This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/23475A86BB5C515DDD7753B6555E267A3F5C28F4.mft File: 23475A86BB5C515DDD7753B6555E267A3F5C28F4.mft (raw, json) Hash identifier: IWwOWTB3+AXRDXcYTlOP/3xBqGwFDvzjy69kxkdovVw= Subject key identifier: 6A:7E:C0:35:34:AC:E0:5C:12:3A:2C:B3:41:EA:33:BB:FE:FD:45:D8 Authority key identifier: 23:47:5A:86:BB:5C:51:5D:DD:77:53:B6:55:5E:26:7A:3F:5C:28:F4 Certificate issuer: /CN=23475A86BB5C515DDD7753B6555E267A3F5C28F4 Certificate serial: 5C78AA9B8580CBAF78E22DDB749FF9F52BC94960 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/23475A86BB5C515DDD7753B6555E267A3F5C28F4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/23475A86BB5C515DDD7753B6555E267A3F5C28F4.mft Manifest number: BD Signing time: Fri 05 Dec 2025 08:10:40 +0000 Manifest this update: Fri 05 Dec 2025 08:05:40 +0000 Manifest next update: Mon 08 Dec 2025 12:44:40 +0000 Files and hashes: 1: 23475A86BB5C515DDD7753B6555E267A3F5C28F4.crl (hash: /wk5qJr/KjlPfANLRpZAg9/1J6RsSaTObPIDoFp0BxI=) 2: 3136302e32322e33312e302f32342d3234203d3e20313532373938.roa (hash: 5aPZi9EHvbfyOxIPMTjzibe1Bxih6lwkA1KW+hUQT4E=) 3: 3136302e32322e33302e302f32342d3234203d3e20313532373938.roa (hash: /K4mylpcHmr+sO+7dTgSimoSvEZOrC1jLffnv1dbPQ8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/23475A86BB5C515DDD7753B6555E267A3F5C28F4.crl rsync://repo-rpki.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/23475A86BB5C515DDD7753B6555E267A3F5C28F4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/23475A86BB5C515DDD7753B6555E267A3F5C28F4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 12:44:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:78:aa:9b:85:80:cb:af:78:e2:2d:db:74:9f:f9:f5:2b:c9:49:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23475A86BB5C515DDD7753B6555E267A3F5C28F4 Validity Not Before: Dec 5 08:05:40 2025 GMT Not After : Dec 8 12:44:40 2025 GMT Subject: CN=6A7EC03534ACE05C123A2CB341EA33BBFEFD45D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:53:60:c1:7d:96:8f:1d:42:09:ee:bf:d5:fa: 22:ec:c0:04:56:cb:a3:85:e7:b3:4d:42:0e:91:3b: 3d:0e:d1:4a:e3:26:0d:45:81:6a:a3:5e:46:8f:f0: 8d:04:c3:19:aa:f3:ab:e0:2b:67:4f:ca:de:23:78: 34:54:28:9b:4c:be:1b:ab:0c:ca:cb:87:23:70:2f: c0:4f:20:32:3a:1e:9f:b7:3a:1a:53:c8:ce:72:ee: 1d:0f:c5:29:61:92:f8:35:b4:ef:32:fe:42:c9:07: 1c:ba:68:0d:38:2d:89:4c:d9:eb:79:11:5c:4c:2b: 94:a7:f3:1d:4a:cf:27:e8:eb:f2:89:51:1f:6f:ed: 13:86:5e:30:c2:c1:db:19:0d:51:45:dc:25:ed:1e: 5a:fb:9a:0d:96:3c:98:a8:94:b6:ec:f4:70:b8:c7: bf:78:ca:83:d1:a8:00:cd:6b:e7:2f:a0:29:b9:12: 69:6b:cb:fd:fe:ba:79:7c:d5:59:16:1a:41:7e:a4: 6f:48:54:bb:94:51:27:d9:29:61:b8:c9:0c:4f:77: ee:72:03:30:14:bf:37:a7:b2:bf:c4:e1:22:6d:7a: 94:30:b3:1f:3a:de:df:dc:ac:4b:57:78:e0:e6:07: fe:cc:e9:03:79:25:55:58:d5:2a:75:1b:57:62:fb: 07:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:7E:C0:35:34:AC:E0:5C:12:3A:2C:B3:41:EA:33:BB:FE:FD:45:D8 X509v3 Authority Key Identifier: keyid:23:47:5A:86:BB:5C:51:5D:DD:77:53:B6:55:5E:26:7A:3F:5C:28:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/23475A86BB5C515DDD7753B6555E267A3F5C28F4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/23475A86BB5C515DDD7753B6555E267A3F5C28F4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/23475A86BB5C515DDD7753B6555E267A3F5C28F4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:aa:53:18:1e:ca:fe:cc:0c:e4:42:17:23:27:4a:d8:e3:73: 45:b0:ca:36:b9:fe:0c:99:19:bc:04:18:5c:48:37:c8:0b:df: e1:58:99:e8:89:a2:f2:e2:31:01:67:bb:e3:0c:5f:6c:88:e7: 78:46:58:36:8c:d5:66:66:5a:d3:8b:39:b5:45:2e:9f:09:5f: 08:2b:31:5d:ce:d0:72:5c:c9:3e:f0:77:9c:17:1c:5b:6a:36: 3a:58:48:e0:1e:11:fd:97:e6:0c:3c:83:7c:4a:18:c9:c8:86: 1c:20:37:70:12:e1:d4:86:31:a6:f9:42:b5:bf:cf:da:2f:6a: 71:bb:39:a9:99:49:66:d5:28:10:e7:85:17:6e:96:9a:91:9c: a5:6c:48:eb:08:3c:9b:3b:b1:dd:c0:cc:70:34:85:42:36:ae: a7:1e:29:38:06:f4:0b:82:ed:af:ba:2b:b9:ae:16:57:fa:b4: 91:ab:c8:28:cf:35:d5:9f:e0:38:78:31:04:a5:78:eb:63:29: 3d:fa:7d:72:be:dd:1f:91:87:87:57:69:ec:44:8d:6c:c6:17: 9e:f7:d8:33:fa:3a:16:b2:c3:b4:bb:02:71:a8:aa:e1:b3:0a: ac:c1:04:b7:9c:63:c3:ff:c2:a2:06:47:6b:a9:3c:db:a9:9a: 95:47:c5:19 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXHiqm4WAy6944i3bdJ/59SvJSWAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjM0NzVBODZCQjVDNTE1RERENzc1M0I2NTU1RTI2N0Ez RjVDMjhGNDAeFw0yNTEyMDUwODA1NDBaFw0yNTEyMDgxMjQ0NDBaMDMxMTAvBgNV BAMTKDZBN0VDMDM1MzRBQ0UwNUMxMjNBMkNCMzQxRUEzM0JCRkVGRDQ1RDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3U2DBfZaPHUIJ7r/V+iLswARW y6OF57NNQg6ROz0O0UrjJg1FgWqjXkaP8I0Ewxmq86vgK2dPyt4jeDRUKJtMvhur DMrLhyNwL8BPIDI6Hp+3OhpTyM5y7h0PxSlhkvg1tO8y/kLJBxy6aA04LYlM2et5 EVxMK5Sn8x1Kzyfo6/KJUR9v7ROGXjDCwdsZDVFF3CXtHlr7mg2WPJiolLbs9HC4 x794yoPRqADNa+cvoCm5Emlry/3+unl81VkWGkF+pG9IVLuUUSfZKWG4yQxPd+5y AzAUvzensr/E4SJtepQwsx863t/crEtXeODmB/7M6QN5JVVY1Sp1G1di+wcpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUan7ANTSs4FwSOiyzQeozu/79RdgwHwYDVR0j BBgwFoAUI0dahrtcUV3dd1O2VV4mej9cKPQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NWVmYzQxMy0yNzA5LTQ4M2UtYTMxNC1jNWQwNjYzZGY5MzIvMC8yMzQ3NUE4NkJC NUM1MTVEREQ3NzUzQjY1NTVFMjY3QTNGNUMyOEY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMjM0NzVBODZCQjVDNTE1RERENzc1M0I2NTU1RTI2N0EzRjVD MjhGNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjVlZmM0MTMtMjcwOS00ODNlLWEz MTQtYzVkMDY2M2RmOTMyLzAvMjM0NzVBODZCQjVDNTE1RERENzc1M0I2NTU1RTI2 N0EzRjVDMjhGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJGqUxgeyv7MDORCFyMnStjjc0Wwyja5/gyZ GbwEGFxIN8gL3+FYmeiJovLiMQFnu+MMX2yI53hGWDaM1WZmWtOLObVFLp8JXwgr MV3O0HJcyT7wd5wXHFtqNjpYSOAeEf2X5gw8g3xKGMnIhhwgN3AS4dSGMab5QrW/ z9ovanG7OamZSWbVKBDnhRdulpqRnKVsSOsIPJs7sd3AzHA0hUI2rqceKTgG9AuC 7a+6K7muFlf6tJGryCjPNdWf4Dh4MQSleOtjKT36fXK+3R+Rh4dXaexEjWzGF573 2DP6Ohayw7S7AnGoquGzCqzBBLecY8P/wqIGR2upPNupmpVHxRk= -----END CERTIFICATE-----Generated at Sun Dec 7 06:37:53 2025 by rpki-client