RQ4kDhez50Exe8zLMfmDiQ8=) 2: 323030313a6466373a376130303a3a2f34382d3438203d3e20313336303537.roa (hash: JVL+81yV9zQDwPcNgvThrCD77NCHFX7cSVK21vFtKao=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5bd4340b-21c4-4fc7-a259-e2354c53fdd2/0/90173425DBB7D1DBD164BBA26F4657B17A266A97.crl rsync://repo-rpki.idnic.net/repo/5bd4340b-21c4-4fc7-a259-e2354c53fdd2/0/90173425DBB7D1DBD164BBA26F4657B17A266A97.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90173425DBB7D1DBD164BBA26F4657B17A266A97.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Dec 2025 03:30:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:e3:3e:0d:0a:27:63:13:ca:a5:35:99:c1:02:3e:87:14:29:72:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90173425DBB7D1DBD164BBA26F4657B17A266A97 Validity Not Before: Dec 13 19:36:24 2025 GMT Not After : Dec 17 03:30:24 2025 GMT Subject: CN=8135CF850142CBE1B5E1C996BE45FD61C65F779F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:be:4d:11:e2:9d:66:06:d6:ba:a6:ee:ae:2c: 5d:4d:33:fa:1a:78:19:21:e6:8e:73:20:76:4b:29: bc:3c:98:7c:4a:97:70:3c:cd:22:d8:a7:37:d1:2a: aa:4a:a7:b6:71:cb:65:12:d5:e4:17:57:8d:53:37: 87:e6:7e:8f:a4:cd:8c:59:39:c9:d2:f5:a6:8a:17: e6:2d:29:9f:e3:e1:4d:60:9c:25:18:48:03:77:b5: 58:be:83:9d:8e:bb:1c:1d:0a:0e:54:31:d6:f7:0f: 02:9c:45:c8:9f:d1:8e:00:05:8e:a6:1d:cf:a8:46: 93:25:3f:89:3f:19:11:9e:33:84:33:0c:2b:cf:17: b9:00:0b:17:2c:32:e8:68:3e:96:ee:62:7e:2f:1f: e5:37:05:17:f8:be:c4:57:94:29:77:26:86:d2:e7: 35:44:08:d1:fa:80:2e:5f:33:7d:c4:a3:c1:9d:ad: 8c:1b:3f:ae:bd:f9:7f:47:b4:75:15:ff:b7:4c:dd: 9b:ba:ad:06:3d:f2:40:3a:33:57:c4:90:eb:71:11: 1b:8b:9b:f0:eb:02:38:0a:78:b3:4f:88:46:79:45: 70:06:85:72:3a:13:d7:bb:92:ee:d7:40:ce:ec:ac: 2f:2a:a1:28:b7:af:33:8a:35:d2:30:57:98:0d:72: 66:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:35:CF:85:01:42:CB:E1:B5:E1:C9:96:BE:45:FD:61:C6:5F:77:9F X509v3 Authority Key Identifier: keyid:90:17:34:25:DB:B7:D1:DB:D1:64:BB:A2:6F:46:57:B1:7A:26:6A:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5bd4340b-21c4-4fc7-a259-e2354c53fdd2/0/90173425DBB7D1DBD164BBA26F4657B17A266A97.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90173425DBB7D1DBD164BBA26F4657B17A266A97.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5bd4340b-21c4-4fc7-a259-e2354c53fdd2/0/90173425DBB7D1DBD164BBA26F4657B17A266A97.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:60:d0:62:7c:b9:a6:96:9c:b1:78:02:35:1b:d3:2a:6d:46: 9f:da:f5:f1:0d:ed:8d:af:7e:bf:40:e4:7b:e1:69:04:90:e0: a2:05:20:5a:09:19:1a:9d:37:14:99:35:91:d9:97:2e:3e:af: 7b:48:2f:47:07:33:95:53:0b:61:1e:38:5f:fb:7c:dc:39:28: 0b:93:0d:e9:54:4d:e5:f7:5c:8e:fb:d3:5e:c5:d0:c1:37:95: 5f:08:1e:93:72:a8:f8:97:be:81:54:55:77:a3:98:d6:24:27: 1a:2d:d6:08:ae:b0:86:ba:11:44:5b:9d:df:59:61:3c:1e:10: 61:e2:24:a3:b5:7d:bc:27:fb:f2:94:26:2c:5e:32:2b:60:79: 3e:6c:e9:a9:3d:75:4e:d8:3b:ba:7f:11:b0:5b:a2:cd:27:4a: 6a:3d:c6:df:f5:b0:4d:cf:c4:61:ca:e0:f5:05:a5:94:fe:8a: f1:00:be:34:e5:81:21:f3:38:f8:fd:3a:4e:42:c3:57:dd:51: a4:c4:ff:35:f9:4a:3d:9f:53:fd:14:b2:37:8c:b0:18:65:6b: a5:0d:50:f8:17:ee:69:89:65:88:da:9e:f2:77:7d:31:9f:a8: 5f:bc:4e:cd:ee:9d:5a:8e:92:71:6a:0b:b3:27:5c:de:dd:01: e9:80:4f:b9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTuM+DQonYxPKpTWZwQI+hxQpcjcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTAxNzM0MjVEQkI3RDFEQkQxNjRCQkEyNkY0NjU3QjE3 QTI2NkE5NzAeFw0yNTEyMTMxOTM2MjRaFw0yNTEyMTcwMzMwMjRaMDMxMTAvBgNV BAMTKDgxMzVDRjg1MDE0MkNCRTFCNUUxQzk5NkJFNDVGRDYxQzY1Rjc3OUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPvk0R4p1mBta6pu6uLF1NM/oa eBkh5o5zIHZLKbw8mHxKl3A8zSLYpzfRKqpKp7Zxy2US1eQXV41TN4fmfo+kzYxZ OcnS9aaKF+YtKZ/j4U1gnCUYSAN3tVi+g52OuxwdCg5UMdb3DwKcRcif0Y4ABY6m Hc+oRpMlP4k/GRGeM4QzDCvPF7kACxcsMuhoPpbuYn4vH+U3BRf4vsRXlCl3JobS 5zVECNH6gC5fM33Eo8GdrYwbP669+X9HtHUV/7dM3Zu6rQY98kA6M1fEkOtxERuL m/DrAjgKeLNPiEZ5RXAGhXI6E9e7ku7XQM7srC8qoSi3rzOKNdIwV5gNcmbXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgTXPhQFCy+G14cmWvkX9YcZfd58wHwYDVR0j BBgwFoAUkBc0Jdu30dvRZLuib0ZXsXomapcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YmQ0MzQwYi0yMWM0LTRmYzctYTI1OS1lMjM1NGM1M2ZkZDIvMC85MDE3MzQyNURC QjdEMURCRDE2NEJCQTI2RjQ2NTdCMTdBMjY2QTk3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTAxNzM0MjVEQkI3RDFEQkQxNjRCQkEyNkY0NjU3QjE3QTI2 NkE5Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWJkNDM0MGItMjFjNC00ZmM3LWEy NTktZTIzNTRjNTNmZGQyLzAvOTAxNzM0MjVEQkI3RDFEQkQxNjRCQkEyNkY0NjU3 QjE3QTI2NkE5Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGJg0GJ8uaaWnLF4AjUb0yptRp/a9fEN7Y2v fr9A5HvhaQSQ4KIFIFoJGRqdNxSZNZHZly4+r3tIL0cHM5VTC2EeOF/7fNw5KAuT DelUTeX3XI77017F0ME3lV8IHpNyqPiXvoFUVXejmNYkJxot1giusIa6EURbnd9Z YTweEGHiJKO1fbwn+/KUJixeMitgeT5s6ak9dU7YO7p/EbBbos0nSmo9xt/1sE3P xGHK4PUFpZT+ivEAvjTlgSHzOPj9Ok5Cw1fdUaTE/zX5Sj2fU/0UsjeMsBhla6UN UPgX7mmJZYjanvJ3fTGfqF+8Ts3unVqOknFqC7MnXN7dAemAT7k= -----END CERTIFICATE-----Generated at Sun Dec 14 07:46:39 2025 by rpki-client