This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/F23ACCA147720B423A9576F3E408691505B293A3.mft File: F23ACCA147720B423A9576F3E408691505B293A3.mft (raw, json) Hash identifier: uFIIWvi6oaWXDy+dK8lreYG9+4t6bbDis4iTUi4YPM4= Subject key identifier: AD:63:6D:C2:7E:BD:9A:9A:F1:5C:0A:BF:46:D3:4F:CD:5C:E7:F9:E3 Authority key identifier: F2:3A:CC:A1:47:72:0B:42:3A:95:76:F3:E4:08:69:15:05:B2:93:A3 Certificate issuer: /CN=F23ACCA147720B423A9576F3E408691505B293A3 Certificate serial: 10DD9B604211174C63C6751BEB5BD57381001D87 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F23ACCA147720B423A9576F3E408691505B293A3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/F23ACCA147720B423A9576F3E408691505B293A3.mft Manifest number: 016A Signing time: Sun 28 Dec 2025 10:41:50 +0000 Manifest this update: Sun 28 Dec 2025 10:36:50 +0000 Manifest next update: Wed 31 Dec 2025 20:41:50 +0000 Files and hashes: 1: 3130332e3139302e32392e302f32342d3234203d3e20313439393438.roa (hash: bL4A3iMML3JwhDE2yFeN6uDiSzuObZzoT/f0gxHop3A=) 2: F23ACCA147720B423A9576F3E408691505B293A3.crl (hash: 81TPVzD3Xl4pupnnupQ69QLBnYjzEKFnOnDslKx4btc=) 3: 3130332e3139302e32382e302f32342d3234203d3e20313439393438.roa (hash: BETPcfS1VcTumvWSwQRlY9PEvVDNhn9IgT3oOeof4jw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/F23ACCA147720B423A9576F3E408691505B293A3.crl rsync://repo-rpki.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/F23ACCA147720B423A9576F3E408691505B293A3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F23ACCA147720B423A9576F3E408691505B293A3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 31 Dec 2025 20:41:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:dd:9b:60:42:11:17:4c:63:c6:75:1b:eb:5b:d5:73:81:00:1d:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F23ACCA147720B423A9576F3E408691505B293A3 Validity Not Before: Dec 28 10:36:50 2025 GMT Not After : Dec 31 20:41:50 2025 GMT Subject: CN=AD636DC27EBD9A9AF15C0ABF46D34FCD5CE7F9E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:c0:0e:1b:83:68:ad:44:ab:6c:24:6e:a6:dd: 00:56:02:68:5c:ec:b9:ba:57:b0:ee:a8:89:ce:6a: f1:6f:22:6c:ee:02:f9:4a:fc:fd:2c:d6:43:1c:38: a6:21:35:30:29:9a:d2:83:52:7a:a6:11:0d:bb:f0: f9:34:86:24:be:df:54:bd:5a:88:30:02:32:f2:e7: cd:f3:8f:6f:14:75:66:ad:4d:ae:68:23:d3:1b:fb: 38:87:82:cd:ba:7e:42:7c:ca:b9:8c:59:12:00:74: 6a:ec:21:0c:aa:8b:5a:67:3f:c9:82:b3:cb:ea:ed: 10:1a:a6:33:c5:4c:3f:36:7a:4f:38:fb:ff:f5:6b: 1a:98:14:fb:b2:0c:c6:86:5a:89:80:62:51:7f:d7: 3a:5b:f2:cc:10:13:9a:07:0c:68:cc:b1:ca:63:51: 51:d2:ca:43:ac:f5:0c:8c:17:24:58:a0:4b:12:fe: 8e:0c:db:30:d8:ef:ae:dd:16:e3:a6:3c:9e:42:42: b5:3e:b0:a5:42:e7:d1:57:a9:f5:e6:80:76:48:2e: e3:c9:ba:ce:a2:92:67:6a:7d:4a:d0:cf:a4:b3:07: bd:70:a9:c7:1f:c8:21:dc:ef:73:a2:e9:8d:ed:9c: e1:ee:1c:eb:15:74:26:c7:22:a1:56:a5:5a:77:8b: c4:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:63:6D:C2:7E:BD:9A:9A:F1:5C:0A:BF:46:D3:4F:CD:5C:E7:F9:E3 X509v3 Authority Key Identifier: keyid:F2:3A:CC:A1:47:72:0B:42:3A:95:76:F3:E4:08:69:15:05:B2:93:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/F23ACCA147720B423A9576F3E408691505B293A3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F23ACCA147720B423A9576F3E408691505B293A3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/F23ACCA147720B423A9576F3E408691505B293A3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:b3:ec:ec:54:60:60:e1:08:82:45:78:1b:9f:cc:3e:3e:ee: 26:13:1b:a4:9e:4d:f1:9d:95:33:e5:c1:50:ce:4e:55:9a:41: 4b:96:83:cd:82:e6:9d:4c:7e:98:e5:e2:26:52:ca:38:10:57: 13:b1:7d:8f:84:a0:a0:08:14:1f:b1:f9:d6:6a:83:2c:65:17: d2:81:a1:a0:99:66:0e:60:4b:0f:8e:0e:47:c0:b6:9e:6c:73: de:d2:68:c4:ab:cc:c3:9a:6b:a8:e4:42:40:22:92:95:62:e4: a5:de:f3:f8:08:09:10:3a:3f:7b:12:88:e5:f3:d5:96:49:48: 7c:9a:5f:cd:98:86:bb:cc:13:5a:f6:e0:80:f4:17:9c:9b:f9: a6:1c:25:04:bf:7c:c2:2e:d4:c2:a1:57:3b:9c:b3:2c:c3:0a: 1e:a2:80:32:ec:6b:32:5d:c3:da:01:cf:7d:a9:f4:f0:2c:7a: 8d:82:92:54:80:0d:dd:60:4f:d3:6f:26:a7:87:6c:6e:b2:3d: a2:f1:a5:55:67:f3:dc:78:66:38:ce:2e:db:37:ed:15:a3:23: e7:6b:70:6a:32:fe:98:fb:63:00:85:66:12:c2:4f:58:54:10: 3d:c7:ea:44:5a:14:1e:cd:71:29:44:e6:cb:2b:ee:db:86:5e: d5:39:31:35 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEN2bYEIRF0xjxnUb61vVc4EAHYcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjIzQUNDQTE0NzcyMEI0MjNBOTU3NkYzRTQwODY5MTUw NUIyOTNBMzAeFw0yNTEyMjgxMDM2NTBaFw0yNTEyMzEyMDQxNTBaMDMxMTAvBgNV BAMTKEFENjM2REMyN0VCRDlBOUFGMTVDMEFCRjQ2RDM0RkNENUNFN0Y5RTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVwA4bg2itRKtsJG6m3QBWAmhc 7Lm6V7DuqInOavFvImzuAvlK/P0s1kMcOKYhNTApmtKDUnqmEQ278Pk0hiS+31S9 WogwAjLy583zj28UdWatTa5oI9Mb+ziHgs26fkJ8yrmMWRIAdGrsIQyqi1pnP8mC s8vq7RAapjPFTD82ek84+//1axqYFPuyDMaGWomAYlF/1zpb8swQE5oHDGjMscpj UVHSykOs9QyMFyRYoEsS/o4M2zDY767dFuOmPJ5CQrU+sKVC59FXqfXmgHZILuPJ us6ikmdqfUrQz6SzB71wqccfyCHc73Oi6Y3tnOHuHOsVdCbHIqFWpVp3i8RvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrWNtwn69mprxXAq/RtNPzVzn+eMwHwYDVR0j BBgwFoAU8jrMoUdyC0I6lXbz5AhpFQWyk6MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZWUxNDM4Mi1kNTg3LTRlODYtOGU3ZS02YTI2NGE1OGVhMDYvMC9GMjNBQ0NBMTQ3 NzIwQjQyM0E5NTc2RjNFNDA4NjkxNTA1QjI5M0EzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjIzQUNDQTE0NzcyMEI0MjNBOTU3NkYzRTQwODY5MTUwNUIy OTNBMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmVlMTQzODItZDU4Ny00ZTg2LThl N2UtNmEyNjRhNThlYTA2LzAvRjIzQUNDQTE0NzcyMEI0MjNBOTU3NkYzRTQwODY5 MTUwNUIyOTNBMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALaz7OxUYGDhCIJFeBufzD4+7iYTG6SeTfGd lTPlwVDOTlWaQUuWg82C5p1Mfpjl4iZSyjgQVxOxfY+EoKAIFB+x+dZqgyxlF9KB oaCZZg5gSw+ODkfAtp5sc97SaMSrzMOaa6jkQkAikpVi5KXe8/gICRA6P3sSiOXz 1ZZJSHyaX82YhrvME1r24ID0F5yb+aYcJQS/fMIu1MKhVzucsyzDCh6igDLsazJd w9oBz32p9PAseo2CklSADd1gT9NvJqeHbG6yPaLxpVVn89x4ZjjOLts37RWjI+dr cGoy/pj7YwCFZhLCT1hUED3H6kRaFB7NcSlE5ssr7tuGXtU5MTU= -----END CERTIFICATE-----Generated at Mon Dec 29 22:39:11 2025 by rpki-client