This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/c55eac97-31b5-4f33-82f4-5241470cbbbe/0/233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.mft File: 233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.mft (raw, json) Hash identifier: qj5OczbJ9qo43WfB6oNzavv7sCciCFdItJeYkeg0aas= Subject key identifier: C4:6F:51:A1:19:EC:21:C9:D9:A7:F7:F8:C5:0E:19:49:0F:EE:DA:BE Authority key identifier: 23:3A:F2:6D:7D:AE:6C:35:9E:B0:3A:D5:C6:FB:4B:4E:05:DD:F2:3D Certificate issuer: /CN=233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D Certificate serial: 51B0CD92C7B472E31A953C10B79DBA927749F715 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c55eac97-31b5-4f33-82f4-5241470cbbbe/0/233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.mft Manifest number: 052F Signing time: Tue 02 Dec 2025 02:31:55 +0000 Manifest this update: Tue 02 Dec 2025 02:26:55 +0000 Manifest next update: Fri 05 Dec 2025 10:22:55 +0000 Files and hashes: 1: 3230322e3136352e33322e302f32302d3234203d3e203137353338.roa (hash: bVRLDmnlkDr+Er81GecVOu1gTofkGixwnSL4beQ/iNg=) 2: 233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.crl (hash: oo3cTqw6Cg3w/IMHsM3ZsSTDqPnIpGQz7H5q5NcYYF4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c55eac97-31b5-4f33-82f4-5241470cbbbe/0/233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.crl rsync://repo-rpki.idnic.net/repo/c55eac97-31b5-4f33-82f4-5241470cbbbe/0/233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 10:22:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:b0:cd:92:c7:b4:72:e3:1a:95:3c:10:b7:9d:ba:92:77:49:f7:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D Validity Not Before: Dec 2 02:26:55 2025 GMT Not After : Dec 5 10:22:55 2025 GMT Subject: CN=C46F51A119EC21C9D9A7F7F8C50E19490FEEDABE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:f1:5b:79:94:a8:81:ea:5c:6f:d4:7f:97:c9: 2f:73:99:54:34:9f:1e:1e:b0:82:57:f1:6d:6b:7b: f9:0e:12:4a:cf:c7:45:7f:ab:e8:d8:cb:ba:1b:11: 90:39:10:db:67:d6:b6:fe:be:5b:71:96:aa:09:30: 33:74:e9:a6:6b:cb:f6:94:30:ba:e7:9c:f4:17:89: 60:0f:8c:e5:95:8c:62:9b:66:6c:7e:b2:6d:c6:96: 6d:b4:9c:f3:59:ad:3d:a3:89:bf:8a:17:61:dd:ad: dc:07:8a:48:57:43:4c:21:83:47:8a:f2:72:12:c8: 0d:d5:4e:da:ec:95:84:14:bd:c7:1a:41:ea:43:83: f1:38:95:0a:b2:9f:1d:e6:ff:24:ea:06:f5:d8:dd: 10:f0:50:55:9c:75:17:a3:3f:a7:f6:2e:8e:5b:8b: 8e:7f:86:d3:f6:ad:33:f1:7b:65:fd:65:c3:cf:d4: 1b:97:89:a0:ea:c4:af:3b:67:35:a9:be:50:3a:8c: e4:59:bc:4a:f5:47:5d:28:2e:b0:1f:d5:98:3d:72: f3:d8:ec:d6:8f:f0:2c:df:9b:00:71:56:09:e9:88: 9c:fc:0a:b2:36:ac:fb:b3:23:89:f1:2e:2c:61:7d: 01:b9:3a:d6:a0:17:25:80:bf:dd:56:f3:6f:eb:52: b8:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:6F:51:A1:19:EC:21:C9:D9:A7:F7:F8:C5:0E:19:49:0F:EE:DA:BE X509v3 Authority Key Identifier: keyid:23:3A:F2:6D:7D:AE:6C:35:9E:B0:3A:D5:C6:FB:4B:4E:05:DD:F2:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c55eac97-31b5-4f33-82f4-5241470cbbbe/0/233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c55eac97-31b5-4f33-82f4-5241470cbbbe/0/233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:09:6d:07:59:1c:ba:c9:da:d8:ba:89:28:77:ba:c8:38:26: 94:df:56:35:58:60:07:14:c6:43:66:1a:ea:9f:fa:be:18:e8: ad:15:f6:6b:c0:ed:50:0c:15:a0:23:98:27:af:29:7c:c8:2d: 55:1a:0d:6a:12:1f:a9:ed:aa:f4:c1:9d:69:32:59:0a:1a:44: 15:a7:31:07:c9:c9:3b:c7:99:54:64:6f:51:f0:a6:9d:ee:2e: 4a:85:a8:22:32:9d:d2:82:cd:e4:52:74:69:dc:a7:4e:a3:1d: 40:b7:35:f8:36:7f:0e:f2:e2:f0:a4:ba:40:55:7b:9a:64:60: 5a:ef:f4:af:59:3e:e2:7e:1b:36:29:95:dd:51:e2:fb:fc:41: 13:0a:51:8d:b8:68:04:5e:f0:c4:24:75:4f:23:6f:b0:6f:91: c6:31:50:e8:ea:38:45:da:52:23:d6:66:09:23:e1:76:65:e0: 74:f6:7d:c4:de:3d:29:1d:c5:8c:72:88:53:18:62:57:dd:b4: f9:53:73:ae:f2:8f:01:80:81:2a:07:74:16:c2:f4:c6:bf:5a: 65:96:ab:35:eb:2c:ec:8b:f5:37:c2:da:6f:dc:4b:94:c3:c0: 43:e5:7c:1e:ae:f0:58:df:ec:fd:74:64:cf:d4:24:4d:43:b4: 8d:45:a4:5f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUbDNkse0cuMalTwQt526kndJ9xUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjMzQUYyNkQ3REFFNkMzNTlFQjAzQUQ1QzZGQjRCNEUw NURERjIzRDAeFw0yNTEyMDIwMjI2NTVaFw0yNTEyMDUxMDIyNTVaMDMxMTAvBgNV BAMTKEM0NkY1MUExMTlFQzIxQzlEOUE3RjdGOEM1MEUxOTQ5MEZFRURBQkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC28Vt5lKiB6lxv1H+XyS9zmVQ0 nx4esIJX8W1re/kOEkrPx0V/q+jYy7obEZA5ENtn1rb+vltxlqoJMDN06aZry/aU MLrnnPQXiWAPjOWVjGKbZmx+sm3Glm20nPNZrT2jib+KF2HdrdwHikhXQ0whg0eK 8nISyA3VTtrslYQUvccaQepDg/E4lQqynx3m/yTqBvXY3RDwUFWcdRejP6f2Lo5b i45/htP2rTPxe2X9ZcPP1BuXiaDqxK87ZzWpvlA6jORZvEr1R10oLrAf1Zg9cvPY 7NaP8CzfmwBxVgnpiJz8CrI2rPuzI4nxLixhfQG5OtagFyWAv91W82/rUrifAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxG9RoRnsIcnZp/f4xQ4ZSQ/u2r4wHwYDVR0j BBgwFoAUIzrybX2ubDWesDrVxvtLTgXd8j0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NTVlYWM5Ny0zMWI1LTRmMzMtODJmNC01MjQxNDcwY2JiYmUvMC8yMzNBRjI2RDdE QUU2QzM1OUVCMDNBRDVDNkZCNEI0RTA1RERGMjNELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjMzQUYyNkQ3REFFNkMzNTlFQjAzQUQ1QzZGQjRCNEUwNURE RjIzRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzU1ZWFjOTctMzFiNS00ZjMzLTgy ZjQtNTI0MTQ3MGNiYmJlLzAvMjMzQUYyNkQ3REFFNkMzNTlFQjAzQUQ1QzZGQjRC NEUwNURERjIzRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC4JbQdZHLrJ2ti6iSh3usg4JpTfVjVYYAcU xkNmGuqf+r4Y6K0V9mvA7VAMFaAjmCevKXzILVUaDWoSH6ntqvTBnWkyWQoaRBWn MQfJyTvHmVRkb1Hwpp3uLkqFqCIyndKCzeRSdGncp06jHUC3Nfg2fw7y4vCkukBV e5pkYFrv9K9ZPuJ+GzYpld1R4vv8QRMKUY24aARe8MQkdU8jb7BvkcYxUOjqOEXa UiPWZgkj4XZl4HT2fcTePSkdxYxyiFMYYlfdtPlTc67yjwGAgSoHdBbC9Ma/WmWW qzXrLOyL9TfC2m/cS5TDwEPlfB6u8Fjf7P10ZM/UJE1DtI1FpF8= -----END CERTIFICATE-----Generated at Wed Dec 3 14:44:21 2025 by rpki-client