This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/f77ffe2a-31e4-4800-97d4-7874c1231911/0/90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3.mft File: 90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3.mft (raw, json) Hash identifier: 8oh7NolLwjhEn+75VeyUPwrio4y4SvDCHCS909bSuO0= Subject key identifier: C0:CD:3B:22:01:B4:45:71:2E:07:81:8D:63:D4:0E:95:EF:C6:3F:42 Authority key identifier: 90:E2:CC:AC:A3:23:EA:B2:14:5F:54:B7:CF:65:C5:FA:EC:EF:83:A3 Certificate issuer: /CN=90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3 Certificate serial: 04061A9380C76A39C4CF7B07FCE219846DF20EBF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f77ffe2a-31e4-4800-97d4-7874c1231911/0/90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3.mft Manifest number: 01EB Signing time: Mon 15 Dec 2025 07:41:25 +0000 Manifest this update: Mon 15 Dec 2025 07:36:25 +0000 Manifest next update: Thu 18 Dec 2025 17:19:25 +0000 Files and hashes: 1: 3130332e3134352e35332e302f32342d3234203d3e20313339343535.roa (hash: t0f8hH0p5YUalqHFkiu1kyX28Ot7aEHcWn8PNYVXvq0=) 2: 90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3.crl (hash: FlWjLrgI1LH0/hYg1GsdGiitTSPv5L3POeSqTI7VoPE=) 3: 3130332e3134352e35322e302f32342d3234203d3e20313339343535.roa (hash: AnirtwiQcqhih7uqF14RHtBvHcWSRInmlpBmELQD3Bc=) 4: 3130332e3134352e35322e302f32332d3233203d3e20313339343535.roa (hash: 7DJwBHtzGlb/NDl1/3zGyCjwc3DhiipUzCGFUXWXjoE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f77ffe2a-31e4-4800-97d4-7874c1231911/0/90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3.crl rsync://repo-rpki.idnic.net/repo/f77ffe2a-31e4-4800-97d4-7874c1231911/0/90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Dec 2025 17:19:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:06:1a:93:80:c7:6a:39:c4:cf:7b:07:fc:e2:19:84:6d:f2:0e:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3 Validity Not Before: Dec 15 07:36:25 2025 GMT Not After : Dec 18 17:19:25 2025 GMT Subject: CN=C0CD3B2201B445712E07818D63D40E95EFC63F42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:2c:68:66:3a:95:69:93:84:e9:81:e8:52:9b: 69:c7:83:e2:cd:32:3b:d7:b2:01:ab:cc:fe:f3:f9: be:f9:c1:25:43:ec:98:5e:27:32:95:4e:5e:86:e5: 30:7b:51:ce:03:56:a8:16:0f:e2:52:df:c0:9a:cf: f6:55:7c:74:cb:d3:32:b6:d6:9c:f9:92:1d:0a:b3: da:be:f3:5d:dd:f2:76:46:ab:5a:c7:e1:fe:d7:50: 8a:f2:5e:29:6d:ba:b2:46:e3:2f:7a:c0:11:2b:ac: 88:21:dd:8f:43:6b:97:96:23:2f:0a:0e:45:61:55: c0:58:c1:5f:f9:e4:b5:55:a4:a3:dc:12:00:d5:83: 74:7d:60:dc:1a:2f:e2:36:33:fd:ac:9d:38:b4:a7: 3d:14:43:01:38:8f:91:f0:69:1a:fc:d2:a6:6a:e6: 14:bf:37:5a:ea:ec:89:1c:a0:f9:11:0c:f9:3e:be: 2f:ff:dc:e2:be:ba:a7:2d:c4:b5:6e:ac:62:6a:ea: 30:47:65:43:15:2c:17:d6:46:e5:f0:0a:31:19:9d: ff:df:bd:15:2d:e8:1a:48:12:a5:a6:c1:34:73:80: 5d:f7:3c:a5:68:33:8c:5a:ee:f9:fd:ba:1c:b9:06: 88:f0:12:43:72:5b:80:42:33:59:ef:cd:d1:fe:87: 03:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:CD:3B:22:01:B4:45:71:2E:07:81:8D:63:D4:0E:95:EF:C6:3F:42 X509v3 Authority Key Identifier: keyid:90:E2:CC:AC:A3:23:EA:B2:14:5F:54:B7:CF:65:C5:FA:EC:EF:83:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f77ffe2a-31e4-4800-97d4-7874c1231911/0/90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f77ffe2a-31e4-4800-97d4-7874c1231911/0/90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:bf:17:20:a8:3a:07:1f:61:9c:a0:b5:66:ee:68:d3:cb:b4: 99:d4:76:a9:01:5a:95:8e:fb:8f:ff:e3:83:9c:ed:c5:08:b7: f6:8c:77:38:be:ec:53:f6:50:4b:3a:f0:29:2c:5f:e2:7e:e2: cd:50:cf:f8:11:0f:4b:c2:82:13:03:0c:40:1f:4a:63:3c:cb: be:7a:cd:97:6c:23:89:3c:16:d3:44:70:77:6f:f6:2f:91:2f: 33:74:7c:62:5d:fe:20:8b:fc:a4:8b:29:a2:a3:e2:a1:26:87: e1:7a:69:bf:61:1b:b9:a9:2d:45:37:0e:d2:29:60:fb:d8:36: 26:ac:e3:a6:a7:2b:f7:ef:90:c5:e9:0c:9b:58:3c:c8:78:26: f3:be:f3:c0:c5:0c:c4:5b:dd:0d:b3:68:e2:7b:ee:74:7c:14: c0:0d:8a:41:5e:3c:df:80:4b:e7:c0:cd:15:d4:4d:10:70:fd: 50:bb:be:29:12:de:13:f6:9e:3b:3a:af:d0:24:d5:02:aa:25: 7a:ff:ca:91:ec:54:ae:31:70:10:92:69:6d:8c:ab:d0:e1:42: fb:49:c9:53:e8:f0:6d:96:aa:7a:19:4d:a2:54:1a:9f:e0:10: 98:61:fd:5a:f9:a0:ef:da:85:15:49:e1:20:70:df:04:f2:de: 59:1f:a4:8a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBAYak4DHajnEz3sH/OIZhG3yDr8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTBFMkNDQUNBMzIzRUFCMjE0NUY1NEI3Q0Y2NUM1RkFF Q0VGODNBMzAeFw0yNTEyMTUwNzM2MjVaFw0yNTEyMTgxNzE5MjVaMDMxMTAvBgNV BAMTKEMwQ0QzQjIyMDFCNDQ1NzEyRTA3ODE4RDYzRDQwRTk1RUZDNjNGNDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTLGhmOpVpk4TpgehSm2nHg+LN MjvXsgGrzP7z+b75wSVD7JheJzKVTl6G5TB7Uc4DVqgWD+JS38Caz/ZVfHTL0zK2 1pz5kh0Ks9q+813d8nZGq1rH4f7XUIryXilturJG4y96wBErrIgh3Y9Da5eWIy8K DkVhVcBYwV/55LVVpKPcEgDVg3R9YNwaL+I2M/2snTi0pz0UQwE4j5HwaRr80qZq 5hS/N1rq7IkcoPkRDPk+vi//3OK+uqctxLVurGJq6jBHZUMVLBfWRuXwCjEZnf/f vRUt6BpIEqWmwTRzgF33PKVoM4xa7vn9uhy5BojwEkNyW4BCM1nvzdH+hwORAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwM07IgG0RXEuB4GNY9QOle/GP0IwHwYDVR0j BBgwFoAUkOLMrKMj6rIUX1S3z2XF+uzvg6MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NzdmZmUyYS0zMWU0LTQ4MDAtOTdkNC03ODc0YzEyMzE5MTEvMC85MEUyQ0NBQ0Ez MjNFQUIyMTQ1RjU0QjdDRjY1QzVGQUVDRUY4M0EzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTBFMkNDQUNBMzIzRUFCMjE0NUY1NEI3Q0Y2NUM1RkFFQ0VG ODNBMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjc3ZmZlMmEtMzFlNC00ODAwLTk3 ZDQtNzg3NGMxMjMxOTExLzAvOTBFMkNDQUNBMzIzRUFCMjE0NUY1NEI3Q0Y2NUM1 RkFFQ0VGODNBMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFy/FyCoOgcfYZygtWbuaNPLtJnUdqkBWpWO +4//44Oc7cUIt/aMdzi+7FP2UEs68CksX+J+4s1Qz/gRD0vCghMDDEAfSmM8y756 zZdsI4k8FtNEcHdv9i+RLzN0fGJd/iCL/KSLKaKj4qEmh+F6ab9hG7mpLUU3DtIp YPvYNias46anK/fvkMXpDJtYPMh4JvO+88DFDMRb3Q2zaOJ77nR8FMANikFePN+A S+fAzRXUTRBw/VC7vikS3hP2njs6r9Ak1QKqJXr/ypHsVK4xcBCSaW2Mq9DhQvtJ yVPo8G2WqnoZTaJUGp/gEJhh/Vr5oO/ahRVJ4SBw3wTy3lkfpIo= -----END CERTIFICATE-----Generated at Tue Dec 16 06:23:43 2025 by rpki-client