This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7d02a58d-b958-4219-86d3-61e43cee319a/0/AA90F6A6378710CD695B4CC742651F235E503C5B.mft File: AA90F6A6378710CD695B4CC742651F235E503C5B.mft (raw, json) Hash identifier: 2Wtto71NojgJ7M1zO/Z/ZGMfvI+8mBjdXmGa8lNGdqU= Subject key identifier: 85:BB:3D:A8:A7:5F:48:D8:27:A1:24:4F:A2:0F:4B:A3:D0:AB:1C:B2 Authority key identifier: AA:90:F6:A6:37:87:10:CD:69:5B:4C:C7:42:65:1F:23:5E:50:3C:5B Certificate issuer: /CN=AA90F6A6378710CD695B4CC742651F235E503C5B Certificate serial: 4855B88E743C9113D4C73DB17AE51E157205E7B2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AA90F6A6378710CD695B4CC742651F235E503C5B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7d02a58d-b958-4219-86d3-61e43cee319a/0/AA90F6A6378710CD695B4CC742651F235E503C5B.mft Manifest number: 014A Signing time: Mon 01 Dec 2025 21:50:50 +0000 Manifest this update: Mon 01 Dec 2025 21:45:50 +0000 Manifest next update: Fri 05 Dec 2025 08:48:50 +0000 Files and hashes: 1: AA90F6A6378710CD695B4CC742651F235E503C5B.crl (hash: ax+Auume4Q6dRgXmpDbm7c5Futk82DYn5BZEr+tZlwI=) 2: 3138302e3133312e3132382e302f32342d3234203d3e20313532303136.roa (hash: VFWMiazWmoGEVLtcrf1dTJMRZzx900Rx4cZwTnY4Hao=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7d02a58d-b958-4219-86d3-61e43cee319a/0/AA90F6A6378710CD695B4CC742651F235E503C5B.crl rsync://repo-rpki.idnic.net/repo/7d02a58d-b958-4219-86d3-61e43cee319a/0/AA90F6A6378710CD695B4CC742651F235E503C5B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AA90F6A6378710CD695B4CC742651F235E503C5B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 08:48:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:55:b8:8e:74:3c:91:13:d4:c7:3d:b1:7a:e5:1e:15:72:05:e7:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AA90F6A6378710CD695B4CC742651F235E503C5B Validity Not Before: Dec 1 21:45:50 2025 GMT Not After : Dec 5 08:48:50 2025 GMT Subject: CN=85BB3DA8A75F48D827A1244FA20F4BA3D0AB1CB2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:4d:47:5f:69:07:2b:0f:2b:bc:42:a8:02:bd: 3e:39:e1:98:9e:c0:bd:bf:c6:90:de:a7:3b:e2:b3: 87:1e:e3:95:c9:00:85:c1:70:95:03:54:77:a7:94: 7e:4e:28:68:fe:0d:db:03:09:32:43:11:28:33:7d: ef:5b:d6:90:01:fb:b6:7c:19:0d:78:81:f1:b8:ef: 32:01:6b:46:28:0d:24:60:81:6c:f1:15:84:c5:8b: 1d:e1:f0:13:96:38:9c:43:0d:09:35:3b:fc:3c:97: 7c:75:e6:34:cc:49:4d:24:8d:4e:a2:bd:f4:ee:6c: 0d:5d:1d:33:e3:b6:5a:e7:07:94:f6:aa:27:cf:d3: ee:55:90:5c:15:5e:2f:8a:60:15:87:84:10:ca:9c: bc:b1:1a:41:6a:f3:c2:b7:0c:d4:68:54:ca:8f:68: 05:5b:9b:0a:a7:4b:72:1a:06:7c:c0:ed:8c:82:dd: f5:22:1a:f1:14:3b:98:a2:77:f1:19:f9:2e:a5:34: dd:e5:da:6d:b0:bb:1a:96:05:47:8c:28:3e:e3:ce: 8c:57:61:e6:47:68:d8:19:77:a0:6a:48:50:d0:93: 3d:37:43:9f:02:31:d8:28:f5:20:4b:88:50:48:37: 48:36:1e:37:68:1c:03:40:43:45:e7:3f:b1:6a:10: cd:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:BB:3D:A8:A7:5F:48:D8:27:A1:24:4F:A2:0F:4B:A3:D0:AB:1C:B2 X509v3 Authority Key Identifier: keyid:AA:90:F6:A6:37:87:10:CD:69:5B:4C:C7:42:65:1F:23:5E:50:3C:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7d02a58d-b958-4219-86d3-61e43cee319a/0/AA90F6A6378710CD695B4CC742651F235E503C5B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AA90F6A6378710CD695B4CC742651F235E503C5B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d02a58d-b958-4219-86d3-61e43cee319a/0/AA90F6A6378710CD695B4CC742651F235E503C5B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:4c:d2:35:52:fe:b9:06:80:74:ee:76:b0:f3:bb:4f:3e:71: 23:a4:f4:d0:49:75:ee:90:15:ab:52:a8:c1:09:44:67:2d:0b: c4:c9:fb:b7:bc:4a:da:91:5a:8d:e0:5f:0e:6c:6a:81:7a:9c: 5b:27:81:2c:e5:e9:2e:8b:14:f3:ed:ce:10:fd:06:99:57:7f: 0e:de:17:27:db:6e:18:49:b8:30:e4:12:e0:51:d5:ba:47:3c: e5:b0:50:71:23:c8:69:93:3f:da:e9:f1:04:b8:fd:22:09:a4: 0c:8d:31:13:49:bb:26:d4:18:11:e6:8c:d1:58:74:95:0e:6c: d5:d9:c5:3c:22:d8:1a:22:73:e7:35:75:01:77:32:39:b6:47: 5d:49:fc:6a:61:e1:43:4e:39:4d:56:64:57:61:b2:54:a3:ee: f0:08:9c:04:10:f9:f6:c2:0f:b7:15:02:6d:25:6d:9e:97:5f: 07:dc:22:8e:66:d0:7f:f6:fa:b0:08:b8:cc:06:89:40:c8:9b: 01:2d:22:1d:f1:4d:fb:e7:16:e8:d3:5d:c7:73:88:82:7f:b1: ae:a2:e7:86:a9:a1:ee:a9:80:0d:45:1e:cb:68:d4:b3:b4:ed: 08:89:71:02:d1:58:26:9f:74:3b:4a:a0:76:ad:69:1e:a1:0e: f7:bc:f5:4a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSFW4jnQ8kRPUxz2xeuUeFXIF57IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUE5MEY2QTYzNzg3MTBDRDY5NUI0Q0M3NDI2NTFGMjM1 RTUwM0M1QjAeFw0yNTEyMDEyMTQ1NTBaFw0yNTEyMDUwODQ4NTBaMDMxMTAvBgNV BAMTKDg1QkIzREE4QTc1RjQ4RDgyN0ExMjQ0RkEyMEY0QkEzRDBBQjFDQjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgTUdfaQcrDyu8QqgCvT454Zie wL2/xpDepzvis4ce45XJAIXBcJUDVHenlH5OKGj+DdsDCTJDESgzfe9b1pAB+7Z8 GQ14gfG47zIBa0YoDSRggWzxFYTFix3h8BOWOJxDDQk1O/w8l3x15jTMSU0kjU6i vfTubA1dHTPjtlrnB5T2qifP0+5VkFwVXi+KYBWHhBDKnLyxGkFq88K3DNRoVMqP aAVbmwqnS3IaBnzA7YyC3fUiGvEUO5iid/EZ+S6lNN3l2m2wuxqWBUeMKD7jzoxX YeZHaNgZd6BqSFDQkz03Q58CMdgo9SBLiFBIN0g2HjdoHANAQ0XnP7FqEM3VAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhbs9qKdfSNgnoSRPog9Lo9CrHLIwHwYDVR0j BBgwFoAUqpD2pjeHEM1pW0zHQmUfI15QPFswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZDAyYTU4ZC1iOTU4LTQyMTktODZkMy02MWU0M2NlZTMxOWEvMC9BQTkwRjZBNjM3 ODcxMENENjk1QjRDQzc0MjY1MUYyMzVFNTAzQzVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUE5MEY2QTYzNzg3MTBDRDY5NUI0Q0M3NDI2NTFGMjM1RTUw M0M1Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2QwMmE1OGQtYjk1OC00MjE5LTg2 ZDMtNjFlNDNjZWUzMTlhLzAvQUE5MEY2QTYzNzg3MTBDRDY5NUI0Q0M3NDI2NTFG MjM1RTUwM0M1Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAItM0jVS/rkGgHTudrDzu08+cSOk9NBJde6Q FatSqMEJRGctC8TJ+7e8StqRWo3gXw5saoF6nFsngSzl6S6LFPPtzhD9BplXfw7e FyfbbhhJuDDkEuBR1bpHPOWwUHEjyGmTP9rp8QS4/SIJpAyNMRNJuybUGBHmjNFY dJUObNXZxTwi2Boic+c1dQF3Mjm2R11J/Gph4UNOOU1WZFdhslSj7vAInAQQ+fbC D7cVAm0lbZ6XXwfcIo5m0H/2+rAIuMwGiUDImwEtIh3xTfvnFujTXcdziIJ/sa6i 54apoe6pgA1FHsto1LO07QiJcQLRWCafdDtKoHataR6hDve89Uo= -----END CERTIFICATE-----Generated at Wed Dec 3 15:31:03 2025 by rpki-client