This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/51292911-da7d-4636-b153-02a4b66205b5/0/42CD38BF795E0099BD3E143DD8383778ADEAE850.mft File: 42CD38BF795E0099BD3E143DD8383778ADEAE850.mft (raw, json) Hash identifier: yE2VtzGkF+hvdQWSWoiU8ZiPjFhReXY9uXO4wry2C4o= Subject key identifier: 72:75:A5:93:7D:D8:F5:25:20:43:56:88:B1:22:AC:CD:FF:0A:A7:0D Authority key identifier: 42:CD:38:BF:79:5E:00:99:BD:3E:14:3D:D8:38:37:78:AD:EA:E8:50 Certificate issuer: /CN=42CD38BF795E0099BD3E143DD8383778ADEAE850 Certificate serial: 435011CABE46D768C938F2C62CE6521F699B5B2C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42CD38BF795E0099BD3E143DD8383778ADEAE850.cer Subject info access: rsync://repo-rpki.idnic.net/repo/51292911-da7d-4636-b153-02a4b66205b5/0/42CD38BF795E0099BD3E143DD8383778ADEAE850.mft Manifest number: 04FA Signing time: Thu 04 Dec 2025 20:02:03 +0000 Manifest this update: Thu 04 Dec 2025 19:57:03 +0000 Manifest next update: Mon 08 Dec 2025 03:46:03 +0000 Files and hashes: 1: 42CD38BF795E0099BD3E143DD8383778ADEAE850.crl (hash: BGFhEAXGBVrltmBnyXLRzK8Y9GhbWcw8B1PfsgsjFTg=) 2: 3130332e3135382e39362e302f32342d3234203d3e20313431313330.roa (hash: QMIo9UWJEyfgKZ8vcrZkyTvmeP7BIt+ZlmY9Lk3KGaA=) 3: 3130332e3135382e39372e302f32342d3234203d3e20313431313330.roa (hash: EWWFrGWk8wRtOz9/UzZazsAdPEBVpBh7hezsdiFevxg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/51292911-da7d-4636-b153-02a4b66205b5/0/42CD38BF795E0099BD3E143DD8383778ADEAE850.crl rsync://repo-rpki.idnic.net/repo/51292911-da7d-4636-b153-02a4b66205b5/0/42CD38BF795E0099BD3E143DD8383778ADEAE850.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42CD38BF795E0099BD3E143DD8383778ADEAE850.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 03:46:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:50:11:ca:be:46:d7:68:c9:38:f2:c6:2c:e6:52:1f:69:9b:5b:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42CD38BF795E0099BD3E143DD8383778ADEAE850 Validity Not Before: Dec 4 19:57:03 2025 GMT Not After : Dec 8 03:46:03 2025 GMT Subject: CN=7275A5937DD8F52520435688B122ACCDFF0AA70D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:12:4b:fa:ea:d1:58:63:06:6d:a2:a0:94:53: 32:b4:10:d8:0f:f5:54:c9:d9:f1:a8:30:8c:ae:cf: e0:a0:7d:97:bb:3a:35:a0:2e:5b:77:f5:a5:c6:49: 2b:44:f6:df:a9:95:fc:73:59:50:57:5f:ed:d5:f7: 74:cf:82:1c:1f:10:bd:f0:f3:af:40:69:6e:22:bd: a6:70:74:57:4e:ef:35:ca:cc:20:72:bc:08:8e:fc: 6a:0b:46:4c:20:dd:c5:b0:87:fb:cd:7a:fa:5c:04: a8:f9:da:99:51:c2:9d:9e:14:7d:da:98:ac:93:77: 41:cf:50:e0:f8:39:dc:12:10:7c:5a:58:af:aa:42: 70:3a:a0:02:1e:2b:fc:35:3b:77:31:ce:fd:1f:75: af:c8:66:9b:89:09:e7:17:34:ef:2d:18:85:a1:1d: 37:74:b0:0e:26:58:4f:d9:6c:38:d9:71:b6:a6:80: d0:34:73:08:11:e6:2f:e4:ab:42:0c:ec:16:34:7d: f4:d6:08:25:77:f2:42:25:51:ff:ba:0b:76:55:23: a9:30:64:8e:f8:b9:69:4a:d9:c6:98:05:dc:15:1e: d0:b6:46:97:f1:08:07:ac:71:8b:39:bf:99:38:ff: 3a:92:d3:15:60:92:eb:87:53:63:f6:d1:08:3d:99: 94:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:75:A5:93:7D:D8:F5:25:20:43:56:88:B1:22:AC:CD:FF:0A:A7:0D X509v3 Authority Key Identifier: keyid:42:CD:38:BF:79:5E:00:99:BD:3E:14:3D:D8:38:37:78:AD:EA:E8:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/51292911-da7d-4636-b153-02a4b66205b5/0/42CD38BF795E0099BD3E143DD8383778ADEAE850.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42CD38BF795E0099BD3E143DD8383778ADEAE850.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/51292911-da7d-4636-b153-02a4b66205b5/0/42CD38BF795E0099BD3E143DD8383778ADEAE850.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:7f:7c:86:52:d0:b0:6b:ef:eb:05:6a:f9:e5:27:ff:95:cb: fb:9d:db:6f:e4:b5:db:42:cc:ac:02:49:7f:c0:c0:23:cb:82: eb:db:be:83:21:b2:d8:61:41:68:89:9c:eb:97:43:97:d6:fa: 01:ee:68:ef:30:eb:85:09:53:ba:ff:dc:2a:68:fd:37:28:c5: 3a:e8:fd:ea:22:ec:4c:d8:70:b0:93:1a:5d:c1:a4:02:51:01: c2:e7:b0:7e:00:f1:bb:19:f2:27:af:e1:73:23:bd:66:bc:aa: 4c:35:83:43:d1:7d:0d:f3:0d:9e:9f:b3:1d:5c:38:56:fc:32: 07:f6:db:a5:9e:84:e7:70:ba:8b:63:82:e8:84:59:41:11:c0: 45:d7:a5:68:44:85:df:e2:d9:91:05:a2:ab:82:9b:1a:1e:97: 53:db:91:8d:8f:6e:4f:ea:fc:2e:45:12:06:6c:6c:e8:60:bb: 73:87:eb:4c:6b:3b:2b:17:53:ba:47:1b:af:9a:15:a9:bd:d9: 8a:e3:2f:28:eb:65:87:95:df:08:fb:5f:6f:9a:47:b4:fb:92: b4:41:78:f4:c4:ef:5f:77:97:59:7a:19:29:90:73:be:b4:ff: b4:cd:ab:f7:62:6b:1f:71:63:12:56:99:15:10:4e:25:23:76: 47:49:1d:68 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ1ARyr5G12jJOPLGLOZSH2mbWywwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDJDRDM4QkY3OTVFMDA5OUJEM0UxNDNERDgzODM3NzhB REVBRTg1MDAeFw0yNTEyMDQxOTU3MDNaFw0yNTEyMDgwMzQ2MDNaMDMxMTAvBgNV BAMTKDcyNzVBNTkzN0REOEY1MjUyMDQzNTY4OEIxMjJBQ0NERkYwQUE3MEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBEkv66tFYYwZtoqCUUzK0ENgP 9VTJ2fGoMIyuz+CgfZe7OjWgLlt39aXGSStE9t+plfxzWVBXX+3V93TPghwfEL3w 869AaW4ivaZwdFdO7zXKzCByvAiO/GoLRkwg3cWwh/vNevpcBKj52plRwp2eFH3a mKyTd0HPUOD4OdwSEHxaWK+qQnA6oAIeK/w1O3cxzv0fda/IZpuJCecXNO8tGIWh HTd0sA4mWE/ZbDjZcbamgNA0cwgR5i/kq0IM7BY0ffTWCCV38kIlUf+6C3ZVI6kw ZI74uWlK2caYBdwVHtC2RpfxCAescYs5v5k4/zqS0xVgkuuHU2P20Qg9mZQTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcnWlk33Y9SUgQ1aIsSKszf8Kpw0wHwYDVR0j BBgwFoAUQs04v3leAJm9PhQ92Dg3eK3q6FAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MTI5MjkxMS1kYTdkLTQ2MzYtYjE1My0wMmE0YjY2MjA1YjUvMC80MkNEMzhCRjc5 NUUwMDk5QkQzRTE0M0REODM4Mzc3OEFERUFFODUwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDJDRDM4QkY3OTVFMDA5OUJEM0UxNDNERDgzODM3NzhBREVB RTg1MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTEyOTI5MTEtZGE3ZC00NjM2LWIx NTMtMDJhNGI2NjIwNWI1LzAvNDJDRDM4QkY3OTVFMDA5OUJEM0UxNDNERDgzODM3 NzhBREVBRTg1MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADp/fIZS0LBr7+sFavnlJ/+Vy/ud22/ktdtC zKwCSX/AwCPLguvbvoMhsthhQWiJnOuXQ5fW+gHuaO8w64UJU7r/3Cpo/TcoxTro /eoi7EzYcLCTGl3BpAJRAcLnsH4A8bsZ8iev4XMjvWa8qkw1g0PRfQ3zDZ6fsx1c OFb8Mgf226WehOdwuotjguiEWUERwEXXpWhEhd/i2ZEFoquCmxoel1PbkY2Pbk/q /C5FEgZsbOhgu3OH60xrOysXU7pHG6+aFam92YrjLyjrZYeV3wj7X2+aR7T7krRB ePTE7193l1l6GSmQc760/7TNq/diax9xYxJWmRUQTiUjdkdJHWg= -----END CERTIFICATE-----Generated at Sun Dec 7 00:50:31 2025 by rpki-client