This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/c8d0e640-22e9-441c-8634-f9525307da76/0/023DAF793CD2BAF6C7BC7A45A13DF236B7401661.mft File: 023DAF793CD2BAF6C7BC7A45A13DF236B7401661.mft (raw, json) Hash identifier: LImlopivLGOfBnj85wqigOQoygPvYupWrsb3y4ZtasM= Subject key identifier: 44:F7:CD:AC:11:60:C9:F7:BE:D0:B3:2D:02:12:18:68:87:7D:32:0A Authority key identifier: 02:3D:AF:79:3C:D2:BA:F6:C7:BC:7A:45:A1:3D:F2:36:B7:40:16:61 Certificate issuer: /CN=023DAF793CD2BAF6C7BC7A45A13DF236B7401661 Certificate serial: 15DA82876469B05356E407DDFCDC49B20D6A4154 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/023DAF793CD2BAF6C7BC7A45A13DF236B7401661.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c8d0e640-22e9-441c-8634-f9525307da76/0/023DAF793CD2BAF6C7BC7A45A13DF236B7401661.mft Manifest number: 0287 Signing time: Tue 02 Dec 2025 02:04:44 +0000 Manifest this update: Tue 02 Dec 2025 01:59:44 +0000 Manifest next update: Fri 05 Dec 2025 08:30:44 +0000 Files and hashes: 1: 3130332e3134392e3132312e302f32342d3234203d3e20313430303233.roa (hash: Y0QuciRTpFDwvV/OBPdTjgLcEkiudatiiHEhsbTutWI=) 2: 023DAF793CD2BAF6C7BC7A45A13DF236B7401661.crl (hash: k449ns9pZ2Cvjfx4gLz7TXzNhrZ0p/cF7T6N+7kZg+g=) 3: 3130332e3134392e3132302e302f32332d3233203d3e20313339393532.roa (hash: FyCE3LyMNMrGnPbdrpK5+sH4y62xX8bxVpZUT6w7BJU=) 4: 3130332e3134392e3132302e302f32332d3233203d3e2037373133.roa (hash: G0y3tssGsefR1ItOMtc1BYHuZ0hgATuC18s9snklT+E=) 5: 3130332e3134392e3132302e302f32342d3234203d3e2037373133.roa (hash: kzF5yTng2nsAricqtS3yvK+w9DfNlAwfQFzAL4v5DWA=) 6: 3130332e3134392e3132312e302f32342d3234203d3e20313339393532.roa (hash: g6JykGSCyvPJN6suwP4pksfv3CU4McJpDF6g+WQNj7o=) 7: 3130332e3134392e3132302e302f32342d3234203d3e20313339393532.roa (hash: 2PpG67/Hif4l3pFwRCwEQ7HNcb5HgHsPLTC3ZJMlI9c=) 8: 3130332e3134392e3132302e302f32332d3233203d3e20313430303233.roa (hash: B08azy3XQsiTZf5UppG1ngPrOYAEwHH6x3322yJGfrI=) 9: 3130332e3134392e3132302e302f32332d3234203d3e20313430303233.roa (hash: btn366wZk5X/LbhkknHgrSEj+dlkWgK4+w6HiC3XS9g=) 10: 3130332e3134392e3132312e302f32342d3234203d3e2037373133.roa (hash: t1OWN6gm90SvImzwws28CQ53gTfOaLXKxfqrgXh94Y4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c8d0e640-22e9-441c-8634-f9525307da76/0/023DAF793CD2BAF6C7BC7A45A13DF236B7401661.crl rsync://repo-rpki.idnic.net/repo/c8d0e640-22e9-441c-8634-f9525307da76/0/023DAF793CD2BAF6C7BC7A45A13DF236B7401661.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/023DAF793CD2BAF6C7BC7A45A13DF236B7401661.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 08:30:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:da:82:87:64:69:b0:53:56:e4:07:dd:fc:dc:49:b2:0d:6a:41:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=023DAF793CD2BAF6C7BC7A45A13DF236B7401661 Validity Not Before: Dec 2 01:59:44 2025 GMT Not After : Dec 5 08:30:44 2025 GMT Subject: CN=44F7CDAC1160C9F7BED0B32D02121868877D320A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:7b:ca:8a:4b:07:de:93:74:72:8d:3f:27:1c: fe:3b:fa:53:19:f1:17:cd:43:6e:72:4a:93:5d:f3: ba:b9:73:2d:7e:21:13:c0:33:3a:89:c8:5f:f6:1b: a9:ac:1c:75:87:ab:78:78:02:ac:7e:d8:cf:d0:17: fe:4a:1d:03:8a:84:47:52:b2:06:d7:72:a7:e0:f6: 09:77:0b:66:c6:e6:bf:fc:e9:28:04:aa:37:be:9b: 2a:35:b0:ea:bf:6c:de:16:de:91:88:9f:a9:16:67: ea:33:44:56:bb:24:b8:c4:93:63:87:48:e9:ce:75: 87:0f:b4:09:cb:c3:84:8d:a1:06:db:b7:62:f3:10: d4:be:4e:41:14:6d:61:b0:5b:8e:62:ed:ec:96:29: 6f:41:ac:c9:50:88:36:42:9c:a3:a6:0a:d3:bc:ea: 2a:17:91:38:c7:31:b1:3d:1d:3e:81:64:79:01:09: c8:c9:00:9b:51:a1:a2:5c:fa:00:ae:3c:41:7b:85: ae:f5:cf:fe:aa:17:e0:ce:8b:24:53:85:5a:7e:9d: 18:88:4a:0c:f8:8b:d5:b9:3e:7f:68:49:f2:6b:37: 3b:4d:77:49:e1:07:dc:c2:6a:06:9a:f8:d4:56:91: 2c:38:56:66:4e:1e:8d:bf:13:e4:b3:37:32:27:a3: 56:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:F7:CD:AC:11:60:C9:F7:BE:D0:B3:2D:02:12:18:68:87:7D:32:0A X509v3 Authority Key Identifier: keyid:02:3D:AF:79:3C:D2:BA:F6:C7:BC:7A:45:A1:3D:F2:36:B7:40:16:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c8d0e640-22e9-441c-8634-f9525307da76/0/023DAF793CD2BAF6C7BC7A45A13DF236B7401661.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/023DAF793CD2BAF6C7BC7A45A13DF236B7401661.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c8d0e640-22e9-441c-8634-f9525307da76/0/023DAF793CD2BAF6C7BC7A45A13DF236B7401661.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:15:05:a5:55:47:33:02:ca:f2:e1:98:e1:11:03:5c:36:fe: a1:00:54:88:e7:ab:16:de:73:66:54:6c:ea:2d:23:c7:d6:c9: 91:d1:b1:a5:b9:d7:fa:b5:1a:4a:4b:60:0c:9c:66:34:58:7a: 1c:6c:86:30:da:2c:5c:67:a1:85:fb:ed:6f:95:83:06:91:0a: d2:61:7c:34:89:7b:7f:8a:41:9f:69:39:e7:0d:22:35:b2:d6: 9d:63:d0:39:42:8f:3d:b9:34:8d:7d:70:f4:61:16:dd:2c:da: be:2f:82:36:f2:35:72:ea:53:10:50:7f:38:65:50:f7:15:0e: e4:d6:4c:3a:00:c3:92:d3:93:47:1b:42:a6:2a:50:22:bc:41: c4:35:b0:21:2a:81:e3:04:44:3a:67:8f:39:8c:f4:30:31:9a: 7b:ad:26:07:9d:a3:0a:ee:3b:4f:0a:51:3d:0d:24:65:71:f6: 0e:23:4e:97:4b:cb:dc:02:5f:21:4d:58:9b:dc:24:a5:ee:f9: f5:66:2c:08:1c:32:52:41:58:41:3d:63:bc:25:06:06:b2:21: 96:a6:73:4a:7a:55:a3:01:f6:79:07:78:b3:c2:ff:5b:32:e8: ad:7f:47:95:df:3c:7e:e2:79:12:7b:94:74:d1:b4:b5:c1:cf: 19:b4:93:bd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFdqCh2RpsFNW5Afd/NxJsg1qQVQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDIzREFGNzkzQ0QyQkFGNkM3QkM3QTQ1QTEzREYyMzZC NzQwMTY2MTAeFw0yNTEyMDIwMTU5NDRaFw0yNTEyMDUwODMwNDRaMDMxMTAvBgNV BAMTKDQ0RjdDREFDMTE2MEM5RjdCRUQwQjMyRDAyMTIxODY4ODc3RDMyMEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCle8qKSwfek3RyjT8nHP47+lMZ 8RfNQ25ySpNd87q5cy1+IRPAMzqJyF/2G6msHHWHq3h4Aqx+2M/QF/5KHQOKhEdS sgbXcqfg9gl3C2bG5r/86SgEqje+myo1sOq/bN4W3pGIn6kWZ+ozRFa7JLjEk2OH SOnOdYcPtAnLw4SNoQbbt2LzENS+TkEUbWGwW45i7eyWKW9BrMlQiDZCnKOmCtO8 6ioXkTjHMbE9HT6BZHkBCcjJAJtRoaJc+gCuPEF7ha71z/6qF+DOiyRThVp+nRiI Sgz4i9W5Pn9oSfJrNztNd0nhB9zCagaa+NRWkSw4VmZOHo2/E+SzNzIno1bNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURPfNrBFgyfe+0LMtAhIYaId9MgowHwYDVR0j BBgwFoAUAj2veTzSuvbHvHpFoT3yNrdAFmEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j OGQwZTY0MC0yMmU5LTQ0MWMtODYzNC1mOTUyNTMwN2RhNzYvMC8wMjNEQUY3OTND RDJCQUY2QzdCQzdBNDVBMTNERjIzNkI3NDAxNjYxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDIzREFGNzkzQ0QyQkFGNkM3QkM3QTQ1QTEzREYyMzZCNzQw MTY2MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzhkMGU2NDAtMjJlOS00NDFjLTg2 MzQtZjk1MjUzMDdkYTc2LzAvMDIzREFGNzkzQ0QyQkFGNkM3QkM3QTQ1QTEzREYy MzZCNzQwMTY2MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACoVBaVVRzMCyvLhmOERA1w2/qEAVIjnqxbe c2ZUbOotI8fWyZHRsaW51/q1GkpLYAycZjRYehxshjDaLFxnoYX77W+VgwaRCtJh fDSJe3+KQZ9pOecNIjWy1p1j0DlCjz25NI19cPRhFt0s2r4vgjbyNXLqUxBQfzhl UPcVDuTWTDoAw5LTk0cbQqYqUCK8QcQ1sCEqgeMERDpnjzmM9DAxmnutJgedowru O08KUT0NJGVx9g4jTpdLy9wCXyFNWJvcJKXu+fVmLAgcMlJBWEE9Y7wlBgayIZam c0p6VaMB9nkHeLPC/1sy6K1/R5XfPH7ieRJ7lHTRtLXBzxm0k70= -----END CERTIFICATE-----Generated at Wed Dec 3 14:44:05 2025 by rpki-client