This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/581274af-7cd0-40af-a321-676898d58db8/0/842233D6E756BC93C0DB9A45DD2F7BCD97CB29AF.mft File: 842233D6E756BC93C0DB9A45DD2F7BCD97CB29AF.mft (raw, json) Hash identifier: DlrbNXwtqp/BYYwlsoGBfSkCk1j4aXBS++JBYlSJMTk= Subject key identifier: AA:54:45:7B:F7:C1:EC:87:40:2D:CE:0C:64:AE:DC:89:CA:56:45:5D Authority key identifier: 84:22:33:D6:E7:56:BC:93:C0:DB:9A:45:DD:2F:7B:CD:97:CB:29:AF Certificate issuer: /CN=842233D6E756BC93C0DB9A45DD2F7BCD97CB29AF Certificate serial: 6355739C3882AFA5CE814EDC0708EA933BB53CAE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/842233D6E756BC93C0DB9A45DD2F7BCD97CB29AF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/581274af-7cd0-40af-a321-676898d58db8/0/842233D6E756BC93C0DB9A45DD2F7BCD97CB29AF.mft Manifest number: 0150 Signing time: Fri 05 Dec 2025 18:10:52 +0000 Manifest this update: Fri 05 Dec 2025 18:05:52 +0000 Manifest next update: Tue 09 Dec 2025 04:14:52 +0000 Files and hashes: 1: 3230322e34372e3136332e302f32342d3234203d3e20313532303337.roa (hash: /URm5Kz+lOTj8/0VCDqZYq+wPeWuBT+Tq5QLg7+ZM+8=) 2: 3230322e34372e3136322e302f32332d3233203d3e20313532303337.roa (hash: 9S64FqiohF4/G4AR4prN454MPd/66wEeqEDt9vo/F+Y=) 3: 3230322e34372e3136322e302f32342d3234203d3e20313532303337.roa (hash: 8svYl0PSwXQA1Wds9/vDZkzwkfX8sX1XjqIKznjwc2w=) 4: 842233D6E756BC93C0DB9A45DD2F7BCD97CB29AF.crl (hash: prqbzBcjFp2TUg5wQlpKOzwbjcgW3/K0KcaIuM9w7Pc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/581274af-7cd0-40af-a321-676898d58db8/0/842233D6E756BC93C0DB9A45DD2F7BCD97CB29AF.crl rsync://repo-rpki.idnic.net/repo/581274af-7cd0-40af-a321-676898d58db8/0/842233D6E756BC93C0DB9A45DD2F7BCD97CB29AF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/842233D6E756BC93C0DB9A45DD2F7BCD97CB29AF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 04:14:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:55:73:9c:38:82:af:a5:ce:81:4e:dc:07:08:ea:93:3b:b5:3c:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=842233D6E756BC93C0DB9A45DD2F7BCD97CB29AF Validity Not Before: Dec 5 18:05:52 2025 GMT Not After : Dec 9 04:14:52 2025 GMT Subject: CN=AA54457BF7C1EC87402DCE0C64AEDC89CA56455D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:06:f8:45:86:b3:36:03:fe:70:fc:6a:ff:ed: a6:54:dd:8e:f0:22:b9:44:ac:14:7e:8a:23:56:15: 7a:e3:5f:c8:b6:5b:87:75:fa:2e:00:fa:73:bd:31: d0:04:4b:1c:f0:60:46:db:64:19:1b:b3:a3:49:ea: b4:8d:09:8a:32:f3:89:2d:9d:37:57:88:b7:33:37: 69:c0:28:6a:46:a8:8a:51:75:0c:2d:da:d1:b8:79: d4:57:e9:bd:4b:e7:d4:df:c4:c0:8f:ef:ba:9e:4e: 33:56:98:47:79:ce:db:f8:a6:3f:f4:a5:4b:e4:15: 54:a9:75:e7:a1:b0:0b:60:69:ba:2d:25:5f:cc:9d: 7d:e3:3d:be:33:82:33:41:90:68:d4:c4:ab:92:c6: 38:ec:ce:e2:ca:bd:10:c7:18:15:dc:e5:01:1c:29: 6e:fa:57:c9:52:f1:46:12:82:ec:80:bd:7d:03:ce: 80:0c:3c:88:0a:de:7b:ae:1f:9c:b9:13:0a:57:94: 08:f5:ec:53:d5:1e:ad:db:d0:88:b3:3d:95:80:75: 7f:83:32:48:0d:fa:ae:06:48:f6:b3:86:e6:e3:10: d3:32:fb:f9:f4:09:ee:11:99:cb:84:21:8a:92:ad: f9:3b:a5:bb:b5:a2:9c:60:a4:e2:78:e0:fe:c8:41: 52:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:54:45:7B:F7:C1:EC:87:40:2D:CE:0C:64:AE:DC:89:CA:56:45:5D X509v3 Authority Key Identifier: keyid:84:22:33:D6:E7:56:BC:93:C0:DB:9A:45:DD:2F:7B:CD:97:CB:29:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/581274af-7cd0-40af-a321-676898d58db8/0/842233D6E756BC93C0DB9A45DD2F7BCD97CB29AF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/842233D6E756BC93C0DB9A45DD2F7BCD97CB29AF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/581274af-7cd0-40af-a321-676898d58db8/0/842233D6E756BC93C0DB9A45DD2F7BCD97CB29AF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:7a:1a:93:ae:d9:05:d3:17:a6:03:61:fc:07:a4:f1:3e:85: 9d:16:57:62:34:b7:23:5c:4e:2c:bc:bb:ad:03:ef:cb:88:8e: f4:1c:73:1d:cf:50:e9:ac:08:8d:a1:a6:f8:18:4e:fc:33:ea: ea:3c:6c:eb:a8:9b:75:5a:ee:29:b0:a0:60:55:e9:d7:7d:29: 52:55:6a:9b:2c:45:7c:3d:ce:b2:36:7c:a4:d1:8c:06:dc:76: b0:6c:3d:7b:b3:1b:3d:40:14:72:a7:40:21:0e:04:47:81:1c: 35:19:cf:42:72:f6:89:86:3d:34:fb:45:3a:a4:ff:c8:9b:d8: d0:4a:92:83:a0:e2:22:60:09:a7:90:8b:8f:55:f4:bd:81:45: cb:88:3f:de:9c:9c:d5:32:52:3a:ed:e9:cb:da:6b:15:c2:2d: 61:f1:f3:94:e1:a9:59:df:a6:e4:d0:84:a4:8c:f9:9e:8a:5f: 73:91:bb:6b:94:49:a7:7a:82:fb:1f:51:2c:7d:69:b8:82:ab: 20:e6:23:88:86:5f:07:dc:c9:fc:51:17:4a:c2:ec:1c:09:59: 54:39:6e:d8:5f:ef:a1:b2:0a:af:3e:0b:db:ef:05:da:22:f8: f3:04:fa:ad:6c:57:52:ab:5e:44:c9:6d:56:15:bb:33:ce:42: a0:f6:9d:ed -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUY1VznDiCr6XOgU7cBwjqkzu1PK4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQyMjMzRDZFNzU2QkM5M0MwREI5QTQ1REQyRjdCQ0Q5 N0NCMjlBRjAeFw0yNTEyMDUxODA1NTJaFw0yNTEyMDkwNDE0NTJaMDMxMTAvBgNV BAMTKEFBNTQ0NTdCRjdDMUVDODc0MDJEQ0UwQzY0QUVEQzg5Q0E1NjQ1NUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/BvhFhrM2A/5w/Gr/7aZU3Y7w IrlErBR+iiNWFXrjX8i2W4d1+i4A+nO9MdAESxzwYEbbZBkbs6NJ6rSNCYoy84kt nTdXiLczN2nAKGpGqIpRdQwt2tG4edRX6b1L59TfxMCP77qeTjNWmEd5ztv4pj/0 pUvkFVSpdeehsAtgabotJV/MnX3jPb4zgjNBkGjUxKuSxjjszuLKvRDHGBXc5QEc KW76V8lS8UYSguyAvX0DzoAMPIgK3nuuH5y5EwpXlAj17FPVHq3b0IizPZWAdX+D MkgN+q4GSPazhubjENMy+/n0Ce4RmcuEIYqSrfk7pbu1opxgpOJ44P7IQVJ7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqlRFe/fB7IdALc4MZK7cicpWRV0wHwYDVR0j BBgwFoAUhCIz1udWvJPA25pF3S97zZfLKa8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ODEyNzRhZi03Y2QwLTQwYWYtYTMyMS02NzY4OThkNThkYjgvMC84NDIyMzNENkU3 NTZCQzkzQzBEQjlBNDVERDJGN0JDRDk3Q0IyOUFGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODQyMjMzRDZFNzU2QkM5M0MwREI5QTQ1REQyRjdCQ0Q5N0NC MjlBRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTgxMjc0YWYtN2NkMC00MGFmLWEz MjEtNjc2ODk4ZDU4ZGI4LzAvODQyMjMzRDZFNzU2QkM5M0MwREI5QTQ1REQyRjdC Q0Q5N0NCMjlBRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIN6GpOu2QXTF6YDYfwHpPE+hZ0WV2I0tyNc Tiy8u60D78uIjvQccx3PUOmsCI2hpvgYTvwz6uo8bOuom3Va7imwoGBV6dd9KVJV apssRXw9zrI2fKTRjAbcdrBsPXuzGz1AFHKnQCEOBEeBHDUZz0Jy9omGPTT7RTqk /8ib2NBKkoOg4iJgCaeQi49V9L2BRcuIP96cnNUyUjrt6cvaaxXCLWHx85ThqVnf puTQhKSM+Z6KX3ORu2uUSad6gvsfUSx9abiCqyDmI4iGXwfcyfxRF0rC7BwJWVQ5 bthf76GyCq8+C9vvBdoi+PME+q1sV1KrXkTJbVYVuzPOQqD2ne0= -----END CERTIFICATE-----Generated at Sat Dec 6 23:53:47 2025 by rpki-client