This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.mft File: 923D4A10E1DBBF6927183BF3419F512FE4C1D003.mft (raw, json) Hash identifier: bw9h2NNxXEuhYd7NJS8Dg1Z+rnPyKxfS3O9YlFPHJxY= Subject key identifier: 79:29:C9:69:99:F9:75:EC:33:33:10:D4:29:BB:EE:AD:21:4B:F3:D8 Authority key identifier: 92:3D:4A:10:E1:DB:BF:69:27:18:3B:F3:41:9F:51:2F:E4:C1:D0:03 Certificate issuer: /CN=923D4A10E1DBBF6927183BF3419F512FE4C1D003 Certificate serial: 34A352F87A10927C59D65B69EFC2B9B68404B90D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923D4A10E1DBBF6927183BF3419F512FE4C1D003.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.mft Manifest number: 053E Signing time: Wed 03 Dec 2025 09:52:20 +0000 Manifest this update: Wed 03 Dec 2025 09:47:20 +0000 Manifest next update: Sat 06 Dec 2025 21:33:20 +0000 Files and hashes: 1: 3130332e3131322e3133392e302f32342d3234203d3e20313337333330.roa (hash: 8Vv5VC5lHskbGpjOq0r7bl7lFeNfDlBP9NjEDxxuRz8=) 2: 323430323a616134303a393a3a2f34382d3438203d3e20313337333330.roa (hash: SFCF3eZAfaB4k234A4Mal+M9wtz6OMi0W08cO5CL2c4=) 3: 323430323a616134303a31303a3a2f34382d3438203d3e20313337333330.roa (hash: JdwC9cZZayLXOr62V5QKdUDNIE+2Jw/cXMDWMiK/ID0=) 4: 323430323a616134303a3a2f33322d3332203d3e20313337333330.roa (hash: vtCuldzUtylI5t9/fCW+s++nz3SUBB8oSaeAOGcN8rI=) 5: 3130332e3131322e3133382e302f32342d3234203d3e20313531303433.roa (hash: k2s+fTciMW1AcHEt1AHKQvUa6LHEm5gF/5id8cjIJ3s=) 6: 323430323a616134303a373a3a2f34382d3438203d3e20313337333330.roa (hash: Z1axM0kuScQ1wsgtnc4QX9GvMZLuIsV8v/ScHLgFtiU=) 7: 3130332e3131322e3133362e302f32342d3234203d3e203633383638.roa (hash: pkEXO9z6ueQK4Zfm+Nf2SnX0XqqCEAzcqWTKKEbP/J8=) 8: 323430323a616134303a31353a3a2f34382d3438203d3e20313337333330.roa (hash: cplcGCMTKNbyST3IWkDxcP/n/AeMzarnQF1LNyGc5EY=) 9: 323430323a616134303a323a3a2f34382d3438203d3e20313337333330.roa (hash: vTpYTNK2Iedt3x6MQB/Xrh13AhkarFJV4HWTUjcGM/Y=) 10: 323430323a616134303a31343a3a2f34382d3438203d3e20313337333330.roa (hash: ra0Qf+ys3TjTOOjzu7G6xBCVp6PgE8NBjiFHNgjZfy0=) 11: 323430323a616134303a383a3a2f34382d3438203d3e20313337333330.roa (hash: vAnV4g431JCqkwtUthm0ie5OhAW6+m/w0zGsqm8XSOo=) 12: 323430323a616134303a31313a3a2f34382d3438203d3e20313337333330.roa (hash: BBYTiuzRjYx15TfoXkETOVppXlE7UGzNaI5UpnCSg40=) 13: 923D4A10E1DBBF6927183BF3419F512FE4C1D003.crl (hash: mFSyFdCJ6cKy1SPCEeDODdMM6dDCKfrOSFj5kKpTG9E=) 14: 323430323a616134303a333a3a2f34382d3438203d3e20313337333330.roa (hash: EtS1eZLUTwWRZJ7Ml0izUQhw9pv4Am/WahNfvxjKTrc=) 15: 323430323a616134303a343a3a2f34382d3438203d3e20313337333330.roa (hash: 1oWczp9RZm7lezuDVU+ofnA0tfj2lVP+IvFgjT0dOg4=) 16: 323430323a616134303a31323a3a2f34382d3438203d3e20313337333330.roa (hash: QFubIhbbL6UEYuVrgh+b+Oy9CvlVLee6F9ADT2A6kec=) 17: 323430323a616134303a313a3a2f34382d3438203d3e20313337333330.roa (hash: sfX//sKOJiEuG3MX815fs00hBV5qvYrVSNOlry6c+5c=) 18: 323430323a616134303a363a3a2f34382d3438203d3e20313337333330.roa (hash: tQTDeuCAhgIHqT4JvN+SYFcrP542mVZbW7Uy9er1rk4=) 19: 3130332e3131322e3133372e302f32342d3234203d3e203633383638.roa (hash: RepflhJLBvu2zVpJCecwi2+RZYpN1UHaxDcpF0oO+gg=) 20: 323430323a616134303a31333a3a2f34382d3438203d3e20313337333330.roa (hash: w4rnLSoK9Ogry5Be/7bEeNtK/st8upmlmof3uHLSQS4=) 21: 323430323a616134303a353a3a2f34382d3438203d3e20313337333330.roa (hash: Pt4kHivj/+/IoSa7PGPfSPyAlm/DgqrXfAGO9WlCDqE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.crl rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923D4A10E1DBBF6927183BF3419F512FE4C1D003.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:a3:52:f8:7a:10:92:7c:59:d6:5b:69:ef:c2:b9:b6:84:04:b9:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=923D4A10E1DBBF6927183BF3419F512FE4C1D003 Validity Not Before: Dec 3 09:47:20 2025 GMT Not After : Dec 6 21:33:20 2025 GMT Subject: CN=7929C96999F975EC333310D429BBEEAD214BF3D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:7a:bf:8b:b0:9f:ad:a6:ab:c0:c7:1e:b1:11: 17:6c:29:25:b1:6a:93:77:58:27:84:67:7f:e5:cb: fd:24:10:3b:04:1c:b1:05:ce:fc:be:5c:57:da:3b: 43:71:a4:0b:ab:82:51:48:e6:c8:7c:da:ea:68:26: ac:ad:3f:05:4f:6d:4d:44:02:01:9a:73:a0:44:ea: 2f:1e:f4:68:9b:8f:82:a5:02:7e:21:59:00:34:52: 0d:e2:dd:37:64:ac:2e:69:b0:72:48:31:c4:22:7c: eb:b3:f8:f9:8c:b2:30:fc:f9:37:9b:2f:0b:38:45: 5d:49:35:82:5c:27:85:e8:89:cc:c2:b0:8f:01:ea: 5f:39:8f:fe:51:b2:80:0a:38:da:d4:0b:49:8a:fb: 58:ce:9c:28:9d:8e:70:ab:fd:f4:93:c8:f5:f9:6c: cc:40:bc:4e:c6:9e:c7:7f:0b:18:46:ee:f7:a1:8c: e5:15:ee:a6:51:ae:71:a1:c7:2c:cd:d7:79:5d:9c: 89:62:6c:b4:b8:4d:52:91:a4:6d:2e:1d:f8:f4:94: 5c:29:b5:8c:a5:3e:4f:81:9f:99:de:26:c8:0a:dd: 59:e6:a7:e2:82:34:91:0d:28:dc:c5:55:d7:56:e0: 68:52:b0:8d:5d:52:0e:b4:8f:dd:b5:88:db:5a:b8: f0:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:29:C9:69:99:F9:75:EC:33:33:10:D4:29:BB:EE:AD:21:4B:F3:D8 X509v3 Authority Key Identifier: keyid:92:3D:4A:10:E1:DB:BF:69:27:18:3B:F3:41:9F:51:2F:E4:C1:D0:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923D4A10E1DBBF6927183BF3419F512FE4C1D003.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:53:19:70:83:93:43:2f:5d:0d:89:71:a5:99:e7:21:e2:fd: 08:59:ff:85:e7:ca:9d:2d:89:d9:3f:1b:76:8f:39:c2:87:d5: 49:49:e5:ec:c4:78:14:29:f2:03:8e:fd:4c:3e:7f:42:32:98: 0f:51:8b:7a:0a:63:85:63:e4:87:4e:5a:0a:6f:84:1b:74:fc: 89:69:71:b8:93:ee:42:7c:89:4a:75:b6:0f:4a:be:68:28:f2: d9:42:55:78:89:f9:c1:30:53:ed:09:d6:0a:ce:7b:e8:9c:71: c4:f9:56:68:a4:d2:ec:2b:95:87:03:c6:db:ad:2a:1e:9e:19: 54:90:b0:87:14:2c:1c:4c:0c:b5:39:9a:86:79:99:61:c4:17: aa:66:87:5f:3a:74:9f:a3:b5:4f:b4:1f:88:75:c5:04:28:39: 20:a6:86:e3:7c:fe:e2:d6:0e:f5:02:25:b6:76:48:af:6e:e3: 1f:49:20:9e:93:9b:76:87:57:dd:25:b6:78:15:7c:b4:07:51: 9e:f9:02:ef:a1:92:53:91:cf:42:0c:37:b4:66:70:e4:0c:76: 51:56:ef:1d:ca:d8:e7:a7:c8:28:af:9f:04:8b:26:a7:82:c8: 14:4b:1f:af:10:87:f2:94:97:2d:27:61:48:e4:c3:88:bb:fd: 43:9f:2d:35 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNKNS+HoQknxZ1ltp78K5toQEuQ0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTIzRDRBMTBFMURCQkY2OTI3MTgzQkYzNDE5RjUxMkZF NEMxRDAwMzAeFw0yNTEyMDMwOTQ3MjBaFw0yNTEyMDYyMTMzMjBaMDMxMTAvBgNV BAMTKDc5MjlDOTY5OTlGOTc1RUMzMzMzMTBENDI5QkJFRUFEMjE0QkYzRDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDer+LsJ+tpqvAxx6xERdsKSWx apN3WCeEZ3/ly/0kEDsEHLEFzvy+XFfaO0NxpAurglFI5sh82upoJqytPwVPbU1E AgGac6BE6i8e9Gibj4KlAn4hWQA0Ug3i3TdkrC5psHJIMcQifOuz+PmMsjD8+Teb Lws4RV1JNYJcJ4XoiczCsI8B6l85j/5RsoAKONrUC0mK+1jOnCidjnCr/fSTyPX5 bMxAvE7Gnsd/CxhG7vehjOUV7qZRrnGhxyzN13ldnIlibLS4TVKRpG0uHfj0lFwp tYylPk+Bn5neJsgK3Vnmp+KCNJENKNzFVddW4GhSsI1dUg60j921iNtauPDbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeSnJaZn5dewzMxDUKbvurSFL89gwHwYDVR0j BBgwFoAUkj1KEOHbv2knGDvzQZ9RL+TB0AMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YzM0ZmYwOC1kMjFmLTQyMGItODdkZi01MzEwM2I2ZGMyNTMvMC85MjNENEExMEUx REJCRjY5MjcxODNCRjM0MTlGNTEyRkU0QzFEMDAzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTIzRDRBMTBFMURCQkY2OTI3MTgzQkYzNDE5RjUxMkZFNEMx RDAwMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGMzNGZmMDgtZDIxZi00MjBiLTg3 ZGYtNTMxMDNiNmRjMjUzLzAvOTIzRDRBMTBFMURCQkY2OTI3MTgzQkYzNDE5RjUx MkZFNEMxRDAwMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACZTGXCDk0MvXQ2JcaWZ5yHi/QhZ/4Xnyp0t idk/G3aPOcKH1UlJ5ezEeBQp8gOO/Uw+f0IymA9Ri3oKY4Vj5IdOWgpvhBt0/Ilp cbiT7kJ8iUp1tg9Kvmgo8tlCVXiJ+cEwU+0J1grOe+icccT5Vmik0uwrlYcDxtut Kh6eGVSQsIcULBxMDLU5moZ5mWHEF6pmh186dJ+jtU+0H4h1xQQoOSCmhuN8/uLW DvUCJbZ2SK9u4x9JIJ6Tm3aHV90ltngVfLQHUZ75Au+hklORz0IMN7RmcOQMdlFW 7x3K2OenyCivnwSLJqeCyBRLH68Qh/KUly0nYUjkw4i7/UOfLTU= -----END CERTIFICATE-----Generated at Wed Dec 3 14:55:50 2025 by rpki-client