This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/05efcbf0-66ec-48d3-b221-0f09686d5818/0/23F26F571E3865A06A13936555D8DAA27B433933.mft File: 23F26F571E3865A06A13936555D8DAA27B433933.mft (raw, json) Hash identifier: 28tnocrz7QIH/P7HKX++NPJsHPxbkKNv2eWqQmMNY3M= Subject key identifier: B2:4E:0F:6A:21:47:01:06:54:DA:DB:B5:4B:E9:3B:9E:FC:F7:F4:9A Authority key identifier: 23:F2:6F:57:1E:38:65:A0:6A:13:93:65:55:D8:DA:A2:7B:43:39:33 Certificate issuer: /CN=23F26F571E3865A06A13936555D8DAA27B433933 Certificate serial: 6EE6156457F48700ECDCC53D8322FFA1DB6377E8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/23F26F571E3865A06A13936555D8DAA27B433933.cer Subject info access: rsync://repo-rpki.idnic.net/repo/05efcbf0-66ec-48d3-b221-0f09686d5818/0/23F26F571E3865A06A13936555D8DAA27B433933.mft Manifest number: 0212 Signing time: Sat 06 Dec 2025 15:21:55 +0000 Manifest this update: Sat 06 Dec 2025 15:16:55 +0000 Manifest next update: Tue 09 Dec 2025 22:31:55 +0000 Files and hashes: 1: 3130332e3137332e3133382e302f32332d3233203d3e20313437303738.roa (hash: SP7Vczz+6iJdkBg+Pm02fK5fUh9ipxxjJbwoliQlUe0=) 2: 3130332e3137332e3133392e302f32342d3234203d3e20313437303738.roa (hash: lkFPSA/0P6F0cE2k+qs5Hdu6hwn+gvFK2pZuPkqHwpw=) 3: 23F26F571E3865A06A13936555D8DAA27B433933.crl (hash: 1xSmOE8kbAoAce6T4iomVdHmD0Jr6yOCmEWRmGm6KeQ=) 4: 3130332e3137332e3133382e302f32342d3234203d3e20313437303738.roa (hash: 1TF1q7w4Zi+aLzgAuBXcx7Cio1arNovo47+qmMckVGw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/05efcbf0-66ec-48d3-b221-0f09686d5818/0/23F26F571E3865A06A13936555D8DAA27B433933.crl rsync://repo-rpki.idnic.net/repo/05efcbf0-66ec-48d3-b221-0f09686d5818/0/23F26F571E3865A06A13936555D8DAA27B433933.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/23F26F571E3865A06A13936555D8DAA27B433933.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:e6:15:64:57:f4:87:00:ec:dc:c5:3d:83:22:ff:a1:db:63:77:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23F26F571E3865A06A13936555D8DAA27B433933 Validity Not Before: Dec 6 15:16:55 2025 GMT Not After : Dec 9 22:31:55 2025 GMT Subject: CN=B24E0F6A2147010654DADBB54BE93B9EFCF7F49A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:1e:73:2c:27:8e:aa:1f:8d:8a:08:4e:21:64: 00:ba:65:00:ae:65:b6:8d:96:ea:45:bb:cd:d5:7c: 0d:ff:0c:f6:68:da:05:86:7a:6d:97:07:c3:7f:23: 33:b6:48:a3:61:49:d4:15:d5:f9:6c:09:30:57:32: 63:06:7e:2a:2a:46:ed:4d:ae:34:2f:94:f2:48:b9: 31:11:63:1c:3f:0f:07:a2:07:9d:eb:60:e8:0d:22: 66:80:42:86:5f:2e:dc:f5:d0:da:45:cc:ae:1c:d8: 31:d2:2e:a9:0b:08:80:af:66:3d:07:b6:2b:4c:35: 3c:84:64:fa:5d:db:8d:f4:9f:8e:3e:99:7a:2e:9e: 99:8c:d8:94:89:98:4c:b1:20:76:5a:a5:16:33:15: 2e:bb:5c:09:3a:03:b6:4e:14:dd:94:32:36:c4:03: 12:ca:5d:6e:f1:b8:83:13:06:d1:5d:ce:c9:3f:f0: 7f:28:fe:38:b4:64:0b:37:cb:ba:31:7e:83:2c:82: 92:26:de:eb:4e:54:a4:92:a1:e0:81:b6:58:c9:e7: 9e:13:be:c8:26:e9:51:17:cc:23:41:d8:e6:4b:c5: 4b:83:57:21:0a:a8:ee:f3:80:15:79:9e:f0:cd:c6: 74:a6:48:33:1c:d1:76:fa:15:ad:63:c9:8a:1c:55: 16:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:4E:0F:6A:21:47:01:06:54:DA:DB:B5:4B:E9:3B:9E:FC:F7:F4:9A X509v3 Authority Key Identifier: keyid:23:F2:6F:57:1E:38:65:A0:6A:13:93:65:55:D8:DA:A2:7B:43:39:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/05efcbf0-66ec-48d3-b221-0f09686d5818/0/23F26F571E3865A06A13936555D8DAA27B433933.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/23F26F571E3865A06A13936555D8DAA27B433933.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/05efcbf0-66ec-48d3-b221-0f09686d5818/0/23F26F571E3865A06A13936555D8DAA27B433933.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:fe:cd:92:f7:f7:b0:61:82:2b:39:ec:d2:d2:f1:dc:01:bf: 98:b8:20:fb:1b:d6:5f:a5:bb:b9:2a:7a:f5:87:e1:8d:e9:4a: 8c:3b:c3:13:e1:cf:7a:60:72:31:1c:e7:b0:b0:7c:ce:ec:56: 88:a3:c7:a8:5b:9b:ba:87:b0:ae:25:3e:c7:da:25:59:5b:58: b1:d2:b0:29:8b:26:b3:87:ca:8e:16:e4:eb:2b:f6:86:ea:1a: 2b:00:36:9a:63:b8:58:e3:58:b2:dc:46:7b:14:9e:03:d7:30: 2b:e3:5f:d9:d0:c5:af:23:6b:7e:0b:91:58:4f:7e:36:be:65: e7:2c:8b:94:2c:89:17:ae:a6:87:5c:50:98:be:12:32:60:18: 05:c0:32:4e:28:e1:f1:ac:22:30:9c:86:74:e0:b9:6b:07:a2: 75:9a:1e:3f:dc:56:ac:00:0f:ab:94:8e:39:47:b2:d5:a7:b7: 2d:3c:a3:b5:92:03:a0:74:f5:82:22:74:e3:1d:39:2f:f2:5c: 8a:a8:1a:15:08:f0:09:49:5b:ca:d2:88:1f:2d:53:3c:7a:e1: aa:de:b6:8c:ef:b5:fe:24:d0:cd:5a:0d:c6:3b:3d:88:c2:bf: e3:7c:9a:27:1c:b5:9e:bc:c7:99:63:de:21:b2:56:95:37:29: df:cf:4f:f8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbuYVZFf0hwDs3MU9gyL/odtjd+gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjNGMjZGNTcxRTM4NjVBMDZBMTM5MzY1NTVEOERBQTI3 QjQzMzkzMzAeFw0yNTEyMDYxNTE2NTVaFw0yNTEyMDkyMjMxNTVaMDMxMTAvBgNV BAMTKEIyNEUwRjZBMjE0NzAxMDY1NERBREJCNTRCRTkzQjlFRkNGN0Y0OUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrHnMsJ46qH42KCE4hZAC6ZQCu ZbaNlupFu83VfA3/DPZo2gWGem2XB8N/IzO2SKNhSdQV1flsCTBXMmMGfioqRu1N rjQvlPJIuTERYxw/DweiB53rYOgNImaAQoZfLtz10NpFzK4c2DHSLqkLCICvZj0H titMNTyEZPpd2430n44+mXounpmM2JSJmEyxIHZapRYzFS67XAk6A7ZOFN2UMjbE AxLKXW7xuIMTBtFdzsk/8H8o/ji0ZAs3y7oxfoMsgpIm3utOVKSSoeCBtljJ554T vsgm6VEXzCNB2OZLxUuDVyEKqO7zgBV5nvDNxnSmSDMc0Xb6Fa1jyYocVRY1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsk4PaiFHAQZU2tu1S+k7nvz39JowHwYDVR0j BBgwFoAUI/JvVx44ZaBqE5NlVdjaontDOTMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NWVmY2JmMC02NmVjLTQ4ZDMtYjIyMS0wZjA5Njg2ZDU4MTgvMC8yM0YyNkY1NzFF Mzg2NUEwNkExMzkzNjU1NUQ4REFBMjdCNDMzOTMzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjNGMjZGNTcxRTM4NjVBMDZBMTM5MzY1NTVEOERBQTI3QjQz MzkzMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDVlZmNiZjAtNjZlYy00OGQzLWIy MjEtMGYwOTY4NmQ1ODE4LzAvMjNGMjZGNTcxRTM4NjVBMDZBMTM5MzY1NTVEOERB QTI3QjQzMzkzMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB/+zZL397Bhgis57NLS8dwBv5i4IPsb1l+l u7kqevWH4Y3pSow7wxPhz3pgcjEc57CwfM7sVoijx6hbm7qHsK4lPsfaJVlbWLHS sCmLJrOHyo4W5Osr9obqGisANppjuFjjWLLcRnsUngPXMCvjX9nQxa8ja34LkVhP fja+Zecsi5QsiReupodcUJi+EjJgGAXAMk4o4fGsIjCchnTguWsHonWaHj/cVqwA D6uUjjlHstWnty08o7WSA6B09YIidOMdOS/yXIqoGhUI8AlJW8rSiB8tUzx64are tozvtf4k0M1aDcY7PYjCv+N8micctZ68x5lj3iGyVpU3Kd/PT/g= -----END CERTIFICATE-----Generated at Sun Dec 7 02:02:24 2025 by rpki-client