This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/696e95c2-4887-47fc-8bac-10bb1da97003/0/2253C6371953B026517446858EB433A938FA4B06.mft File: 2253C6371953B026517446858EB433A938FA4B06.mft (raw, json) Hash identifier: s6Vxf5MGa1G4JDbtzGGFUfKViBXnxCPVncmY1EzquVk= Subject key identifier: 46:3F:1B:06:3F:48:AE:64:73:33:70:23:E9:04:65:4D:36:D9:36:74 Authority key identifier: 22:53:C6:37:19:53:B0:26:51:74:46:85:8E:B4:33:A9:38:FA:4B:06 Certificate issuer: /CN=2253C6371953B026517446858EB433A938FA4B06 Certificate serial: 2DBB6DA5C0A7B149208758AE8AABAD164EA93831 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2253C6371953B026517446858EB433A938FA4B06.cer Subject info access: rsync://repo-rpki.idnic.net/repo/696e95c2-4887-47fc-8bac-10bb1da97003/0/2253C6371953B026517446858EB433A938FA4B06.mft Manifest number: D1 Signing time: Fri 05 Dec 2025 20:12:28 +0000 Manifest this update: Fri 05 Dec 2025 20:07:28 +0000 Manifest next update: Tue 09 Dec 2025 03:42:28 +0000 Files and hashes: 1: 2253C6371953B026517446858EB433A938FA4B06.crl (hash: B+BxIQD3KuZvkbgP4SDczR+5bKaqPcAP27q6U+wLK9w=) 2: 3130332e3232372e32342e302f32342d3234203d3e203536323436.roa (hash: p2JbTeALyG9aK8WKnnAwuAWEvzJMkTyQIFNlD05DkyQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/696e95c2-4887-47fc-8bac-10bb1da97003/0/2253C6371953B026517446858EB433A938FA4B06.crl rsync://repo-rpki.idnic.net/repo/696e95c2-4887-47fc-8bac-10bb1da97003/0/2253C6371953B026517446858EB433A938FA4B06.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2253C6371953B026517446858EB433A938FA4B06.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 03:42:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:bb:6d:a5:c0:a7:b1:49:20:87:58:ae:8a:ab:ad:16:4e:a9:38:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2253C6371953B026517446858EB433A938FA4B06 Validity Not Before: Dec 5 20:07:28 2025 GMT Not After : Dec 9 03:42:28 2025 GMT Subject: CN=463F1B063F48AE6473337023E904654D36D93674 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:4e:37:2d:23:66:50:b8:f0:bc:cd:29:12:8d: df:20:df:8e:0b:95:eb:57:79:33:0a:95:8e:c0:56: 89:55:52:13:2d:1f:54:c6:86:dd:04:c8:6e:19:65: eb:29:af:a2:54:93:dd:65:bd:0f:40:72:a1:a8:68: e6:d0:68:68:f1:59:fe:9d:86:74:c8:c4:ff:4a:22: 21:f1:45:85:04:10:92:cb:21:23:63:fb:87:cf:c3: 80:e8:d2:a9:ed:39:d3:da:63:0a:59:f3:66:ea:f9: d2:62:1a:8f:e7:71:ea:8a:7a:87:f6:87:13:71:36: 1d:b4:b4:65:ab:05:59:a7:b8:73:92:82:f9:9a:6f: c7:db:87:f7:a1:88:98:40:74:b9:80:00:a6:86:7a: 39:d9:ba:48:7e:b7:45:ad:9e:1c:3a:33:e1:ab:72: 47:84:f9:38:73:a7:11:c3:c7:a3:16:7a:64:2f:c3: 2e:c9:fc:60:cb:d3:f4:a2:45:8d:4b:2d:75:91:a4: 68:3d:57:e5:72:e0:06:28:35:6a:f7:44:62:01:bc: 6f:75:93:65:66:e4:17:c3:fa:58:12:71:bb:14:4f: b2:5a:cb:8b:66:43:55:e7:1b:97:21:de:84:7b:49: 53:ea:d6:bd:ab:5b:77:a9:c4:48:d0:ef:d6:e0:5d: 9d:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:3F:1B:06:3F:48:AE:64:73:33:70:23:E9:04:65:4D:36:D9:36:74 X509v3 Authority Key Identifier: keyid:22:53:C6:37:19:53:B0:26:51:74:46:85:8E:B4:33:A9:38:FA:4B:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/696e95c2-4887-47fc-8bac-10bb1da97003/0/2253C6371953B026517446858EB433A938FA4B06.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2253C6371953B026517446858EB433A938FA4B06.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/696e95c2-4887-47fc-8bac-10bb1da97003/0/2253C6371953B026517446858EB433A938FA4B06.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:9a:00:17:2b:fa:11:fe:88:2a:b3:f5:8f:39:59:fd:d8:4f: 14:68:62:46:f0:91:12:a3:e7:d7:13:9c:a5:ae:76:94:2f:f5: c9:c6:84:f9:81:1e:8f:da:2f:b1:6d:16:e0:81:fb:28:09:15: 54:c7:b6:99:02:5b:25:24:97:b6:01:d8:03:13:a1:d1:f1:ae: b7:dd:7d:37:50:25:c5:03:f9:46:ad:1f:73:33:cc:77:94:ec: a8:a1:64:dd:9f:46:be:bb:12:b3:ae:f9:8a:43:2e:e6:0f:58: 49:ad:82:a6:c8:26:2b:41:48:c5:d4:1f:fe:d1:dd:db:6b:73: ef:0f:13:d5:d8:18:59:85:e9:7e:eb:8c:10:3d:f2:81:69:bc: 04:c8:26:ee:44:b4:80:27:cb:89:08:b8:5d:14:d1:13:80:67: e5:d8:7f:4c:93:44:79:9c:00:12:e4:72:c3:a8:98:ba:8c:0a: ab:25:8d:7b:c2:86:32:61:e0:5f:db:3d:f8:ae:ad:aa:8b:60: bb:ac:e7:2b:75:07:f1:e8:3d:e0:dc:54:13:1a:cd:32:ed:97: 05:54:4b:7f:35:70:73:28:64:91:1c:a5:52:3a:1a:39:36:ce: eb:4a:72:ad:99:36:42:56:c6:03:b4:5f:2f:6a:6d:4a:cb:8e: ef:59:2f:6c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULbttpcCnsUkgh1iuiqutFk6pODEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjI1M0M2MzcxOTUzQjAyNjUxNzQ0Njg1OEVCNDMzQTkz OEZBNEIwNjAeFw0yNTEyMDUyMDA3MjhaFw0yNTEyMDkwMzQyMjhaMDMxMTAvBgNV BAMTKDQ2M0YxQjA2M0Y0OEFFNjQ3MzMzNzAyM0U5MDQ2NTREMzZEOTM2NzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgTjctI2ZQuPC8zSkSjd8g344L letXeTMKlY7AVolVUhMtH1TGht0EyG4ZZespr6JUk91lvQ9AcqGoaObQaGjxWf6d hnTIxP9KIiHxRYUEEJLLISNj+4fPw4Do0qntOdPaYwpZ82bq+dJiGo/nceqKeof2 hxNxNh20tGWrBVmnuHOSgvmab8fbh/ehiJhAdLmAAKaGejnZukh+t0Wtnhw6M+Gr ckeE+ThzpxHDx6MWemQvwy7J/GDL0/SiRY1LLXWRpGg9V+Vy4AYoNWr3RGIBvG91 k2Vm5BfD+lgScbsUT7Jay4tmQ1XnG5ch3oR7SVPq1r2rW3epxEjQ79bgXZ1LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURj8bBj9IrmRzM3Aj6QRlTTbZNnQwHwYDVR0j BBgwFoAUIlPGNxlTsCZRdEaFjrQzqTj6SwYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 OTZlOTVjMi00ODg3LTQ3ZmMtOGJhYy0xMGJiMWRhOTcwMDMvMC8yMjUzQzYzNzE5 NTNCMDI2NTE3NDQ2ODU4RUI0MzNBOTM4RkE0QjA2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjI1M0M2MzcxOTUzQjAyNjUxNzQ0Njg1OEVCNDMzQTkzOEZB NEIwNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjk2ZTk1YzItNDg4Ny00N2ZjLThi YWMtMTBiYjFkYTk3MDAzLzAvMjI1M0M2MzcxOTUzQjAyNjUxNzQ0Njg1OEVCNDMz QTkzOEZBNEIwNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJiaABcr+hH+iCqz9Y85Wf3YTxRoYkbwkRKj 59cTnKWudpQv9cnGhPmBHo/aL7FtFuCB+ygJFVTHtpkCWyUkl7YB2AMTodHxrrfd fTdQJcUD+UatH3MzzHeU7KihZN2fRr67ErOu+YpDLuYPWEmtgqbIJitBSMXUH/7R 3dtrc+8PE9XYGFmF6X7rjBA98oFpvATIJu5EtIAny4kIuF0U0ROAZ+XYf0yTRHmc ABLkcsOomLqMCqsljXvChjJh4F/bPfiuraqLYLus5yt1B/HoPeDcVBMazTLtlwVU S381cHMoZJEcpVI6Gjk2zutKcq2ZNkJWxgO0Xy9qbUrLju9ZL2w= -----END CERTIFICATE-----Generated at Sun Dec 7 03:57:30 2025 by rpki-client