This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/bbed6dc4-d38b-44ba-9f0b-428455b276ee/0/23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C.mft File: 23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C.mft (raw, json) Hash identifier: uHnKmUJR7wX5/UzlhXUO52gLc5hzBlKlmuJCamtWDuM= Subject key identifier: 13:8C:3E:99:32:43:58:93:24:9E:84:F6:BE:06:3D:B1:3D:C1:ED:22 Authority key identifier: 23:BE:8C:EA:61:94:06:F9:D8:60:B1:F9:7E:E8:F7:ED:77:E8:EE:7C Certificate issuer: /CN=23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C Certificate serial: 46821F00E9F288075D3EC260D3E301C956277725 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bbed6dc4-d38b-44ba-9f0b-428455b276ee/0/23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C.mft Manifest number: BF Signing time: Tue 16 Dec 2025 14:22:12 +0000 Manifest this update: Tue 16 Dec 2025 14:17:11 +0000 Manifest next update: Fri 19 Dec 2025 20:11:11 +0000 Files and hashes: 1: 23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C.crl (hash: iqld4LgDMbiwm6ZaeM6q0kJ3ncB6G3wN3/VLicWKB1Y=) 2: 3136302e32302e3235302e302f32342d3234203d3e20313532383132.roa (hash: TgOS2DIzKKN1li7GhbP8QE2EiuFzEQeHETrSLQ8zd80=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bbed6dc4-d38b-44ba-9f0b-428455b276ee/0/23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C.crl rsync://repo-rpki.idnic.net/repo/bbed6dc4-d38b-44ba-9f0b-428455b276ee/0/23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Dec 2025 20:11:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:82:1f:00:e9:f2:88:07:5d:3e:c2:60:d3:e3:01:c9:56:27:77:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C Validity Not Before: Dec 16 14:17:11 2025 GMT Not After : Dec 19 20:11:11 2025 GMT Subject: CN=138C3E9932435893249E84F6BE063DB13DC1ED22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:be:41:1d:30:c8:fc:49:c1:e0:5b:ac:37:53: ad:0e:95:81:01:47:17:94:ce:b1:bb:25:22:4f:c3: 45:4f:e7:b6:29:d9:79:5f:c8:81:d6:9e:ea:10:b6: a7:61:e0:98:e2:77:87:9a:6a:b6:9c:af:c0:fd:bf: 5c:f1:36:68:ee:f9:89:6c:c2:80:e1:20:72:a2:3d: 00:bc:cc:17:c8:34:8f:3f:dc:d3:ec:2a:cf:40:49: 39:1e:db:a3:39:a9:cd:51:fc:98:e0:46:f8:d1:51: 63:2c:9d:72:f1:68:1f:63:7e:31:53:1f:2e:93:b0: 5d:64:3d:3e:f3:b1:96:1e:4b:24:3b:e4:6f:db:6c: 66:20:71:34:2a:42:0e:59:34:1c:3f:18:9f:71:57: ee:df:e2:46:a5:5a:8d:18:82:6b:e1:02:f0:5e:fc: 06:c8:9c:f2:79:d0:eb:64:3c:d3:06:8c:f8:36:d2: c1:40:ea:bd:4e:e1:1b:31:bb:e0:57:b5:af:ea:e3: 3d:7d:b8:3b:4d:97:3b:0c:6c:01:e1:fb:99:b8:e3: 17:72:45:ae:2e:0a:e0:a4:dc:66:d5:9d:78:b4:15: 36:04:12:a5:45:0d:0e:92:67:6b:34:f6:9d:5c:5d: 91:6d:c9:11:54:8a:b5:b9:fa:0f:d6:2f:9a:93:2b: 24:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:8C:3E:99:32:43:58:93:24:9E:84:F6:BE:06:3D:B1:3D:C1:ED:22 X509v3 Authority Key Identifier: keyid:23:BE:8C:EA:61:94:06:F9:D8:60:B1:F9:7E:E8:F7:ED:77:E8:EE:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bbed6dc4-d38b-44ba-9f0b-428455b276ee/0/23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bbed6dc4-d38b-44ba-9f0b-428455b276ee/0/23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:47:ef:8e:ef:2e:de:4a:6f:f7:48:1d:84:5b:22:d9:23:e3: 72:ee:05:70:1b:66:6e:cf:12:6b:eb:93:c9:b0:1d:03:f1:33: 75:b2:d8:12:d0:a5:1f:eb:72:37:02:b3:7e:39:15:50:bf:2f: f2:14:e2:5e:78:63:2c:77:e1:8b:62:40:7a:83:b7:ef:2f:99: 08:fd:00:7d:c4:f0:54:de:68:e6:a2:a8:f2:ea:3e:22:d2:82: d5:2e:65:b9:13:0b:59:0c:45:c1:f7:7b:f7:b8:fd:95:dd:8d: ed:2e:bb:07:3e:07:b2:e9:2e:bf:53:b8:9f:de:11:e8:1c:34: fc:29:c2:ce:5a:c2:7e:6c:7e:1f:a5:17:03:46:fa:64:51:7c: 04:e7:e1:e4:47:cf:8f:97:b3:29:eb:38:fa:5b:50:b0:6c:3a: cb:4e:23:3f:30:d5:c0:20:66:2f:45:55:d4:7c:8a:0b:1e:17: a7:79:af:f4:70:82:79:5c:84:33:37:0a:98:d9:d1:8a:e3:54: 2e:ce:da:23:8c:8f:b6:a2:cb:2d:6b:8c:5f:a0:f0:79:3d:bb: ca:5f:07:fb:6e:74:e6:3a:41:7a:f9:52:1d:60:96:c6:73:25: 7a:a4:8b:86:a9:5e:52:55:cf:eb:d1:8a:df:8d:12:ad:c1:d8: b9:53:52:26 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURoIfAOnyiAddPsJg0+MByVYndyUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjNCRThDRUE2MTk0MDZGOUQ4NjBCMUY5N0VFOEY3RUQ3 N0U4RUU3QzAeFw0yNTEyMTYxNDE3MTFaFw0yNTEyMTkyMDExMTFaMDMxMTAvBgNV BAMTKDEzOEMzRTk5MzI0MzU4OTMyNDlFODRGNkJFMDYzREIxM0RDMUVEMjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPvkEdMMj8ScHgW6w3U60OlYEB RxeUzrG7JSJPw0VP57Yp2XlfyIHWnuoQtqdh4Jjid4eaaracr8D9v1zxNmju+Yls woDhIHKiPQC8zBfINI8/3NPsKs9ASTke26M5qc1R/JjgRvjRUWMsnXLxaB9jfjFT Hy6TsF1kPT7zsZYeSyQ75G/bbGYgcTQqQg5ZNBw/GJ9xV+7f4kalWo0YgmvhAvBe /AbInPJ50OtkPNMGjPg20sFA6r1O4Rsxu+BXta/q4z19uDtNlzsMbAHh+5m44xdy Ra4uCuCk3GbVnXi0FTYEEqVFDQ6SZ2s09p1cXZFtyRFUirW5+g/WL5qTKyTLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUE4w+mTJDWJMknoT2vgY9sT3B7SIwHwYDVR0j BBgwFoAUI76M6mGUBvnYYLH5fuj37Xfo7nwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i YmVkNmRjNC1kMzhiLTQ0YmEtOWYwYi00Mjg0NTViMjc2ZWUvMC8yM0JFOENFQTYx OTQwNkY5RDg2MEIxRjk3RUU4RjdFRDc3RThFRTdDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMjNCRThDRUE2MTk0MDZGOUQ4NjBCMUY5N0VFOEY3RUQ3N0U4 RUU3Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmJlZDZkYzQtZDM4Yi00NGJhLTlm MGItNDI4NDU1YjI3NmVlLzAvMjNCRThDRUE2MTk0MDZGOUQ4NjBCMUY5N0VFOEY3 RUQ3N0U4RUU3Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGNH747vLt5Kb/dIHYRbItkj43LuBXAbZm7P Emvrk8mwHQPxM3Wy2BLQpR/rcjcCs345FVC/L/IU4l54Yyx34YtiQHqDt+8vmQj9 AH3E8FTeaOaiqPLqPiLSgtUuZbkTC1kMRcH3e/e4/ZXdje0uuwc+B7LpLr9TuJ/e EegcNPwpws5awn5sfh+lFwNG+mRRfATn4eRHz4+XsynrOPpbULBsOstOIz8w1cAg Zi9FVdR8igseF6d5r/RwgnlchDM3CpjZ0YrjVC7O2iOMj7aiyy1rjF+g8Hk9u8pf B/tudOY6QXr5Uh1glsZzJXqki4apXlJVz+vRit+NEq3B2LlTUiY= -----END CERTIFICATE-----Generated at Wed Dec 17 22:37:42 2025 by rpki-client