This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/5b72f71a-b9c2-4033-9675-d7707603a82c/0/02236913B46A9003C0645E6CC858EA54D6D7F4AC.mft File: 02236913B46A9003C0645E6CC858EA54D6D7F4AC.mft (raw, json) Hash identifier: 9DlTDwj+hVqaPXtOEniyCuD7m91BBRtE7br1XmWEzxk= Subject key identifier: CB:03:C6:5B:3C:E9:EC:34:A7:0B:87:B2:4B:1A:F5:88:A4:17:CC:49 Authority key identifier: 02:23:69:13:B4:6A:90:03:C0:64:5E:6C:C8:58:EA:54:D6:D7:F4:AC Certificate issuer: /CN=02236913B46A9003C0645E6CC858EA54D6D7F4AC Certificate serial: 0D11722FCCE459AC49C2DB563F1FBBFC65B63ABA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/02236913B46A9003C0645E6CC858EA54D6D7F4AC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5b72f71a-b9c2-4033-9675-d7707603a82c/0/02236913B46A9003C0645E6CC858EA54D6D7F4AC.mft Manifest number: 0129 Signing time: Tue 23 Dec 2025 08:41:07 +0000 Manifest this update: Tue 23 Dec 2025 08:36:07 +0000 Manifest next update: Fri 26 Dec 2025 16:06:07 +0000 Files and hashes: 1: 02236913B46A9003C0645E6CC858EA54D6D7F4AC.crl (hash: zWKnZXggu1O7aDrCIsQDDPYTXruL8feBZD3DJ4CfVVI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5b72f71a-b9c2-4033-9675-d7707603a82c/0/02236913B46A9003C0645E6CC858EA54D6D7F4AC.crl rsync://repo-rpki.idnic.net/repo/5b72f71a-b9c2-4033-9675-d7707603a82c/0/02236913B46A9003C0645E6CC858EA54D6D7F4AC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/02236913B46A9003C0645E6CC858EA54D6D7F4AC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 16:06:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:11:72:2f:cc:e4:59:ac:49:c2:db:56:3f:1f:bb:fc:65:b6:3a:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02236913B46A9003C0645E6CC858EA54D6D7F4AC Validity Not Before: Dec 23 08:36:07 2025 GMT Not After : Dec 26 16:06:07 2025 GMT Subject: CN=CB03C65B3CE9EC34A70B87B24B1AF588A417CC49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:98:53:be:9d:1b:ec:b4:b8:38:6c:a2:ad:67: 4f:9c:08:5b:04:44:2a:cd:2e:7f:82:26:94:fa:ca: 25:15:13:0b:bb:e1:33:10:72:55:ca:dc:1e:39:d7: 0d:b3:9e:0b:61:91:ac:07:4f:1f:f9:e9:47:8c:39: eb:28:ef:eb:80:3f:bd:31:74:6f:ee:45:92:26:90: 98:38:0e:08:72:5c:8c:49:f4:4d:a4:c2:d8:75:4b: 1f:11:ec:d8:88:1a:ad:ba:9c:af:0e:23:8c:72:5d: d6:73:91:4b:47:91:63:26:69:63:2e:11:68:23:c2: ca:ec:25:7a:10:1c:7f:12:8f:70:c7:0d:76:8c:60: 84:77:7e:ad:eb:fb:05:d9:be:69:f1:f2:ac:aa:2f: 6e:e2:7e:4b:32:3c:ea:41:65:79:7e:56:e3:80:db: a1:44:20:a2:f3:1f:69:d9:bb:04:74:87:57:d8:09: 29:a4:e2:1d:23:fd:f9:0d:1f:a1:e9:c1:dc:4c:9b: c9:15:f1:88:be:d9:24:8d:5b:a0:b4:e9:77:0b:be: 98:bf:de:40:89:ce:81:37:0c:ef:a1:cd:f0:cf:32: c4:4b:ae:71:aa:8c:63:8e:97:1b:c6:ca:f7:7b:b1: 10:27:10:6a:17:5c:2f:b3:9b:06:a9:ae:72:6a:8c: 3f:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:03:C6:5B:3C:E9:EC:34:A7:0B:87:B2:4B:1A:F5:88:A4:17:CC:49 X509v3 Authority Key Identifier: keyid:02:23:69:13:B4:6A:90:03:C0:64:5E:6C:C8:58:EA:54:D6:D7:F4:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5b72f71a-b9c2-4033-9675-d7707603a82c/0/02236913B46A9003C0645E6CC858EA54D6D7F4AC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/02236913B46A9003C0645E6CC858EA54D6D7F4AC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5b72f71a-b9c2-4033-9675-d7707603a82c/0/02236913B46A9003C0645E6CC858EA54D6D7F4AC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:28:0b:c4:70:b5:34:65:0e:70:fa:3a:f3:fd:c5:59:a8:02: 14:a4:35:f8:4d:31:2d:23:7b:11:ab:2c:35:20:26:19:38:c3: cb:a5:c1:5c:54:dc:b2:dd:94:94:60:05:af:19:af:d5:37:fe: 5b:31:6c:ce:da:5e:3b:31:1e:f4:f9:98:1d:59:10:ee:18:78: 53:9d:b2:b8:87:e2:57:2e:83:39:e8:fc:12:ad:2d:b1:28:e9: b1:72:12:9e:cb:ff:da:dc:c8:a1:bf:4c:e3:86:05:29:3f:c8: da:5a:e5:b3:6e:ed:71:7a:ab:8b:d9:11:ca:b6:7d:4f:f4:50: 5a:31:c7:da:3d:59:3e:1d:9d:61:fb:7b:8c:af:bd:97:db:45: 8e:5d:50:c6:c5:71:4f:9f:69:c0:c3:37:ce:92:01:49:c0:11: 1f:4d:29:43:87:f7:f9:de:21:11:c7:97:97:96:43:aa:f9:99: 32:84:9e:ba:df:fb:47:d2:83:c6:c7:44:cb:8f:bb:16:e0:1e: 5f:a0:92:2c:c1:9e:8c:96:2d:64:3e:7b:9d:31:47:cb:d5:3d: 56:d6:ce:b5:b1:93:cc:3e:db:70:17:4e:d0:31:87:ce:74:53: 2a:8b:24:4b:97:3f:b5:85:bf:4f:11:47:52:87:8a:a8:5d:3f: ee:61:ad:85 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDRFyL8zkWaxJwttWPx+7/GW2OrowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDIyMzY5MTNCNDZBOTAwM0MwNjQ1RTZDQzg1OEVBNTRE NkQ3RjRBQzAeFw0yNTEyMjMwODM2MDdaFw0yNTEyMjYxNjA2MDdaMDMxMTAvBgNV BAMTKENCMDNDNjVCM0NFOUVDMzRBNzBCODdCMjRCMUFGNTg4QTQxN0NDNDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvmFO+nRvstLg4bKKtZ0+cCFsE RCrNLn+CJpT6yiUVEwu74TMQclXK3B451w2zngthkawHTx/56UeMOeso7+uAP70x dG/uRZImkJg4DghyXIxJ9E2kwth1Sx8R7NiIGq26nK8OI4xyXdZzkUtHkWMmaWMu EWgjwsrsJXoQHH8Sj3DHDXaMYIR3fq3r+wXZvmnx8qyqL27ifksyPOpBZXl+VuOA 26FEIKLzH2nZuwR0h1fYCSmk4h0j/fkNH6HpwdxMm8kV8Yi+2SSNW6C06XcLvpi/ 3kCJzoE3DO+hzfDPMsRLrnGqjGOOlxvGyvd7sRAnEGoXXC+zmwaprnJqjD9pAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUywPGWzzp7DSnC4eySxr1iKQXzEkwHwYDVR0j BBgwFoAUAiNpE7RqkAPAZF5syFjqVNbX9KwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YjcyZjcxYS1iOWMyLTQwMzMtOTY3NS1kNzcwNzYwM2E4MmMvMC8wMjIzNjkxM0I0 NkE5MDAzQzA2NDVFNkNDODU4RUE1NEQ2RDdGNEFDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDIyMzY5MTNCNDZBOTAwM0MwNjQ1RTZDQzg1OEVBNTRENkQ3 RjRBQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWI3MmY3MWEtYjljMi00MDMzLTk2 NzUtZDc3MDc2MDNhODJjLzAvMDIyMzY5MTNCNDZBOTAwM0MwNjQ1RTZDQzg1OEVB NTRENkQ3RjRBQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEQoC8RwtTRlDnD6OvP9xVmoAhSkNfhNMS0j exGrLDUgJhk4w8ulwVxU3LLdlJRgBa8Zr9U3/lsxbM7aXjsxHvT5mB1ZEO4YeFOd sriH4lcugzno/BKtLbEo6bFyEp7L/9rcyKG/TOOGBSk/yNpa5bNu7XF6q4vZEcq2 fU/0UFoxx9o9WT4dnWH7e4yvvZfbRY5dUMbFcU+facDDN86SAUnAER9NKUOH9/ne IRHHl5eWQ6r5mTKEnrrf+0fSg8bHRMuPuxbgHl+gkizBnoyWLWQ+e50xR8vVPVbW zrWxk8w+23AXTtAxh850UyqLJEuXP7WFv08RR1KHiqhdP+5hrYU= -----END CERTIFICATE-----Generated at Wed Dec 24 22:11:38 2025 by rpki-client