This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/23475A86BB5C515DDD7753B6555E267A3F5C28F4.mft File: 23475A86BB5C515DDD7753B6555E267A3F5C28F4.mft (raw, json) Hash identifier: DHP0S0lViEDLLCba7gMOGZxkeZhXaJ3PRDpYKri/Dsg= Subject key identifier: A6:8F:18:CF:25:1C:3C:29:D5:B9:D9:EB:F5:8D:3F:60:3E:DD:BE:E3 Authority key identifier: 23:47:5A:86:BB:5C:51:5D:DD:77:53:B6:55:5E:26:7A:3F:5C:28:F4 Certificate issuer: /CN=23475A86BB5C515DDD7753B6555E267A3F5C28F4 Certificate serial: 31AAC0973405DCEF26AFBCB9C8A7ACC2223B0FA5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/23475A86BB5C515DDD7753B6555E267A3F5C28F4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/23475A86BB5C515DDD7753B6555E267A3F5C28F4.mft Manifest number: C4 Signing time: Sun 21 Dec 2025 00:21:30 +0000 Manifest this update: Sun 21 Dec 2025 00:16:30 +0000 Manifest next update: Wed 24 Dec 2025 02:14:30 +0000 Files and hashes: 1: 3136302e32322e33312e302f32342d3234203d3e20313532373938.roa (hash: 5aPZi9EHvbfyOxIPMTjzibe1Bxih6lwkA1KW+hUQT4E=) 2: 3136302e32322e33302e302f32342d3234203d3e20313532373938.roa (hash: /K4mylpcHmr+sO+7dTgSimoSvEZOrC1jLffnv1dbPQ8=) 3: 23475A86BB5C515DDD7753B6555E267A3F5C28F4.crl (hash: 7P6e7XTycmB3rWz09U/mu1DWy6U2s6VsuRhaxeXg85E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/23475A86BB5C515DDD7753B6555E267A3F5C28F4.crl rsync://repo-rpki.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/23475A86BB5C515DDD7753B6555E267A3F5C28F4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/23475A86BB5C515DDD7753B6555E267A3F5C28F4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Dec 2025 15:37:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:aa:c0:97:34:05:dc:ef:26:af:bc:b9:c8:a7:ac:c2:22:3b:0f:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23475A86BB5C515DDD7753B6555E267A3F5C28F4 Validity Not Before: Dec 21 00:16:30 2025 GMT Not After : Dec 24 02:14:30 2025 GMT Subject: CN=A68F18CF251C3C29D5B9D9EBF58D3F603EDDBEE3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:9c:8f:69:be:00:e2:0a:67:ee:ef:a3:30:10: 31:9b:ce:1c:a9:67:fe:38:79:0c:4e:5a:41:8e:30: 46:b1:f1:4b:d2:62:c3:34:85:d2:ae:b3:86:0f:29: 34:84:91:1b:7b:37:ed:35:73:0c:7a:e7:9e:89:3b: a9:2c:8f:30:7d:47:00:0a:51:1d:3d:92:33:dd:55: 49:4a:73:cd:fb:a7:27:96:b1:79:0e:fb:d0:d6:10: d2:a7:0f:86:eb:0f:54:e5:fa:7f:a5:e3:b7:14:82: 63:a3:85:fb:ed:9d:27:7b:5f:10:c9:f9:dc:e0:04: 07:fb:27:f8:92:00:2f:37:4e:ac:06:76:66:32:e7: 0b:eb:8e:36:35:4c:e9:0b:d4:ba:01:98:6c:d1:06: 69:d6:19:1c:a8:8d:40:67:43:ff:7e:e1:31:b7:70: f1:9a:ea:13:27:93:23:71:3d:aa:12:ce:c1:61:06: 64:c9:0d:89:56:da:d8:6f:a2:ba:0e:9c:a3:92:7e: 25:35:e5:51:03:fa:26:df:29:88:56:fa:7e:98:7f: 99:f0:46:06:a2:af:21:e4:72:7e:ed:19:45:82:d3: e1:88:03:94:51:67:5e:34:52:fb:19:8e:4f:23:34: 1a:9c:77:97:48:1e:33:b8:76:5a:20:57:96:c3:88: c2:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:8F:18:CF:25:1C:3C:29:D5:B9:D9:EB:F5:8D:3F:60:3E:DD:BE:E3 X509v3 Authority Key Identifier: keyid:23:47:5A:86:BB:5C:51:5D:DD:77:53:B6:55:5E:26:7A:3F:5C:28:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/23475A86BB5C515DDD7753B6555E267A3F5C28F4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/23475A86BB5C515DDD7753B6555E267A3F5C28F4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/23475A86BB5C515DDD7753B6555E267A3F5C28F4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:da:50:be:9f:e3:1b:8f:aa:88:0e:0e:93:99:02:a6:c0:cc: 96:1c:ce:d2:ac:b4:9f:fe:66:f7:de:f6:60:9d:f5:58:3c:22: 08:cf:c2:33:2e:e6:65:8c:3d:bc:58:ab:22:14:48:8f:be:41: c0:d4:ee:fe:6f:ed:38:b7:5a:a6:42:77:3c:04:7d:28:44:d0: 15:e4:b0:bb:eb:fd:dd:d8:d8:2a:93:1d:d7:d1:8a:04:0f:82: a5:b8:d9:91:16:df:69:c1:51:8a:09:93:cd:f0:1a:00:ce:cb: fe:0c:5c:da:6b:f2:e1:1a:10:60:29:5d:0a:d5:73:d2:da:5c: 9f:8a:6d:2a:16:fb:5c:44:4a:95:3f:96:32:bd:65:b2:45:20: 50:79:67:29:23:bb:b8:a4:72:c0:6d:a9:e6:bb:43:96:89:5f: 80:8b:17:c3:ce:da:f0:d6:5f:31:be:4e:a4:af:7e:c9:fa:30: ca:c6:c3:c9:c3:4a:7c:9f:08:38:ec:b0:58:3b:b5:4a:6f:5d: 81:62:9a:5b:1a:59:61:c7:8e:f2:1f:92:cb:bf:46:b7:86:86: a3:99:c1:cc:e8:fb:dc:02:b8:01:f8:5e:0b:9b:5d:26:ab:0e: cb:7c:79:5a:fd:5c:36:a1:fe:68:2a:a6:b6:3d:81:c7:89:c4: 43:72:52:e8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMarAlzQF3O8mr7y5yKeswiI7D6UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjM0NzVBODZCQjVDNTE1RERENzc1M0I2NTU1RTI2N0Ez RjVDMjhGNDAeFw0yNTEyMjEwMDE2MzBaFw0yNTEyMjQwMjE0MzBaMDMxMTAvBgNV BAMTKEE2OEYxOENGMjUxQzNDMjlENUI5RDlFQkY1OEQzRjYwM0VEREJFRTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLnI9pvgDiCmfu76MwEDGbzhyp Z/44eQxOWkGOMEax8UvSYsM0hdKus4YPKTSEkRt7N+01cwx6556JO6ksjzB9RwAK UR09kjPdVUlKc837pyeWsXkO+9DWENKnD4brD1Tl+n+l47cUgmOjhfvtnSd7XxDJ +dzgBAf7J/iSAC83TqwGdmYy5wvrjjY1TOkL1LoBmGzRBmnWGRyojUBnQ/9+4TG3 cPGa6hMnkyNxPaoSzsFhBmTJDYlW2thvoroOnKOSfiU15VED+ibfKYhW+n6Yf5nw RgairyHkcn7tGUWC0+GIA5RRZ140UvsZjk8jNBqcd5dIHjO4dlogV5bDiMLXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpo8YzyUcPCnVudnr9Y0/YD7dvuMwHwYDVR0j BBgwFoAUI0dahrtcUV3dd1O2VV4mej9cKPQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NWVmYzQxMy0yNzA5LTQ4M2UtYTMxNC1jNWQwNjYzZGY5MzIvMC8yMzQ3NUE4NkJC NUM1MTVEREQ3NzUzQjY1NTVFMjY3QTNGNUMyOEY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMjM0NzVBODZCQjVDNTE1RERENzc1M0I2NTU1RTI2N0EzRjVD MjhGNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjVlZmM0MTMtMjcwOS00ODNlLWEz MTQtYzVkMDY2M2RmOTMyLzAvMjM0NzVBODZCQjVDNTE1RERENzc1M0I2NTU1RTI2 N0EzRjVDMjhGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHTaUL6f4xuPqogODpOZAqbAzJYcztKstJ/+ Zvfe9mCd9Vg8IgjPwjMu5mWMPbxYqyIUSI++QcDU7v5v7Ti3WqZCdzwEfShE0BXk sLvr/d3Y2CqTHdfRigQPgqW42ZEW32nBUYoJk83wGgDOy/4MXNpr8uEaEGApXQrV c9LaXJ+KbSoW+1xESpU/ljK9ZbJFIFB5Zykju7ikcsBtqea7Q5aJX4CLF8PO2vDW XzG+TqSvfsn6MMrGw8nDSnyfCDjssFg7tUpvXYFimlsaWWHHjvIfksu/RreGhqOZ wczo+9wCuAH4XgubXSarDst8eVr9XDah/mgqprY9gceJxENyUug= -----END CERTIFICATE-----Generated at Mon Dec 22 06:47:21 2025 by rpki-client