This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/e595b7d4-3aab-4b83-94b2-c4267b2ae0a0/0/23093B0E58201D339EAA3983654297729EB3D7FD.mft File: 23093B0E58201D339EAA3983654297729EB3D7FD.mft (raw, json) Hash identifier: gul/6zulh4KhUxQ45x5W5LeahK9h4EOSdCLJLRnoTV4= Subject key identifier: A6:1B:CF:13:2F:EA:E5:C4:71:78:70:11:C1:3B:7F:17:F1:7E:FD:1F Authority key identifier: 23:09:3B:0E:58:20:1D:33:9E:AA:39:83:65:42:97:72:9E:B3:D7:FD Certificate issuer: /CN=23093B0E58201D339EAA3983654297729EB3D7FD Certificate serial: 681973DEF8B3151B9C83B3647461141B3B4269CC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/23093B0E58201D339EAA3983654297729EB3D7FD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e595b7d4-3aab-4b83-94b2-c4267b2ae0a0/0/23093B0E58201D339EAA3983654297729EB3D7FD.mft Manifest number: 028F Signing time: Sat 06 Dec 2025 13:22:28 +0000 Manifest this update: Sat 06 Dec 2025 13:17:28 +0000 Manifest next update: Tue 09 Dec 2025 17:58:28 +0000 Files and hashes: 1: 3130332e3136362e3231322e302f32332d3233203d3e20313431393537.roa (hash: I3IiUxQVB0K6AHHH6hadb9zyg87yVWrhTKPdESrGNC4=) 2: 23093B0E58201D339EAA3983654297729EB3D7FD.crl (hash: JaFfh6MA0RMivSr/FbcSRKO7mr7YMGBlgvBnLRKILFA=) 3: 3130332e3136362e3231332e302f32342d3234203d3e20313431393537.roa (hash: +q+2lGJsfE4ezep6xSn8bk3REU1n8oNlxOWiZdJkL5s=) 4: 3130332e3136362e3231322e302f32342d3234203d3e20313431393537.roa (hash: 1T/005+fcGS3bHhfnGHMDWx9bEqPsgYOiwCk3qFgrG8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e595b7d4-3aab-4b83-94b2-c4267b2ae0a0/0/23093B0E58201D339EAA3983654297729EB3D7FD.crl rsync://repo-rpki.idnic.net/repo/e595b7d4-3aab-4b83-94b2-c4267b2ae0a0/0/23093B0E58201D339EAA3983654297729EB3D7FD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/23093B0E58201D339EAA3983654297729EB3D7FD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:19:73:de:f8:b3:15:1b:9c:83:b3:64:74:61:14:1b:3b:42:69:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23093B0E58201D339EAA3983654297729EB3D7FD Validity Not Before: Dec 6 13:17:28 2025 GMT Not After : Dec 9 17:58:28 2025 GMT Subject: CN=A61BCF132FEAE5C471787011C13B7F17F17EFD1F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:07:22:17:ca:00:ff:60:3f:22:f7:2a:77:61: aa:13:50:5e:3b:83:3d:fc:e0:8e:f1:6b:3b:07:9b: 39:b5:4b:e3:cc:65:ae:ee:95:64:41:af:eb:c9:9a: f3:8d:55:2e:bb:c5:55:d0:6d:31:5f:c8:25:5b:aa: a1:d3:42:f5:a3:cc:c6:38:83:60:c2:2c:f4:fb:50: 39:0c:d9:17:67:0f:48:5c:30:3c:6a:84:b7:c9:d0: 9b:f3:b3:2e:14:fe:df:d4:76:1a:85:2a:da:0c:d1: cf:d0:98:b4:ee:d7:3a:90:24:e4:69:39:b7:ed:41: 14:94:bb:1e:32:f4:b9:b2:22:b2:09:98:4f:33:d1: 92:df:14:bd:30:b8:07:20:fc:9b:60:51:cb:ae:96: 40:21:d8:8d:f8:3a:f2:3b:0d:88:f2:21:11:5b:3d: 18:f4:bb:7d:11:79:4d:9b:02:9d:78:7d:4c:b2:83: 2a:3f:fb:a4:3b:bd:a9:50:e1:ec:30:33:38:ef:69: 1c:12:71:a2:b2:e3:e3:fb:3c:b8:64:fb:ad:8f:39: c5:ab:cf:7b:8c:3c:9d:63:64:a6:27:01:46:87:9f: 11:12:6b:bc:7b:1b:22:4e:3d:20:e7:06:2b:6f:44: 55:56:e5:df:24:50:8f:38:31:5f:d6:ee:7d:0a:53: 00:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:1B:CF:13:2F:EA:E5:C4:71:78:70:11:C1:3B:7F:17:F1:7E:FD:1F X509v3 Authority Key Identifier: keyid:23:09:3B:0E:58:20:1D:33:9E:AA:39:83:65:42:97:72:9E:B3:D7:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e595b7d4-3aab-4b83-94b2-c4267b2ae0a0/0/23093B0E58201D339EAA3983654297729EB3D7FD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/23093B0E58201D339EAA3983654297729EB3D7FD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e595b7d4-3aab-4b83-94b2-c4267b2ae0a0/0/23093B0E58201D339EAA3983654297729EB3D7FD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:45:f5:8c:f0:6d:e1:9f:36:a6:33:35:26:d8:3e:71:1c:be: 01:c2:db:2e:4c:16:2c:80:41:3b:47:e4:be:78:5b:0e:d2:13: 8a:17:5b:84:97:8d:b7:ec:50:5d:90:69:c9:95:e6:1f:ba:df: b0:ce:29:10:03:e5:a1:5a:50:b2:8c:80:44:15:8b:f0:48:0a: 65:56:f5:1d:45:d2:8a:d8:e4:06:4d:10:52:20:76:12:be:a5: 81:1d:9e:94:aa:1f:31:c7:ca:85:49:b6:09:33:11:f6:9d:64: 70:c6:aa:88:3d:b9:17:d0:28:13:3a:04:53:2c:84:6b:e4:94: 43:8f:ab:df:87:f4:de:51:7d:fb:e2:dc:c2:ac:f3:84:33:29: 1a:24:66:10:c9:df:da:b5:e8:01:45:5b:a0:56:6e:9b:9d:3e: f2:84:1b:34:53:96:79:5a:e6:0e:22:e2:cf:de:19:ec:f5:19: 96:64:a0:c0:02:10:0a:76:11:a2:c8:14:a5:3c:d8:0c:3f:b0: d3:c4:82:17:94:37:49:c3:1e:5f:1e:60:f3:7b:a0:8b:c3:17: 88:fb:73:8e:dd:a7:bb:cc:8e:c7:ea:c6:29:bb:57:3e:a5:69: ad:4a:f6:35:48:f0:16:59:96:88:8c:dc:06:ce:fa:d6:a2:27: 4d:7d:31:4c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaBlz3vizFRucg7NkdGEUGztCacwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjMwOTNCMEU1ODIwMUQzMzlFQUEzOTgzNjU0Mjk3NzI5 RUIzRDdGRDAeFw0yNTEyMDYxMzE3MjhaFw0yNTEyMDkxNzU4MjhaMDMxMTAvBgNV BAMTKEE2MUJDRjEzMkZFQUU1QzQ3MTc4NzAxMUMxM0I3RjE3RjE3RUZEMUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+ByIXygD/YD8i9yp3YaoTUF47 gz384I7xazsHmzm1S+PMZa7ulWRBr+vJmvONVS67xVXQbTFfyCVbqqHTQvWjzMY4 g2DCLPT7UDkM2RdnD0hcMDxqhLfJ0Jvzsy4U/t/UdhqFKtoM0c/QmLTu1zqQJORp ObftQRSUux4y9LmyIrIJmE8z0ZLfFL0wuAcg/JtgUcuulkAh2I34OvI7DYjyIRFb PRj0u30ReU2bAp14fUyygyo/+6Q7valQ4ewwMzjvaRwScaKy4+P7PLhk+62POcWr z3uMPJ1jZKYnAUaHnxESa7x7GyJOPSDnBitvRFVW5d8kUI84MV/W7n0KUwDhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUphvPEy/q5cRxeHARwTt/F/F+/R8wHwYDVR0j BBgwFoAUIwk7DlggHTOeqjmDZUKXcp6z1/0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NTk1YjdkNC0zYWFiLTRiODMtOTRiMi1jNDI2N2IyYWUwYTAvMC8yMzA5M0IwRTU4 MjAxRDMzOUVBQTM5ODM2NTQyOTc3MjlFQjNEN0ZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjMwOTNCMEU1ODIwMUQzMzlFQUEzOTgzNjU0Mjk3NzI5RUIz RDdGRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTU5NWI3ZDQtM2FhYi00YjgzLTk0 YjItYzQyNjdiMmFlMGEwLzAvMjMwOTNCMEU1ODIwMUQzMzlFQUEzOTgzNjU0Mjk3 NzI5RUIzRDdGRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHtF9YzwbeGfNqYzNSbYPnEcvgHC2y5MFiyA QTtH5L54Ww7SE4oXW4SXjbfsUF2QacmV5h+637DOKRAD5aFaULKMgEQVi/BICmVW 9R1F0orY5AZNEFIgdhK+pYEdnpSqHzHHyoVJtgkzEfadZHDGqog9uRfQKBM6BFMs hGvklEOPq9+H9N5Rffvi3MKs84QzKRokZhDJ39q16AFFW6BWbpudPvKEGzRTlnla 5g4i4s/eGez1GZZkoMACEAp2EaLIFKU82Aw/sNPEgheUN0nDHl8eYPN7oIvDF4j7 c47dp7vMjsfqxim7Vz6laa1K9jVI8BZZloiM3AbO+taiJ019MUw= -----END CERTIFICATE-----Generated at Sun Dec 7 01:39:42 2025 by rpki-client