This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/b883e3be-57e2-4125-a0c5-9a9ea501bf05/0/90508FF980097E19CEF65ED72A856616A6F690AB.mft File: 90508FF980097E19CEF65ED72A856616A6F690AB.mft (raw, json) Hash identifier: uK3lGzSXojIR/pB4TxoO5rVzwuj1Im3fkMdrCab5E9o= Subject key identifier: 05:22:AF:8B:AD:7D:6F:98:12:0F:0A:E0:84:0B:E9:E1:FC:2B:AC:D2 Authority key identifier: 90:50:8F:F9:80:09:7E:19:CE:F6:5E:D7:2A:85:66:16:A6:F6:90:AB Certificate issuer: /CN=90508FF980097E19CEF65ED72A856616A6F690AB Certificate serial: 1C5493FDCFA6B8104982D84B178715F59619ED4D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90508FF980097E19CEF65ED72A856616A6F690AB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b883e3be-57e2-4125-a0c5-9a9ea501bf05/0/90508FF980097E19CEF65ED72A856616A6F690AB.mft Manifest number: 0529 Signing time: Tue 25 Nov 2025 18:02:10 +0000 Manifest this update: Tue 25 Nov 2025 17:57:10 +0000 Manifest next update: Fri 28 Nov 2025 23:34:10 +0000 Files and hashes: 1: 90508FF980097E19CEF65ED72A856616A6F690AB.crl (hash: Pmv/c6Sz7NgiUC4NoytnOd+tA9AmI+QhMFxmzqE9fVE=) 2: 3130332e3131392e3232382e302f32332d3234203d3e203634333135.roa (hash: JNjDlAZZhJPbXz9QnoPN2kXEdVorueRNiZ3y4BzRO+s=) 3: 3130332e3131392e3233312e302f32342d3234203d3e203634333135.roa (hash: Yz5xkZY0xzo/trvfbAdTc4aF9ack7BIeyFzB+WOAYgQ=) 4: 3130332e3131392e3233302e302f32342d3234203d3e203634333135.roa (hash: NUlokuFe9GARtT8KTw9qoKUuu+MeiOKu86jOn++3TJ0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b883e3be-57e2-4125-a0c5-9a9ea501bf05/0/90508FF980097E19CEF65ED72A856616A6F690AB.crl rsync://repo-rpki.idnic.net/repo/b883e3be-57e2-4125-a0c5-9a9ea501bf05/0/90508FF980097E19CEF65ED72A856616A6F690AB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90508FF980097E19CEF65ED72A856616A6F690AB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 28 Nov 2025 23:26:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:54:93:fd:cf:a6:b8:10:49:82:d8:4b:17:87:15:f5:96:19:ed:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90508FF980097E19CEF65ED72A856616A6F690AB Validity Not Before: Nov 25 17:57:10 2025 GMT Not After : Nov 28 23:34:10 2025 GMT Subject: CN=0522AF8BAD7D6F98120F0AE0840BE9E1FC2BACD2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:58:ae:ae:7e:7a:95:8c:36:df:7a:5c:91:fc: 26:ef:cd:b1:26:3f:c3:1c:a5:9d:33:0e:54:6d:9b: 00:0b:02:38:69:96:39:90:94:19:2c:52:5a:7f:1b: bc:40:d9:9b:d9:97:3b:7e:f0:e9:3e:4d:12:9f:f7: 88:98:7f:e0:3d:43:3d:d5:4c:4d:b0:3c:2d:65:4a: 9a:2b:7f:bd:59:db:5e:2e:b7:e2:bc:64:0c:f5:89: 02:2c:7e:b5:3e:56:1a:5b:98:11:87:c1:5d:c1:46: 99:b6:8b:f6:58:16:6c:15:d1:09:71:ac:42:d9:2f: df:20:fe:57:7e:40:52:24:15:a4:fb:6b:b2:22:a3: 5a:59:7b:d3:26:f1:4d:da:f2:a5:92:ce:9d:9f:95: 3b:25:4c:8c:45:8f:b8:ce:c2:4a:39:09:75:02:3a: 18:0b:1a:bd:b4:55:cd:61:c2:ab:3b:03:0d:e5:e2: e7:b6:22:45:2f:c1:d5:06:2f:b4:e5:08:6b:42:d1: 3b:03:e3:74:0d:b0:4d:82:ac:17:54:c0:ea:05:62: b1:81:0b:2b:e6:a8:5c:c0:2f:14:0f:8c:5f:64:2d: 0d:e9:84:5c:a8:20:86:ab:75:6f:d5:3f:16:0f:32: e5:f4:f4:32:f2:37:7e:ba:88:06:12:f6:de:aa:2e: b3:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:22:AF:8B:AD:7D:6F:98:12:0F:0A:E0:84:0B:E9:E1:FC:2B:AC:D2 X509v3 Authority Key Identifier: keyid:90:50:8F:F9:80:09:7E:19:CE:F6:5E:D7:2A:85:66:16:A6:F6:90:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b883e3be-57e2-4125-a0c5-9a9ea501bf05/0/90508FF980097E19CEF65ED72A856616A6F690AB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90508FF980097E19CEF65ED72A856616A6F690AB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b883e3be-57e2-4125-a0c5-9a9ea501bf05/0/90508FF980097E19CEF65ED72A856616A6F690AB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:89:02:9a:2a:f1:bc:6a:01:6f:f7:f5:48:a9:b1:e4:37:3c: 93:07:30:2d:75:f1:a8:5f:55:1f:71:62:5d:9e:d6:d4:10:b7: fc:b6:e5:2e:7c:0c:6d:93:19:43:4f:68:79:36:63:e0:53:39: 9e:36:87:38:fd:ce:10:b0:eb:e9:26:74:87:9a:08:1c:3c:fa: 94:d1:ea:24:d0:c8:6b:3f:df:01:34:4f:3f:90:2a:5a:bf:81: 8d:73:a0:7f:14:e8:9d:89:99:36:bd:a7:36:07:0d:47:78:af: 48:a6:86:33:d3:23:c4:c0:4b:69:eb:0e:ea:2f:a6:74:51:70: 0b:6e:70:9b:c6:2d:04:fa:2d:9e:28:7b:79:d1:77:b7:1a:6d: a9:41:27:81:ea:d5:43:40:9e:72:d1:50:cc:7c:d0:3f:8f:dc: 60:12:7f:4d:3d:ff:d2:70:91:28:3f:c8:3b:cc:48:ca:ee:77: e8:bf:fa:fe:ff:b3:38:83:c0:ae:1f:f4:88:8b:08:4f:58:14: 31:fd:fb:58:1c:d2:c3:76:8c:8a:db:84:34:0f:79:86:17:ab: 62:2f:8f:e2:bd:65:10:3a:b0:de:ae:65:90:63:29:cd:03:c9: 56:02:6c:da:53:87:aa:ce:de:35:ad:56:e5:23:a6:c8:0a:c9: c6:05:40:e5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHFST/c+muBBJgthLF4cV9ZYZ7U0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTA1MDhGRjk4MDA5N0UxOUNFRjY1RUQ3MkE4NTY2MTZB NkY2OTBBQjAeFw0yNTExMjUxNzU3MTBaFw0yNTExMjgyMzM0MTBaMDMxMTAvBgNV BAMTKDA1MjJBRjhCQUQ3RDZGOTgxMjBGMEFFMDg0MEJFOUUxRkMyQkFDRDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0WK6ufnqVjDbfelyR/CbvzbEm P8McpZ0zDlRtmwALAjhpljmQlBksUlp/G7xA2ZvZlzt+8Ok+TRKf94iYf+A9Qz3V TE2wPC1lSporf71Z214ut+K8ZAz1iQIsfrU+VhpbmBGHwV3BRpm2i/ZYFmwV0Qlx rELZL98g/ld+QFIkFaT7a7Iio1pZe9Mm8U3a8qWSzp2flTslTIxFj7jOwko5CXUC OhgLGr20Vc1hwqs7Aw3l4ue2IkUvwdUGL7TlCGtC0TsD43QNsE2CrBdUwOoFYrGB CyvmqFzALxQPjF9kLQ3phFyoIIardW/VPxYPMuX09DLyN366iAYS9t6qLrOLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBSKvi619b5gSDwrghAvp4fwrrNIwHwYDVR0j BBgwFoAUkFCP+YAJfhnO9l7XKoVmFqb2kKswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ODgzZTNiZS01N2UyLTQxMjUtYTBjNS05YTllYTUwMWJmMDUvMC85MDUwOEZGOTgw MDk3RTE5Q0VGNjVFRDcyQTg1NjYxNkE2RjY5MEFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTA1MDhGRjk4MDA5N0UxOUNFRjY1RUQ3MkE4NTY2MTZBNkY2 OTBBQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjg4M2UzYmUtNTdlMi00MTI1LWEw YzUtOWE5ZWE1MDFiZjA1LzAvOTA1MDhGRjk4MDA5N0UxOUNFRjY1RUQ3MkE4NTY2 MTZBNkY2OTBBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEyJApoq8bxqAW/39UipseQ3PJMHMC118ahf VR9xYl2e1tQQt/y25S58DG2TGUNPaHk2Y+BTOZ42hzj9zhCw6+kmdIeaCBw8+pTR 6iTQyGs/3wE0Tz+QKlq/gY1zoH8U6J2JmTa9pzYHDUd4r0imhjPTI8TAS2nrDuov pnRRcAtucJvGLQT6LZ4oe3nRd7cabalBJ4Hq1UNAnnLRUMx80D+P3GASf009/9Jw kSg/yDvMSMrud+i/+v7/sziDwK4f9IiLCE9YFDH9+1gc0sN2jIrbhDQPeYYXq2Iv j+K9ZRA6sN6uZZBjKc0DyVYCbNpTh6rO3jWtVuUjpsgKycYFQOU= -----END CERTIFICATE-----Generated at Wed Nov 26 03:29:36 2025 by rpki-client