This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/46e47c6d-e624-477c-ae18-d32f22c96204/0/23132D6AC2A0ED41996F54C00A8A59B23B00EEB6.mft File: 23132D6AC2A0ED41996F54C00A8A59B23B00EEB6.mft (raw, json) Hash identifier: 1XUfpuU++6l6p9WTW36JDNxLjXsQ9TuOn1NxhKheZHg= Subject key identifier: E4:3D:F2:93:BC:A4:B1:A8:B2:A1:8E:5E:76:07:84:BA:A3:85:2A:84 Authority key identifier: 23:13:2D:6A:C2:A0:ED:41:99:6F:54:C0:0A:8A:59:B2:3B:00:EE:B6 Certificate issuer: /CN=23132D6AC2A0ED41996F54C00A8A59B23B00EEB6 Certificate serial: 165608EE85DCE0E0D642E5BC8556BC11DBAF92AF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/23132D6AC2A0ED41996F54C00A8A59B23B00EEB6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/46e47c6d-e624-477c-ae18-d32f22c96204/0/23132D6AC2A0ED41996F54C00A8A59B23B00EEB6.mft Manifest number: 013F Signing time: Mon 01 Dec 2025 15:52:05 +0000 Manifest this update: Mon 01 Dec 2025 15:47:05 +0000 Manifest next update: Thu 04 Dec 2025 23:35:05 +0000 Files and hashes: 1: 23132D6AC2A0ED41996F54C00A8A59B23B00EEB6.crl (hash: eL2lKtz8zhdiltwlzFVXGSXhBj17RTOyaVcZ/se2C+g=) 2: 3231302e37392e3133352e302f32342d3234203d3e20313338303936.roa (hash: JvAuAWjeLfp0XViXv+7ZCgiJcBbHkm/DO53vlhMWqfE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/46e47c6d-e624-477c-ae18-d32f22c96204/0/23132D6AC2A0ED41996F54C00A8A59B23B00EEB6.crl rsync://repo-rpki.idnic.net/repo/46e47c6d-e624-477c-ae18-d32f22c96204/0/23132D6AC2A0ED41996F54C00A8A59B23B00EEB6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/23132D6AC2A0ED41996F54C00A8A59B23B00EEB6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Dec 2025 23:35:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:56:08:ee:85:dc:e0:e0:d6:42:e5:bc:85:56:bc:11:db:af:92:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23132D6AC2A0ED41996F54C00A8A59B23B00EEB6 Validity Not Before: Dec 1 15:47:05 2025 GMT Not After : Dec 4 23:35:05 2025 GMT Subject: CN=E43DF293BCA4B1A8B2A18E5E760784BAA3852A84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:a2:03:14:53:bb:18:a0:3d:0a:88:68:8b:bc: f3:2c:fe:a6:7b:92:73:8b:84:54:52:51:96:7b:cb: 3c:a1:48:f0:eb:40:67:2a:55:ab:08:18:30:bf:ab: fc:5c:e7:9c:72:fe:ed:d7:ab:e8:d9:88:d7:67:44: d9:23:61:fb:5f:6e:63:cf:ed:95:a8:6c:47:27:61: 06:f8:d1:e4:b7:61:3a:ff:6d:47:75:94:4d:68:14: 8b:5b:6f:7d:30:74:22:3e:6e:f8:35:16:56:f8:04: cf:0e:6c:a6:94:d1:c1:19:43:08:3d:10:c0:d6:67: 06:a5:e6:d2:6b:3f:a0:13:52:99:82:8f:a8:cd:57: f7:ed:87:f4:0d:f0:a6:47:c4:83:17:c4:f4:e7:14: cc:16:03:c1:70:f5:50:f9:e2:db:f4:d5:63:71:4f: 86:71:91:b2:27:56:27:93:c8:b8:08:3c:c3:7a:57: c7:13:de:db:50:e1:c8:19:2f:a7:c1:33:74:b9:88: 2d:a2:ba:d8:46:fb:ef:d0:7f:db:bc:88:fe:51:f9: 5c:75:75:7f:e1:ec:43:41:f2:cc:b1:cf:8d:1a:e1: 9a:86:3c:cd:65:15:4c:16:d9:d3:e1:7a:b0:b8:5a: 6b:54:d5:2c:1b:07:b9:76:fd:36:78:55:86:95:86: 67:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:3D:F2:93:BC:A4:B1:A8:B2:A1:8E:5E:76:07:84:BA:A3:85:2A:84 X509v3 Authority Key Identifier: keyid:23:13:2D:6A:C2:A0:ED:41:99:6F:54:C0:0A:8A:59:B2:3B:00:EE:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/46e47c6d-e624-477c-ae18-d32f22c96204/0/23132D6AC2A0ED41996F54C00A8A59B23B00EEB6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/23132D6AC2A0ED41996F54C00A8A59B23B00EEB6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/46e47c6d-e624-477c-ae18-d32f22c96204/0/23132D6AC2A0ED41996F54C00A8A59B23B00EEB6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:88:e9:9a:f9:43:f7:05:e7:11:50:6d:5f:bd:cf:c6:76:f1: 7c:c0:2d:08:54:82:ec:53:99:c9:e7:50:ba:5e:da:86:36:1b: e5:90:01:b3:83:5e:dd:8a:75:5f:92:f4:03:6e:c7:3b:2c:db: 7f:52:29:16:4c:5a:6b:84:9a:fc:ec:71:8b:eb:f8:53:b0:ad: c8:fc:fe:63:c5:be:dd:eb:91:e0:07:fa:cf:e3:f6:73:51:f9: 47:b7:41:5b:aa:79:fc:05:e5:d6:94:a7:78:46:19:d9:05:53: 8f:e3:62:b7:26:1e:43:7b:bd:a7:34:a7:7a:9a:3d:7e:2f:ac: 07:1f:38:1d:cf:63:74:71:19:b8:f9:b6:60:23:87:37:04:55: 0d:7a:f5:4a:d4:d3:b4:43:0c:e2:b6:37:83:e0:a5:36:4b:a0: 6c:c8:d4:1d:6e:01:4a:31:41:b1:3b:a1:cb:43:60:1d:41:da: 86:c3:02:eb:ea:78:fa:29:22:68:eb:44:22:11:49:c4:95:e7: 78:e6:d7:12:ff:70:25:a0:7e:74:b5:6a:3f:e9:f0:a6:b2:f0: fa:70:e5:8f:42:f3:cf:98:25:e5:5d:f1:d1:d7:70:78:61:1a: 86:f0:71:67:71:03:c6:7f:34:51:5a:f1:5b:4f:7a:21:86:b0: 7d:6e:ac:54 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFlYI7oXc4ODWQuW8hVa8Eduvkq8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjMxMzJENkFDMkEwRUQ0MTk5NkY1NEMwMEE4QTU5QjIz QjAwRUVCNjAeFw0yNTEyMDExNTQ3MDVaFw0yNTEyMDQyMzM1MDVaMDMxMTAvBgNV BAMTKEU0M0RGMjkzQkNBNEIxQThCMkExOEU1RTc2MDc4NEJBQTM4NTJBODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzogMUU7sYoD0KiGiLvPMs/qZ7 knOLhFRSUZZ7yzyhSPDrQGcqVasIGDC/q/xc55xy/u3Xq+jZiNdnRNkjYftfbmPP 7ZWobEcnYQb40eS3YTr/bUd1lE1oFItbb30wdCI+bvg1Flb4BM8ObKaU0cEZQwg9 EMDWZwal5tJrP6ATUpmCj6jNV/fth/QN8KZHxIMXxPTnFMwWA8Fw9VD54tv01WNx T4ZxkbInVieTyLgIPMN6V8cT3ttQ4cgZL6fBM3S5iC2iuthG++/Qf9u8iP5R+Vx1 dX/h7ENB8syxz40a4ZqGPM1lFUwW2dPherC4WmtU1SwbB7l2/TZ4VYaVhmcLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5D3yk7yksaiyoY5edgeEuqOFKoQwHwYDVR0j BBgwFoAUIxMtasKg7UGZb1TACopZsjsA7rYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NmU0N2M2ZC1lNjI0LTQ3N2MtYWUxOC1kMzJmMjJjOTYyMDQvMC8yMzEzMkQ2QUMy QTBFRDQxOTk2RjU0QzAwQThBNTlCMjNCMDBFRUI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjMxMzJENkFDMkEwRUQ0MTk5NkY1NEMwMEE4QTU5QjIzQjAw RUVCNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDZlNDdjNmQtZTYyNC00NzdjLWFl MTgtZDMyZjIyYzk2MjA0LzAvMjMxMzJENkFDMkEwRUQ0MTk5NkY1NEMwMEE4QTU5 QjIzQjAwRUVCNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACGI6Zr5Q/cF5xFQbV+9z8Z28XzALQhUguxT mcnnULpe2oY2G+WQAbODXt2KdV+S9ANuxzss239SKRZMWmuEmvzscYvr+FOwrcj8 /mPFvt3rkeAH+s/j9nNR+Ue3QVuqefwF5daUp3hGGdkFU4/jYrcmHkN7vac0p3qa PX4vrAcfOB3PY3RxGbj5tmAjhzcEVQ169UrU07RDDOK2N4PgpTZLoGzI1B1uAUox QbE7octDYB1B2obDAuvqePopImjrRCIRScSV53jm1xL/cCWgfnS1aj/p8Kay8Ppw 5Y9C88+YJeVd8dHXcHhhGobwcWdxA8Z/NFFa8VtPeiGGsH1urFQ= -----END CERTIFICATE-----Generated at Wed Dec 3 14:44:38 2025 by rpki-client