This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/F23ACCA147720B423A9576F3E408691505B293A3.mft File: F23ACCA147720B423A9576F3E408691505B293A3.mft (raw, json) Hash identifier: 56ByM9DrtYqqZd6SYAMig1ub4d+hnRo+qzlW+rprM6o= Subject key identifier: 73:38:EF:46:C9:32:50:60:2F:4F:2C:54:09:AE:3D:BE:DC:F6:DD:E0 Authority key identifier: F2:3A:CC:A1:47:72:0B:42:3A:95:76:F3:E4:08:69:15:05:B2:93:A3 Certificate issuer: /CN=F23ACCA147720B423A9576F3E408691505B293A3 Certificate serial: 5DE63AD9ED47E715B03E42E3B12112066F713118 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F23ACCA147720B423A9576F3E408691505B293A3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/F23ACCA147720B423A9576F3E408691505B293A3.mft Manifest number: 0166 Signing time: Fri 19 Dec 2025 02:52:15 +0000 Manifest this update: Fri 19 Dec 2025 02:47:15 +0000 Manifest next update: Mon 22 Dec 2025 06:11:15 +0000 Files and hashes: 1: 3130332e3139302e32392e302f32342d3234203d3e20313439393438.roa (hash: bL4A3iMML3JwhDE2yFeN6uDiSzuObZzoT/f0gxHop3A=) 2: 3130332e3139302e32382e302f32342d3234203d3e20313439393438.roa (hash: BETPcfS1VcTumvWSwQRlY9PEvVDNhn9IgT3oOeof4jw=) 3: F23ACCA147720B423A9576F3E408691505B293A3.crl (hash: mFR9yx214WJawssbTUWmVgyhslIf3bTFI56o+47I5Iw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/F23ACCA147720B423A9576F3E408691505B293A3.crl rsync://repo-rpki.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/F23ACCA147720B423A9576F3E408691505B293A3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F23ACCA147720B423A9576F3E408691505B293A3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 06:11:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:e6:3a:d9:ed:47:e7:15:b0:3e:42:e3:b1:21:12:06:6f:71:31:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F23ACCA147720B423A9576F3E408691505B293A3 Validity Not Before: Dec 19 02:47:15 2025 GMT Not After : Dec 22 06:11:15 2025 GMT Subject: CN=7338EF46C93250602F4F2C5409AE3DBEDCF6DDE0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:86:62:d1:28:ae:e8:57:ab:4f:1c:a8:ae:0b: 7b:6d:d0:2d:3e:37:38:06:28:a9:ce:a5:80:29:22: 6e:34:8e:42:7a:3f:1f:0e:a5:8b:d8:32:6b:41:4c: 0f:48:d4:d1:70:67:97:70:94:0f:fe:d1:b6:bd:14: 73:56:02:36:8d:34:a2:86:44:fc:19:55:9b:e5:db: f4:23:43:a4:38:a4:12:70:7d:43:33:d1:39:7f:42: f4:a2:d0:6c:38:e2:e1:34:74:8c:ac:74:e6:31:4b: c9:30:18:19:c7:11:30:5e:c8:5f:2d:4d:c1:52:fb: 41:40:b5:f5:d1:64:7a:5b:82:d8:16:e8:c1:91:83: b9:c8:03:44:b8:62:5b:42:53:e8:9e:a0:11:0a:d8: 9c:d4:f0:66:bd:8e:e1:4d:cf:36:f5:50:1a:d6:82: be:8d:fc:84:ed:13:28:cf:b6:71:6e:8a:4d:cf:8e: 89:f5:cc:6b:25:83:dd:fb:3e:33:ff:36:aa:16:4b: 7b:5d:41:82:b7:8d:c9:87:bc:f7:17:c5:5d:b9:c6: fa:32:e8:fa:c3:98:96:d7:2d:61:0f:46:73:a5:83: 8c:c4:95:93:55:90:eb:ea:bf:52:27:30:5e:8a:66: 1f:87:62:4e:5f:06:f8:0e:13:5d:a9:e2:a7:38:79: 73:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:38:EF:46:C9:32:50:60:2F:4F:2C:54:09:AE:3D:BE:DC:F6:DD:E0 X509v3 Authority Key Identifier: keyid:F2:3A:CC:A1:47:72:0B:42:3A:95:76:F3:E4:08:69:15:05:B2:93:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/F23ACCA147720B423A9576F3E408691505B293A3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F23ACCA147720B423A9576F3E408691505B293A3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/F23ACCA147720B423A9576F3E408691505B293A3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:38:c5:f5:a0:a4:8a:11:31:84:90:a9:2b:ea:f9:b6:1e:3b: e5:f5:e2:27:37:2c:c1:5a:5b:08:f4:44:60:c7:35:6b:e9:60: 1a:31:65:e3:68:93:d3:06:c6:2a:5d:2c:43:0b:47:32:76:1b: 3c:be:5f:7b:5e:b0:0c:3b:03:39:37:c8:7e:bf:c2:11:53:27: 66:cf:7c:0a:ef:97:e7:00:97:99:c0:b3:53:98:35:32:58:43: 68:ab:de:bb:f7:af:23:0a:07:70:bf:14:ba:00:84:c4:39:07: a5:9c:15:10:7a:57:97:d3:03:25:87:20:18:d0:d6:4a:f6:76: 79:c6:cd:fc:dc:90:b1:ed:a3:9e:2a:8c:f3:b1:33:85:fb:9a: b3:16:7a:0e:b8:32:19:3a:cc:57:7c:52:3e:4d:32:ac:da:bf: 8e:51:f8:ad:da:ab:06:ed:ea:5c:65:28:ad:0e:b3:6f:f8:47: e5:ee:d1:ac:fa:a6:ea:22:cb:7b:ff:86:80:dd:e0:bb:d8:d2: ab:a1:33:bc:3d:e4:8f:fb:27:1b:0c:87:79:ec:18:0d:b4:03: 4d:90:bf:0e:5c:14:d0:fc:11:b3:d4:f9:d9:70:27:04:a5:71: 46:1e:c7:61:10:a0:c6:bc:58:81:ef:78:98:64:f6:6c:d3:d8: 13:70:77:d0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXeY62e1H5xWwPkLjsSESBm9xMRgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjIzQUNDQTE0NzcyMEI0MjNBOTU3NkYzRTQwODY5MTUw NUIyOTNBMzAeFw0yNTEyMTkwMjQ3MTVaFw0yNTEyMjIwNjExMTVaMDMxMTAvBgNV BAMTKDczMzhFRjQ2QzkzMjUwNjAyRjRGMkM1NDA5QUUzREJFRENGNkRERTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDuhmLRKK7oV6tPHKiuC3tt0C0+ NzgGKKnOpYApIm40jkJ6Px8OpYvYMmtBTA9I1NFwZ5dwlA/+0ba9FHNWAjaNNKKG RPwZVZvl2/QjQ6Q4pBJwfUMz0Tl/QvSi0Gw44uE0dIysdOYxS8kwGBnHETBeyF8t TcFS+0FAtfXRZHpbgtgW6MGRg7nIA0S4YltCU+ieoBEK2JzU8Ga9juFNzzb1UBrW gr6N/ITtEyjPtnFuik3Pjon1zGslg937PjP/NqoWS3tdQYK3jcmHvPcXxV25xvoy 6PrDmJbXLWEPRnOlg4zElZNVkOvqv1InMF6KZh+HYk5fBvgOE12p4qc4eXMnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUczjvRskyUGAvTyxUCa49vtz23eAwHwYDVR0j BBgwFoAU8jrMoUdyC0I6lXbz5AhpFQWyk6MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZWUxNDM4Mi1kNTg3LTRlODYtOGU3ZS02YTI2NGE1OGVhMDYvMC9GMjNBQ0NBMTQ3 NzIwQjQyM0E5NTc2RjNFNDA4NjkxNTA1QjI5M0EzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjIzQUNDQTE0NzcyMEI0MjNBOTU3NkYzRTQwODY5MTUwNUIy OTNBMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmVlMTQzODItZDU4Ny00ZTg2LThl N2UtNmEyNjRhNThlYTA2LzAvRjIzQUNDQTE0NzcyMEI0MjNBOTU3NkYzRTQwODY5 MTUwNUIyOTNBMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABI4xfWgpIoRMYSQqSvq+bYeO+X14ic3LMFa Wwj0RGDHNWvpYBoxZeNok9MGxipdLEMLRzJ2Gzy+X3tesAw7Azk3yH6/whFTJ2bP fArvl+cAl5nAs1OYNTJYQ2ir3rv3ryMKB3C/FLoAhMQ5B6WcFRB6V5fTAyWHIBjQ 1kr2dnnGzfzckLHto54qjPOxM4X7mrMWeg64Mhk6zFd8Uj5NMqzav45R+K3aqwbt 6lxlKK0Os2/4R+Xu0az6puoiy3v/hoDd4LvY0quhM7w95I/7JxsMh3nsGA20A02Q vw5cFND8EbPU+dlwJwSlcUYex2EQoMa8WIHveJhk9mzT2BNwd9A= -----END CERTIFICATE-----Generated at Sat Dec 20 19:05:39 2025 by rpki-client