This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/1/23C622F87618AB8B0422E7A6A46D2E91BFCC7E36.mft File: 23C622F87618AB8B0422E7A6A46D2E91BFCC7E36.mft (raw, json) Hash identifier: rYUwqpYWEtt/ailb6Wn0mLR99B7GnXCeMXKDkKygeoE= Subject key identifier: 57:6A:A1:BC:15:FB:36:E1:E6:34:E2:AB:3A:31:31:BB:70:E3:9A:29 Authority key identifier: 23:C6:22:F8:76:18:AB:8B:04:22:E7:A6:A4:6D:2E:91:BF:CC:7E:36 Certificate issuer: /CN=23C622F87618AB8B0422E7A6A46D2E91BFCC7E36 Certificate serial: 2423EE7EAA392B0E952656BC83A5C994D212252F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/23C622F87618AB8B0422E7A6A46D2E91BFCC7E36.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/1/23C622F87618AB8B0422E7A6A46D2E91BFCC7E36.mft Manifest number: F0 Signing time: Tue 02 Dec 2025 23:50:56 +0000 Manifest this update: Tue 02 Dec 2025 23:45:56 +0000 Manifest next update: Sat 06 Dec 2025 01:46:56 +0000 Files and hashes: 1: 23C622F87618AB8B0422E7A6A46D2E91BFCC7E36.crl (hash: DsKqA1rmWDPa/XTt70lhlCcR9txh9UKOQQWoPV6A42s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/1/23C622F87618AB8B0422E7A6A46D2E91BFCC7E36.crl rsync://repo-rpki.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/1/23C622F87618AB8B0422E7A6A46D2E91BFCC7E36.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/23C622F87618AB8B0422E7A6A46D2E91BFCC7E36.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 01:46:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:23:ee:7e:aa:39:2b:0e:95:26:56:bc:83:a5:c9:94:d2:12:25:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23C622F87618AB8B0422E7A6A46D2E91BFCC7E36 Validity Not Before: Dec 2 23:45:56 2025 GMT Not After : Dec 6 01:46:56 2025 GMT Subject: CN=576AA1BC15FB36E1E634E2AB3A3131BB70E39A29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:f9:d2:8d:31:e9:8c:0f:79:f3:db:4c:86:64: 84:d8:79:b4:cb:f8:24:1b:e0:51:84:db:5b:99:fa: cf:26:21:c1:6a:52:50:be:f4:fc:8a:86:e2:6f:97: e7:73:42:63:92:53:6c:ad:50:56:54:65:14:fb:12: 4f:49:f5:26:e8:92:a0:a6:66:87:e2:3d:90:ef:2c: 7b:2b:2b:e5:91:4b:16:61:01:56:23:5a:c4:62:71: 67:ac:be:3a:8b:d2:12:e1:a0:b5:82:ed:46:62:bd: aa:6a:81:c8:32:78:0a:88:ff:82:a5:3d:76:ea:c8: 7b:ee:0e:a4:e6:41:81:09:45:d3:b6:b7:03:25:b9: 12:60:05:a9:46:95:a6:33:2f:3c:ec:97:8c:5c:e9: 69:0a:65:8c:44:e7:75:a1:4c:d3:55:49:b9:5f:6e: 5a:63:4c:a8:30:e6:1b:aa:a6:ba:15:8f:ee:76:73: 1e:7d:41:fc:97:12:0d:10:78:13:5b:f5:cb:9b:df: c1:7f:fe:8e:87:5e:a3:4c:f6:49:c5:ee:79:22:56: a2:df:9c:e1:e6:be:29:1f:3f:47:55:06:14:37:20: d0:97:f9:22:5b:a6:4b:36:e5:83:c0:64:ff:e0:5e: a9:de:70:8f:21:d7:32:83:7e:7f:31:39:f7:07:f2: 4b:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:6A:A1:BC:15:FB:36:E1:E6:34:E2:AB:3A:31:31:BB:70:E3:9A:29 X509v3 Authority Key Identifier: keyid:23:C6:22:F8:76:18:AB:8B:04:22:E7:A6:A4:6D:2E:91:BF:CC:7E:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/1/23C622F87618AB8B0422E7A6A46D2E91BFCC7E36.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/23C622F87618AB8B0422E7A6A46D2E91BFCC7E36.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/1/23C622F87618AB8B0422E7A6A46D2E91BFCC7E36.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:72:48:93:77:c6:5d:b1:40:48:26:36:90:70:f9:03:03:e9: 7c:e9:ce:1c:13:20:ee:03:d4:a5:4f:b7:10:16:55:d3:9f:50: fb:3e:23:93:8f:ca:a2:97:63:ca:de:cb:45:4f:e0:66:24:73: 13:d5:69:97:27:98:61:dc:31:9d:23:e0:88:89:1b:af:f6:b5: c2:e1:29:37:bf:3c:7d:dd:0b:67:a2:f8:bc:44:8d:6c:90:73: 07:3e:86:14:ad:45:3e:dc:ab:d8:9b:19:ef:b9:31:da:e3:d6: 57:a2:fe:32:d3:a2:3f:00:4e:03:ef:8d:0a:14:2d:8d:82:28: 96:63:2f:b6:d1:c7:7e:cf:68:13:36:e1:15:cf:79:b5:62:61: 52:b7:40:c5:b9:23:c1:34:ad:3d:5c:59:fd:5e:b8:0e:58:5c: 97:d7:6e:bc:fd:eb:95:40:64:8e:ba:28:61:6b:c0:99:a7:37: f5:31:3c:25:49:16:b3:2c:3f:04:04:3a:b5:99:fa:5a:4e:c3: ec:fd:cf:9e:28:78:6a:90:95:3f:b4:6a:59:4a:b9:08:28:f7: ab:36:ac:52:43:fb:47:3b:79:65:83:99:13:af:a0:5d:0b:1c: a3:8d:08:0a:33:c9:2c:48:31:c9:10:93:55:4b:9f:2b:c0:39: 60:b9:7c:0b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJCPufqo5Kw6VJla8g6XJlNISJS8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjNDNjIyRjg3NjE4QUI4QjA0MjJFN0E2QTQ2RDJFOTFC RkNDN0UzNjAeFw0yNTEyMDIyMzQ1NTZaFw0yNTEyMDYwMTQ2NTZaMDMxMTAvBgNV BAMTKDU3NkFBMUJDMTVGQjM2RTFFNjM0RTJBQjNBMzEzMUJCNzBFMzlBMjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2+dKNMemMD3nz20yGZITYebTL +CQb4FGE21uZ+s8mIcFqUlC+9PyKhuJvl+dzQmOSU2ytUFZUZRT7Ek9J9SbokqCm ZofiPZDvLHsrK+WRSxZhAVYjWsRicWesvjqL0hLhoLWC7UZivapqgcgyeAqI/4Kl PXbqyHvuDqTmQYEJRdO2twMluRJgBalGlaYzLzzsl4xc6WkKZYxE53WhTNNVSblf blpjTKgw5huqproVj+52cx59QfyXEg0QeBNb9cub38F//o6HXqNM9knF7nkiVqLf nOHmvikfP0dVBhQ3INCX+SJbpks25YPAZP/gXqnecI8h1zKDfn8xOfcH8kulAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUV2qhvBX7NuHmNOKrOjExu3DjmikwHwYDVR0j BBgwFoAUI8Yi+HYYq4sEIuempG0ukb/MfjYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZjdkMjg5NC1jMDc3LTQyMWMtYmMxZC0zN2Q2ZjlkOTg5N2QvMS8yM0M2MjJGODc2 MThBQjhCMDQyMkU3QTZBNDZEMkU5MUJGQ0M3RTM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjNDNjIyRjg3NjE4QUI4QjA0MjJFN0E2QTQ2RDJFOTFCRkND N0UzNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGY3ZDI4OTQtYzA3Ny00MjFjLWJj MWQtMzdkNmY5ZDk4OTdkLzEvMjNDNjIyRjg3NjE4QUI4QjA0MjJFN0E2QTQ2RDJF OTFCRkNDN0UzNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHhySJN3xl2xQEgmNpBw+QMD6XzpzhwTIO4D 1KVPtxAWVdOfUPs+I5OPyqKXY8rey0VP4GYkcxPVaZcnmGHcMZ0j4IiJG6/2tcLh KTe/PH3dC2ei+LxEjWyQcwc+hhStRT7cq9ibGe+5Mdrj1lei/jLToj8ATgPvjQoU LY2CKJZjL7bRx37PaBM24RXPebViYVK3QMW5I8E0rT1cWf1euA5YXJfXbrz965VA ZI66KGFrwJmnN/UxPCVJFrMsPwQEOrWZ+lpOw+z9z54oeGqQlT+0allKuQgo96s2 rFJD+0c7eWWDmROvoF0LHKONCAozySxIMckQk1VLnyvAOWC5fAs= -----END CERTIFICATE-----Generated at Wed Dec 3 16:21:12 2025 by rpki-client