This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/c55eac97-31b5-4f33-82f4-5241470cbbbe/0/233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.mft File: 233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.mft (raw, json) Hash identifier: 6rqQdrgpTNKa8H+vZZKXljDy6VwruPC8R/2W6lgumMA= Subject key identifier: 74:AE:A8:2D:EA:E7:EE:D0:21:B0:1B:C1:FB:6A:70:D0:CB:8A:BA:0D Authority key identifier: 23:3A:F2:6D:7D:AE:6C:35:9E:B0:3A:D5:C6:FB:4B:4E:05:DD:F2:3D Certificate issuer: /CN=233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D Certificate serial: 2B72974124F5CBB4685FD1588DBD90E85433237C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c55eac97-31b5-4f33-82f4-5241470cbbbe/0/233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.mft Manifest number: 0531 Signing time: Sat 06 Dec 2025 14:31:55 +0000 Manifest this update: Sat 06 Dec 2025 14:26:55 +0000 Manifest next update: Tue 09 Dec 2025 23:16:55 +0000 Files and hashes: 1: 3230322e3136352e33322e302f32302d3234203d3e203137353338.roa (hash: bVRLDmnlkDr+Er81GecVOu1gTofkGixwnSL4beQ/iNg=) 2: 233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.crl (hash: ZiYWCookFLlAwlApxTwh5PLJuqpAwpMY/3ePlHOwiCQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c55eac97-31b5-4f33-82f4-5241470cbbbe/0/233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.crl rsync://repo-rpki.idnic.net/repo/c55eac97-31b5-4f33-82f4-5241470cbbbe/0/233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:72:97:41:24:f5:cb:b4:68:5f:d1:58:8d:bd:90:e8:54:33:23:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D Validity Not Before: Dec 6 14:26:55 2025 GMT Not After : Dec 9 23:16:55 2025 GMT Subject: CN=74AEA82DEAE7EED021B01BC1FB6A70D0CB8ABA0D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:c0:4a:7d:03:b4:5f:95:4d:0d:13:90:5e:e1: 34:65:0e:02:1f:e5:6f:67:d5:5c:5a:be:4d:fb:3b: 58:3a:7f:e2:66:0e:8e:31:b8:0d:3f:e7:53:d5:5d: 4f:d6:d9:38:85:c8:af:3b:3c:74:73:f5:59:4d:2f: db:d6:12:20:3b:8d:cf:4d:be:39:da:6a:71:57:99: 00:f4:8a:76:2f:3a:1e:9c:96:31:8b:ab:16:36:0d: 1e:d7:e1:84:44:12:0c:66:eb:89:4e:35:9a:76:9c: 33:17:14:ad:50:a5:05:ff:c4:1d:b0:c0:06:91:0c: 20:a8:03:72:d6:6e:43:90:7c:0b:c3:28:99:31:cb: d6:4c:cc:ae:d2:ac:ce:ea:8b:a5:28:b9:e7:00:00: af:1e:ba:a9:8b:b4:fc:d1:d9:c4:d5:20:83:d0:25: 0d:67:a5:0d:d9:9f:62:73:a2:c6:a0:4a:63:4a:05: 6d:0a:f2:3b:41:a1:e5:58:16:a2:a3:8e:92:c9:20: f9:29:6e:12:96:eb:ba:9d:ad:f4:5c:a6:e1:e8:7c: 46:10:9a:7f:4b:c3:d1:c7:f3:10:bd:0a:18:15:ab: 30:84:32:04:8a:50:52:02:7a:9f:05:c9:73:36:b6: 96:ef:d6:65:15:cd:56:92:ff:8b:a5:d3:a6:89:f7: e0:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:AE:A8:2D:EA:E7:EE:D0:21:B0:1B:C1:FB:6A:70:D0:CB:8A:BA:0D X509v3 Authority Key Identifier: keyid:23:3A:F2:6D:7D:AE:6C:35:9E:B0:3A:D5:C6:FB:4B:4E:05:DD:F2:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c55eac97-31b5-4f33-82f4-5241470cbbbe/0/233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c55eac97-31b5-4f33-82f4-5241470cbbbe/0/233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:45:f8:e3:29:a8:35:fa:40:a7:e0:e2:c4:e0:66:7c:7c:1a: 94:12:49:93:d9:01:c8:da:3c:f7:2f:1e:19:ce:6a:16:02:74: 84:2e:0d:d4:59:68:e6:9d:b4:ed:97:36:0e:ed:e0:1e:10:ae: 18:da:82:86:38:75:41:d5:69:e5:26:0a:c4:bc:25:d4:03:6e: c7:9f:ca:0c:b7:1b:71:19:19:59:d7:c9:48:03:0b:5b:e1:10: dd:d8:9b:ed:1f:de:86:b5:99:ff:28:c9:de:82:4f:5e:6c:16: 96:77:20:8d:b3:e3:72:ca:a1:df:c9:39:71:79:6f:53:43:df: 8f:79:9f:ab:3a:4e:1e:97:c8:9b:02:37:ff:d1:7e:c5:4c:d0: db:9d:49:1f:e3:04:17:81:e7:2a:1a:d7:c9:a4:5f:4d:6f:df: c9:56:f4:92:ac:56:b0:58:4e:b6:8f:5f:a8:9e:d3:be:9e:94: fe:e4:88:3c:24:07:b2:f6:0f:62:9d:31:02:30:06:2e:31:c9: e2:6d:2c:9b:43:86:b0:3f:21:6f:20:22:f9:50:0b:0f:75:e6: 78:8e:f8:cc:52:b4:92:42:7c:8f:7c:62:98:08:f2:77:1a:c4: 00:65:98:b8:5e:4c:37:53:5a:80:8e:91:16:3c:c2:88:4f:4d: 54:11:92:15 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUK3KXQST1y7RoX9FYjb2Q6FQzI3wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjMzQUYyNkQ3REFFNkMzNTlFQjAzQUQ1QzZGQjRCNEUw NURERjIzRDAeFw0yNTEyMDYxNDI2NTVaFw0yNTEyMDkyMzE2NTVaMDMxMTAvBgNV BAMTKDc0QUVBODJERUFFN0VFRDAyMUIwMUJDMUZCNkE3MEQwQ0I4QUJBMEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzwEp9A7RflU0NE5Be4TRlDgIf 5W9n1Vxavk37O1g6f+JmDo4xuA0/51PVXU/W2TiFyK87PHRz9VlNL9vWEiA7jc9N vjnaanFXmQD0inYvOh6cljGLqxY2DR7X4YREEgxm64lONZp2nDMXFK1QpQX/xB2w wAaRDCCoA3LWbkOQfAvDKJkxy9ZMzK7SrM7qi6UouecAAK8euqmLtPzR2cTVIIPQ JQ1npQ3Zn2JzosagSmNKBW0K8jtBoeVYFqKjjpLJIPkpbhKW67qdrfRcpuHofEYQ mn9Lw9HH8xC9ChgVqzCEMgSKUFICep8FyXM2tpbv1mUVzVaS/4ul06aJ9+C3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdK6oLern7tAhsBvB+2pw0MuKug0wHwYDVR0j BBgwFoAUIzrybX2ubDWesDrVxvtLTgXd8j0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NTVlYWM5Ny0zMWI1LTRmMzMtODJmNC01MjQxNDcwY2JiYmUvMC8yMzNBRjI2RDdE QUU2QzM1OUVCMDNBRDVDNkZCNEI0RTA1RERGMjNELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjMzQUYyNkQ3REFFNkMzNTlFQjAzQUQ1QzZGQjRCNEUwNURE RjIzRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzU1ZWFjOTctMzFiNS00ZjMzLTgy ZjQtNTI0MTQ3MGNiYmJlLzAvMjMzQUYyNkQ3REFFNkMzNTlFQjAzQUQ1QzZGQjRC NEUwNURERjIzRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALxF+OMpqDX6QKfg4sTgZnx8GpQSSZPZAcja PPcvHhnOahYCdIQuDdRZaOadtO2XNg7t4B4QrhjagoY4dUHVaeUmCsS8JdQDbsef ygy3G3EZGVnXyUgDC1vhEN3Ym+0f3oa1mf8oyd6CT15sFpZ3II2z43LKod/JOXF5 b1ND3495n6s6Th6XyJsCN//RfsVM0NudSR/jBBeB5yoa18mkX01v38lW9JKsVrBY TraPX6ie076elP7kiDwkB7L2D2KdMQIwBi4xyeJtLJtDhrA/IW8gIvlQCw915niO +MxStJJCfI98YpgI8ncaxABlmLheTDdTWoCOkRY8wohPTVQRkhU= -----END CERTIFICATE-----Generated at Sun Dec 7 01:02:42 2025 by rpki-client