This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/aae6379e-b886-436e-b0ed-3aaff9c08501/0/B90B0AED87ECD7C87066450AB56ADE2996647CD5.mft File: B90B0AED87ECD7C87066450AB56ADE2996647CD5.mft (raw, json) Hash identifier: lzhtEP5O72yo9m0pwfuDuFCAH671XBu64dS+pct2mf0= Subject key identifier: DE:1E:69:07:4B:85:8F:6E:4F:77:90:05:78:86:80:93:5D:1F:31:A7 Authority key identifier: B9:0B:0A:ED:87:EC:D7:C8:70:66:45:0A:B5:6A:DE:29:96:64:7C:D5 Certificate issuer: /CN=B90B0AED87ECD7C87066450AB56ADE2996647CD5 Certificate serial: 69F9F1A097A55FCE9792D0AD76A792A5231A3C08 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B90B0AED87ECD7C87066450AB56ADE2996647CD5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aae6379e-b886-436e-b0ed-3aaff9c08501/0/B90B0AED87ECD7C87066450AB56ADE2996647CD5.mft Manifest number: 029B Signing time: Mon 15 Dec 2025 13:51:34 +0000 Manifest this update: Mon 15 Dec 2025 13:46:34 +0000 Manifest next update: Thu 18 Dec 2025 22:07:34 +0000 Files and hashes: 1: 3130332e3137302e33322e302f32342d3234203d3e20313432333631.roa (hash: lzUMPrw8n3pOIcK3z918mZsLDeZOm1wMYf7ktj1KFkU=) 2: 3130332e3137302e33332e302f32342d3234203d3e20313432333933.roa (hash: Y898pFGpBLNuRCPjm01v0/pmUXmwJOu+OeM8IgqOT94=) 3: B90B0AED87ECD7C87066450AB56ADE2996647CD5.crl (hash: eIUEB/8ueqgVzKXY/5QdwbZLD5jAM/L7L7WXgsjopjg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aae6379e-b886-436e-b0ed-3aaff9c08501/0/B90B0AED87ECD7C87066450AB56ADE2996647CD5.crl rsync://repo-rpki.idnic.net/repo/aae6379e-b886-436e-b0ed-3aaff9c08501/0/B90B0AED87ECD7C87066450AB56ADE2996647CD5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B90B0AED87ECD7C87066450AB56ADE2996647CD5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Dec 2025 22:07:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:f9:f1:a0:97:a5:5f:ce:97:92:d0:ad:76:a7:92:a5:23:1a:3c:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B90B0AED87ECD7C87066450AB56ADE2996647CD5 Validity Not Before: Dec 15 13:46:34 2025 GMT Not After : Dec 18 22:07:34 2025 GMT Subject: CN=DE1E69074B858F6E4F779005788680935D1F31A7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:95:44:3b:31:05:ea:05:48:d6:94:b3:c8:2d: bb:41:63:3f:4b:85:ca:e3:ed:23:f7:61:d2:8e:4b: 49:ff:42:90:ea:7b:f9:dd:6c:44:07:25:42:de:93: 69:ed:d3:fc:44:f4:16:5e:55:f2:49:e4:3d:46:20: 42:77:33:b2:5d:4b:26:cb:d8:d8:ce:c0:26:33:cd: d4:be:53:3f:17:8d:6f:8b:e5:b4:f3:0c:c6:a7:8e: 47:b2:15:ed:a5:1f:af:ec:8e:3f:50:8e:ce:9c:18: 01:79:88:fc:37:a3:1e:f9:30:29:d2:83:b5:c5:4b: 2d:3a:5a:df:b1:18:f7:11:72:5e:05:55:25:5f:03: 54:f8:24:4f:0b:c2:ce:06:ca:bc:8d:99:41:16:48: 4e:97:d6:08:c0:b5:90:7b:02:75:df:94:74:c5:6b: 41:1e:4d:f6:29:7a:70:4b:a7:82:fe:60:83:34:cb: f0:e9:62:3d:78:06:82:9e:a1:e3:fc:ff:81:28:3d: 93:d2:c6:4e:db:ba:1f:a8:ed:8e:f3:43:a8:91:18: 78:f3:f0:e4:a1:60:ab:3b:5f:72:3f:79:12:db:20: de:19:70:41:64:06:46:79:78:9a:30:31:d5:2f:96: fb:8d:eb:ca:c8:2d:81:47:b5:d1:14:62:02:47:16: f0:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:1E:69:07:4B:85:8F:6E:4F:77:90:05:78:86:80:93:5D:1F:31:A7 X509v3 Authority Key Identifier: keyid:B9:0B:0A:ED:87:EC:D7:C8:70:66:45:0A:B5:6A:DE:29:96:64:7C:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aae6379e-b886-436e-b0ed-3aaff9c08501/0/B90B0AED87ECD7C87066450AB56ADE2996647CD5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B90B0AED87ECD7C87066450AB56ADE2996647CD5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aae6379e-b886-436e-b0ed-3aaff9c08501/0/B90B0AED87ECD7C87066450AB56ADE2996647CD5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:30:b6:be:a4:86:80:7d:7d:7d:ec:2d:8c:34:0c:2f:b6:48: b2:14:40:c9:e2:cc:a4:61:42:58:ab:9b:70:5e:94:40:37:f2: cf:ed:79:b7:7f:ee:3a:b4:ef:a5:72:94:f6:0f:38:98:18:c6: 37:8c:82:91:fa:f0:3a:c8:3b:9b:d4:b8:e9:83:42:65:da:93: 17:a2:4f:b4:ff:97:6f:48:e2:48:e9:53:93:f9:9f:75:3e:50: 34:52:9a:9f:84:68:a4:0a:c0:72:00:96:0e:96:35:7d:29:29: 5f:f1:f3:7c:e6:f2:6c:77:10:95:fb:77:a2:b4:45:94:ab:92: 6e:e5:f1:40:b7:21:26:37:5c:30:95:30:e5:95:90:cb:49:4c: 64:88:bf:78:3b:be:01:8d:98:f1:01:48:d9:fd:ef:22:15:54: e3:95:6e:5c:13:76:7e:43:cd:77:32:49:3f:01:60:bc:b9:72: 5f:4e:59:21:46:d1:b2:09:88:8b:8f:00:5d:a6:a9:ea:aa:fe: bb:01:d6:b8:c3:c4:78:08:18:58:c7:89:47:cb:2e:14:50:1f: 06:1c:dd:f1:7f:cc:73:03:27:03:11:63:11:10:83:24:ac:75: cf:e9:41:22:3a:96:0a:0f:6b:c0:ae:fc:7d:47:7b:bb:33:b3: 8f:92:ba:c4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUafnxoJelX86XktCtdqeSpSMaPAgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjkwQjBBRUQ4N0VDRDdDODcwNjY0NTBBQjU2QURFMjk5 NjY0N0NENTAeFw0yNTEyMTUxMzQ2MzRaFw0yNTEyMTgyMjA3MzRaMDMxMTAvBgNV BAMTKERFMUU2OTA3NEI4NThGNkU0Rjc3OTAwNTc4ODY4MDkzNUQxRjMxQTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrlUQ7MQXqBUjWlLPILbtBYz9L hcrj7SP3YdKOS0n/QpDqe/ndbEQHJULek2nt0/xE9BZeVfJJ5D1GIEJ3M7JdSybL 2NjOwCYzzdS+Uz8XjW+L5bTzDManjkeyFe2lH6/sjj9Qjs6cGAF5iPw3ox75MCnS g7XFSy06Wt+xGPcRcl4FVSVfA1T4JE8Lws4GyryNmUEWSE6X1gjAtZB7AnXflHTF a0EeTfYpenBLp4L+YIM0y/DpYj14BoKeoeP8/4EoPZPSxk7buh+o7Y7zQ6iRGHjz 8OShYKs7X3I/eRLbIN4ZcEFkBkZ5eJowMdUvlvuN68rILYFHtdEUYgJHFvCJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3h5pB0uFj25Pd5AFeIaAk10fMacwHwYDVR0j BBgwFoAUuQsK7Yfs18hwZkUKtWreKZZkfNUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YWU2Mzc5ZS1iODg2LTQzNmUtYjBlZC0zYWFmZjljMDg1MDEvMC9COTBCMEFFRDg3 RUNEN0M4NzA2NjQ1MEFCNTZBREUyOTk2NjQ3Q0Q1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjkwQjBBRUQ4N0VDRDdDODcwNjY0NTBBQjU2QURFMjk5NjY0 N0NENS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWFlNjM3OWUtYjg4Ni00MzZlLWIw ZWQtM2FhZmY5YzA4NTAxLzAvQjkwQjBBRUQ4N0VDRDdDODcwNjY0NTBBQjU2QURF Mjk5NjY0N0NENS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAMwtr6khoB9fX3sLYw0DC+2SLIUQMnizKRh Qlirm3BelEA38s/tebd/7jq076VylPYPOJgYxjeMgpH68DrIO5vUuOmDQmXakxei T7T/l29I4kjpU5P5n3U+UDRSmp+EaKQKwHIAlg6WNX0pKV/x83zm8mx3EJX7d6K0 RZSrkm7l8UC3ISY3XDCVMOWVkMtJTGSIv3g7vgGNmPEBSNn97yIVVOOVblwTdn5D zXcyST8BYLy5cl9OWSFG0bIJiIuPAF2mqeqq/rsB1rjDxHgIGFjHiUfLLhRQHwYc 3fF/zHMDJwMRYxEQgySsdc/pQSI6lgoPa8Cu/H1He7szs4+SusQ= -----END CERTIFICATE-----Generated at Mon Dec 15 16:52:36 2025 by rpki-client