This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.mft
File: 923D4A10E1DBBF6927183BF3419F512FE4C1D003.mft (raw, json)
Hash identifier: qciwx8tKtrAGfxkQo8ZSDnOhXr7u+MYNkb7saV78PJ8=
Subject key identifier: 00:17:15:B6:8E:E9:CB:5C:8B:00:6C:4D:2E:CA:36:18:9D:67:5B:75
Authority key identifier: 92:3D:4A:10:E1:DB:BF:69:27:18:3B:F3:41:9F:51:2F:E4:C1:D0:03
Certificate issuer: /CN=923D4A10E1DBBF6927183BF3419F512FE4C1D003
Certificate serial: 3444B9617C1C3367C93BA540121A2C8B58460965
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923D4A10E1DBBF6927183BF3419F512FE4C1D003.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.mft
Manifest number: 0546
Signing time: Sat 20 Dec 2025 01:13:58 +0000
Manifest this update: Sat 20 Dec 2025 01:08:58 +0000
Manifest next update: Tue 23 Dec 2025 01:16:58 +0000
Files and hashes: 1: 3130332e3131322e3133382e302f32342d3234203d3e20313531303433.roa (hash: k2s+fTciMW1AcHEt1AHKQvUa6LHEm5gF/5id8cjIJ3s=)
2: 923D4A10E1DBBF6927183BF3419F512FE4C1D003.crl (hash: 2WM5DctrGV0YDJQB6Zk+tiyTIvL9lsCiDCOa9EwgTnM=)
3: 323430323a616134303a363a3a2f34382d3438203d3e20313337333330.roa (hash: tQTDeuCAhgIHqT4JvN+SYFcrP542mVZbW7Uy9er1rk4=)
4: 323430323a616134303a323a3a2f34382d3438203d3e20313337333330.roa (hash: vTpYTNK2Iedt3x6MQB/Xrh13AhkarFJV4HWTUjcGM/Y=)
5: 323430323a616134303a31343a3a2f34382d3438203d3e20313337333330.roa (hash: ra0Qf+ys3TjTOOjzu7G6xBCVp6PgE8NBjiFHNgjZfy0=)
6: 3130332e3131322e3133362e302f32332d3233203d3e203633383638.roa (hash: sozZLwJbQXm98EJBIw5sihrpH0G7Es7CzsRNlqGv2wc=)
7: 3130332e3131322e3133372e302f32342d3234203d3e203633383638.roa (hash: RepflhJLBvu2zVpJCecwi2+RZYpN1UHaxDcpF0oO+gg=)
8: 323430323a616134303a31333a3a2f34382d3438203d3e20313337333330.roa (hash: w4rnLSoK9Ogry5Be/7bEeNtK/st8upmlmof3uHLSQS4=)
9: 323430323a616134303a343a3a2f34382d3438203d3e20313337333330.roa (hash: 1oWczp9RZm7lezuDVU+ofnA0tfj2lVP+IvFgjT0dOg4=)
10: 323430323a616134303a353a3a2f34382d3438203d3e20313337333330.roa (hash: Pt4kHivj/+/IoSa7PGPfSPyAlm/DgqrXfAGO9WlCDqE=)
11: 323430323a616134303a31313a3a2f34382d3438203d3e20313337333330.roa (hash: BBYTiuzRjYx15TfoXkETOVppXlE7UGzNaI5UpnCSg40=)
12: 323430323a616134303a373a3a2f34382d3438203d3e20313337333330.roa (hash: Z1axM0kuScQ1wsgtnc4QX9GvMZLuIsV8v/ScHLgFtiU=)
13: 323430323a616134303a31323a3a2f34382d3438203d3e20313337333330.roa (hash: QFubIhbbL6UEYuVrgh+b+Oy9CvlVLee6F9ADT2A6kec=)
14: 323430323a616134303a313a3a2f34382d3438203d3e20313337333330.roa (hash: sfX//sKOJiEuG3MX815fs00hBV5qvYrVSNOlry6c+5c=)
15: 3130332e3131322e3133392e302f32342d3234203d3e20313337333330.roa (hash: 8Vv5VC5lHskbGpjOq0r7bl7lFeNfDlBP9NjEDxxuRz8=)
16: 323430323a616134303a31353a3a2f34382d3438203d3e20313337333330.roa (hash: cplcGCMTKNbyST3IWkDxcP/n/AeMzarnQF1LNyGc5EY=)
17: 323430323a616134303a383a3a2f34382d3438203d3e20313337333330.roa (hash: vAnV4g431JCqkwtUthm0ie5OhAW6+m/w0zGsqm8XSOo=)
18: 323430323a616134303a393a3a2f34382d3438203d3e20313337333330.roa (hash: SFCF3eZAfaB4k234A4Mal+M9wtz6OMi0W08cO5CL2c4=)
19: 3130332e3131322e3133362e302f32342d3234203d3e203633383638.roa (hash: pkEXO9z6ueQK4Zfm+Nf2SnX0XqqCEAzcqWTKKEbP/J8=)
20: 323430323a616134303a333a3a2f34382d3438203d3e20313337333330.roa (hash: EtS1eZLUTwWRZJ7Ml0izUQhw9pv4Am/WahNfvxjKTrc=)
21: 323430323a616134303a31303a3a2f34382d3438203d3e20313337333330.roa (hash: JdwC9cZZayLXOr62V5QKdUDNIE+2Jw/cXMDWMiK/ID0=)
22: 323430323a616134303a3a2f33322d3332203d3e20313337333330.roa (hash: vtCuldzUtylI5t9/fCW+s++nz3SUBB8oSaeAOGcN8rI=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.crl
rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923D4A10E1DBBF6927183BF3419F512FE4C1D003.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 23 Dec 2025 01:16:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:44:b9:61:7c:1c:33:67:c9:3b:a5:40:12:1a:2c:8b:58:46:09:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=923D4A10E1DBBF6927183BF3419F512FE4C1D003
Validity
Not Before: Dec 20 01:08:58 2025 GMT
Not After : Dec 23 01:16:58 2025 GMT
Subject: CN=001715B68EE9CB5C8B006C4D2ECA36189D675B75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:06:fc:77:d3:30:49:b3:87:3c:de:64:42:2b:
72:48:21:8f:6c:1b:93:63:b7:e8:de:36:33:c9:4e:
27:68:34:97:e7:9d:4f:0d:4c:68:41:b3:2e:e8:4f:
20:c1:bb:5e:24:a3:d6:dc:86:5d:12:c6:23:4d:56:
4b:16:d5:8e:23:93:0b:33:02:16:7d:da:91:1a:c6:
32:d4:7e:d0:82:17:87:92:fc:25:e5:89:07:cc:1f:
19:2e:2c:b0:35:cc:23:6f:24:22:d6:16:45:9f:d0:
75:09:69:79:37:de:8d:d4:f0:86:c8:4f:24:66:64:
f3:42:4c:e3:20:19:af:16:42:39:d6:97:49:f9:79:
fe:90:32:f4:fb:a3:96:6d:20:f0:ca:63:b6:9d:ad:
3c:a9:f2:2c:82:2f:9a:4b:50:90:ac:51:15:a2:16:
76:8c:cb:31:2c:60:ef:49:4b:e7:52:56:a2:36:f4:
5b:1b:23:8b:96:8b:96:5e:fc:08:86:ea:50:a5:8a:
ab:cd:05:71:a2:44:42:ea:99:8d:bd:25:b3:27:9c:
76:f5:15:d4:2a:0d:e0:a9:ff:ff:7b:4f:17:01:a9:
6e:9e:41:20:61:48:b6:ea:72:da:0b:42:99:e9:17:
04:73:38:f2:94:cf:32:1f:e0:73:87:45:0b:60:69:
61:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:17:15:B6:8E:E9:CB:5C:8B:00:6C:4D:2E:CA:36:18:9D:67:5B:75
X509v3 Authority Key Identifier:
keyid:92:3D:4A:10:E1:DB:BF:69:27:18:3B:F3:41:9F:51:2F:E4:C1:D0:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923D4A10E1DBBF6927183BF3419F512FE4C1D003.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:32:c3:2c:a9:46:23:a3:f7:71:10:90:fb:96:1a:4f:4b:b7:
a5:3a:db:07:7e:f2:67:af:6d:d9:dd:4f:c8:cd:38:06:48:74:
42:29:7f:fb:7d:a7:1a:3b:27:54:e8:f1:35:68:ab:99:91:36:
e4:d7:77:07:8e:9e:2b:f0:ac:39:5e:3c:66:9d:cd:16:68:b4:
5d:41:57:55:f3:ce:15:11:4a:bb:ed:50:68:f5:e6:6d:fc:28:
f5:bc:72:24:ce:a4:75:17:9a:24:bf:e2:44:e9:39:58:c2:54:
f6:c7:40:2a:ff:96:c9:1e:e3:25:b8:47:4c:e4:d3:73:b3:97:
e0:32:6b:7d:92:ad:0c:c1:08:5e:52:30:28:06:68:1e:31:ad:
9b:8f:fb:43:e5:89:45:01:75:90:5b:a0:76:0c:72:eb:c4:42:
eb:6f:a8:a8:49:fc:10:bf:f2:0d:f9:71:ec:2f:c0:ec:1a:c5:
32:a7:85:4b:d8:17:0d:0f:56:af:94:d1:9e:67:5e:62:43:a5:
d8:bd:7d:03:8d:e9:0a:ab:1f:23:53:ec:74:70:8b:7c:9e:2a:
f0:3c:a8:1f:1f:2d:b6:08:5b:ad:04:e5:7a:b7:55:8f:d1:e9:
e3:a9:e5:49:08:e4:53:1c:c9:06:58:a4:f2:02:b0:ba:48:f9:
3d:bb:b1:5f
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUNES5YXwcM2fJO6VAEhosi1hGCWUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTIzRDRBMTBFMURCQkY2OTI3MTgzQkYzNDE5RjUxMkZF
NEMxRDAwMzAeFw0yNTEyMjAwMTA4NThaFw0yNTEyMjMwMTE2NThaMDMxMTAvBgNV
BAMTKDAwMTcxNUI2OEVFOUNCNUM4QjAwNkM0RDJFQ0EzNjE4OUQ2NzVCNzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsBvx30zBJs4c83mRCK3JIIY9s
G5Njt+jeNjPJTidoNJfnnU8NTGhBsy7oTyDBu14ko9bchl0SxiNNVksW1Y4jkwsz
AhZ92pEaxjLUftCCF4eS/CXliQfMHxkuLLA1zCNvJCLWFkWf0HUJaXk33o3U8IbI
TyRmZPNCTOMgGa8WQjnWl0n5ef6QMvT7o5ZtIPDKY7adrTyp8iyCL5pLUJCsURWi
FnaMyzEsYO9JS+dSVqI29FsbI4uWi5Ze/AiG6lCliqvNBXGiRELqmY29JbMnnHb1
FdQqDeCp//97TxcBqW6eQSBhSLbqctoLQpnpFwRzOPKUzzIf4HOHRQtgaWFvAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUABcVto7py1yLAGxNLso2GJ1nW3UwHwYDVR0j
BBgwFoAUkj1KEOHbv2knGDvzQZ9RL+TB0AMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w
YzM0ZmYwOC1kMjFmLTQyMGItODdkZi01MzEwM2I2ZGMyNTMvMC85MjNENEExMEUx
REJCRjY5MjcxODNCRjM0MTlGNTEyRkU0QzFEMDAzLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvOTIzRDRBMTBFMURCQkY2OTI3MTgzQkYzNDE5RjUxMkZFNEMx
RDAwMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGMzNGZmMDgtZDIxZi00MjBiLTg3
ZGYtNTMxMDNiNmRjMjUzLzAvOTIzRDRBMTBFMURCQkY2OTI3MTgzQkYzNDE5RjUx
MkZFNEMxRDAwMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBACUywyypRiOj93EQkPuWGk9Lt6U62wd+8mev
bdndT8jNOAZIdEIpf/t9pxo7J1To8TVoq5mRNuTXdweOnivwrDlePGadzRZotF1B
V1XzzhURSrvtUGj15m38KPW8ciTOpHUXmiS/4kTpOVjCVPbHQCr/lske4yW4R0zk
03Ozl+Aya32SrQzBCF5SMCgGaB4xrZuP+0PliUUBdZBboHYMcuvEQutvqKhJ/BC/
8g35cewvwOwaxTKnhUvYFw0PVq+U0Z5nXmJDpdi9fQON6QqrHyNT7HRwi3yeKvA8
qB8fLbYIW60E5Xq3VY/R6eOp5UkI5FMcyQZYpPICsLpI+T27sV8=
-----END CERTIFICATE-----
Generated at Mon Dec 22 01:02:59 2025 by rpki-client