This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/23475A86BB5C515DDD7753B6555E267A3F5C28F4.mft File: 23475A86BB5C515DDD7753B6555E267A3F5C28F4.mft (raw, json) Hash identifier: Wv1R0m5Kw2zKwxvTucFV8L57BgkXqLSv25EnYk1RfD0= Subject key identifier: 45:7E:7B:03:91:49:75:6A:F4:70:80:C8:6F:07:D8:83:59:81:86:7B Authority key identifier: 23:47:5A:86:BB:5C:51:5D:DD:77:53:B6:55:5E:26:7A:3F:5C:28:F4 Certificate issuer: /CN=23475A86BB5C515DDD7753B6555E267A3F5C28F4 Certificate serial: 16B2CA7C5034AF7205B4362EB6B5BE59F2F34D48 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/23475A86BB5C515DDD7753B6555E267A3F5C28F4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/23475A86BB5C515DDD7753B6555E267A3F5C28F4.mft Manifest number: BE Signing time: Sun 07 Dec 2025 12:50:39 +0000 Manifest this update: Sun 07 Dec 2025 12:45:39 +0000 Manifest next update: Wed 10 Dec 2025 16:22:39 +0000 Files and hashes: 1: 3136302e32322e33312e302f32342d3234203d3e20313532373938.roa (hash: 5aPZi9EHvbfyOxIPMTjzibe1Bxih6lwkA1KW+hUQT4E=) 2: 3136302e32322e33302e302f32342d3234203d3e20313532373938.roa (hash: /K4mylpcHmr+sO+7dTgSimoSvEZOrC1jLffnv1dbPQ8=) 3: 23475A86BB5C515DDD7753B6555E267A3F5C28F4.crl (hash: 8+v4E4dUpHWLlFtJP8axihWwi5EoGGOXO/SI6KICk6w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/23475A86BB5C515DDD7753B6555E267A3F5C28F4.crl rsync://repo-rpki.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/23475A86BB5C515DDD7753B6555E267A3F5C28F4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/23475A86BB5C515DDD7753B6555E267A3F5C28F4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 06:55:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:b2:ca:7c:50:34:af:72:05:b4:36:2e:b6:b5:be:59:f2:f3:4d:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23475A86BB5C515DDD7753B6555E267A3F5C28F4 Validity Not Before: Dec 7 12:45:39 2025 GMT Not After : Dec 10 16:22:39 2025 GMT Subject: CN=457E7B039149756AF47080C86F07D8835981867B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:17:be:cd:d5:b7:c6:10:7d:37:a8:f1:33:a5: 55:2b:c4:73:ac:4d:3b:5a:b2:57:19:4d:56:40:f0: 00:3a:a3:c6:b9:40:fd:a3:0b:1d:57:ea:93:d4:ee: d6:e8:d4:af:83:55:98:0d:1b:a2:c5:1d:07:14:ec: cc:0a:9e:6f:69:d8:42:8f:9e:74:17:45:6a:9a:e2: 5b:c7:e4:15:dd:06:1b:08:7f:12:10:cd:25:19:59: 35:e0:24:ca:5a:3f:59:30:db:ba:36:0f:53:01:ac: a8:be:08:b9:d7:3d:f4:b7:c2:37:38:f8:25:f9:79: 32:ff:4e:a0:20:22:91:39:8a:19:a9:4a:b7:8a:7b: 6b:4d:65:07:f2:1b:fc:ac:19:72:de:5e:c9:8f:83: 24:d4:28:86:d3:03:2e:c4:be:e4:93:cd:56:03:b9: 6d:b7:df:8e:97:87:af:76:4b:7e:47:7d:20:92:1a: aa:4e:b4:ea:41:78:b3:b8:05:01:5b:6a:5b:5d:cf: 3f:2c:b4:0a:57:40:ed:12:71:3c:91:5a:96:8d:8a: 99:44:2d:5c:ac:91:5f:01:65:e9:82:7d:ad:9d:74: a0:46:a9:f8:f8:4f:2a:95:85:4b:2e:9d:60:31:cb: bf:80:f9:da:fb:ed:ff:8d:a3:f6:01:b4:7e:53:11: 36:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:7E:7B:03:91:49:75:6A:F4:70:80:C8:6F:07:D8:83:59:81:86:7B X509v3 Authority Key Identifier: keyid:23:47:5A:86:BB:5C:51:5D:DD:77:53:B6:55:5E:26:7A:3F:5C:28:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/23475A86BB5C515DDD7753B6555E267A3F5C28F4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/23475A86BB5C515DDD7753B6555E267A3F5C28F4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/23475A86BB5C515DDD7753B6555E267A3F5C28F4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:8b:7b:b7:fe:6b:68:63:64:77:71:d7:2a:b2:15:0d:8c:82: b9:71:f4:24:64:ff:08:12:f0:64:52:f7:f3:56:d7:ee:9c:1c: 7d:c1:5f:9d:08:b9:f7:2a:5f:0b:b4:d4:f3:e1:27:bd:a3:f7: d6:18:42:8a:2e:4c:7b:ab:b2:dd:34:0c:88:24:50:5a:bc:1b: f0:ab:60:c3:31:e9:2c:ee:6e:90:d6:1d:50:45:ee:d2:16:f8: fa:af:78:43:a1:42:dd:35:42:4b:c8:c2:c9:8b:1e:10:3c:6f: 9d:e3:55:13:25:26:22:9b:9a:1c:72:d8:59:27:55:18:9e:c3: 6c:34:85:c3:e3:a9:24:fa:ed:1e:6e:f8:82:ec:d5:72:a2:fc: 81:23:98:9f:a0:19:74:a0:6a:8c:c8:08:78:5c:31:1c:39:b4: 2d:db:b5:97:67:25:f7:13:32:b8:27:37:b8:64:77:4a:b7:dd: f9:6f:db:a6:3b:b2:32:46:a9:15:1c:d5:98:56:ee:c3:e6:d2: 73:fc:84:ce:17:34:c9:a9:93:d4:c9:82:31:45:2f:67:e1:4b: 68:e5:77:a8:42:e4:4a:f1:64:84:24:9b:23:04:42:e6:79:c9: 64:c4:1d:80:66:58:4f:21:2a:ec:b2:31:c6:7a:94:d4:2d:39: 92:a3:08:20 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFrLKfFA0r3IFtDYutrW+WfLzTUgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjM0NzVBODZCQjVDNTE1RERENzc1M0I2NTU1RTI2N0Ez RjVDMjhGNDAeFw0yNTEyMDcxMjQ1MzlaFw0yNTEyMTAxNjIyMzlaMDMxMTAvBgNV BAMTKDQ1N0U3QjAzOTE0OTc1NkFGNDcwODBDODZGMDdEODgzNTk4MTg2N0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHF77N1bfGEH03qPEzpVUrxHOs TTtaslcZTVZA8AA6o8a5QP2jCx1X6pPU7tbo1K+DVZgNG6LFHQcU7MwKnm9p2EKP nnQXRWqa4lvH5BXdBhsIfxIQzSUZWTXgJMpaP1kw27o2D1MBrKi+CLnXPfS3wjc4 +CX5eTL/TqAgIpE5ihmpSreKe2tNZQfyG/ysGXLeXsmPgyTUKIbTAy7EvuSTzVYD uW23346Xh692S35HfSCSGqpOtOpBeLO4BQFbaltdzz8stApXQO0ScTyRWpaNiplE LVyskV8BZemCfa2ddKBGqfj4TyqVhUsunWAxy7+A+dr77f+No/YBtH5TETbPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURX57A5FJdWr0cIDIbwfYg1mBhnswHwYDVR0j BBgwFoAUI0dahrtcUV3dd1O2VV4mej9cKPQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NWVmYzQxMy0yNzA5LTQ4M2UtYTMxNC1jNWQwNjYzZGY5MzIvMC8yMzQ3NUE4NkJC NUM1MTVEREQ3NzUzQjY1NTVFMjY3QTNGNUMyOEY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMjM0NzVBODZCQjVDNTE1RERENzc1M0I2NTU1RTI2N0EzRjVD MjhGNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjVlZmM0MTMtMjcwOS00ODNlLWEz MTQtYzVkMDY2M2RmOTMyLzAvMjM0NzVBODZCQjVDNTE1RERENzc1M0I2NTU1RTI2 N0EzRjVDMjhGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIqLe7f+a2hjZHdx1yqyFQ2Mgrlx9CRk/wgS 8GRS9/NW1+6cHH3BX50IufcqXwu01PPhJ72j99YYQoouTHurst00DIgkUFq8G/Cr YMMx6SzubpDWHVBF7tIW+PqveEOhQt01QkvIwsmLHhA8b53jVRMlJiKbmhxy2Fkn VRiew2w0hcPjqST67R5u+ILs1XKi/IEjmJ+gGXSgaozICHhcMRw5tC3btZdnJfcT MrgnN7hkd0q33flv26Y7sjJGqRUc1ZhW7sPm0nP8hM4XNMmpk9TJgjFFL2fhS2jl d6hC5ErxZIQkmyMEQuZ5yWTEHYBmWE8hKuyyMcZ6lNQtOZKjCCA= -----END CERTIFICATE-----Generated at Sun Dec 7 18:53:28 2025 by rpki-client