This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/137dfb88-fb50-48d1-b90d-e525102f4f5e/0/923816C042C964B6465A7BA06B2D44BDAF28D827.mft File: 923816C042C964B6465A7BA06B2D44BDAF28D827.mft (raw, json) Hash identifier: acZY/aVVtiBppv3QQrpXgAoxQwu0fz3xsk+1/37Vr4I= Subject key identifier: 85:F2:99:64:62:A0:FE:F1:04:68:2F:9A:81:07:2C:0A:09:1C:6A:9C Authority key identifier: 92:38:16:C0:42:C9:64:B6:46:5A:7B:A0:6B:2D:44:BD:AF:28:D8:27 Certificate issuer: /CN=923816C042C964B6465A7BA06B2D44BDAF28D827 Certificate serial: 34614D5B02157194967AB2F6ED31DF4E0E23B1BD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923816C042C964B6465A7BA06B2D44BDAF28D827.cer Subject info access: rsync://repo-rpki.idnic.net/repo/137dfb88-fb50-48d1-b90d-e525102f4f5e/0/923816C042C964B6465A7BA06B2D44BDAF28D827.mft Manifest number: 0241 Signing time: Mon 29 Dec 2025 07:30:43 +0000 Manifest this update: Mon 29 Dec 2025 07:25:43 +0000 Manifest next update: Thu 01 Jan 2026 19:26:43 +0000 Files and hashes: 1: 3130332e3138392e35392e302f32342d3234203d3e20313439373538.roa (hash: /IMjB2zzS/R4jg1G0u5f9Z9fEjTEZBoII5eQSPdhRUM=) 2: 3130332e3138392e35382e302f32342d3234203d3e20313439373538.roa (hash: DYdErYV9CziQI4JcelpgUN+i1lEMG53IFpsP0CaTa7Y=) 3: 3130332e3138392e35382e302f32332d3234203d3e20313439373538.roa (hash: o++ze4Phjg1umrR/hXTKNbdGbb6WGQVR25QY7sQRXiQ=) 4: 923816C042C964B6465A7BA06B2D44BDAF28D827.crl (hash: l02gSCnjDYmv4MPzPYScghbO201uFpOb+Dy7ETxQWEM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/137dfb88-fb50-48d1-b90d-e525102f4f5e/0/923816C042C964B6465A7BA06B2D44BDAF28D827.crl rsync://repo-rpki.idnic.net/repo/137dfb88-fb50-48d1-b90d-e525102f4f5e/0/923816C042C964B6465A7BA06B2D44BDAF28D827.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923816C042C964B6465A7BA06B2D44BDAF28D827.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Jan 2026 19:26:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:61:4d:5b:02:15:71:94:96:7a:b2:f6:ed:31:df:4e:0e:23:b1:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=923816C042C964B6465A7BA06B2D44BDAF28D827 Validity Not Before: Dec 29 07:25:43 2025 GMT Not After : Jan 1 19:26:43 2026 GMT Subject: CN=85F2996462A0FEF104682F9A81072C0A091C6A9C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:c9:c3:56:04:e4:5f:3d:73:d1:e5:4d:2a:0b: 2a:11:8e:83:2c:4b:e6:c3:d8:fe:f9:5e:b4:6b:44: 98:bc:74:5b:f6:cf:13:b3:30:8e:b9:ae:77:43:de: 18:4d:63:af:2e:69:30:47:95:a0:d4:8f:cd:cb:ad: 88:38:3a:d5:02:cb:9b:0f:b3:ac:14:cc:0a:cb:96: 3f:05:32:2b:a2:9f:8d:f5:29:9d:bf:bf:95:66:34: 01:b9:b5:a4:57:e8:43:66:b0:27:f8:a3:57:55:e1: b2:24:34:2b:63:02:ac:4c:08:8b:42:c3:c3:d8:8d: b9:9c:a3:e8:01:fc:eb:e0:1d:e3:4b:54:3c:8d:78: 78:bb:a2:cc:57:2e:0c:f3:8c:b8:ad:4a:70:f8:b2: 35:95:fe:d6:a4:df:b3:dc:a4:01:12:ba:98:45:cb: d1:bf:2d:7a:b7:bf:d6:24:db:f6:43:6e:c8:8d:d0: d3:0e:f0:d3:fc:2f:e7:12:06:72:e3:46:44:0d:bc: 18:b9:f8:a5:9d:62:9c:fd:88:66:d5:30:49:c5:90: 99:70:62:57:27:20:c3:98:bd:2e:1f:36:8b:be:d9: ab:04:7d:cb:2f:27:0f:52:57:07:cc:55:58:b8:73: 9b:22:7d:c8:de:5c:4a:86:6d:17:42:d0:63:8d:3a: 95:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:F2:99:64:62:A0:FE:F1:04:68:2F:9A:81:07:2C:0A:09:1C:6A:9C X509v3 Authority Key Identifier: keyid:92:38:16:C0:42:C9:64:B6:46:5A:7B:A0:6B:2D:44:BD:AF:28:D8:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/137dfb88-fb50-48d1-b90d-e525102f4f5e/0/923816C042C964B6465A7BA06B2D44BDAF28D827.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923816C042C964B6465A7BA06B2D44BDAF28D827.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/137dfb88-fb50-48d1-b90d-e525102f4f5e/0/923816C042C964B6465A7BA06B2D44BDAF28D827.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:de:a8:67:9d:7d:a7:8d:96:00:23:a3:42:8c:34:bb:28:f8: 0f:06:2c:57:0b:8e:b4:6c:f4:0d:4d:74:c9:89:3a:cd:0f:0e: ea:6d:2f:0a:2d:4c:94:a1:46:4c:dd:37:b9:34:02:22:f4:97: 3e:42:62:fb:a9:fb:bd:32:37:13:b7:27:7c:36:54:df:f9:c2: 35:50:6d:c2:0d:9c:01:18:2f:33:16:82:95:7f:f6:73:7c:ad: 71:3c:54:47:48:29:f2:96:de:29:3f:de:02:6f:3c:26:9a:eb: fb:ea:11:e9:fe:8f:17:35:48:db:4c:24:1f:86:76:17:db:db: d7:a2:2a:69:90:90:19:10:88:19:f9:e0:c5:4a:0c:17:90:2a: e0:22:77:27:ec:9f:5a:5b:6a:d6:d1:1e:3d:91:17:d7:d6:3f: 6b:36:04:68:ce:f1:0b:96:5a:ce:cb:12:2d:1b:ae:d6:a9:17: 14:35:ca:ac:6b:3e:27:62:8e:cf:8d:3a:f4:c5:18:ce:5d:4d: 69:de:86:81:ad:2d:53:17:96:bd:7c:45:98:f0:e0:27:ef:3f: db:61:11:dc:23:eb:75:3d:95:76:5d:c9:c7:4a:c3:fe:32:b8: 58:64:30:08:72:22:a2:68:9e:e9:0e:fa:3c:b7:9a:12:cb:b2: fe:75:e6:fe -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNGFNWwIVcZSWerL27THfTg4jsb0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTIzODE2QzA0MkM5NjRCNjQ2NUE3QkEwNkIyRDQ0QkRB RjI4RDgyNzAeFw0yNTEyMjkwNzI1NDNaFw0yNjAxMDExOTI2NDNaMDMxMTAvBgNV BAMTKDg1RjI5OTY0NjJBMEZFRjEwNDY4MkY5QTgxMDcyQzBBMDkxQzZBOUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzycNWBORfPXPR5U0qCyoRjoMs S+bD2P75XrRrRJi8dFv2zxOzMI65rndD3hhNY68uaTBHlaDUj83LrYg4OtUCy5sP s6wUzArLlj8FMiuin431KZ2/v5VmNAG5taRX6ENmsCf4o1dV4bIkNCtjAqxMCItC w8PYjbmco+gB/OvgHeNLVDyNeHi7osxXLgzzjLitSnD4sjWV/tak37PcpAESuphF y9G/LXq3v9Yk2/ZDbsiN0NMO8NP8L+cSBnLjRkQNvBi5+KWdYpz9iGbVMEnFkJlw YlcnIMOYvS4fNou+2asEfcsvJw9SVwfMVVi4c5sifcjeXEqGbRdC0GONOpUzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhfKZZGKg/vEEaC+agQcsCgkcapwwHwYDVR0j BBgwFoAUkjgWwELJZLZGWnugay1Eva8o2CcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MzdkZmI4OC1mYjUwLTQ4ZDEtYjkwZC1lNTI1MTAyZjRmNWUvMC85MjM4MTZDMDQy Qzk2NEI2NDY1QTdCQTA2QjJENDRCREFGMjhEODI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTIzODE2QzA0MkM5NjRCNjQ2NUE3QkEwNkIyRDQ0QkRBRjI4 RDgyNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTM3ZGZiODgtZmI1MC00OGQxLWI5 MGQtZTUyNTEwMmY0ZjVlLzAvOTIzODE2QzA0MkM5NjRCNjQ2NUE3QkEwNkIyRDQ0 QkRBRjI4RDgyNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGXeqGedfaeNlgAjo0KMNLso+A8GLFcLjrRs 9A1NdMmJOs0PDuptLwotTJShRkzdN7k0AiL0lz5CYvup+70yNxO3J3w2VN/5wjVQ bcINnAEYLzMWgpV/9nN8rXE8VEdIKfKW3ik/3gJvPCaa6/vqEen+jxc1SNtMJB+G dhfb29eiKmmQkBkQiBn54MVKDBeQKuAidyfsn1pbatbRHj2RF9fWP2s2BGjO8QuW Ws7LEi0brtapFxQ1yqxrPidijs+NOvTFGM5dTWnehoGtLVMXlr18RZjw4CfvP9th Edwj63U9lXZdycdKw/4yuFhkMAhyIqJonukO+jy3mhLLsv515v4= -----END CERTIFICATE-----Generated at Wed Dec 31 07:57:48 2025 by rpki-client