This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/bbed6dc4-d38b-44ba-9f0b-428455b276ee/0/23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C.mft File: 23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C.mft (raw, json) Hash identifier: X7D1E8a+HtjQ8oqpVQyDH/E16/IM7NetaQs6dZv31iA= Subject key identifier: 1C:D0:73:D1:02:80:1B:2B:B1:0E:33:C3:48:E1:73:2B:58:F3:BE:A9 Authority key identifier: 23:BE:8C:EA:61:94:06:F9:D8:60:B1:F9:7E:E8:F7:ED:77:E8:EE:7C Certificate issuer: /CN=23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C Certificate serial: 5F69A632FC780F4966A251CCAAD78DE48065CA8F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bbed6dc4-d38b-44ba-9f0b-428455b276ee/0/23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C.mft Manifest number: BB Signing time: Sun 07 Dec 2025 10:22:12 +0000 Manifest this update: Sun 07 Dec 2025 10:17:12 +0000 Manifest next update: Wed 10 Dec 2025 13:45:12 +0000 Files and hashes: 1: 3136302e32302e3235302e302f32342d3234203d3e20313532383132.roa (hash: TgOS2DIzKKN1li7GhbP8QE2EiuFzEQeHETrSLQ8zd80=) 2: 23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C.crl (hash: F/GOjc8cQBw1LviUC/0407bCH/W6ozjuF9Iw/7tU+no=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bbed6dc4-d38b-44ba-9f0b-428455b276ee/0/23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C.crl rsync://repo-rpki.idnic.net/repo/bbed6dc4-d38b-44ba-9f0b-428455b276ee/0/23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 06:55:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:69:a6:32:fc:78:0f:49:66:a2:51:cc:aa:d7:8d:e4:80:65:ca:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C Validity Not Before: Dec 7 10:17:12 2025 GMT Not After : Dec 10 13:45:12 2025 GMT Subject: CN=1CD073D102801B2BB10E33C348E1732B58F3BEA9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:cf:79:58:41:07:ba:eb:4c:76:53:12:0a:61: fb:f4:bf:b2:fe:7b:e0:e4:f4:08:47:19:5e:c0:9c: 3e:7b:48:95:21:a2:41:51:48:da:c3:19:c0:c5:e0: b3:66:60:4b:90:75:70:73:a3:3f:5f:46:28:6a:42: 02:b6:e6:28:e5:92:2e:3a:7f:f4:9e:7b:ef:d4:88: cd:f8:b8:66:62:8c:b8:d3:bd:60:58:2d:75:8d:eb: 03:cc:8c:bd:97:bd:42:c8:53:58:1c:c4:fd:45:fe: dc:e7:46:6b:48:7a:d8:f0:0c:52:f0:70:d1:34:ba: 4d:27:ec:91:00:4d:18:64:68:96:6d:aa:b9:61:73: 61:fb:ad:f7:31:4b:ee:f0:78:fc:36:30:33:e6:1d: 21:80:8a:90:b3:9f:6a:52:a9:3a:35:eb:70:92:97: 4f:16:b8:98:4a:17:c4:fb:19:23:aa:a9:fd:06:bd: 6e:85:80:3e:62:1d:65:25:83:3d:90:7f:63:a6:17: 6d:69:81:7f:4b:22:d7:02:d2:ce:3f:da:0b:f4:55: 1d:d0:39:4f:25:3d:f1:09:c0:0c:28:10:35:48:8f: a8:54:b0:83:62:ab:91:e4:f3:1a:99:68:1f:50:1e: b2:1b:1e:e1:3a:06:c4:5b:8e:00:8c:b0:2e:4e:ad: 77:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:D0:73:D1:02:80:1B:2B:B1:0E:33:C3:48:E1:73:2B:58:F3:BE:A9 X509v3 Authority Key Identifier: keyid:23:BE:8C:EA:61:94:06:F9:D8:60:B1:F9:7E:E8:F7:ED:77:E8:EE:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bbed6dc4-d38b-44ba-9f0b-428455b276ee/0/23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bbed6dc4-d38b-44ba-9f0b-428455b276ee/0/23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:b3:70:f7:06:d8:a7:72:59:fb:6c:0d:a9:53:82:9f:1f:32: 76:d6:61:f4:27:0b:c4:34:17:e0:2e:74:1a:03:10:67:6b:02: 55:a7:fc:eb:4e:91:6f:a5:04:80:ec:04:f4:59:b9:9b:b2:9e: 58:02:1d:4f:58:98:57:58:9e:30:98:ae:b5:04:43:d8:f7:bb: c0:82:c6:b6:33:52:13:ca:f3:bb:01:c4:27:5a:b9:a9:02:2d: 0a:1c:82:93:fc:82:01:f2:5b:cb:e9:b1:b4:97:c5:f0:41:57: fb:46:40:84:18:42:e0:dd:dd:d0:d7:5e:8f:51:74:a4:b5:20: e3:c0:a1:3c:68:cd:c3:c7:da:9a:9e:8a:e7:10:02:65:bb:a5: 9b:d3:1f:13:5b:82:28:40:1d:63:92:b0:46:c4:48:41:45:ec: 47:d4:13:89:dc:ac:f4:3b:29:51:54:4c:c5:f3:ee:0d:53:3e: 2e:fa:f9:db:9f:e3:3d:7c:2a:8f:f9:93:2d:87:04:f7:0a:2f: 59:78:fe:51:4c:76:5d:e9:1b:88:fb:cc:8f:0c:23:3f:75:64: 80:33:d5:7d:80:af:31:7b:2b:e5:db:25:80:ab:fc:40:f1:55: 03:01:fe:79:fe:64:d8:67:7c:72:d8:48:82:11:ce:18:43:2e: 5e:bb:aa:cb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUX2mmMvx4D0lmolHMqteN5IBlyo8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjNCRThDRUE2MTk0MDZGOUQ4NjBCMUY5N0VFOEY3RUQ3 N0U4RUU3QzAeFw0yNTEyMDcxMDE3MTJaFw0yNTEyMTAxMzQ1MTJaMDMxMTAvBgNV BAMTKDFDRDA3M0QxMDI4MDFCMkJCMTBFMzNDMzQ4RTE3MzJCNThGM0JFQTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9z3lYQQe660x2UxIKYfv0v7L+ e+Dk9AhHGV7AnD57SJUhokFRSNrDGcDF4LNmYEuQdXBzoz9fRihqQgK25ijlki46 f/See+/UiM34uGZijLjTvWBYLXWN6wPMjL2XvULIU1gcxP1F/tznRmtIetjwDFLw cNE0uk0n7JEATRhkaJZtqrlhc2H7rfcxS+7wePw2MDPmHSGAipCzn2pSqTo163CS l08WuJhKF8T7GSOqqf0GvW6FgD5iHWUlgz2Qf2OmF21pgX9LItcC0s4/2gv0VR3Q OU8lPfEJwAwoEDVIj6hUsINiq5Hk8xqZaB9QHrIbHuE6BsRbjgCMsC5OrXflAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHNBz0QKAGyuxDjPDSOFzK1jzvqkwHwYDVR0j BBgwFoAUI76M6mGUBvnYYLH5fuj37Xfo7nwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i YmVkNmRjNC1kMzhiLTQ0YmEtOWYwYi00Mjg0NTViMjc2ZWUvMC8yM0JFOENFQTYx OTQwNkY5RDg2MEIxRjk3RUU4RjdFRDc3RThFRTdDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMjNCRThDRUE2MTk0MDZGOUQ4NjBCMUY5N0VFOEY3RUQ3N0U4 RUU3Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmJlZDZkYzQtZDM4Yi00NGJhLTlm MGItNDI4NDU1YjI3NmVlLzAvMjNCRThDRUE2MTk0MDZGOUQ4NjBCMUY5N0VFOEY3 RUQ3N0U4RUU3Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC6zcPcG2KdyWftsDalTgp8fMnbWYfQnC8Q0 F+AudBoDEGdrAlWn/OtOkW+lBIDsBPRZuZuynlgCHU9YmFdYnjCYrrUEQ9j3u8CC xrYzUhPK87sBxCdauakCLQocgpP8ggHyW8vpsbSXxfBBV/tGQIQYQuDd3dDXXo9R dKS1IOPAoTxozcPH2pqeiucQAmW7pZvTHxNbgihAHWOSsEbESEFF7EfUE4ncrPQ7 KVFUTMXz7g1TPi76+duf4z18Ko/5ky2HBPcKL1l4/lFMdl3pG4j7zI8MIz91ZIAz 1X2ArzF7K+XbJYCr/EDxVQMB/nn+ZNhnfHLYSIIRzhhDLl67qss= -----END CERTIFICATE-----Generated at Sun Dec 7 18:52:32 2025 by rpki-client