This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/5b72f71a-b9c2-4033-9675-d7707603a82c/0/02236913B46A9003C0645E6CC858EA54D6D7F4AC.mft File: 02236913B46A9003C0645E6CC858EA54D6D7F4AC.mft (raw, json) Hash identifier: ePGV5IuAcjZ5H3KNDX+gslpVEVFXM/dEbLMoUebvZuU= Subject key identifier: 4E:88:D4:CB:83:FB:75:62:2E:5B:43:63:93:7D:0D:4B:D9:A9:E6:C3 Authority key identifier: 02:23:69:13:B4:6A:90:03:C0:64:5E:6C:C8:58:EA:54:D6:D7:F4:AC Certificate issuer: /CN=02236913B46A9003C0645E6CC858EA54D6D7F4AC Certificate serial: 1B83017911663A5DEDCC3F0FED584BC745ECA674 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/02236913B46A9003C0645E6CC858EA54D6D7F4AC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5b72f71a-b9c2-4033-9675-d7707603a82c/0/02236913B46A9003C0645E6CC858EA54D6D7F4AC.mft Manifest number: 0127 Signing time: Thu 18 Dec 2025 09:11:05 +0000 Manifest this update: Thu 18 Dec 2025 09:06:05 +0000 Manifest next update: Sun 21 Dec 2025 20:59:05 +0000 Files and hashes: 1: 02236913B46A9003C0645E6CC858EA54D6D7F4AC.crl (hash: mjFEoDLUOoUtUF7KhCMux4KFPSmpHS07rpdriA3Qq5E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5b72f71a-b9c2-4033-9675-d7707603a82c/0/02236913B46A9003C0645E6CC858EA54D6D7F4AC.crl rsync://repo-rpki.idnic.net/repo/5b72f71a-b9c2-4033-9675-d7707603a82c/0/02236913B46A9003C0645E6CC858EA54D6D7F4AC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/02236913B46A9003C0645E6CC858EA54D6D7F4AC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 20:59:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:83:01:79:11:66:3a:5d:ed:cc:3f:0f:ed:58:4b:c7:45:ec:a6:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02236913B46A9003C0645E6CC858EA54D6D7F4AC Validity Not Before: Dec 18 09:06:05 2025 GMT Not After : Dec 21 20:59:05 2025 GMT Subject: CN=4E88D4CB83FB75622E5B4363937D0D4BD9A9E6C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:e0:37:24:50:4b:9c:f0:9b:7e:70:c5:80:95: 9b:d4:51:ab:55:3d:71:60:b1:ee:69:09:27:46:cf: dc:13:65:93:53:26:8a:39:6e:be:d8:34:12:db:3e: 28:3d:a3:36:c5:6c:e7:ee:c1:92:73:15:96:1b:21: fa:0c:fa:70:62:5b:f2:38:b3:5d:e4:ec:b0:b1:ee: d3:a2:0d:b1:f8:ce:c1:08:bc:02:57:d8:d8:b9:26: 03:26:fd:e0:ed:d9:2c:e0:b2:23:ff:cf:23:e4:1c: 88:f7:bf:7d:8a:48:ee:4c:05:a3:f9:d0:95:eb:8a: 6d:21:76:6a:ea:b2:e3:b8:bd:06:7e:0b:7a:81:63: 82:1a:b9:7f:83:6e:6d:4e:3d:01:bd:21:ff:69:e9: b4:15:94:d7:3d:b5:95:6a:20:e2:a4:88:2c:cc:ae: 27:44:5b:6a:0c:7b:9e:95:e7:b8:1b:29:a8:12:4d: 2e:0b:40:bc:56:30:7d:05:c9:5e:f7:94:a1:7c:f5: b2:c7:fd:bd:60:93:24:39:ae:7d:ba:ff:c8:40:a7: 1e:8f:33:cd:dd:b8:f8:14:b6:06:7b:68:04:3a:0f: f4:bf:4a:21:db:10:67:99:40:ef:8a:76:1a:6c:1a: 14:f1:3f:24:c0:7d:93:74:ea:91:47:87:6c:fb:90: 69:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:88:D4:CB:83:FB:75:62:2E:5B:43:63:93:7D:0D:4B:D9:A9:E6:C3 X509v3 Authority Key Identifier: keyid:02:23:69:13:B4:6A:90:03:C0:64:5E:6C:C8:58:EA:54:D6:D7:F4:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5b72f71a-b9c2-4033-9675-d7707603a82c/0/02236913B46A9003C0645E6CC858EA54D6D7F4AC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/02236913B46A9003C0645E6CC858EA54D6D7F4AC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5b72f71a-b9c2-4033-9675-d7707603a82c/0/02236913B46A9003C0645E6CC858EA54D6D7F4AC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:f4:7d:72:05:69:a3:50:92:ba:86:b9:76:6e:81:24:d3:cf: 25:7a:eb:1e:78:cc:97:0b:62:4d:72:48:ca:b6:cb:fd:23:3b: d4:65:b0:d8:6a:b1:3e:19:bb:49:15:25:38:55:d9:ff:cc:80: 0e:b1:12:76:7d:9d:f8:79:fc:d3:7a:cc:19:46:1e:ff:d8:2d: c0:2d:7e:d1:1a:ed:48:53:d1:63:a5:a2:d2:aa:aa:cf:f4:2c: 18:f9:a2:fd:6e:e5:10:d4:f8:1a:6c:09:2c:eb:b2:5c:57:9d: 9e:f9:5b:71:f5:72:ac:fd:e1:7c:ec:90:88:3f:bd:fd:69:42: 01:e9:69:2e:73:b1:42:6f:3d:04:2f:91:08:f8:e8:88:1e:86: e6:7d:11:a7:24:1f:b3:ef:ce:e1:60:4d:9c:ff:e6:65:2a:22: 81:1e:f9:6b:a1:e9:5a:39:9c:91:45:06:0e:55:ee:b2:2a:c7: ff:4c:7b:ec:d4:a6:b8:16:ab:b4:f0:72:be:91:d7:43:d2:58: cb:60:4d:4f:a7:47:fa:83:ae:30:76:91:2a:e9:14:a4:5e:87: ec:b7:93:7a:9d:60:a2:81:f9:85:32:b8:8c:ea:f0:a6:95:be: d7:67:76:27:46:f3:98:34:44:05:e9:98:e3:86:58:5d:b9:aa: ef:62:a4:e7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG4MBeRFmOl3tzD8P7VhLx0XspnQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDIyMzY5MTNCNDZBOTAwM0MwNjQ1RTZDQzg1OEVBNTRE NkQ3RjRBQzAeFw0yNTEyMTgwOTA2MDVaFw0yNTEyMjEyMDU5MDVaMDMxMTAvBgNV BAMTKDRFODhENENCODNGQjc1NjIyRTVCNDM2MzkzN0QwRDRCRDlBOUU2QzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC4DckUEuc8Jt+cMWAlZvUUatV PXFgse5pCSdGz9wTZZNTJoo5br7YNBLbPig9ozbFbOfuwZJzFZYbIfoM+nBiW/I4 s13k7LCx7tOiDbH4zsEIvAJX2Ni5JgMm/eDt2SzgsiP/zyPkHIj3v32KSO5MBaP5 0JXrim0hdmrqsuO4vQZ+C3qBY4IauX+Dbm1OPQG9If9p6bQVlNc9tZVqIOKkiCzM ridEW2oMe56V57gbKagSTS4LQLxWMH0FyV73lKF89bLH/b1gkyQ5rn26/8hApx6P M83duPgUtgZ7aAQ6D/S/SiHbEGeZQO+KdhpsGhTxPyTAfZN06pFHh2z7kGmpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTojUy4P7dWIuW0Njk30NS9mp5sMwHwYDVR0j BBgwFoAUAiNpE7RqkAPAZF5syFjqVNbX9KwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YjcyZjcxYS1iOWMyLTQwMzMtOTY3NS1kNzcwNzYwM2E4MmMvMC8wMjIzNjkxM0I0 NkE5MDAzQzA2NDVFNkNDODU4RUE1NEQ2RDdGNEFDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDIyMzY5MTNCNDZBOTAwM0MwNjQ1RTZDQzg1OEVBNTRENkQ3 RjRBQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWI3MmY3MWEtYjljMi00MDMzLTk2 NzUtZDc3MDc2MDNhODJjLzAvMDIyMzY5MTNCNDZBOTAwM0MwNjQ1RTZDQzg1OEVB NTRENkQ3RjRBQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEn0fXIFaaNQkrqGuXZugSTTzyV66x54zJcL Yk1ySMq2y/0jO9RlsNhqsT4Zu0kVJThV2f/MgA6xEnZ9nfh5/NN6zBlGHv/YLcAt ftEa7UhT0WOlotKqqs/0LBj5ov1u5RDU+BpsCSzrslxXnZ75W3H1cqz94XzskIg/ vf1pQgHpaS5zsUJvPQQvkQj46IgehuZ9EackH7PvzuFgTZz/5mUqIoEe+Wuh6Vo5 nJFFBg5V7rIqx/9Me+zUprgWq7Twcr6R10PSWMtgTU+nR/qDrjB2kSrpFKReh+y3 k3qdYKKB+YUyuIzq8KaVvtdndidG85g0RAXpmOOGWF25qu9ipOc= -----END CERTIFICATE-----Generated at Fri Dec 19 09:48:11 2025 by rpki-client