This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/46e47c6d-e624-477c-ae18-d32f22c96204/0/23132D6AC2A0ED41996F54C00A8A59B23B00EEB6.mft File: 23132D6AC2A0ED41996F54C00A8A59B23B00EEB6.mft (raw, json) Hash identifier: s908DDDZVp5IypmnIIDnTOOKpm/NFw27LGbtjfCpQQQ= Subject key identifier: 14:93:ED:5F:77:A5:B1:57:03:39:9E:71:07:B9:CE:79:C1:50:BC:E7 Authority key identifier: 23:13:2D:6A:C2:A0:ED:41:99:6F:54:C0:0A:8A:59:B2:3B:00:EE:B6 Certificate issuer: /CN=23132D6AC2A0ED41996F54C00A8A59B23B00EEB6 Certificate serial: 6A16D7E022F1D3D6FE366DC220AD9BA9159A038C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/23132D6AC2A0ED41996F54C00A8A59B23B00EEB6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/46e47c6d-e624-477c-ae18-d32f22c96204/0/23132D6AC2A0ED41996F54C00A8A59B23B00EEB6.mft Manifest number: 0146 Signing time: Wed 17 Dec 2025 09:12:04 +0000 Manifest this update: Wed 17 Dec 2025 09:07:04 +0000 Manifest next update: Sat 20 Dec 2025 18:58:04 +0000 Files and hashes: 1: 3231302e37392e3133352e302f32342d3234203d3e20313338303936.roa (hash: JvAuAWjeLfp0XViXv+7ZCgiJcBbHkm/DO53vlhMWqfE=) 2: 23132D6AC2A0ED41996F54C00A8A59B23B00EEB6.crl (hash: 8mw+SjUuAL7b0jtip8nHK6KriiOKDP6lPnmpZq6gokg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/46e47c6d-e624-477c-ae18-d32f22c96204/0/23132D6AC2A0ED41996F54C00A8A59B23B00EEB6.crl rsync://repo-rpki.idnic.net/repo/46e47c6d-e624-477c-ae18-d32f22c96204/0/23132D6AC2A0ED41996F54C00A8A59B23B00EEB6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/23132D6AC2A0ED41996F54C00A8A59B23B00EEB6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 18:58:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:16:d7:e0:22:f1:d3:d6:fe:36:6d:c2:20:ad:9b:a9:15:9a:03:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23132D6AC2A0ED41996F54C00A8A59B23B00EEB6 Validity Not Before: Dec 17 09:07:04 2025 GMT Not After : Dec 20 18:58:04 2025 GMT Subject: CN=1493ED5F77A5B15703399E7107B9CE79C150BCE7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:10:a6:25:23:08:af:84:3c:3e:2a:a7:eb:3a: 3d:cd:b2:77:c5:54:67:38:0e:4d:22:49:69:b9:d5: 07:bc:26:e7:90:11:f2:d7:b8:f4:4e:e1:7e:c4:7a: ce:bd:8d:96:77:bc:65:18:7e:12:c9:86:7e:67:29: 97:4f:51:e3:6d:b0:7c:f5:e8:14:0f:24:73:95:bf: 77:0c:95:24:ea:ce:98:43:23:3c:46:bf:75:52:ba: 6d:ba:82:9a:bf:50:d8:ca:df:49:a5:ec:88:74:cf: 94:ca:3e:c6:ee:b1:c4:f9:2e:cb:5b:2e:c1:70:8d: 59:22:60:98:34:03:9d:24:4c:76:31:9d:13:20:5d: 92:c9:6c:4b:54:ce:18:46:cc:6e:4d:37:9e:7d:b6: 85:b7:b3:ba:02:23:fa:4a:6b:82:d6:8d:2a:88:66: 52:25:4e:9d:6c:bc:db:8a:e1:5b:3a:69:cc:af:6c: 70:b6:43:56:25:69:54:01:74:4e:28:a3:49:39:4a: 4f:82:4b:5c:6d:5f:11:5b:74:11:7a:99:45:b6:b3: fb:f9:d4:b3:a8:e5:af:93:97:78:83:8a:45:d8:8d: 23:16:26:1a:43:27:34:e7:11:7e:01:69:b4:47:1a: b3:84:5d:53:31:02:b3:f5:28:1a:d2:29:1c:5b:a4: 7a:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:93:ED:5F:77:A5:B1:57:03:39:9E:71:07:B9:CE:79:C1:50:BC:E7 X509v3 Authority Key Identifier: keyid:23:13:2D:6A:C2:A0:ED:41:99:6F:54:C0:0A:8A:59:B2:3B:00:EE:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/46e47c6d-e624-477c-ae18-d32f22c96204/0/23132D6AC2A0ED41996F54C00A8A59B23B00EEB6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/23132D6AC2A0ED41996F54C00A8A59B23B00EEB6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/46e47c6d-e624-477c-ae18-d32f22c96204/0/23132D6AC2A0ED41996F54C00A8A59B23B00EEB6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:3a:6b:f7:68:3a:a3:9b:36:97:f8:fa:db:8c:b3:ae:c6:e6: cf:53:e7:ca:80:c8:e1:80:62:6e:22:b9:d4:98:e9:1a:1e:fe: d8:86:34:6b:6f:61:d6:3b:56:64:ec:c2:27:75:d7:cc:0f:1f: e1:2b:8b:ef:6f:99:cb:d3:6e:f4:4a:68:8b:51:0e:60:d5:c2: 26:f6:52:15:81:01:95:8a:77:51:17:38:5d:76:cc:21:72:98: b8:b7:10:4b:60:31:87:07:97:cd:20:cd:ce:ff:f3:e1:c5:f6: 8f:b5:0e:8b:2a:a0:39:06:67:af:2a:a7:c2:d6:6f:b4:c1:34: f0:4b:87:7d:cc:30:26:0c:e1:20:43:13:90:a8:6a:30:12:45: ab:b4:bd:77:2e:a5:ac:a3:c9:9d:a9:85:77:1c:17:c2:04:b4: 7d:d0:f3:7c:fa:e2:61:fd:a2:1f:40:6a:1d:09:81:a9:50:c7: e0:4d:f3:7b:c4:b4:2c:ef:ab:93:a6:5e:72:cf:b1:80:2a:28: 03:eb:58:73:da:87:6d:54:a9:5e:b0:5b:31:ba:4d:0e:dd:5a: 89:3b:fc:ba:df:e0:22:92:2f:33:59:8d:0c:16:e5:b9:48:39: ea:a0:c3:e7:0c:a2:04:f3:79:1a:27:b8:5c:e7:e4:81:49:64: 48:54:0c:b2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUahbX4CLx09b+Nm3CIK2bqRWaA4wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjMxMzJENkFDMkEwRUQ0MTk5NkY1NEMwMEE4QTU5QjIz QjAwRUVCNjAeFw0yNTEyMTcwOTA3MDRaFw0yNTEyMjAxODU4MDRaMDMxMTAvBgNV BAMTKDE0OTNFRDVGNzdBNUIxNTcwMzM5OUU3MTA3QjlDRTc5QzE1MEJDRTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHEKYlIwivhDw+KqfrOj3NsnfF VGc4Dk0iSWm51Qe8JueQEfLXuPRO4X7Ees69jZZ3vGUYfhLJhn5nKZdPUeNtsHz1 6BQPJHOVv3cMlSTqzphDIzxGv3VSum26gpq/UNjK30ml7Ih0z5TKPsbuscT5Lstb LsFwjVkiYJg0A50kTHYxnRMgXZLJbEtUzhhGzG5NN559toW3s7oCI/pKa4LWjSqI ZlIlTp1svNuK4Vs6acyvbHC2Q1YlaVQBdE4oo0k5Sk+CS1xtXxFbdBF6mUW2s/v5 1LOo5a+Tl3iDikXYjSMWJhpDJzTnEX4BabRHGrOEXVMxArP1KBrSKRxbpHp3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFJPtX3elsVcDOZ5xB7nOecFQvOcwHwYDVR0j BBgwFoAUIxMtasKg7UGZb1TACopZsjsA7rYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NmU0N2M2ZC1lNjI0LTQ3N2MtYWUxOC1kMzJmMjJjOTYyMDQvMC8yMzEzMkQ2QUMy QTBFRDQxOTk2RjU0QzAwQThBNTlCMjNCMDBFRUI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjMxMzJENkFDMkEwRUQ0MTk5NkY1NEMwMEE4QTU5QjIzQjAw RUVCNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDZlNDdjNmQtZTYyNC00NzdjLWFl MTgtZDMyZjIyYzk2MjA0LzAvMjMxMzJENkFDMkEwRUQ0MTk5NkY1NEMwMEE4QTU5 QjIzQjAwRUVCNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABk6a/doOqObNpf4+tuMs67G5s9T58qAyOGA Ym4iudSY6Roe/tiGNGtvYdY7VmTswid118wPH+Eri+9vmcvTbvRKaItRDmDVwib2 UhWBAZWKd1EXOF12zCFymLi3EEtgMYcHl80gzc7/8+HF9o+1DosqoDkGZ68qp8LW b7TBNPBLh33MMCYM4SBDE5CoajASRau0vXcupayjyZ2phXccF8IEtH3Q83z64mH9 oh9Aah0JgalQx+BN83vEtCzvq5OmXnLPsYAqKAPrWHPah21UqV6wWzG6TQ7dWok7 /Lrf4CKSLzNZjQwW5blIOeqgw+cMogTzeRonuFzn5IFJZEhUDLI= -----END CERTIFICATE-----Generated at Fri Dec 19 11:33:09 2025 by rpki-client