This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/6aa42742-89d2-49bb-8a3e-294c368971f5/0/523EE8D6F461B8FD4106F482C46C1029B1013145.mft File: 523EE8D6F461B8FD4106F482C46C1029B1013145.mft (raw, json) Hash identifier: 9SWD94a/l1aQ4h6M1pULHZD4n+wjh8lNraYNOAdjd5c= Subject key identifier: 81:52:FF:DF:9C:80:16:9A:BA:08:27:B5:9B:21:27:E0:34:7D:EF:B0 Authority key identifier: 52:3E:E8:D6:F4:61:B8:FD:41:06:F4:82:C4:6C:10:29:B1:01:31:45 Certificate issuer: /CN=523EE8D6F461B8FD4106F482C46C1029B1013145 Certificate serial: 245916A03FAE88065DC418A416B1951A97169738 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/523EE8D6F461B8FD4106F482C46C1029B1013145.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6aa42742-89d2-49bb-8a3e-294c368971f5/0/523EE8D6F461B8FD4106F482C46C1029B1013145.mft Manifest number: EB Signing time: Sun 21 Dec 2025 05:21:01 +0000 Manifest this update: Sun 21 Dec 2025 05:16:01 +0000 Manifest next update: Wed 24 Dec 2025 14:35:01 +0000 Files and hashes: 1: 523EE8D6F461B8FD4106F482C46C1029B1013145.crl (hash: 6vz/pUwHgeY5/vk2veIm6CYxtFa1pRVp5ROhn8EsJI0=) 2: 3130332e3132392e3233312e302f32342d3234203d3e20313332363339.roa (hash: jWc0sz86L+eDtr+nDMgQgH+2S7uRf5Y8Wu7u8v4zz0Q=) 3: 3130332e31392e38302e302f32332d3234203d3e20313332363339.roa (hash: z0HZjcHieRuZ5HHeSmTqSUrJvHMtgbLp6o8sJVRupVI=) 4: 3130332e3132392e3233302e302f32342d3234203d3e20313332363339.roa (hash: zP2/XdcDOhp440RXruEyN+zWviJE7i53kBfkBKlQJ0I=) 5: 3130332e3132392e3233302e302f32332d3234203d3e20313332363339.roa (hash: H0hxzRE1P/k0NGsIoy/0kaAKznrWHPdRQxgiRW4T5Qo=) 6: 3130332e31392e38312e302f32342d3234203d3e20313332363339.roa (hash: jKwlGthiQpzXwnHyIqfnx5NGkz2sE+y3uVu40s6f6sc=) 7: 3130332e31392e38302e302f32342d3234203d3e20313332363339.roa (hash: YEDjMiqzXqQQzIDtWpx+jx5Bn+2TYkAiFHsRj0775yM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6aa42742-89d2-49bb-8a3e-294c368971f5/0/523EE8D6F461B8FD4106F482C46C1029B1013145.crl rsync://repo-rpki.idnic.net/repo/6aa42742-89d2-49bb-8a3e-294c368971f5/0/523EE8D6F461B8FD4106F482C46C1029B1013145.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/523EE8D6F461B8FD4106F482C46C1029B1013145.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Dec 2025 07:39:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:59:16:a0:3f:ae:88:06:5d:c4:18:a4:16:b1:95:1a:97:16:97:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=523EE8D6F461B8FD4106F482C46C1029B1013145 Validity Not Before: Dec 21 05:16:01 2025 GMT Not After : Dec 24 14:35:01 2025 GMT Subject: CN=8152FFDF9C80169ABA0827B59B2127E0347DEFB0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:55:a8:a3:4d:e7:ab:de:59:81:d7:4d:82:83: b1:1d:20:b2:ec:5a:20:38:96:61:78:a0:d8:92:8a: e2:1d:6b:5a:d5:d9:c7:2e:d5:2a:99:31:53:cf:c1: d2:69:dd:b3:21:1e:39:2e:10:0a:0c:bf:fd:9f:20: 50:24:dd:5b:cf:67:a7:04:f2:a0:84:cb:aa:d2:85: bf:58:c0:0c:eb:bc:80:e6:2e:df:4c:70:ec:97:e1: 61:f6:ff:88:4d:13:5b:62:60:a9:fe:3f:02:50:a9: 5a:14:2a:56:7f:fa:81:99:cc:d6:11:ad:cb:01:57: 4a:fb:c8:ae:ed:74:59:ad:be:da:df:44:4a:d6:45: 8e:69:fc:ff:92:87:15:d4:9c:0c:d9:83:f8:a3:17: a4:31:04:af:48:41:4b:5f:37:9d:6f:ea:b1:d8:bd: 90:1e:c5:b5:cb:52:05:ed:7d:a7:65:60:8d:1d:5f: 1d:40:bb:99:5d:10:cd:80:cc:1f:16:af:60:f8:55: ec:2c:55:06:d0:23:61:a0:3f:c8:ed:ec:5c:31:cc: 7d:2e:99:94:1b:63:7f:f0:15:4d:04:5c:da:c0:88: fb:b6:73:23:6a:bd:12:1a:30:c5:4d:be:88:53:6a: 66:19:b9:23:4a:49:a2:1b:52:0c:8b:de:44:af:92: ed:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:52:FF:DF:9C:80:16:9A:BA:08:27:B5:9B:21:27:E0:34:7D:EF:B0 X509v3 Authority Key Identifier: keyid:52:3E:E8:D6:F4:61:B8:FD:41:06:F4:82:C4:6C:10:29:B1:01:31:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6aa42742-89d2-49bb-8a3e-294c368971f5/0/523EE8D6F461B8FD4106F482C46C1029B1013145.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/523EE8D6F461B8FD4106F482C46C1029B1013145.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6aa42742-89d2-49bb-8a3e-294c368971f5/0/523EE8D6F461B8FD4106F482C46C1029B1013145.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:89:c5:dd:67:9e:7c:7d:ff:53:df:32:db:77:cf:02:03:5c: b3:a8:3b:d4:30:ef:e2:d2:a6:d6:9a:c7:98:ce:ce:a9:1d:84: 96:89:aa:05:a2:16:07:e9:b8:91:8a:30:3e:3a:9c:14:b3:2e: 19:bf:67:03:01:3f:fb:c5:de:91:b8:ff:58:cf:38:86:70:61: 9f:f6:12:e2:27:01:5d:99:2e:b9:5a:f8:a7:28:ae:37:cd:a9: 65:92:57:b9:5b:85:08:8d:dd:a9:52:f0:56:e9:b7:7b:a4:6c: 50:ec:55:d5:a8:60:27:57:8b:56:92:72:ca:65:dc:84:c0:dc: ab:47:a9:1f:98:e5:3a:55:6b:58:c8:44:ea:d3:63:83:e8:98: 77:2f:41:c0:10:1c:0e:f6:09:27:57:49:a1:0f:b3:ab:a6:bd: 8e:d0:8e:11:11:c5:c7:ee:19:77:cf:b2:b8:b4:1c:bd:5e:87: 56:f7:e1:42:c6:f2:c0:68:cf:ef:da:6d:2f:11:e8:fd:05:61: 1a:7e:06:41:de:40:ad:29:e9:ac:e5:f7:2c:48:95:72:a4:41: e3:7c:92:df:82:f7:7c:30:16:c9:04:77:e4:04:2e:6a:ec:e8: c8:19:c8:cb:8a:43:c8:85:dd:d2:e1:41:30:0a:14:dc:56:dc: 32:bf:c8:e4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJFkWoD+uiAZdxBikFrGVGpcWlzgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTIzRUU4RDZGNDYxQjhGRDQxMDZGNDgyQzQ2QzEwMjlC MTAxMzE0NTAeFw0yNTEyMjEwNTE2MDFaFw0yNTEyMjQxNDM1MDFaMDMxMTAvBgNV BAMTKDgxNTJGRkRGOUM4MDE2OUFCQTA4MjdCNTlCMjEyN0UwMzQ3REVGQjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgVaijTeer3lmB102Cg7EdILLs WiA4lmF4oNiSiuIda1rV2ccu1SqZMVPPwdJp3bMhHjkuEAoMv/2fIFAk3VvPZ6cE 8qCEy6rShb9YwAzrvIDmLt9McOyX4WH2/4hNE1tiYKn+PwJQqVoUKlZ/+oGZzNYR rcsBV0r7yK7tdFmtvtrfRErWRY5p/P+ShxXUnAzZg/ijF6QxBK9IQUtfN51v6rHY vZAexbXLUgXtfadlYI0dXx1Au5ldEM2AzB8Wr2D4VewsVQbQI2GgP8jt7FwxzH0u mZQbY3/wFU0EXNrAiPu2cyNqvRIaMMVNvohTamYZuSNKSaIbUgyL3kSvku3nAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgVL/35yAFpq6CCe1myEn4DR977AwHwYDVR0j BBgwFoAUUj7o1vRhuP1BBvSCxGwQKbEBMUUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 YWE0Mjc0Mi04OWQyLTQ5YmItOGEzZS0yOTRjMzY4OTcxZjUvMC81MjNFRThENkY0 NjFCOEZENDEwNkY0ODJDNDZDMTAyOUIxMDEzMTQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTIzRUU4RDZGNDYxQjhGRDQxMDZGNDgyQzQ2QzEwMjlCMTAx MzE0NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmFhNDI3NDItODlkMi00OWJiLThh M2UtMjk0YzM2ODk3MWY1LzAvNTIzRUU4RDZGNDYxQjhGRDQxMDZGNDgyQzQ2QzEw MjlCMTAxMzE0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHmJxd1nnnx9/1PfMtt3zwIDXLOoO9Qw7+LS ptaax5jOzqkdhJaJqgWiFgfpuJGKMD46nBSzLhm/ZwMBP/vF3pG4/1jPOIZwYZ/2 EuInAV2ZLrla+KcorjfNqWWSV7lbhQiN3alS8Fbpt3ukbFDsVdWoYCdXi1aScspl 3ITA3KtHqR+Y5TpVa1jIROrTY4PomHcvQcAQHA72CSdXSaEPs6umvY7QjhERxcfu GXfPsri0HL1eh1b34ULG8sBoz+/abS8R6P0FYRp+BkHeQK0p6azl9yxIlXKkQeN8 kt+C93wwFskEd+QELmrs6MgZyMuKQ8iF3dLhQTAKFNxW3DK/yOQ= -----END CERTIFICATE-----Generated at Mon Dec 22 00:05:19 2025 by rpki-client