This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/e595b7d4-3aab-4b83-94b2-c4267b2ae0a0/0/23093B0E58201D339EAA3983654297729EB3D7FD.mft File: 23093B0E58201D339EAA3983654297729EB3D7FD.mft (raw, json) Hash identifier: UL8l+Q2Zu+mNIrF/HQmz3KSwK+UJUAMbhH/Om3xG46U= Subject key identifier: EE:FE:0F:0D:FD:8B:FE:F6:E0:29:8C:04:13:4C:B7:2A:6E:0F:F0:BD Authority key identifier: 23:09:3B:0E:58:20:1D:33:9E:AA:39:83:65:42:97:72:9E:B3:D7:FD Certificate issuer: /CN=23093B0E58201D339EAA3983654297729EB3D7FD Certificate serial: 2EADEC8CF1A6075A59D30912A6C1C3C3060E047D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/23093B0E58201D339EAA3983654297729EB3D7FD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e595b7d4-3aab-4b83-94b2-c4267b2ae0a0/0/23093B0E58201D339EAA3983654297729EB3D7FD.mft Manifest number: 028D Signing time: Tue 02 Dec 2025 03:52:28 +0000 Manifest this update: Tue 02 Dec 2025 03:47:28 +0000 Manifest next update: Fri 05 Dec 2025 04:31:28 +0000 Files and hashes: 1: 3130332e3136362e3231322e302f32332d3233203d3e20313431393537.roa (hash: I3IiUxQVB0K6AHHH6hadb9zyg87yVWrhTKPdESrGNC4=) 2: 3130332e3136362e3231332e302f32342d3234203d3e20313431393537.roa (hash: +q+2lGJsfE4ezep6xSn8bk3REU1n8oNlxOWiZdJkL5s=) 3: 23093B0E58201D339EAA3983654297729EB3D7FD.crl (hash: mME6QLAPiYDDANZf46HAMiSCYU6aifxQVDcUZ1niTnw=) 4: 3130332e3136362e3231322e302f32342d3234203d3e20313431393537.roa (hash: 1T/005+fcGS3bHhfnGHMDWx9bEqPsgYOiwCk3qFgrG8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e595b7d4-3aab-4b83-94b2-c4267b2ae0a0/0/23093B0E58201D339EAA3983654297729EB3D7FD.crl rsync://repo-rpki.idnic.net/repo/e595b7d4-3aab-4b83-94b2-c4267b2ae0a0/0/23093B0E58201D339EAA3983654297729EB3D7FD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/23093B0E58201D339EAA3983654297729EB3D7FD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 04:31:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:ad:ec:8c:f1:a6:07:5a:59:d3:09:12:a6:c1:c3:c3:06:0e:04:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23093B0E58201D339EAA3983654297729EB3D7FD Validity Not Before: Dec 2 03:47:28 2025 GMT Not After : Dec 5 04:31:28 2025 GMT Subject: CN=EEFE0F0DFD8BFEF6E0298C04134CB72A6E0FF0BD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:12:8a:a6:12:10:b1:9c:35:ab:a7:86:5d:ac: 7b:80:08:8a:2f:c9:82:d5:a7:19:c7:21:e3:88:d1: fa:7d:e7:5f:ce:ed:cb:a0:c0:99:2b:b0:65:61:90: 9d:24:02:0f:67:69:53:41:f3:81:6f:7b:15:65:cc: 38:4d:74:33:94:34:d0:bf:df:3b:16:30:1f:a9:63: 7a:41:a6:6d:3e:cb:66:4e:3e:2a:ed:8e:00:f4:f5: 28:47:94:5b:93:16:a1:86:55:40:01:7c:c9:e1:0d: 7d:34:1c:5d:7f:fa:b0:c7:9e:ab:4a:6b:0c:e3:79: f4:2c:b7:14:e9:3d:1d:e4:f3:57:8e:54:09:a1:c6: 65:5a:e3:4a:75:c7:a1:45:3c:0b:fa:79:5c:4c:a3: d7:ad:6d:0f:16:02:ca:b8:a5:a1:dd:34:4c:0c:0b: bb:91:7d:a2:87:4e:32:30:05:41:c7:53:d4:85:c2: 15:25:20:be:c4:ec:32:e5:c0:ff:0c:bc:14:63:86: ba:32:49:3d:38:37:2b:57:1d:a2:85:d5:a4:e2:cc: e8:d1:92:02:48:cb:4e:e9:83:de:3d:ee:eb:37:6d: e0:63:07:e1:80:32:72:f3:ac:f5:94:8a:b7:37:9a: de:08:de:bb:3f:0b:5b:c7:1f:90:39:24:eb:e9:04: 3d:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:FE:0F:0D:FD:8B:FE:F6:E0:29:8C:04:13:4C:B7:2A:6E:0F:F0:BD X509v3 Authority Key Identifier: keyid:23:09:3B:0E:58:20:1D:33:9E:AA:39:83:65:42:97:72:9E:B3:D7:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e595b7d4-3aab-4b83-94b2-c4267b2ae0a0/0/23093B0E58201D339EAA3983654297729EB3D7FD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/23093B0E58201D339EAA3983654297729EB3D7FD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e595b7d4-3aab-4b83-94b2-c4267b2ae0a0/0/23093B0E58201D339EAA3983654297729EB3D7FD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:ee:db:22:79:bd:e5:69:b3:3a:b0:2b:b9:35:87:f9:de:67: ec:cd:9a:2d:8d:43:73:8a:fd:53:29:77:66:d0:11:23:9d:55: d8:d7:e0:ce:1b:a8:53:9a:a8:c5:7d:f4:9e:98:4f:fb:3d:3d: b5:f5:40:b8:ab:1b:16:6d:15:e4:56:6f:7c:e9:66:e8:70:2a: 72:7d:9f:98:57:13:05:40:88:7d:1e:2e:61:ab:89:86:c8:50: 80:b6:c7:ef:c9:6d:f6:b9:ed:ed:d7:9a:0d:13:0a:77:4d:b7: 7a:7b:ae:c1:e8:02:2e:56:46:6e:92:eb:43:f2:4c:17:97:87: f3:25:8d:26:3a:e1:e0:97:54:3a:6b:2d:d9:65:7b:e0:f9:43: 34:72:1d:69:3b:4d:50:fd:dc:40:da:e9:c8:c6:5c:d8:92:b6: dd:d7:c3:0f:95:ed:67:41:2f:3c:5c:63:1b:f6:dc:85:6b:00: 5d:1c:c0:94:dd:63:30:c5:4c:24:7c:d1:b1:73:23:16:2c:e6: 17:7b:45:c0:8a:00:de:e1:bf:41:c1:1f:f3:b8:27:59:66:db: 73:25:c5:bd:62:85:71:a2:9e:9f:60:18:26:44:25:ba:bd:08: bc:af:aa:d2:fd:7d:43:e4:6c:0b:0b:78:7c:82:d5:fa:b3:10: d8:79:2d:2a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULq3sjPGmB1pZ0wkSpsHDwwYOBH0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjMwOTNCMEU1ODIwMUQzMzlFQUEzOTgzNjU0Mjk3NzI5 RUIzRDdGRDAeFw0yNTEyMDIwMzQ3MjhaFw0yNTEyMDUwNDMxMjhaMDMxMTAvBgNV BAMTKEVFRkUwRjBERkQ4QkZFRjZFMDI5OEMwNDEzNENCNzJBNkUwRkYwQkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvEoqmEhCxnDWrp4ZdrHuACIov yYLVpxnHIeOI0fp951/O7cugwJkrsGVhkJ0kAg9naVNB84FvexVlzDhNdDOUNNC/ 3zsWMB+pY3pBpm0+y2ZOPirtjgD09ShHlFuTFqGGVUABfMnhDX00HF1/+rDHnqtK awzjefQstxTpPR3k81eOVAmhxmVa40p1x6FFPAv6eVxMo9etbQ8WAsq4paHdNEwM C7uRfaKHTjIwBUHHU9SFwhUlIL7E7DLlwP8MvBRjhroyST04NytXHaKF1aTizOjR kgJIy07pg9497us3beBjB+GAMnLzrPWUirc3mt4I3rs/C1vHH5A5JOvpBD2xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7v4PDf2L/vbgKYwEE0y3Km4P8L0wHwYDVR0j BBgwFoAUIwk7DlggHTOeqjmDZUKXcp6z1/0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NTk1YjdkNC0zYWFiLTRiODMtOTRiMi1jNDI2N2IyYWUwYTAvMC8yMzA5M0IwRTU4 MjAxRDMzOUVBQTM5ODM2NTQyOTc3MjlFQjNEN0ZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjMwOTNCMEU1ODIwMUQzMzlFQUEzOTgzNjU0Mjk3NzI5RUIz RDdGRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTU5NWI3ZDQtM2FhYi00YjgzLTk0 YjItYzQyNjdiMmFlMGEwLzAvMjMwOTNCMEU1ODIwMUQzMzlFQUEzOTgzNjU0Mjk3 NzI5RUIzRDdGRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACnu2yJ5veVpszqwK7k1h/neZ+zNmi2NQ3OK /VMpd2bQESOdVdjX4M4bqFOaqMV99J6YT/s9PbX1QLirGxZtFeRWb3zpZuhwKnJ9 n5hXEwVAiH0eLmGriYbIUIC2x+/Jbfa57e3Xmg0TCndNt3p7rsHoAi5WRm6S60Py TBeXh/MljSY64eCXVDprLdlle+D5QzRyHWk7TVD93EDa6cjGXNiStt3Xww+V7WdB LzxcYxv23IVrAF0cwJTdYzDFTCR80bFzIxYs5hd7RcCKAN7hv0HBH/O4J1lm23Ml xb1ihXGinp9gGCZEJbq9CLyvqtL9fUPkbAsLeHyC1fqzENh5LSo= -----END CERTIFICATE-----Generated at Wed Dec 3 14:43:45 2025 by rpki-client