This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/137dfb88-fb50-48d1-b90d-e525102f4f5e/0/923816C042C964B6465A7BA06B2D44BDAF28D827.mft File: 923816C042C964B6465A7BA06B2D44BDAF28D827.mft (raw, json) Hash identifier: 8NfT8LHxMdqHVmlGf4ya0RLw075otIxnw98RJH5Rd8w= Subject key identifier: 62:77:5F:98:0C:0F:2C:50:F8:BF:DA:69:33:0E:92:66:20:D3:8D:D9 Authority key identifier: 92:38:16:C0:42:C9:64:B6:46:5A:7B:A0:6B:2D:44:BD:AF:28:D8:27 Certificate issuer: /CN=923816C042C964B6465A7BA06B2D44BDAF28D827 Certificate serial: 6328BDFD6271B37D093B2CE01853855FB2926913 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923816C042C964B6465A7BA06B2D44BDAF28D827.cer Subject info access: rsync://repo-rpki.idnic.net/repo/137dfb88-fb50-48d1-b90d-e525102f4f5e/0/923816C042C964B6465A7BA06B2D44BDAF28D827.mft Manifest number: 023C Signing time: Thu 18 Dec 2025 04:20:42 +0000 Manifest this update: Thu 18 Dec 2025 04:15:42 +0000 Manifest next update: Sun 21 Dec 2025 05:50:42 +0000 Files and hashes: 1: 3130332e3138392e35392e302f32342d3234203d3e20313439373538.roa (hash: /IMjB2zzS/R4jg1G0u5f9Z9fEjTEZBoII5eQSPdhRUM=) 2: 3130332e3138392e35382e302f32342d3234203d3e20313439373538.roa (hash: DYdErYV9CziQI4JcelpgUN+i1lEMG53IFpsP0CaTa7Y=) 3: 3130332e3138392e35382e302f32332d3234203d3e20313439373538.roa (hash: o++ze4Phjg1umrR/hXTKNbdGbb6WGQVR25QY7sQRXiQ=) 4: 923816C042C964B6465A7BA06B2D44BDAF28D827.crl (hash: RYa7NpkuexkPlf+se6zrKw9ZI4JOxUhG7RMFwivuLgo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/137dfb88-fb50-48d1-b90d-e525102f4f5e/0/923816C042C964B6465A7BA06B2D44BDAF28D827.crl rsync://repo-rpki.idnic.net/repo/137dfb88-fb50-48d1-b90d-e525102f4f5e/0/923816C042C964B6465A7BA06B2D44BDAF28D827.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923816C042C964B6465A7BA06B2D44BDAF28D827.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 05:50:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:28:bd:fd:62:71:b3:7d:09:3b:2c:e0:18:53:85:5f:b2:92:69:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=923816C042C964B6465A7BA06B2D44BDAF28D827 Validity Not Before: Dec 18 04:15:42 2025 GMT Not After : Dec 21 05:50:42 2025 GMT Subject: CN=62775F980C0F2C50F8BFDA69330E926620D38DD9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:f1:50:7e:65:6c:b0:40:b9:4a:d9:a1:ec:82: b1:0e:bc:0e:67:ac:7f:b5:9b:c2:c4:5a:0c:1d:39: 7d:c5:22:6a:fb:92:b1:fd:b5:9f:bc:d6:03:32:4a: 52:d1:56:1d:21:11:47:d9:d8:54:37:13:62:e6:32: 13:db:92:f7:97:fc:98:7f:be:76:ec:51:ad:88:f8: 1e:78:74:c6:a4:6a:ad:27:47:78:5e:c8:45:01:0b: 8f:06:5b:59:f4:96:97:97:fc:35:c3:3b:0c:d2:b7: 4c:df:96:3e:b8:94:35:04:22:79:1e:87:dd:6f:8a: a1:a9:33:67:7d:9a:de:78:05:95:42:77:ab:85:a2: 5b:e4:76:53:62:3e:83:3d:3b:b0:3b:98:8a:69:14: 7a:39:4f:37:4d:c5:de:c8:ed:1c:cb:8f:07:6d:18: 30:2f:83:c0:a1:ae:97:85:68:52:ed:c8:bf:dd:72: 51:79:55:17:a5:86:2a:d5:f4:af:6f:a4:2c:20:36: 39:1f:77:bf:ab:28:ff:1d:a8:e4:a1:37:3f:ea:23: 2d:c9:a0:4a:c7:79:d4:08:75:9f:c3:55:0d:c4:5d: 1d:11:84:2f:9b:7b:45:46:7f:9a:69:5b:1f:78:62: eb:f9:96:e7:b2:97:88:30:f0:7c:e3:88:bd:14:fe: 69:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:77:5F:98:0C:0F:2C:50:F8:BF:DA:69:33:0E:92:66:20:D3:8D:D9 X509v3 Authority Key Identifier: keyid:92:38:16:C0:42:C9:64:B6:46:5A:7B:A0:6B:2D:44:BD:AF:28:D8:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/137dfb88-fb50-48d1-b90d-e525102f4f5e/0/923816C042C964B6465A7BA06B2D44BDAF28D827.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923816C042C964B6465A7BA06B2D44BDAF28D827.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/137dfb88-fb50-48d1-b90d-e525102f4f5e/0/923816C042C964B6465A7BA06B2D44BDAF28D827.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:73:8a:7d:54:3e:9b:ab:e5:8e:86:b7:5d:7a:28:eb:88:56: 56:87:e2:31:9a:5b:0f:7a:1d:27:2f:98:71:b4:0d:10:05:76: e9:e9:84:29:26:82:bf:43:73:c7:fd:2d:0c:ce:27:26:74:d3: 3a:4b:ea:29:53:f5:2f:8d:4b:3c:21:98:ff:76:29:5d:cd:77: 72:b6:66:68:f0:76:d7:1f:a3:31:65:f4:47:19:c7:1a:d0:25: a9:7f:63:96:98:bc:41:54:6d:0d:83:0f:c4:51:90:65:68:12: 57:21:21:48:27:ed:0b:f8:15:a2:70:d9:09:ce:e5:0a:39:cf: 8f:53:30:e5:b7:98:8d:67:97:c7:71:1d:c9:84:cc:40:9e:23: b6:d5:f8:16:f2:fb:a8:22:77:2a:93:63:1c:07:93:8f:81:74: 30:60:8b:e7:95:7b:1c:b9:26:18:a6:c7:db:5b:de:f3:8b:8c: bc:66:b4:d5:00:ca:63:c8:05:04:d6:00:75:2d:07:37:9e:3b: f3:3e:6c:4f:d9:a3:f3:72:a5:b8:fb:7f:ae:bd:91:86:dd:ee: b4:90:ac:0d:1b:4d:3c:da:83:97:0c:10:62:82:bc:74:89:fe: ef:9b:eb:89:35:bd:13:06:c3:24:5b:ef:d8:57:9b:56:22:37: a4:9f:90:4f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYyi9/WJxs30JOyzgGFOFX7KSaRMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTIzODE2QzA0MkM5NjRCNjQ2NUE3QkEwNkIyRDQ0QkRB RjI4RDgyNzAeFw0yNTEyMTgwNDE1NDJaFw0yNTEyMjEwNTUwNDJaMDMxMTAvBgNV BAMTKDYyNzc1Rjk4MEMwRjJDNTBGOEJGREE2OTMzMEU5MjY2MjBEMzhERDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCi8VB+ZWywQLlK2aHsgrEOvA5n rH+1m8LEWgwdOX3FImr7krH9tZ+81gMySlLRVh0hEUfZ2FQ3E2LmMhPbkveX/Jh/ vnbsUa2I+B54dMakaq0nR3heyEUBC48GW1n0lpeX/DXDOwzSt0zflj64lDUEInke h91viqGpM2d9mt54BZVCd6uFolvkdlNiPoM9O7A7mIppFHo5TzdNxd7I7RzLjwdt GDAvg8ChrpeFaFLtyL/dclF5VRelhirV9K9vpCwgNjkfd7+rKP8dqOShNz/qIy3J oErHedQIdZ/DVQ3EXR0RhC+be0VGf5ppWx94Yuv5lueyl4gw8HzjiL0U/mnpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYndfmAwPLFD4v9ppMw6SZiDTjdkwHwYDVR0j BBgwFoAUkjgWwELJZLZGWnugay1Eva8o2CcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MzdkZmI4OC1mYjUwLTQ4ZDEtYjkwZC1lNTI1MTAyZjRmNWUvMC85MjM4MTZDMDQy Qzk2NEI2NDY1QTdCQTA2QjJENDRCREFGMjhEODI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTIzODE2QzA0MkM5NjRCNjQ2NUE3QkEwNkIyRDQ0QkRBRjI4 RDgyNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTM3ZGZiODgtZmI1MC00OGQxLWI5 MGQtZTUyNTEwMmY0ZjVlLzAvOTIzODE2QzA0MkM5NjRCNjQ2NUE3QkEwNkIyRDQ0 QkRBRjI4RDgyNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJdzin1UPpur5Y6Gt116KOuIVlaH4jGaWw96 HScvmHG0DRAFdunphCkmgr9Dc8f9LQzOJyZ00zpL6ilT9S+NSzwhmP92KV3Nd3K2 ZmjwdtcfozFl9EcZxxrQJal/Y5aYvEFUbQ2DD8RRkGVoElchIUgn7Qv4FaJw2QnO 5Qo5z49TMOW3mI1nl8dxHcmEzECeI7bV+Bby+6gidyqTYxwHk4+BdDBgi+eVexy5 Jhimx9tb3vOLjLxmtNUAymPIBQTWAHUtBzeeO/M+bE/Zo/Nypbj7f669kYbd7rSQ rA0bTTzag5cMEGKCvHSJ/u+b64k1vRMGwyRb79hXm1YiN6SfkE8= -----END CERTIFICATE-----Generated at Fri Dec 19 18:34:45 2025 by rpki-client