This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/aae6379e-b886-436e-b0ed-3aaff9c08501/0/B90B0AED87ECD7C87066450AB56ADE2996647CD5.mft File: B90B0AED87ECD7C87066450AB56ADE2996647CD5.mft (raw, json) Hash identifier: FpJA0QCvN+Ppe4Nwj5oz/7bZtQ7WZrc2KD4wXl1njjU= Subject key identifier: 00:FE:59:F0:2F:21:15:46:B6:CA:75:B5:F8:89:F5:72:9B:50:3E:47 Authority key identifier: B9:0B:0A:ED:87:EC:D7:C8:70:66:45:0A:B5:6A:DE:29:96:64:7C:D5 Certificate issuer: /CN=B90B0AED87ECD7C87066450AB56ADE2996647CD5 Certificate serial: 07F91FC17E808CF7C576766537E6FA8A319E4CC0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B90B0AED87ECD7C87066450AB56ADE2996647CD5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aae6379e-b886-436e-b0ed-3aaff9c08501/0/B90B0AED87ECD7C87066450AB56ADE2996647CD5.mft Manifest number: 0295 Signing time: Tue 02 Dec 2025 05:31:34 +0000 Manifest this update: Tue 02 Dec 2025 05:26:34 +0000 Manifest next update: Fri 05 Dec 2025 11:12:34 +0000 Files and hashes: 1: B90B0AED87ECD7C87066450AB56ADE2996647CD5.crl (hash: /bxxHTpzgGptNL+39vq2mzi1lR0ywwCUdzE0ISnBxV0=) 2: 3130332e3137302e33332e302f32342d3234203d3e20313432333933.roa (hash: Y898pFGpBLNuRCPjm01v0/pmUXmwJOu+OeM8IgqOT94=) 3: 3130332e3137302e33322e302f32342d3234203d3e20313432333631.roa (hash: lzUMPrw8n3pOIcK3z918mZsLDeZOm1wMYf7ktj1KFkU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aae6379e-b886-436e-b0ed-3aaff9c08501/0/B90B0AED87ECD7C87066450AB56ADE2996647CD5.crl rsync://repo-rpki.idnic.net/repo/aae6379e-b886-436e-b0ed-3aaff9c08501/0/B90B0AED87ECD7C87066450AB56ADE2996647CD5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B90B0AED87ECD7C87066450AB56ADE2996647CD5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 11:12:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:f9:1f:c1:7e:80:8c:f7:c5:76:76:65:37:e6:fa:8a:31:9e:4c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B90B0AED87ECD7C87066450AB56ADE2996647CD5 Validity Not Before: Dec 2 05:26:34 2025 GMT Not After : Dec 5 11:12:34 2025 GMT Subject: CN=00FE59F02F211546B6CA75B5F889F5729B503E47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:b3:d4:ba:98:61:70:a3:72:6c:bc:a1:f0:5e: 30:a4:39:0f:b6:61:e5:a5:f3:43:a7:18:af:59:d1: 25:cf:b6:9f:ec:c4:db:24:22:78:78:b7:e3:dc:cf: ab:3a:aa:cb:7d:33:8c:86:ca:2d:6e:8e:de:0b:a8: dd:b5:cb:df:ae:f6:07:98:27:26:ae:1a:4f:83:f2: f5:37:fe:a7:4b:63:47:40:58:51:91:ee:0c:be:6c: e5:8e:08:45:74:93:72:3e:65:bf:df:27:51:ff:b0: dd:a4:71:9c:21:99:5b:8f:95:e3:ac:a1:92:19:99: 94:34:75:30:e4:7e:84:86:d8:25:25:94:92:53:5c: 5f:25:d5:a6:23:43:3c:46:17:5d:8b:e7:ad:93:48: d1:48:26:5d:c3:2e:14:92:ff:72:4f:2c:83:0a:70: 95:dc:e4:a8:a7:63:15:1b:63:4b:3c:e1:9e:a7:d0: 41:cb:34:7a:a8:43:1e:fc:5d:00:b6:0e:55:69:da: 6e:01:ba:99:a2:5a:ed:eb:c7:d9:f9:d3:c3:9c:96: ff:92:ca:cb:be:cf:89:77:e8:2e:94:83:5b:98:b4: 8a:76:71:ca:cc:bd:c6:d9:3b:f7:70:dd:b4:91:07: a0:67:58:0d:48:7b:18:11:b3:68:ba:27:50:fb:01: 46:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:FE:59:F0:2F:21:15:46:B6:CA:75:B5:F8:89:F5:72:9B:50:3E:47 X509v3 Authority Key Identifier: keyid:B9:0B:0A:ED:87:EC:D7:C8:70:66:45:0A:B5:6A:DE:29:96:64:7C:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aae6379e-b886-436e-b0ed-3aaff9c08501/0/B90B0AED87ECD7C87066450AB56ADE2996647CD5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B90B0AED87ECD7C87066450AB56ADE2996647CD5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aae6379e-b886-436e-b0ed-3aaff9c08501/0/B90B0AED87ECD7C87066450AB56ADE2996647CD5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:f8:db:b6:db:b4:ab:3d:60:a0:f5:12:90:e4:d1:5e:ba:ce: bc:65:a7:c1:32:05:e7:a6:74:12:90:dd:9f:27:ee:e7:dd:ba: d2:8e:c4:07:af:b0:93:cc:8d:3c:0b:2f:7f:77:74:35:22:d6: dd:0f:69:2c:ac:41:2b:0c:53:d3:af:83:10:e7:5c:01:f3:ca: 78:1d:3a:89:a2:15:4c:12:50:38:6c:40:cf:87:77:31:f5:94: 16:ce:d0:cb:ad:3c:22:db:57:c0:05:8a:39:30:a6:03:e8:3a: 50:16:92:f0:73:64:08:e3:36:13:25:6b:e9:97:92:df:e9:4b: 1b:31:c3:6d:7d:2d:03:ad:4f:d8:f9:22:42:70:23:3a:01:b3: f4:d7:52:a3:3a:61:78:54:b1:75:27:4c:2f:11:96:0c:81:11: 80:80:cf:5a:4b:3a:07:a3:3b:2b:8a:3f:e5:0d:16:90:91:9c: 6b:0b:e4:c1:51:02:ce:cd:1b:74:58:27:6a:23:82:3a:8c:81: bf:65:64:47:c3:33:32:f6:01:1b:97:12:72:18:ed:66:9a:b0: b0:07:bb:a1:dd:ee:6b:49:50:a0:3b:c1:80:f0:22:30:72:ee: 4c:46:d1:4f:4d:a7:a3:f2:2d:67:f3:8f:eb:a2:3d:00:7a:ca: ab:6a:43:61 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUB/kfwX6AjPfFdnZlN+b6ijGeTMAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjkwQjBBRUQ4N0VDRDdDODcwNjY0NTBBQjU2QURFMjk5 NjY0N0NENTAeFw0yNTEyMDIwNTI2MzRaFw0yNTEyMDUxMTEyMzRaMDMxMTAvBgNV BAMTKDAwRkU1OUYwMkYyMTE1NDZCNkNBNzVCNUY4ODlGNTcyOUI1MDNFNDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqs9S6mGFwo3JsvKHwXjCkOQ+2 YeWl80OnGK9Z0SXPtp/sxNskInh4t+Pcz6s6qst9M4yGyi1ujt4LqN21y9+u9geY JyauGk+D8vU3/qdLY0dAWFGR7gy+bOWOCEV0k3I+Zb/fJ1H/sN2kcZwhmVuPleOs oZIZmZQ0dTDkfoSG2CUllJJTXF8l1aYjQzxGF12L562TSNFIJl3DLhSS/3JPLIMK cJXc5KinYxUbY0s84Z6n0EHLNHqoQx78XQC2DlVp2m4BupmiWu3rx9n508Oclv+S ysu+z4l36C6Ug1uYtIp2ccrMvcbZO/dw3bSRB6BnWA1IexgRs2i6J1D7AUZZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAP5Z8C8hFUa2ynW1+In1cptQPkcwHwYDVR0j BBgwFoAUuQsK7Yfs18hwZkUKtWreKZZkfNUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YWU2Mzc5ZS1iODg2LTQzNmUtYjBlZC0zYWFmZjljMDg1MDEvMC9COTBCMEFFRDg3 RUNEN0M4NzA2NjQ1MEFCNTZBREUyOTk2NjQ3Q0Q1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjkwQjBBRUQ4N0VDRDdDODcwNjY0NTBBQjU2QURFMjk5NjY0 N0NENS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWFlNjM3OWUtYjg4Ni00MzZlLWIw ZWQtM2FhZmY5YzA4NTAxLzAvQjkwQjBBRUQ4N0VDRDdDODcwNjY0NTBBQjU2QURF Mjk5NjY0N0NENS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK3427bbtKs9YKD1EpDk0V66zrxlp8EyBeem dBKQ3Z8n7ufdutKOxAevsJPMjTwLL393dDUi1t0PaSysQSsMU9OvgxDnXAHzyngd OomiFUwSUDhsQM+HdzH1lBbO0MutPCLbV8AFijkwpgPoOlAWkvBzZAjjNhMla+mX kt/pSxsxw219LQOtT9j5IkJwIzoBs/TXUqM6YXhUsXUnTC8RlgyBEYCAz1pLOgej OyuKP+UNFpCRnGsL5MFRAs7NG3RYJ2ojgjqMgb9lZEfDMzL2ARuXEnIY7WaasLAH u6Hd7mtJUKA7wYDwIjBy7kxG0U9Np6PyLWfzj+uiPQB6yqtqQ2E= -----END CERTIFICATE-----Generated at Wed Dec 3 13:56:55 2025 by rpki-client