This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/0279ee9c-ad2b-4bed-8641-23bf2d3b16db/0/C23F832F27DB88B8BC58766932FDA19B3E3A4CBF.mft File: C23F832F27DB88B8BC58766932FDA19B3E3A4CBF.mft (raw, json) Hash identifier: azMmNYTepZXp48Jh/gHVaTVYtFedtwKzEeevjHpnud8= Subject key identifier: DD:0A:02:E1:7F:1D:AE:57:1A:60:34:D0:0A:8A:A8:45:B4:AE:9F:EC Authority key identifier: C2:3F:83:2F:27:DB:88:B8:BC:58:76:69:32:FD:A1:9B:3E:3A:4C:BF Certificate issuer: /CN=C23F832F27DB88B8BC58766932FDA19B3E3A4CBF Certificate serial: 73BF091E8C0E242722E0FB5B4DEB27BD48ABF444 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C23F832F27DB88B8BC58766932FDA19B3E3A4CBF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0279ee9c-ad2b-4bed-8641-23bf2d3b16db/0/C23F832F27DB88B8BC58766932FDA19B3E3A4CBF.mft Manifest number: E0 Signing time: Tue 16 Dec 2025 14:11:13 +0000 Manifest this update: Tue 16 Dec 2025 14:06:13 +0000 Manifest next update: Fri 19 Dec 2025 18:13:13 +0000 Files and hashes: 1: C23F832F27DB88B8BC58766932FDA19B3E3A4CBF.crl (hash: lFfAn79fBPtXaFAyn0Ds4fRnPTgGr1I1+GAQZjLHrNc=) 2: 3136302e32352e3234382e302f32342d3234203d3e20313533303931.roa (hash: hxLgZVEmgK6Q9Qorix7qtcxFffjQzl54opLxUmCvE+8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0279ee9c-ad2b-4bed-8641-23bf2d3b16db/0/C23F832F27DB88B8BC58766932FDA19B3E3A4CBF.crl rsync://repo-rpki.idnic.net/repo/0279ee9c-ad2b-4bed-8641-23bf2d3b16db/0/C23F832F27DB88B8BC58766932FDA19B3E3A4CBF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C23F832F27DB88B8BC58766932FDA19B3E3A4CBF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Dec 2025 18:13:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:bf:09:1e:8c:0e:24:27:22:e0:fb:5b:4d:eb:27:bd:48:ab:f4:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C23F832F27DB88B8BC58766932FDA19B3E3A4CBF Validity Not Before: Dec 16 14:06:13 2025 GMT Not After : Dec 19 18:13:13 2025 GMT Subject: CN=DD0A02E17F1DAE571A6034D00A8AA845B4AE9FEC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:7d:8c:8a:db:63:43:38:ea:3b:67:ad:39:26: 83:2e:d6:1e:2d:cb:c5:07:b5:2c:12:58:14:b8:5b: 34:da:0e:bb:4f:c1:98:3a:4d:45:7a:dd:41:82:f1: c2:f8:82:1d:99:bd:52:3d:1e:e4:bb:23:3a:4d:da: f3:22:3a:03:4f:68:ff:78:1a:4a:fe:16:0a:a9:fc: b5:6c:37:90:82:d4:ea:6f:fb:d2:0f:e8:42:c2:b4: fd:7f:d5:bb:a8:c7:80:80:34:05:14:da:b5:bb:1b: 1b:72:fe:fe:41:32:d4:61:be:89:5c:32:3e:e1:c8: b3:80:74:99:05:da:98:71:28:b0:ff:a6:1f:a7:d9: 09:06:5a:1d:89:f6:92:27:92:15:16:7b:a2:d4:17: 07:13:fe:4f:74:2e:f5:99:af:ef:03:f8:38:81:c6: a8:a3:02:5c:e4:0d:a4:6c:e6:4f:f2:66:c3:32:c5: ca:88:9c:58:ef:00:7a:dc:e0:bf:50:f4:7b:eb:11: 5a:23:82:9d:fd:1b:8f:d2:6e:75:1d:88:f9:d8:a8: 0b:12:ce:15:83:52:b6:2c:19:78:2d:a0:7a:cd:b0: 67:6a:21:92:37:7d:f2:e3:f8:93:c5:a6:ef:79:14: 06:89:29:7c:e6:e4:63:96:6c:cc:d5:4c:6e:2f:4f: 7d:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:0A:02:E1:7F:1D:AE:57:1A:60:34:D0:0A:8A:A8:45:B4:AE:9F:EC X509v3 Authority Key Identifier: keyid:C2:3F:83:2F:27:DB:88:B8:BC:58:76:69:32:FD:A1:9B:3E:3A:4C:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0279ee9c-ad2b-4bed-8641-23bf2d3b16db/0/C23F832F27DB88B8BC58766932FDA19B3E3A4CBF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C23F832F27DB88B8BC58766932FDA19B3E3A4CBF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0279ee9c-ad2b-4bed-8641-23bf2d3b16db/0/C23F832F27DB88B8BC58766932FDA19B3E3A4CBF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:57:42:ff:37:a4:67:96:f4:ec:ba:b8:b2:9f:54:4a:ac:ae: 88:07:61:d4:18:82:84:f6:fb:63:fa:3c:56:a9:c5:f7:0e:6f: 3c:3e:8c:1a:67:12:c8:0c:04:90:33:80:d2:4d:e9:2e:28:f2: c1:bf:03:da:fe:57:70:24:6f:47:e9:ca:9b:20:88:cf:6e:9f: 68:14:81:5d:40:bf:6f:9c:49:a5:1e:1a:e9:8c:d4:d3:89:d7: 3b:21:c3:a2:e4:09:2d:55:d2:23:b6:fe:28:27:7f:cb:f3:c3: f6:33:0c:10:93:fc:ce:cb:d5:14:97:48:55:86:d6:28:53:2e: f2:65:ea:df:7c:25:54:af:00:6b:82:93:8f:d3:3f:65:23:48: da:f5:1a:17:c8:f1:08:2b:28:49:07:ba:97:88:b0:0c:87:0c: 63:8b:be:96:7f:4c:58:fc:0f:cb:c9:0c:03:be:a8:62:1a:85: 3d:ce:c4:71:bf:e8:aa:a9:68:15:80:3a:59:8f:0e:78:2f:cb: 55:68:d6:e0:7b:49:94:b4:d2:68:f6:a3:a8:98:87:d2:fb:b7: f2:e1:75:06:07:65:16:d7:e7:a5:60:86:0d:1b:ae:d9:ae:6a: b4:c5:20:05:48:36:80:01:21:26:e9:51:5a:42:09:cc:39:8f: ec:56:81:25 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUc78JHowOJCci4PtbTesnvUir9EQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzIzRjgzMkYyN0RCODhCOEJDNTg3NjY5MzJGREExOUIz RTNBNENCRjAeFw0yNTEyMTYxNDA2MTNaFw0yNTEyMTkxODEzMTNaMDMxMTAvBgNV BAMTKEREMEEwMkUxN0YxREFFNTcxQTYwMzREMDBBOEFBODQ1QjRBRTlGRUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBfYyK22NDOOo7Z605JoMu1h4t y8UHtSwSWBS4WzTaDrtPwZg6TUV63UGC8cL4gh2ZvVI9HuS7IzpN2vMiOgNPaP94 Gkr+Fgqp/LVsN5CC1Opv+9IP6ELCtP1/1buox4CANAUU2rW7Gxty/v5BMtRhvolc Mj7hyLOAdJkF2phxKLD/ph+n2QkGWh2J9pInkhUWe6LUFwcT/k90LvWZr+8D+DiB xqijAlzkDaRs5k/yZsMyxcqInFjvAHrc4L9Q9HvrEVojgp39G4/SbnUdiPnYqAsS zhWDUrYsGXgtoHrNsGdqIZI3ffLj+JPFpu95FAaJKXzm5GOWbMzVTG4vT335AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3QoC4X8drlcaYDTQCoqoRbSun+wwHwYDVR0j BBgwFoAUwj+DLyfbiLi8WHZpMv2hmz46TL8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w Mjc5ZWU5Yy1hZDJiLTRiZWQtODY0MS0yM2JmMmQzYjE2ZGIvMC9DMjNGODMyRjI3 REI4OEI4QkM1ODc2NjkzMkZEQTE5QjNFM0E0Q0JGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQzIzRjgzMkYyN0RCODhCOEJDNTg3NjY5MzJGREExOUIzRTNB NENCRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDI3OWVlOWMtYWQyYi00YmVkLTg2 NDEtMjNiZjJkM2IxNmRiLzAvQzIzRjgzMkYyN0RCODhCOEJDNTg3NjY5MzJGREEx OUIzRTNBNENCRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABlXQv83pGeW9Oy6uLKfVEqsrogHYdQYgoT2 +2P6PFapxfcObzw+jBpnEsgMBJAzgNJN6S4o8sG/A9r+V3Akb0fpypsgiM9un2gU gV1Av2+cSaUeGumM1NOJ1zshw6LkCS1V0iO2/ignf8vzw/YzDBCT/M7L1RSXSFWG 1ihTLvJl6t98JVSvAGuCk4/TP2UjSNr1GhfI8QgrKEkHupeIsAyHDGOLvpZ/TFj8 D8vJDAO+qGIahT3OxHG/6KqpaBWAOlmPDngvy1Vo1uB7SZS00mj2o6iYh9L7t/Lh dQYHZRbX56Vghg0brtmuarTFIAVINoABISbpUVpCCcw5j+xWgSU= -----END CERTIFICATE-----Generated at Thu Dec 18 07:48:47 2025 by rpki-client