This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/f77ffe2a-31e4-4800-97d4-7874c1231911/0/90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3.mft File: 90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3.mft (raw, json) Hash identifier: tt59wS4COOID4xB3skRuJYe5MRWvsZYTvnF1Us7nHYU= Subject key identifier: 5F:E3:A1:52:70:CF:CB:50:87:B9:29:16:49:57:E2:19:8E:E9:89:BA Authority key identifier: 90:E2:CC:AC:A3:23:EA:B2:14:5F:54:B7:CF:65:C5:FA:EC:EF:83:A3 Certificate issuer: /CN=90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3 Certificate serial: 75740658D988D3D1C050E695A3EBB160FB95F77F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f77ffe2a-31e4-4800-97d4-7874c1231911/0/90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3.mft Manifest number: 01E5 Signing time: Tue 02 Dec 2025 11:31:39 +0000 Manifest this update: Tue 02 Dec 2025 11:26:39 +0000 Manifest next update: Fri 05 Dec 2025 12:28:39 +0000 Files and hashes: 1: 3130332e3134352e35332e302f32342d3234203d3e20313339343535.roa (hash: t0f8hH0p5YUalqHFkiu1kyX28Ot7aEHcWn8PNYVXvq0=) 2: 90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3.crl (hash: ph2z3mIIwv4FK1nrsgxsAL0pG94fm9Hc58CqGPO/Ut4=) 3: 3130332e3134352e35322e302f32342d3234203d3e20313339343535.roa (hash: AnirtwiQcqhih7uqF14RHtBvHcWSRInmlpBmELQD3Bc=) 4: 3130332e3134352e35322e302f32332d3233203d3e20313339343535.roa (hash: 7DJwBHtzGlb/NDl1/3zGyCjwc3DhiipUzCGFUXWXjoE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f77ffe2a-31e4-4800-97d4-7874c1231911/0/90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3.crl rsync://repo-rpki.idnic.net/repo/f77ffe2a-31e4-4800-97d4-7874c1231911/0/90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 12:28:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:74:06:58:d9:88:d3:d1:c0:50:e6:95:a3:eb:b1:60:fb:95:f7:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3 Validity Not Before: Dec 2 11:26:39 2025 GMT Not After : Dec 5 12:28:39 2025 GMT Subject: CN=5FE3A15270CFCB5087B929164957E2198EE989BA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:cd:6c:35:39:6a:9c:0e:ac:a1:43:f1:16:a3: 9d:c0:d1:d5:b8:6e:e2:59:ec:4f:96:b6:92:28:73: d4:a9:c9:cb:34:07:8e:b5:0c:b2:ce:cb:c2:19:11: b2:a1:a9:92:45:64:e5:62:20:92:13:2b:88:6d:d2: 70:c8:4a:a3:df:b1:aa:14:1e:ff:fb:0f:a7:8b:df: 1f:60:1e:e8:d9:27:40:fd:15:92:f5:61:51:e9:44: c4:42:8a:af:3a:f8:92:12:60:98:67:f4:e6:01:b1: 4f:3a:26:53:3b:52:06:b9:9f:ce:26:10:4d:8b:75: 9e:a0:84:1a:0d:2f:24:8b:f6:97:5b:ae:05:b4:64: ab:0b:d6:75:2e:66:c3:d4:b6:0c:67:4e:88:b7:f1: 59:fb:6c:e3:b3:b0:a3:a8:88:38:be:3c:fb:a3:bd: 99:b2:f6:e0:f3:54:c3:c0:da:ab:40:3a:9e:b5:97: 58:28:24:2f:ba:97:44:ab:46:e6:81:cb:94:12:59: 31:e8:13:bd:02:61:4f:e8:7d:f9:3e:e8:8e:1f:1c: e0:f5:85:6c:f6:fd:29:7a:f1:71:f1:5c:61:4d:10: e0:7d:74:b8:6b:61:0b:3f:97:c1:11:9e:1b:68:fc: 69:9b:f7:dc:94:0b:e6:aa:78:0f:f2:47:63:23:cc: 68:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:E3:A1:52:70:CF:CB:50:87:B9:29:16:49:57:E2:19:8E:E9:89:BA X509v3 Authority Key Identifier: keyid:90:E2:CC:AC:A3:23:EA:B2:14:5F:54:B7:CF:65:C5:FA:EC:EF:83:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f77ffe2a-31e4-4800-97d4-7874c1231911/0/90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f77ffe2a-31e4-4800-97d4-7874c1231911/0/90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:28:1d:e3:e3:4a:95:54:bb:8c:ee:14:5d:94:27:da:43:21: 91:cd:1c:8c:ef:c8:d5:02:6d:e9:0d:25:64:e8:a6:8d:fb:fe: 6f:1b:72:2f:99:85:89:d3:0f:01:60:c8:7a:76:22:6a:c1:5b: ac:9f:6c:b3:3b:72:3e:42:bc:1b:26:2a:0a:f3:d0:aa:db:4d: e7:19:22:72:01:49:16:3d:26:9e:8f:f9:fb:57:f9:14:76:6d: 62:aa:c8:b0:c1:aa:05:24:48:93:8c:cb:9e:7b:07:67:7c:eb: d1:5b:00:a7:07:3b:38:fd:cb:a6:5a:04:38:e7:79:30:1d:f8: b9:05:19:a2:08:76:d0:b0:07:1d:1a:2c:2e:5f:29:65:c7:ee: c0:63:b8:7f:cb:5c:d7:a0:29:cf:1d:cd:bc:90:ee:38:69:06: 4a:99:89:75:d0:c3:6f:03:54:08:c5:e4:b7:99:03:23:d8:28: 2b:21:e3:e5:df:c9:fe:18:4f:85:86:97:fc:de:12:63:7c:b4: 98:76:4e:81:82:c4:42:d9:ee:02:17:9e:54:35:00:19:6c:da: 6e:84:43:83:56:d3:c0:14:75:b0:a5:60:fd:30:f7:5d:25:7d: f4:f0:32:45:d3:97:f3:35:e2:db:6b:37:fa:08:8f:cf:95:03: 95:73:e6:3d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdXQGWNmI09HAUOaVo+uxYPuV938wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTBFMkNDQUNBMzIzRUFCMjE0NUY1NEI3Q0Y2NUM1RkFF Q0VGODNBMzAeFw0yNTEyMDIxMTI2MzlaFw0yNTEyMDUxMjI4MzlaMDMxMTAvBgNV BAMTKDVGRTNBMTUyNzBDRkNCNTA4N0I5MjkxNjQ5NTdFMjE5OEVFOTg5QkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOzWw1OWqcDqyhQ/EWo53A0dW4 buJZ7E+WtpIoc9Spycs0B461DLLOy8IZEbKhqZJFZOViIJITK4ht0nDISqPfsaoU Hv/7D6eL3x9gHujZJ0D9FZL1YVHpRMRCiq86+JISYJhn9OYBsU86JlM7Uga5n84m EE2LdZ6ghBoNLySL9pdbrgW0ZKsL1nUuZsPUtgxnToi38Vn7bOOzsKOoiDi+PPuj vZmy9uDzVMPA2qtAOp61l1goJC+6l0SrRuaBy5QSWTHoE70CYU/offk+6I4fHOD1 hWz2/Sl68XHxXGFNEOB9dLhrYQs/l8ERnhto/Gmb99yUC+aqeA/yR2MjzGhZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUX+OhUnDPy1CHuSkWSVfiGY7pibowHwYDVR0j BBgwFoAUkOLMrKMj6rIUX1S3z2XF+uzvg6MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NzdmZmUyYS0zMWU0LTQ4MDAtOTdkNC03ODc0YzEyMzE5MTEvMC85MEUyQ0NBQ0Ez MjNFQUIyMTQ1RjU0QjdDRjY1QzVGQUVDRUY4M0EzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTBFMkNDQUNBMzIzRUFCMjE0NUY1NEI3Q0Y2NUM1RkFFQ0VG ODNBMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjc3ZmZlMmEtMzFlNC00ODAwLTk3 ZDQtNzg3NGMxMjMxOTExLzAvOTBFMkNDQUNBMzIzRUFCMjE0NUY1NEI3Q0Y2NUM1 RkFFQ0VGODNBMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGMoHePjSpVUu4zuFF2UJ9pDIZHNHIzvyNUC bekNJWTopo37/m8bci+ZhYnTDwFgyHp2ImrBW6yfbLM7cj5CvBsmKgrz0KrbTecZ InIBSRY9Jp6P+ftX+RR2bWKqyLDBqgUkSJOMy557B2d869FbAKcHOzj9y6ZaBDjn eTAd+LkFGaIIdtCwBx0aLC5fKWXH7sBjuH/LXNegKc8dzbyQ7jhpBkqZiXXQw28D VAjF5LeZAyPYKCsh4+Xfyf4YT4WGl/zeEmN8tJh2ToGCxELZ7gIXnlQ1ABls2m6E Q4NW08AUdbClYP0w910lffTwMkXTl/M14ttrN/oIj8+VA5Vz5j0= -----END CERTIFICATE-----Generated at Wed Dec 3 13:56:49 2025 by rpki-client