This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/137dfb88-fb50-48d1-b90d-e525102f4f5e/0/923816C042C964B6465A7BA06B2D44BDAF28D827.mft File: 923816C042C964B6465A7BA06B2D44BDAF28D827.mft (raw, json) Hash identifier: W/ozP9nuR7ZRt/SQ1Il/4dLYOfpAdLyvGWFLh5cxtPc= Subject key identifier: 71:55:4F:72:BF:F2:9C:29:02:9C:9F:92:65:A9:FC:D5:80:B9:C7:DE Authority key identifier: 92:38:16:C0:42:C9:64:B6:46:5A:7B:A0:6B:2D:44:BD:AF:28:D8:27 Certificate issuer: /CN=923816C042C964B6465A7BA06B2D44BDAF28D827 Certificate serial: 722273D0ED5C54C3A5CCE7F9F1AE469C8241B283 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923816C042C964B6465A7BA06B2D44BDAF28D827.cer Subject info access: rsync://repo-rpki.idnic.net/repo/137dfb88-fb50-48d1-b90d-e525102f4f5e/0/923816C042C964B6465A7BA06B2D44BDAF28D827.mft Manifest number: 0235 Signing time: Tue 02 Dec 2025 04:20:41 +0000 Manifest this update: Tue 02 Dec 2025 04:15:41 +0000 Manifest next update: Fri 05 Dec 2025 10:16:41 +0000 Files and hashes: 1: 3130332e3138392e35382e302f32332d3234203d3e20313439373538.roa (hash: o++ze4Phjg1umrR/hXTKNbdGbb6WGQVR25QY7sQRXiQ=) 2: 3130332e3138392e35392e302f32342d3234203d3e20313439373538.roa (hash: /IMjB2zzS/R4jg1G0u5f9Z9fEjTEZBoII5eQSPdhRUM=) 3: 923816C042C964B6465A7BA06B2D44BDAF28D827.crl (hash: p446nSjp5UV/NcTWXrSTSXt3h3JlS6rL0XIHNGAhNDQ=) 4: 3130332e3138392e35382e302f32342d3234203d3e20313439373538.roa (hash: DYdErYV9CziQI4JcelpgUN+i1lEMG53IFpsP0CaTa7Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/137dfb88-fb50-48d1-b90d-e525102f4f5e/0/923816C042C964B6465A7BA06B2D44BDAF28D827.crl rsync://repo-rpki.idnic.net/repo/137dfb88-fb50-48d1-b90d-e525102f4f5e/0/923816C042C964B6465A7BA06B2D44BDAF28D827.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923816C042C964B6465A7BA06B2D44BDAF28D827.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 10:16:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:22:73:d0:ed:5c:54:c3:a5:cc:e7:f9:f1:ae:46:9c:82:41:b2:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=923816C042C964B6465A7BA06B2D44BDAF28D827 Validity Not Before: Dec 2 04:15:41 2025 GMT Not After : Dec 5 10:16:41 2025 GMT Subject: CN=71554F72BFF29C29029C9F9265A9FCD580B9C7DE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:f7:fb:9d:1c:cc:32:60:e8:d2:8b:14:ff:91: c7:ed:78:12:3e:7b:89:70:83:c2:f2:bb:78:dc:94: fa:c1:91:f3:1f:5d:b9:83:12:f3:15:f8:d2:dd:18: ef:54:55:cc:64:6a:18:e7:c7:dd:6d:a9:53:89:7d: 86:54:53:40:c4:35:02:52:37:c1:99:ca:45:84:d3: 36:0d:4d:31:32:97:54:d4:bb:1b:21:a0:8f:2b:2f: 51:2b:94:35:4f:72:92:46:f8:2b:1a:cd:7f:a4:83: d9:3a:f7:b7:48:5e:69:f4:78:42:4d:64:61:da:a3: ec:42:f1:93:cb:ae:83:ed:26:4f:b0:7d:0b:c6:f5: e7:4c:c2:01:2d:25:50:33:a4:f0:d6:86:30:84:e7: 58:4d:7b:bb:d6:b5:67:cf:38:98:19:9b:f7:e7:ba: b6:07:09:07:ed:0f:a0:49:3f:63:fc:65:4b:7f:dc: 84:6f:3a:a0:5e:e2:db:ea:d6:ec:9f:4e:dd:ee:77: dd:28:e3:07:64:6b:7e:e5:53:bd:71:a6:a6:99:79: 91:5f:13:cf:dd:cb:ee:9d:3e:ec:42:01:60:a8:3f: e5:7f:a0:0f:ae:56:e0:93:0e:8f:e8:e2:b9:14:49: 4e:d7:88:4f:57:e8:3d:8f:f2:21:16:13:62:a1:b2: 6a:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:55:4F:72:BF:F2:9C:29:02:9C:9F:92:65:A9:FC:D5:80:B9:C7:DE X509v3 Authority Key Identifier: keyid:92:38:16:C0:42:C9:64:B6:46:5A:7B:A0:6B:2D:44:BD:AF:28:D8:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/137dfb88-fb50-48d1-b90d-e525102f4f5e/0/923816C042C964B6465A7BA06B2D44BDAF28D827.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923816C042C964B6465A7BA06B2D44BDAF28D827.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/137dfb88-fb50-48d1-b90d-e525102f4f5e/0/923816C042C964B6465A7BA06B2D44BDAF28D827.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:bc:7d:f6:5d:c4:a5:52:51:eb:57:4b:ea:ce:4c:3f:4c:8f: 8f:d3:d3:84:4f:f5:ce:7b:b3:18:81:f2:e9:5b:35:27:04:0c: 62:f2:b6:da:83:d2:1e:ed:16:8b:53:da:47:91:24:a8:0c:87: 1d:ee:7d:e1:e2:b1:b5:84:f3:c2:87:30:e6:d5:59:d8:6f:aa: 30:7f:a0:f2:f8:ab:b1:9f:3e:ac:a5:44:af:c9:16:7d:b8:14: 8e:db:0f:a7:bb:50:bf:c4:90:1d:c4:6b:01:38:82:55:94:7d: 81:d6:47:94:e8:00:12:61:4e:ba:87:cb:86:f5:dc:e5:7a:03: b8:47:af:2d:5f:95:53:15:7d:b3:6f:08:d2:a4:0d:c0:8c:af: 6d:3f:1b:d3:7c:b5:5d:88:9b:25:51:ab:cd:d9:f4:3f:7c:5e: f8:de:89:45:6b:4f:77:93:76:98:cf:67:4e:9c:fd:45:5f:48: fd:0e:e6:0f:43:e4:0a:25:e5:44:de:94:c0:52:c0:05:3d:d0: 1a:64:97:dd:24:6a:8c:1b:3d:61:b8:d9:7d:33:6a:37:d1:e5: d4:2a:87:3a:db:cb:12:9f:60:00:ba:12:5e:23:02:76:ac:cb: 4e:60:20:ef:c2:46:97:81:3b:08:f9:5d:89:c2:8b:7d:af:db: 92:28:30:24 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUciJz0O1cVMOlzOf58a5GnIJBsoMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTIzODE2QzA0MkM5NjRCNjQ2NUE3QkEwNkIyRDQ0QkRB RjI4RDgyNzAeFw0yNTEyMDIwNDE1NDFaFw0yNTEyMDUxMDE2NDFaMDMxMTAvBgNV BAMTKDcxNTU0RjcyQkZGMjlDMjkwMjlDOUY5MjY1QTlGQ0Q1ODBCOUM3REUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCj9/udHMwyYOjSixT/kcfteBI+ e4lwg8Lyu3jclPrBkfMfXbmDEvMV+NLdGO9UVcxkahjnx91tqVOJfYZUU0DENQJS N8GZykWE0zYNTTEyl1TUuxshoI8rL1ErlDVPcpJG+CsazX+kg9k697dIXmn0eEJN ZGHao+xC8ZPLroPtJk+wfQvG9edMwgEtJVAzpPDWhjCE51hNe7vWtWfPOJgZm/fn urYHCQftD6BJP2P8ZUt/3IRvOqBe4tvq1uyfTt3ud90o4wdka37lU71xpqaZeZFf E8/dy+6dPuxCAWCoP+V/oA+uVuCTDo/o4rkUSU7XiE9X6D2P8iEWE2KhsmqlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcVVPcr/ynCkCnJ+SZan81YC5x94wHwYDVR0j BBgwFoAUkjgWwELJZLZGWnugay1Eva8o2CcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MzdkZmI4OC1mYjUwLTQ4ZDEtYjkwZC1lNTI1MTAyZjRmNWUvMC85MjM4MTZDMDQy Qzk2NEI2NDY1QTdCQTA2QjJENDRCREFGMjhEODI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTIzODE2QzA0MkM5NjRCNjQ2NUE3QkEwNkIyRDQ0QkRBRjI4 RDgyNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTM3ZGZiODgtZmI1MC00OGQxLWI5 MGQtZTUyNTEwMmY0ZjVlLzAvOTIzODE2QzA0MkM5NjRCNjQ2NUE3QkEwNkIyRDQ0 QkRBRjI4RDgyNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEq8ffZdxKVSUetXS+rOTD9Mj4/T04RP9c57 sxiB8ulbNScEDGLyttqD0h7tFotT2keRJKgMhx3ufeHisbWE88KHMObVWdhvqjB/ oPL4q7GfPqylRK/JFn24FI7bD6e7UL/EkB3EawE4glWUfYHWR5ToABJhTrqHy4b1 3OV6A7hHry1flVMVfbNvCNKkDcCMr20/G9N8tV2ImyVRq83Z9D98XvjeiUVrT3eT dpjPZ06c/UVfSP0O5g9D5Aol5UTelMBSwAU90Bpkl90kaowbPWG42X0zajfR5dQq hzrbyxKfYAC6El4jAnasy05gIO/CRpeBOwj5XYnCi32v25IoMCQ= -----END CERTIFICATE-----Generated at Wed Dec 3 13:59:53 2025 by rpki-client