This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/0279ee9c-ad2b-4bed-8641-23bf2d3b16db/0/C23F832F27DB88B8BC58766932FDA19B3E3A4CBF.mft File: C23F832F27DB88B8BC58766932FDA19B3E3A4CBF.mft (raw, json) Hash identifier: LbpQsFkB0tg28WwD0JRbOPvs9gokSH7f5/mYaWUyb+M= Subject key identifier: E6:C2:87:C5:FC:36:D5:71:DD:BC:05:87:34:57:5B:64:D3:7F:F2:AF Authority key identifier: C2:3F:83:2F:27:DB:88:B8:BC:58:76:69:32:FD:A1:9B:3E:3A:4C:BF Certificate issuer: /CN=C23F832F27DB88B8BC58766932FDA19B3E3A4CBF Certificate serial: 224F18EAD9F9E001F59B8D949409F485236A0B1E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C23F832F27DB88B8BC58766932FDA19B3E3A4CBF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0279ee9c-ad2b-4bed-8641-23bf2d3b16db/0/C23F832F27DB88B8BC58766932FDA19B3E3A4CBF.mft Manifest number: DC Signing time: Sun 07 Dec 2025 13:51:16 +0000 Manifest this update: Sun 07 Dec 2025 13:46:16 +0000 Manifest next update: Wed 10 Dec 2025 22:11:16 +0000 Files and hashes: 1: 3136302e32352e3234382e302f32342d3234203d3e20313533303931.roa (hash: hxLgZVEmgK6Q9Qorix7qtcxFffjQzl54opLxUmCvE+8=) 2: C23F832F27DB88B8BC58766932FDA19B3E3A4CBF.crl (hash: 9h4wIzJoydefuHy2iVGBNL/aWsLESixMBU8qaMalyCk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0279ee9c-ad2b-4bed-8641-23bf2d3b16db/0/C23F832F27DB88B8BC58766932FDA19B3E3A4CBF.crl rsync://repo-rpki.idnic.net/repo/0279ee9c-ad2b-4bed-8641-23bf2d3b16db/0/C23F832F27DB88B8BC58766932FDA19B3E3A4CBF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C23F832F27DB88B8BC58766932FDA19B3E3A4CBF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 06:55:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:4f:18:ea:d9:f9:e0:01:f5:9b:8d:94:94:09:f4:85:23:6a:0b:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C23F832F27DB88B8BC58766932FDA19B3E3A4CBF Validity Not Before: Dec 7 13:46:16 2025 GMT Not After : Dec 10 22:11:16 2025 GMT Subject: CN=E6C287C5FC36D571DDBC058734575B64D37FF2AF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:f9:5f:49:1f:c9:bd:d3:d0:2b:80:9e:de:69: b8:72:81:01:01:97:2a:b5:fb:e3:1d:80:ab:9a:7c: d1:9a:a8:e8:fa:97:8f:e4:b3:17:d1:14:a9:73:8a: 90:2f:94:78:24:4f:ee:8c:d7:88:1e:6d:e1:4a:d7: 98:8d:27:2d:98:a9:97:de:12:39:6a:78:ed:ae:68: 89:0f:e7:41:9e:c6:21:c0:6a:ce:b3:05:53:c7:9c: 52:12:68:a9:9a:6e:25:90:d5:de:aa:ca:30:30:c2: 0f:13:26:fb:96:d4:45:35:a5:bc:62:a5:bd:81:af: f0:96:b2:85:d8:61:25:4b:93:85:d4:71:38:bd:20: 2c:58:d7:ca:6b:88:96:7c:6d:aa:1d:2d:b1:cd:f9: dc:4c:92:b2:6f:5e:3b:fd:0e:ec:b8:3b:be:3e:ba: 5c:42:ed:db:98:e6:a2:d1:cf:db:a8:65:6f:2c:65: 76:97:81:08:c5:f3:96:9d:3a:c9:a8:fd:21:3b:3a: 07:22:8b:03:bf:e5:11:86:cc:ca:71:78:e7:2f:65: 95:45:92:8d:06:68:20:cd:86:b6:9f:e3:f1:08:dd: f1:fb:f0:2f:96:ea:78:29:de:50:35:08:80:db:1f: b3:e6:1c:81:f9:27:29:4e:96:7b:36:8a:10:03:cc: 1d:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:C2:87:C5:FC:36:D5:71:DD:BC:05:87:34:57:5B:64:D3:7F:F2:AF X509v3 Authority Key Identifier: keyid:C2:3F:83:2F:27:DB:88:B8:BC:58:76:69:32:FD:A1:9B:3E:3A:4C:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0279ee9c-ad2b-4bed-8641-23bf2d3b16db/0/C23F832F27DB88B8BC58766932FDA19B3E3A4CBF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C23F832F27DB88B8BC58766932FDA19B3E3A4CBF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0279ee9c-ad2b-4bed-8641-23bf2d3b16db/0/C23F832F27DB88B8BC58766932FDA19B3E3A4CBF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:63:6e:f9:ef:52:92:e7:a7:8a:1f:0d:43:39:02:9d:d5:fd: 00:bb:27:db:f0:fc:8b:9d:c7:88:82:53:47:72:3c:12:59:61: 64:64:1e:a3:ee:ed:1b:6f:89:ce:aa:e2:b9:f2:a3:e5:a7:84: 83:5e:f9:19:70:09:96:09:98:39:91:74:36:8f:15:a5:d0:b5: 16:e4:b9:18:74:16:33:b9:f5:3c:41:73:60:64:40:6c:26:1a: a3:17:8f:75:54:54:6c:92:22:7b:8d:96:b8:28:08:0c:a0:4b: ac:a2:3d:35:06:9f:89:4a:96:1c:f3:b4:36:a3:5e:ee:b8:fc: 70:d6:fe:23:90:5f:68:fa:2c:d9:0e:3f:c9:b8:23:36:8c:94: 6a:39:68:26:33:05:26:73:2d:5f:0e:7b:cf:1d:6c:97:d7:16: b4:da:34:a2:46:07:cb:11:2d:38:b7:26:90:aa:5a:6c:e7:9e: 6b:df:dc:c4:4d:80:f6:af:dd:b8:1c:7d:61:aa:13:0a:38:14: 40:da:f3:84:37:03:e4:d3:fa:04:be:bd:42:0c:e0:80:3d:f8: 86:bd:31:b3:46:00:39:9f:76:b4:fc:b1:a7:2b:18:25:1c:f1: 1c:16:0a:70:c2:c7:1c:35:88:f8:8a:e7:7e:8c:3f:6c:f4:d3: 04:f7:48:4c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIk8Y6tn54AH1m42UlAn0hSNqCx4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzIzRjgzMkYyN0RCODhCOEJDNTg3NjY5MzJGREExOUIz RTNBNENCRjAeFw0yNTEyMDcxMzQ2MTZaFw0yNTEyMTAyMjExMTZaMDMxMTAvBgNV BAMTKEU2QzI4N0M1RkMzNkQ1NzFEREJDMDU4NzM0NTc1QjY0RDM3RkYyQUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0+V9JH8m909ArgJ7eabhygQEB lyq1++MdgKuafNGaqOj6l4/ksxfRFKlzipAvlHgkT+6M14gebeFK15iNJy2YqZfe EjlqeO2uaIkP50GexiHAas6zBVPHnFISaKmabiWQ1d6qyjAwwg8TJvuW1EU1pbxi pb2Br/CWsoXYYSVLk4XUcTi9ICxY18priJZ8baodLbHN+dxMkrJvXjv9Duy4O74+ ulxC7duY5qLRz9uoZW8sZXaXgQjF85adOsmo/SE7OgciiwO/5RGGzMpxeOcvZZVF ko0GaCDNhraf4/EI3fH78C+W6ngp3lA1CIDbH7PmHIH5JylOlns2ihADzB3pAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5sKHxfw21XHdvAWHNFdbZNN/8q8wHwYDVR0j BBgwFoAUwj+DLyfbiLi8WHZpMv2hmz46TL8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w Mjc5ZWU5Yy1hZDJiLTRiZWQtODY0MS0yM2JmMmQzYjE2ZGIvMC9DMjNGODMyRjI3 REI4OEI4QkM1ODc2NjkzMkZEQTE5QjNFM0E0Q0JGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQzIzRjgzMkYyN0RCODhCOEJDNTg3NjY5MzJGREExOUIzRTNB NENCRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDI3OWVlOWMtYWQyYi00YmVkLTg2 NDEtMjNiZjJkM2IxNmRiLzAvQzIzRjgzMkYyN0RCODhCOEJDNTg3NjY5MzJGREEx OUIzRTNBNENCRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHtjbvnvUpLnp4ofDUM5Ap3V/QC7J9vw/Iud x4iCU0dyPBJZYWRkHqPu7Rtvic6q4rnyo+WnhINe+RlwCZYJmDmRdDaPFaXQtRbk uRh0FjO59TxBc2BkQGwmGqMXj3VUVGySInuNlrgoCAygS6yiPTUGn4lKlhzztDaj Xu64/HDW/iOQX2j6LNkOP8m4IzaMlGo5aCYzBSZzLV8Oe88dbJfXFrTaNKJGB8sR LTi3JpCqWmznnmvf3MRNgPav3bgcfWGqEwo4FEDa84Q3A+TT+gS+vUIM4IA9+Ia9 MbNGADmfdrT8sacrGCUc8RwWCnDCxxw1iPiK536MP2z00wT3SEw= -----END CERTIFICATE-----Generated at Sun Dec 7 18:49:39 2025 by rpki-client