This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/6aa42742-89d2-49bb-8a3e-294c368971f5/0/523EE8D6F461B8FD4106F482C46C1029B1013145.mft File: 523EE8D6F461B8FD4106F482C46C1029B1013145.mft (raw, json) Hash identifier: 2E/EpEcx/CUjuY0gTPsnwc6rUoMouJd+VV/4JQBBBsI= Subject key identifier: BD:3F:E6:CB:F5:00:42:87:26:B2:BA:9A:03:C7:EF:EC:8A:5E:68:29 Authority key identifier: 52:3E:E8:D6:F4:61:B8:FD:41:06:F4:82:C4:6C:10:29:B1:01:31:45 Certificate issuer: /CN=523EE8D6F461B8FD4106F482C46C1029B1013145 Certificate serial: 62883ACACEFCE55C5EED32BB5F592FCF8C12C32A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/523EE8D6F461B8FD4106F482C46C1029B1013145.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6aa42742-89d2-49bb-8a3e-294c368971f5/0/523EE8D6F461B8FD4106F482C46C1029B1013145.mft Manifest number: E2 Signing time: Mon 01 Dec 2025 15:10:38 +0000 Manifest this update: Mon 01 Dec 2025 15:05:38 +0000 Manifest next update: Fri 05 Dec 2025 01:19:38 +0000 Files and hashes: 1: 3130332e31392e38302e302f32342d3234203d3e20313332363339.roa (hash: YEDjMiqzXqQQzIDtWpx+jx5Bn+2TYkAiFHsRj0775yM=) 2: 3130332e3132392e3233312e302f32342d3234203d3e20313332363339.roa (hash: jWc0sz86L+eDtr+nDMgQgH+2S7uRf5Y8Wu7u8v4zz0Q=) 3: 3130332e31392e38312e302f32342d3234203d3e20313332363339.roa (hash: jKwlGthiQpzXwnHyIqfnx5NGkz2sE+y3uVu40s6f6sc=) 4: 3130332e3132392e3233302e302f32342d3234203d3e20313332363339.roa (hash: zP2/XdcDOhp440RXruEyN+zWviJE7i53kBfkBKlQJ0I=) 5: 523EE8D6F461B8FD4106F482C46C1029B1013145.crl (hash: GYiYuhLyQ9QyEQ//6lxyGUV6Co9KsC3WDT7WHfK8hb4=) 6: 3130332e3132392e3233302e302f32332d3234203d3e20313332363339.roa (hash: H0hxzRE1P/k0NGsIoy/0kaAKznrWHPdRQxgiRW4T5Qo=) 7: 3130332e31392e38302e302f32332d3234203d3e20313332363339.roa (hash: z0HZjcHieRuZ5HHeSmTqSUrJvHMtgbLp6o8sJVRupVI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6aa42742-89d2-49bb-8a3e-294c368971f5/0/523EE8D6F461B8FD4106F482C46C1029B1013145.crl rsync://repo-rpki.idnic.net/repo/6aa42742-89d2-49bb-8a3e-294c368971f5/0/523EE8D6F461B8FD4106F482C46C1029B1013145.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/523EE8D6F461B8FD4106F482C46C1029B1013145.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 01:19:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:88:3a:ca:ce:fc:e5:5c:5e:ed:32:bb:5f:59:2f:cf:8c:12:c3:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=523EE8D6F461B8FD4106F482C46C1029B1013145 Validity Not Before: Dec 1 15:05:38 2025 GMT Not After : Dec 5 01:19:38 2025 GMT Subject: CN=BD3FE6CBF500428726B2BA9A03C7EFEC8A5E6829 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:48:48:09:77:54:90:bf:36:47:4c:76:32:32: 1a:d4:c9:e1:89:59:47:cc:40:34:ff:8b:20:9b:f6: 33:4f:a5:dc:49:56:1e:eb:a9:45:96:df:c7:9c:02: 81:34:6c:e8:4a:4a:2a:99:34:bf:fc:23:f4:75:68: f7:5e:78:4f:65:88:4a:4d:53:66:91:72:68:60:bb: f5:fd:55:4f:e0:84:8e:12:cc:19:62:35:94:6b:c0: 51:0d:19:2a:9b:0a:c7:ef:30:7e:a6:84:20:51:55: 4b:45:24:e6:27:bd:50:0b:93:5a:6a:41:74:46:7c: 2c:92:42:0c:17:1d:df:0c:c5:07:e7:ad:9f:43:ee: ed:f2:57:00:a9:8c:fb:21:f4:23:74:96:67:c4:94: 56:df:4c:1a:2e:e9:d0:5e:27:d3:6f:f3:5a:da:47: e0:bd:7e:a0:33:3c:28:a1:e6:e8:50:a9:33:6d:22: d3:e3:c7:13:13:ce:40:96:6a:a0:8b:7d:10:fb:ac: 8e:a3:89:19:57:b0:0c:be:13:51:37:5a:3b:d8:67: f3:ab:5a:68:8f:14:19:4f:58:76:d5:6a:a9:a3:6c: b3:5c:34:12:ae:dc:74:7b:40:dc:6e:4b:25:61:88: b3:e7:56:82:f2:8b:48:41:15:8d:4e:6e:51:b2:31: 5f:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:3F:E6:CB:F5:00:42:87:26:B2:BA:9A:03:C7:EF:EC:8A:5E:68:29 X509v3 Authority Key Identifier: keyid:52:3E:E8:D6:F4:61:B8:FD:41:06:F4:82:C4:6C:10:29:B1:01:31:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6aa42742-89d2-49bb-8a3e-294c368971f5/0/523EE8D6F461B8FD4106F482C46C1029B1013145.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/523EE8D6F461B8FD4106F482C46C1029B1013145.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6aa42742-89d2-49bb-8a3e-294c368971f5/0/523EE8D6F461B8FD4106F482C46C1029B1013145.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:49:00:b0:64:51:9c:8f:27:28:6e:ed:7e:82:df:1b:c6:bb: 1c:1b:a9:90:6d:bb:c9:90:b2:6f:ff:ee:f8:a0:52:8b:81:1b: cd:c6:4d:19:14:67:0b:13:87:ea:2f:64:c9:20:39:d1:94:94: 57:ec:f7:e0:16:ec:66:51:7b:72:e8:51:54:b1:1c:44:78:3f: 8b:a4:0c:98:c6:3a:36:81:3d:8d:fe:e3:e2:3c:31:21:e2:28: e7:97:b2:66:81:dd:2f:d0:98:3f:b1:9b:cd:1b:d1:d8:67:82: 8d:a2:fb:08:7f:d9:05:be:26:ea:fd:cf:85:30:b3:f6:26:31: 28:68:2c:71:65:e8:e5:32:34:4a:b6:73:88:24:74:96:ca:7d: 58:05:5d:a8:39:a9:15:d2:44:92:ea:5f:8c:87:4e:55:e6:aa: 6b:13:9d:d2:25:95:93:8d:87:5b:f1:2d:4e:92:32:c3:e0:f8: f3:98:13:72:86:d5:e3:94:0e:b7:98:7b:85:c8:c2:af:3c:16: 7f:65:ed:35:8d:6a:73:0c:02:2c:1d:49:e3:d8:16:c1:f3:64: 7b:39:09:4f:5e:05:32:0c:43:93:a6:5c:12:c3:60:23:39:45: 5a:7b:36:b5:4f:d3:72:f5:1b:37:15:0a:49:92:51:bf:e0:3e: c2:1c:e7:68 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYog6ys785Vxe7TK7X1kvz4wSwyowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTIzRUU4RDZGNDYxQjhGRDQxMDZGNDgyQzQ2QzEwMjlC MTAxMzE0NTAeFw0yNTEyMDExNTA1MzhaFw0yNTEyMDUwMTE5MzhaMDMxMTAvBgNV BAMTKEJEM0ZFNkNCRjUwMDQyODcyNkIyQkE5QTAzQzdFRkVDOEE1RTY4MjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRSEgJd1SQvzZHTHYyMhrUyeGJ WUfMQDT/iyCb9jNPpdxJVh7rqUWW38ecAoE0bOhKSiqZNL/8I/R1aPdeeE9liEpN U2aRcmhgu/X9VU/ghI4SzBliNZRrwFENGSqbCsfvMH6mhCBRVUtFJOYnvVALk1pq QXRGfCySQgwXHd8MxQfnrZ9D7u3yVwCpjPsh9CN0lmfElFbfTBou6dBeJ9Nv81ra R+C9fqAzPCih5uhQqTNtItPjxxMTzkCWaqCLfRD7rI6jiRlXsAy+E1E3WjvYZ/Or WmiPFBlPWHbVaqmjbLNcNBKu3HR7QNxuSyVhiLPnVoLyi0hBFY1OblGyMV9JAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvT/my/UAQocmsrqaA8fv7IpeaCkwHwYDVR0j BBgwFoAUUj7o1vRhuP1BBvSCxGwQKbEBMUUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 YWE0Mjc0Mi04OWQyLTQ5YmItOGEzZS0yOTRjMzY4OTcxZjUvMC81MjNFRThENkY0 NjFCOEZENDEwNkY0ODJDNDZDMTAyOUIxMDEzMTQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTIzRUU4RDZGNDYxQjhGRDQxMDZGNDgyQzQ2QzEwMjlCMTAx MzE0NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmFhNDI3NDItODlkMi00OWJiLThh M2UtMjk0YzM2ODk3MWY1LzAvNTIzRUU4RDZGNDYxQjhGRDQxMDZGNDgyQzQ2QzEw MjlCMTAxMzE0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF1JALBkUZyPJyhu7X6C3xvGuxwbqZBtu8mQ sm//7vigUouBG83GTRkUZwsTh+ovZMkgOdGUlFfs9+AW7GZRe3LoUVSxHER4P4uk DJjGOjaBPY3+4+I8MSHiKOeXsmaB3S/QmD+xm80b0dhngo2i+wh/2QW+Jur9z4Uw s/YmMShoLHFl6OUyNEq2c4gkdJbKfVgFXag5qRXSRJLqX4yHTlXmqmsTndIllZON h1vxLU6SMsPg+POYE3KG1eOUDreYe4XIwq88Fn9l7TWNanMMAiwdSePYFsHzZHs5 CU9eBTIMQ5OmXBLDYCM5RVp7NrVP03L1GzcVCkmSUb/gPsIc52g= -----END CERTIFICATE-----Generated at Wed Dec 3 13:56:47 2025 by rpki-client