This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/05efcbf0-66ec-48d3-b221-0f09686d5818/0/23F26F571E3865A06A13936555D8DAA27B433933.mft File: 23F26F571E3865A06A13936555D8DAA27B433933.mft (raw, json) Hash identifier: 2IiHkBw35zdoJKYmo+0bdv+fjt+otBRXGOfkl13Iw24= Subject key identifier: 7C:4E:38:2A:43:A3:18:17:A4:6F:A3:78:60:39:98:2A:EE:A9:34:F0 Authority key identifier: 23:F2:6F:57:1E:38:65:A0:6A:13:93:65:55:D8:DA:A2:7B:43:39:33 Certificate issuer: /CN=23F26F571E3865A06A13936555D8DAA27B433933 Certificate serial: 2F851D5FF4D9DD47E42DB26CD892DC7BF7A1CA7F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/23F26F571E3865A06A13936555D8DAA27B433933.cer Subject info access: rsync://repo-rpki.idnic.net/repo/05efcbf0-66ec-48d3-b221-0f09686d5818/0/23F26F571E3865A06A13936555D8DAA27B433933.mft Manifest number: 0210 Signing time: Mon 01 Dec 2025 23:21:53 +0000 Manifest this update: Mon 01 Dec 2025 23:16:53 +0000 Manifest next update: Fri 05 Dec 2025 09:12:53 +0000 Files and hashes: 1: 3130332e3137332e3133382e302f32342d3234203d3e20313437303738.roa (hash: 1TF1q7w4Zi+aLzgAuBXcx7Cio1arNovo47+qmMckVGw=) 2: 3130332e3137332e3133382e302f32332d3233203d3e20313437303738.roa (hash: SP7Vczz+6iJdkBg+Pm02fK5fUh9ipxxjJbwoliQlUe0=) 3: 3130332e3137332e3133392e302f32342d3234203d3e20313437303738.roa (hash: lkFPSA/0P6F0cE2k+qs5Hdu6hwn+gvFK2pZuPkqHwpw=) 4: 23F26F571E3865A06A13936555D8DAA27B433933.crl (hash: d2gdzs7coQKpIgtxEkBo4+el4rrn3HC9WyODt62wGrA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/05efcbf0-66ec-48d3-b221-0f09686d5818/0/23F26F571E3865A06A13936555D8DAA27B433933.crl rsync://repo-rpki.idnic.net/repo/05efcbf0-66ec-48d3-b221-0f09686d5818/0/23F26F571E3865A06A13936555D8DAA27B433933.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/23F26F571E3865A06A13936555D8DAA27B433933.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 09:12:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:85:1d:5f:f4:d9:dd:47:e4:2d:b2:6c:d8:92:dc:7b:f7:a1:ca:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23F26F571E3865A06A13936555D8DAA27B433933 Validity Not Before: Dec 1 23:16:53 2025 GMT Not After : Dec 5 09:12:53 2025 GMT Subject: CN=7C4E382A43A31817A46FA3786039982AEEA934F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:14:ab:cd:a2:aa:27:bc:8a:12:c0:5c:d4:fb: eb:c8:8a:1e:48:55:ff:69:e0:14:1c:39:20:1e:98: c6:8f:24:8f:30:fd:6f:66:dd:aa:5c:13:37:cf:b4: 6c:9a:dd:87:1b:39:60:ae:9f:ff:84:7b:93:27:95: 84:2e:14:41:59:12:64:cb:c2:0c:80:2f:56:c7:4f: 6e:f8:55:82:7f:bc:bf:f0:0b:2a:a4:d3:c4:02:92: 6c:20:a8:66:b9:4f:ca:32:88:4a:64:1e:26:87:b4: ce:2c:94:17:2e:b4:e4:2b:a2:b0:82:c0:c7:cb:69: 56:92:37:19:06:3b:5f:66:e7:f7:e7:4b:62:08:46: a5:a7:15:64:72:a3:d0:48:ef:7b:0b:e5:f8:78:2e: 0a:9f:5f:24:a8:5f:65:1d:c9:5b:ca:bc:3e:36:d1: 50:31:be:f3:88:cb:07:09:b2:fb:cc:77:4f:42:ae: 0c:f9:82:d4:96:7c:52:14:0f:5f:0c:6f:65:ec:13: 5d:9d:fa:7d:c1:68:63:50:da:94:be:a1:d7:de:b5: 07:83:17:a1:bc:6e:da:5d:1e:68:6f:20:27:cb:7c: 90:d1:2a:e3:66:ed:f3:49:d7:ab:e5:a2:d6:89:95: e1:e8:89:1e:b1:c3:06:18:0e:61:2f:62:b9:8d:56: af:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:4E:38:2A:43:A3:18:17:A4:6F:A3:78:60:39:98:2A:EE:A9:34:F0 X509v3 Authority Key Identifier: keyid:23:F2:6F:57:1E:38:65:A0:6A:13:93:65:55:D8:DA:A2:7B:43:39:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/05efcbf0-66ec-48d3-b221-0f09686d5818/0/23F26F571E3865A06A13936555D8DAA27B433933.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/23F26F571E3865A06A13936555D8DAA27B433933.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/05efcbf0-66ec-48d3-b221-0f09686d5818/0/23F26F571E3865A06A13936555D8DAA27B433933.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:52:01:5d:c5:23:fa:98:47:b7:18:37:ba:35:c0:9a:3c:a4: c5:0b:b2:41:b5:d3:00:48:17:05:68:c8:ab:70:df:9e:35:29: 90:bd:cd:f6:6a:19:06:47:df:8c:2c:9f:39:84:fb:0e:e3:fd: 11:de:f7:dc:52:33:73:ce:93:32:58:af:53:75:17:b5:6e:3d: 14:e0:26:a3:76:a8:3c:c0:0b:76:d7:02:d7:72:48:f4:86:a6: 71:11:27:d6:eb:5f:87:43:df:92:b1:90:f1:26:9c:ad:ad:23: c8:83:97:64:14:36:b9:9e:b9:d9:f1:98:8c:c4:21:6f:84:84: d9:5a:b0:16:d7:78:5a:d1:d8:4d:60:20:f1:2f:7c:f2:7d:dd: 15:22:d4:c9:80:a2:08:14:f5:17:a4:58:ae:76:d4:3d:90:47: 1d:fd:44:6b:cf:1b:de:95:2a:cd:1f:75:6c:bd:3e:82:8b:4c: ec:4f:51:c5:84:df:a4:2c:b8:00:33:90:bb:69:e5:1c:1f:ce: 48:7f:1e:fb:16:75:2e:60:73:90:55:df:22:7b:02:2f:df:d4: 3f:47:cd:dc:19:a1:3e:ef:38:f3:e4:e8:f1:cc:f8:27:e2:3b: 27:d2:ac:6d:34:49:c0:08:53:6f:b4:fe:9d:17:7f:71:77:ca: 9a:58:f1:02 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL4UdX/TZ3UfkLbJs2JLce/ehyn8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjNGMjZGNTcxRTM4NjVBMDZBMTM5MzY1NTVEOERBQTI3 QjQzMzkzMzAeFw0yNTEyMDEyMzE2NTNaFw0yNTEyMDUwOTEyNTNaMDMxMTAvBgNV BAMTKDdDNEUzODJBNDNBMzE4MTdBNDZGQTM3ODYwMzk5ODJBRUVBOTM0RjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqFKvNoqonvIoSwFzU++vIih5I Vf9p4BQcOSAemMaPJI8w/W9m3apcEzfPtGya3YcbOWCun/+Ee5MnlYQuFEFZEmTL wgyAL1bHT274VYJ/vL/wCyqk08QCkmwgqGa5T8oyiEpkHiaHtM4slBcutOQrorCC wMfLaVaSNxkGO19m5/fnS2IIRqWnFWRyo9BI73sL5fh4LgqfXySoX2UdyVvKvD42 0VAxvvOIywcJsvvMd09Crgz5gtSWfFIUD18Mb2XsE12d+n3BaGNQ2pS+odfetQeD F6G8btpdHmhvICfLfJDRKuNm7fNJ16vlotaJleHoiR6xwwYYDmEvYrmNVq/7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfE44KkOjGBekb6N4YDmYKu6pNPAwHwYDVR0j BBgwFoAUI/JvVx44ZaBqE5NlVdjaontDOTMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NWVmY2JmMC02NmVjLTQ4ZDMtYjIyMS0wZjA5Njg2ZDU4MTgvMC8yM0YyNkY1NzFF Mzg2NUEwNkExMzkzNjU1NUQ4REFBMjdCNDMzOTMzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjNGMjZGNTcxRTM4NjVBMDZBMTM5MzY1NTVEOERBQTI3QjQz MzkzMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDVlZmNiZjAtNjZlYy00OGQzLWIy MjEtMGYwOTY4NmQ1ODE4LzAvMjNGMjZGNTcxRTM4NjVBMDZBMTM5MzY1NTVEOERB QTI3QjQzMzkzMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHJSAV3FI/qYR7cYN7o1wJo8pMULskG10wBI FwVoyKtw3541KZC9zfZqGQZH34wsnzmE+w7j/RHe99xSM3POkzJYr1N1F7VuPRTg JqN2qDzAC3bXAtdySPSGpnERJ9brX4dD35KxkPEmnK2tI8iDl2QUNrmeudnxmIzE IW+EhNlasBbXeFrR2E1gIPEvfPJ93RUi1MmAoggU9RekWK521D2QRx39RGvPG96V Ks0fdWy9PoKLTOxPUcWE36QsuAAzkLtp5Rwfzkh/HvsWdS5gc5BV3yJ7Ai/f1D9H zdwZoT7vOPPk6PHM+CfiOyfSrG00ScAIU2+0/p0Xf3F3yppY8QI= -----END CERTIFICATE-----Generated at Wed Dec 3 15:32:08 2025 by rpki-client