This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/05efcbf0-66ec-48d3-b221-0f09686d5818/0/23F26F571E3865A06A13936555D8DAA27B433933.mft File: 23F26F571E3865A06A13936555D8DAA27B433933.mft (raw, json) Hash identifier: YCyQbfKI59Xz0fjFICjLTDy9nnh5tqBcKBGY2FnKdF4= Subject key identifier: 64:B5:78:71:B0:6E:EE:F5:4D:46:F1:84:37:B5:5B:0F:B9:FA:7B:56 Authority key identifier: 23:F2:6F:57:1E:38:65:A0:6A:13:93:65:55:D8:DA:A2:7B:43:39:33 Certificate issuer: /CN=23F26F571E3865A06A13936555D8DAA27B433933 Certificate serial: 4E01000FD961FCE191119383BDB35CB3CF6E219F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/23F26F571E3865A06A13936555D8DAA27B433933.cer Subject info access: rsync://repo-rpki.idnic.net/repo/05efcbf0-66ec-48d3-b221-0f09686d5818/0/23F26F571E3865A06A13936555D8DAA27B433933.mft Manifest number: 0218 Signing time: Fri 19 Dec 2025 16:32:57 +0000 Manifest this update: Fri 19 Dec 2025 16:27:57 +0000 Manifest next update: Tue 23 Dec 2025 01:43:57 +0000 Files and hashes: 1: 3130332e3137332e3133382e302f32332d3233203d3e20313437303738.roa (hash: SP7Vczz+6iJdkBg+Pm02fK5fUh9ipxxjJbwoliQlUe0=) 2: 23F26F571E3865A06A13936555D8DAA27B433933.crl (hash: sOUoeVcI2SNPZyKEwhcC+3NARUczjrCM7YRvCiA4ooA=) 3: 3130332e3137332e3133382e302f32342d3234203d3e20313437303738.roa (hash: 1TF1q7w4Zi+aLzgAuBXcx7Cio1arNovo47+qmMckVGw=) 4: 3130332e3137332e3133392e302f32342d3234203d3e20313437303738.roa (hash: lkFPSA/0P6F0cE2k+qs5Hdu6hwn+gvFK2pZuPkqHwpw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/05efcbf0-66ec-48d3-b221-0f09686d5818/0/23F26F571E3865A06A13936555D8DAA27B433933.crl rsync://repo-rpki.idnic.net/repo/05efcbf0-66ec-48d3-b221-0f09686d5818/0/23F26F571E3865A06A13936555D8DAA27B433933.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/23F26F571E3865A06A13936555D8DAA27B433933.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Dec 2025 01:43:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:01:00:0f:d9:61:fc:e1:91:11:93:83:bd:b3:5c:b3:cf:6e:21:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23F26F571E3865A06A13936555D8DAA27B433933 Validity Not Before: Dec 19 16:27:57 2025 GMT Not After : Dec 23 01:43:57 2025 GMT Subject: CN=64B57871B06EEEF54D46F18437B55B0FB9FA7B56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:81:b2:f8:4f:c9:12:b1:83:75:19:25:dd:9a: d8:c0:00:96:9e:d5:ee:41:a6:28:ea:83:7a:a1:ab: 90:cf:a1:2e:c5:69:2f:73:ac:c6:ce:4a:cf:42:61: 57:bf:65:ad:18:a0:ca:9e:2a:b3:fa:0c:0d:81:10: 7c:e7:8d:f8:6f:14:26:59:bc:5d:00:36:33:51:a2: cd:85:10:02:2f:95:b3:8c:4e:dd:4c:5d:0d:1a:14: 11:08:9f:74:96:3b:51:11:0e:3a:a2:9b:43:43:19: 4a:d8:da:8c:37:36:16:d2:80:16:c1:13:04:7c:03: 19:8b:9f:88:4c:d3:e1:d7:f3:e3:73:c9:78:0e:1e: 27:74:7e:86:2f:f2:ba:cc:da:bf:77:74:b7:91:d5: 43:12:2c:7b:c2:d6:d0:3e:b6:fc:7e:ea:86:7e:94: 8c:05:7f:6e:94:cb:63:83:89:98:c1:fb:c3:40:98: 5e:a8:ae:23:38:2c:2b:fb:9b:a4:d0:91:a8:59:dd: 39:de:91:f6:c0:99:09:51:ab:3a:38:ce:43:99:63: a9:35:bf:6b:ff:7a:96:c4:ea:a9:5f:12:7b:2c:94: 3f:db:12:f5:20:88:f8:b2:33:fc:0e:9d:ed:95:af: 7a:e6:7d:7c:63:c9:5e:a8:90:7d:26:ce:32:f9:bc: c8:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:B5:78:71:B0:6E:EE:F5:4D:46:F1:84:37:B5:5B:0F:B9:FA:7B:56 X509v3 Authority Key Identifier: keyid:23:F2:6F:57:1E:38:65:A0:6A:13:93:65:55:D8:DA:A2:7B:43:39:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/05efcbf0-66ec-48d3-b221-0f09686d5818/0/23F26F571E3865A06A13936555D8DAA27B433933.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/23F26F571E3865A06A13936555D8DAA27B433933.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/05efcbf0-66ec-48d3-b221-0f09686d5818/0/23F26F571E3865A06A13936555D8DAA27B433933.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:5b:18:30:2e:5c:40:e4:42:69:2e:19:44:c5:ae:da:fb:2b: 64:28:aa:7f:0a:6b:b4:3e:d4:ae:fa:84:6c:06:f4:c0:86:ef: 36:81:9d:5c:79:d2:d4:e8:93:4e:b1:2e:30:40:49:05:4f:08: b3:a7:4d:1a:c7:51:77:8a:f6:65:e2:c3:0f:cd:50:0e:2c:da: 61:bc:f3:2a:91:ee:4a:d9:77:e4:36:d7:05:6a:7c:11:fc:d1: e7:18:76:cb:6d:0c:1c:31:b0:3f:d1:24:18:68:62:0c:1a:9c: 50:30:a5:dc:cf:e0:57:ed:d5:b9:ab:a5:d2:43:eb:7f:91:2d: 9e:02:59:ec:09:c4:fc:39:80:03:84:2e:a9:8d:cf:11:1f:b8: f8:b7:bf:ec:fe:d8:09:3f:e5:36:09:a9:8a:69:51:b3:cc:d0: 88:1f:dc:62:4b:22:9b:2a:1d:ee:a2:6e:41:94:3e:fa:93:42: 5f:76:c9:a4:ca:45:36:a8:5e:ef:f5:ec:58:a7:ce:78:04:7d: 91:59:02:08:34:32:57:4e:06:f5:95:65:72:19:d0:e3:24:b1: b9:75:4e:d0:61:0c:09:81:c8:f2:89:02:d9:eb:a4:38:91:34: 19:ee:9f:82:c8:c5:aa:84:b9:91:a4:10:5a:2f:4c:27:fa:df: b2:46:eb:65 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTgEAD9lh/OGREZODvbNcs89uIZ8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjNGMjZGNTcxRTM4NjVBMDZBMTM5MzY1NTVEOERBQTI3 QjQzMzkzMzAeFw0yNTEyMTkxNjI3NTdaFw0yNTEyMjMwMTQzNTdaMDMxMTAvBgNV BAMTKDY0QjU3ODcxQjA2RUVFRjU0RDQ2RjE4NDM3QjU1QjBGQjlGQTdCNTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZgbL4T8kSsYN1GSXdmtjAAJae 1e5Bpijqg3qhq5DPoS7FaS9zrMbOSs9CYVe/Za0YoMqeKrP6DA2BEHznjfhvFCZZ vF0ANjNRos2FEAIvlbOMTt1MXQ0aFBEIn3SWO1ERDjqim0NDGUrY2ow3NhbSgBbB EwR8AxmLn4hM0+HX8+NzyXgOHid0foYv8rrM2r93dLeR1UMSLHvC1tA+tvx+6oZ+ lIwFf26Uy2ODiZjB+8NAmF6oriM4LCv7m6TQkahZ3TnekfbAmQlRqzo4zkOZY6k1 v2v/epbE6qlfEnsslD/bEvUgiPiyM/wOne2Vr3rmfXxjyV6okH0mzjL5vMjNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZLV4cbBu7vVNRvGEN7VbD7n6e1YwHwYDVR0j BBgwFoAUI/JvVx44ZaBqE5NlVdjaontDOTMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NWVmY2JmMC02NmVjLTQ4ZDMtYjIyMS0wZjA5Njg2ZDU4MTgvMC8yM0YyNkY1NzFF Mzg2NUEwNkExMzkzNjU1NUQ4REFBMjdCNDMzOTMzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjNGMjZGNTcxRTM4NjVBMDZBMTM5MzY1NTVEOERBQTI3QjQz MzkzMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDVlZmNiZjAtNjZlYy00OGQzLWIy MjEtMGYwOTY4NmQ1ODE4LzAvMjNGMjZGNTcxRTM4NjVBMDZBMTM5MzY1NTVEOERB QTI3QjQzMzkzMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH1bGDAuXEDkQmkuGUTFrtr7K2Qoqn8Ka7Q+ 1K76hGwG9MCG7zaBnVx50tTok06xLjBASQVPCLOnTRrHUXeK9mXiww/NUA4s2mG8 8yqR7krZd+Q21wVqfBH80ecYdsttDBwxsD/RJBhoYgwanFAwpdzP4Fft1bmrpdJD 63+RLZ4CWewJxPw5gAOELqmNzxEfuPi3v+z+2Ak/5TYJqYppUbPM0Igf3GJLIpsq He6ibkGUPvqTQl92yaTKRTaoXu/17FinzngEfZFZAgg0MldOBvWVZXIZ0OMksbl1 TtBhDAmByPKJAtnrpDiRNBnun4LIxaqEuZGkEFovTCf637JG62U= -----END CERTIFICATE-----Generated at Sun Dec 21 10:39:42 2025 by rpki-client