This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.mft File: 923D4A10E1DBBF6927183BF3419F512FE4C1D003.mft (raw, json) Hash identifier: 7PVYsWdAPJC4odfTJqEbApY4MEOaCOS6OW1ttqg5XtA= Subject key identifier: 4C:8A:E6:92:55:B8:4A:47:E0:95:38:17:47:CE:FA:52:85:43:0E:3A Authority key identifier: 92:3D:4A:10:E1:DB:BF:69:27:18:3B:F3:41:9F:51:2F:E4:C1:D0:03 Certificate issuer: /CN=923D4A10E1DBBF6927183BF3419F512FE4C1D003 Certificate serial: 1D565E05EDEEB90FA048AED1E8CEB7222F9C1246 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923D4A10E1DBBF6927183BF3419F512FE4C1D003.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.mft Manifest number: 0540 Signing time: Sat 06 Dec 2025 17:32:20 +0000 Manifest this update: Sat 06 Dec 2025 17:27:20 +0000 Manifest next update: Wed 10 Dec 2025 04:34:20 +0000 Files and hashes: 1: 323430323a616134303a333a3a2f34382d3438203d3e20313337333330.roa (hash: EtS1eZLUTwWRZJ7Ml0izUQhw9pv4Am/WahNfvxjKTrc=) 2: 323430323a616134303a393a3a2f34382d3438203d3e20313337333330.roa (hash: SFCF3eZAfaB4k234A4Mal+M9wtz6OMi0W08cO5CL2c4=) 3: 323430323a616134303a31333a3a2f34382d3438203d3e20313337333330.roa (hash: w4rnLSoK9Ogry5Be/7bEeNtK/st8upmlmof3uHLSQS4=) 4: 323430323a616134303a313a3a2f34382d3438203d3e20313337333330.roa (hash: sfX//sKOJiEuG3MX815fs00hBV5qvYrVSNOlry6c+5c=) 5: 323430323a616134303a31353a3a2f34382d3438203d3e20313337333330.roa (hash: cplcGCMTKNbyST3IWkDxcP/n/AeMzarnQF1LNyGc5EY=) 6: 3130332e3131322e3133392e302f32342d3234203d3e20313337333330.roa (hash: 8Vv5VC5lHskbGpjOq0r7bl7lFeNfDlBP9NjEDxxuRz8=) 7: 3130332e3131322e3133362e302f32332d3233203d3e203633383638.roa (hash: sozZLwJbQXm98EJBIw5sihrpH0G7Es7CzsRNlqGv2wc=) 8: 323430323a616134303a353a3a2f34382d3438203d3e20313337333330.roa (hash: Pt4kHivj/+/IoSa7PGPfSPyAlm/DgqrXfAGO9WlCDqE=) 9: 323430323a616134303a31343a3a2f34382d3438203d3e20313337333330.roa (hash: ra0Qf+ys3TjTOOjzu7G6xBCVp6PgE8NBjiFHNgjZfy0=) 10: 3130332e3131322e3133372e302f32342d3234203d3e203633383638.roa (hash: RepflhJLBvu2zVpJCecwi2+RZYpN1UHaxDcpF0oO+gg=) 11: 923D4A10E1DBBF6927183BF3419F512FE4C1D003.crl (hash: YpWPZsIVzFyUgAr2A5Scw/drmJPdo9KKl4trHwne+fw=) 12: 3130332e3131322e3133362e302f32342d3234203d3e203633383638.roa (hash: pkEXO9z6ueQK4Zfm+Nf2SnX0XqqCEAzcqWTKKEbP/J8=) 13: 3130332e3131322e3133382e302f32342d3234203d3e20313531303433.roa (hash: k2s+fTciMW1AcHEt1AHKQvUa6LHEm5gF/5id8cjIJ3s=) 14: 323430323a616134303a343a3a2f34382d3438203d3e20313337333330.roa (hash: 1oWczp9RZm7lezuDVU+ofnA0tfj2lVP+IvFgjT0dOg4=) 15: 323430323a616134303a323a3a2f34382d3438203d3e20313337333330.roa (hash: vTpYTNK2Iedt3x6MQB/Xrh13AhkarFJV4HWTUjcGM/Y=) 16: 323430323a616134303a3a2f33322d3332203d3e20313337333330.roa (hash: vtCuldzUtylI5t9/fCW+s++nz3SUBB8oSaeAOGcN8rI=) 17: 323430323a616134303a363a3a2f34382d3438203d3e20313337333330.roa (hash: tQTDeuCAhgIHqT4JvN+SYFcrP542mVZbW7Uy9er1rk4=) 18: 323430323a616134303a373a3a2f34382d3438203d3e20313337333330.roa (hash: Z1axM0kuScQ1wsgtnc4QX9GvMZLuIsV8v/ScHLgFtiU=) 19: 323430323a616134303a31313a3a2f34382d3438203d3e20313337333330.roa (hash: BBYTiuzRjYx15TfoXkETOVppXlE7UGzNaI5UpnCSg40=) 20: 323430323a616134303a383a3a2f34382d3438203d3e20313337333330.roa (hash: vAnV4g431JCqkwtUthm0ie5OhAW6+m/w0zGsqm8XSOo=) 21: 323430323a616134303a31303a3a2f34382d3438203d3e20313337333330.roa (hash: JdwC9cZZayLXOr62V5QKdUDNIE+2Jw/cXMDWMiK/ID0=) 22: 323430323a616134303a31323a3a2f34382d3438203d3e20313337333330.roa (hash: QFubIhbbL6UEYuVrgh+b+Oy9CvlVLee6F9ADT2A6kec=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.crl rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923D4A10E1DBBF6927183BF3419F512FE4C1D003.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:56:5e:05:ed:ee:b9:0f:a0:48:ae:d1:e8:ce:b7:22:2f:9c:12:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=923D4A10E1DBBF6927183BF3419F512FE4C1D003 Validity Not Before: Dec 6 17:27:20 2025 GMT Not After : Dec 10 04:34:20 2025 GMT Subject: CN=4C8AE69255B84A47E095381747CEFA5285430E3A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:6c:fa:7f:42:d2:44:ac:88:ac:2a:f4:ca:c7: f7:c6:27:2f:c8:f8:e4:c4:a3:99:95:6c:da:57:3e: 46:67:19:e7:04:3e:ba:e8:5e:19:d7:e8:de:b9:34: d8:32:6c:d6:83:18:3b:94:1c:f6:a6:b7:d4:e1:a8: 1a:75:53:9e:1e:00:35:e8:4d:2b:d7:80:57:3f:92: 11:bf:b2:ac:52:72:97:b9:65:80:4e:de:8f:c3:17: e6:5d:07:ea:7c:38:4d:04:ae:f4:2f:1d:98:14:0f: 06:13:dd:ca:b1:bd:2d:8c:00:86:0e:9d:c3:be:41: 0a:14:9b:30:9e:93:8f:9b:05:1e:cd:52:93:de:1e: df:14:c7:2d:63:69:0a:75:4c:0d:6d:f0:9f:4d:9a: 53:40:82:a5:42:cd:c2:03:09:98:8f:ad:7a:4d:d5: 7e:5f:0c:17:c0:b2:79:02:37:b8:5c:6f:ab:23:5f: 1e:77:d8:34:31:4a:c2:38:bd:ea:a0:2c:cd:b1:55: 40:07:8d:e5:21:12:b6:d6:60:6e:a1:c6:f8:51:f5: d8:ed:75:fb:00:1e:02:7b:14:28:02:eb:af:a8:ff: 18:ce:53:54:19:d3:ea:8c:2b:7a:57:d1:48:1d:8e: d9:0a:f5:57:4c:b0:30:a4:ba:a7:b4:dd:0f:2f:2c: e7:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:8A:E6:92:55:B8:4A:47:E0:95:38:17:47:CE:FA:52:85:43:0E:3A X509v3 Authority Key Identifier: keyid:92:3D:4A:10:E1:DB:BF:69:27:18:3B:F3:41:9F:51:2F:E4:C1:D0:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923D4A10E1DBBF6927183BF3419F512FE4C1D003.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:d0:b7:d6:d9:72:f4:aa:d4:21:fd:9e:41:04:e7:c4:1a:02: be:a2:3e:b0:d4:16:7d:54:13:12:9b:c3:92:81:85:5f:56:0c: ac:60:2d:86:a3:ae:f9:40:2a:a5:0d:af:8c:47:f1:d7:71:89: 0b:e3:a0:41:d9:c7:15:91:5e:6b:d6:19:e6:7f:c5:cc:5a:fe: 16:15:62:04:89:e7:a4:c5:c3:6d:6b:2a:4b:ee:68:62:58:94: f3:21:f0:f5:38:78:91:b7:52:56:5e:80:16:69:fe:b7:77:13: b7:d9:b9:f6:65:27:cc:c9:88:55:fb:42:0e:29:4a:32:18:34: 59:e4:5b:60:85:5d:d4:ab:9a:c8:97:d4:3a:00:28:c0:ea:bd: 44:0d:8c:b7:68:a1:77:3e:f5:03:27:d0:b2:2d:12:df:0f:fb: 08:ad:52:02:53:13:da:1d:9b:61:9c:15:98:91:e3:1f:91:45: 98:fb:52:3a:a5:70:59:b6:24:46:73:d2:2d:cb:97:00:b3:25: e5:a9:6b:2e:2e:43:dd:b9:0f:95:a8:ef:61:53:f1:2f:e0:83: 9c:e0:16:8c:53:a6:66:94:0a:e0:d6:b8:56:d2:25:fb:c9:cb: a4:66:e8:dd:89:19:d5:49:0b:35:f1:d8:e4:4a:be:23:e0:ba: 4c:e6:aa:c5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHVZeBe3uuQ+gSK7R6M63Ii+cEkYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTIzRDRBMTBFMURCQkY2OTI3MTgzQkYzNDE5RjUxMkZF NEMxRDAwMzAeFw0yNTEyMDYxNzI3MjBaFw0yNTEyMTAwNDM0MjBaMDMxMTAvBgNV BAMTKDRDOEFFNjkyNTVCODRBNDdFMDk1MzgxNzQ3Q0VGQTUyODU0MzBFM0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5bPp/QtJErIisKvTKx/fGJy/I +OTEo5mVbNpXPkZnGecEPrroXhnX6N65NNgybNaDGDuUHPamt9ThqBp1U54eADXo TSvXgFc/khG/sqxScpe5ZYBO3o/DF+ZdB+p8OE0ErvQvHZgUDwYT3cqxvS2MAIYO ncO+QQoUmzCek4+bBR7NUpPeHt8Uxy1jaQp1TA1t8J9NmlNAgqVCzcIDCZiPrXpN 1X5fDBfAsnkCN7hcb6sjXx532DQxSsI4veqgLM2xVUAHjeUhErbWYG6hxvhR9djt dfsAHgJ7FCgC66+o/xjOU1QZ0+qMK3pX0UgdjtkK9VdMsDCkuqe03Q8vLOfFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTIrmklW4SkfglTgXR876UoVDDjowHwYDVR0j BBgwFoAUkj1KEOHbv2knGDvzQZ9RL+TB0AMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YzM0ZmYwOC1kMjFmLTQyMGItODdkZi01MzEwM2I2ZGMyNTMvMC85MjNENEExMEUx REJCRjY5MjcxODNCRjM0MTlGNTEyRkU0QzFEMDAzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTIzRDRBMTBFMURCQkY2OTI3MTgzQkYzNDE5RjUxMkZFNEMx RDAwMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGMzNGZmMDgtZDIxZi00MjBiLTg3 ZGYtNTMxMDNiNmRjMjUzLzAvOTIzRDRBMTBFMURCQkY2OTI3MTgzQkYzNDE5RjUx MkZFNEMxRDAwMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE7Qt9bZcvSq1CH9nkEE58QaAr6iPrDUFn1U ExKbw5KBhV9WDKxgLYajrvlAKqUNr4xH8ddxiQvjoEHZxxWRXmvWGeZ/xcxa/hYV YgSJ56TFw21rKkvuaGJYlPMh8PU4eJG3UlZegBZp/rd3E7fZufZlJ8zJiFX7Qg4p SjIYNFnkW2CFXdSrmsiX1DoAKMDqvUQNjLdooXc+9QMn0LItEt8P+witUgJTE9od m2GcFZiR4x+RRZj7UjqlcFm2JEZz0i3LlwCzJeWpay4uQ925D5Wo72FT8S/gg5zg FoxTpmaUCuDWuFbSJfvJy6Rm6N2JGdVJCzXx2ORKviPgukzmqsU= -----END CERTIFICATE-----Generated at Sun Dec 7 04:57:44 2025 by rpki-client