This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/2042008AEC80152F373D2A04DFD3893EE2F92166.mft File: 2042008AEC80152F373D2A04DFD3893EE2F92166.mft (raw, json) Hash identifier: J8EzCBiFvMQATyYO9uebOE9lZtR9gJ40T7NFBpiEZfo= Subject key identifier: C8:6E:70:F9:48:21:A0:92:85:C3:56:A1:E6:D4:C5:17:7E:31:61:F5 Authority key identifier: 20:42:00:8A:EC:80:15:2F:37:3D:2A:04:DF:D3:89:3E:E2:F9:21:66 Certificate issuer: /CN=2042008AEC80152F373D2A04DFD3893EE2F92166 Certificate serial: 2901B1B9442B746C15A57EF5A2B8107B59DDC93D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2042008AEC80152F373D2A04DFD3893EE2F92166.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/2042008AEC80152F373D2A04DFD3893EE2F92166.mft Manifest number: 01D3 Signing time: Fri 05 Dec 2025 13:31:36 +0000 Manifest this update: Fri 05 Dec 2025 13:26:36 +0000 Manifest next update: Tue 09 Dec 2025 00:51:36 +0000 Files and hashes: 1: 2042008AEC80152F373D2A04DFD3893EE2F92166.crl (hash: xw1nF5x1Y17GNKGT5aEpF6sh9fvyZSvTK8SlScmA0As=) 2: 3230322e37332e31362e302f32342d3234203d3e203538383136.roa (hash: 7u4efn7bHYzED6nyNb+Hqw9a6DQWqirinCujiYt23iE=) 3: 3230322e37332e31362e302f32312d3231203d3e203538383136.roa (hash: UTxUdswuTF+ox6a5oV05W2D3Jcdyj/c1haTTHi/3q+U=) 4: 3230322e37332e32302e302f32342d3234203d3e203538383136.roa (hash: oxNl3kL7pfOEMCZna82D8P/b9qkWwOtKEU4nTRdcl3U=) 5: 3230322e37332e31392e302f32342d3234203d3e203538383136.roa (hash: 5m5TlKYtb1BvkeOY5L0iLxzd9TDfvf4dSOsCxsnrroA=) 6: 3230322e37332e31362e302f32322d3232203d3e203538383136.roa (hash: b6WR2/tkj/TJmHf4T96jHhe4cr6ziz5DRZJiP/dYI8w=) 7: 34332e3235322e3138342e302f32342d3234203d3e203538383136.roa (hash: zkaOl3WDUKt7L8bc11OX90l50YOHPUCk7N8DGiMpczs=) 8: 3230322e37332e32312e302f32342d3234203d3e203538383136.roa (hash: +UYTL16FoJzljt1WcPKnLkea4mRmhRtr/yGtN5BCt4Y=) 9: 34332e3235322e3138362e302f32342d3234203d3e203538383136.roa (hash: cEeTKWmwIc5D8VRx4Wjyqi25fM0+EqJrs6oXdMSObyg=) 10: 3230322e37332e31382e302f32342d3234203d3e203538383136.roa (hash: 2KzZDAzCYvLDGmuyMQTwS12UkngL2r4uYLx3E6PowDU=) 11: 3130332e3234382e35362e302f32342d3234203d3e203538383136.roa (hash: Fp3TdqFb3PCcEDYFQYYU/EXsl8Z+niV/5Guw5uw0Pl4=) 12: 3230322e37332e31372e302f32342d3234203d3e203538383136.roa (hash: kRRcaFc2J9dVlk1FFSz0s3hPY1eoKnszPg9ucUh3LNQ=) 13: 3130332e3234382e35372e302f32342d3234203d3e203538383136.roa (hash: KnUhOivFyTwSLl1lFtmGPDtu87HmW4jCAVjkx4JXtuo=) 14: 3130332e3234382e35382e302f32332d3233203d3e203538383136.roa (hash: CV4aj5c0qTtoAuk2gjVJIigxTtOqOHVk941GV0y4c2o=) 15: 34332e3235322e3138352e302f32342d3234203d3e203538383136.roa (hash: hamVtzyWWFgDoUv3GhJNoDFMf/gHi6nIkoDk9iZqkLo=) 16: 3130332e3234382e35382e302f32342d3234203d3e203538383136.roa (hash: 5t1AVxnTVPWVliNjx4dePm/Uoa7VF9/XPOB2dVW7zIc=) 17: 3230322e37332e32322e302f32342d3234203d3e203538383136.roa (hash: 8OfgAbNQVhDJJTxQBxc34yWofgtcid4J/JQSeq4njCk=) 18: 34332e3235322e3138372e302f32342d3234203d3e203538383136.roa (hash: Q14M8/H1GKD5N/6iQpjuxENjm1t2nAKNH5gzPjfdhGE=) 19: 3130332e3234382e35392e302f32342d3234203d3e203538383136.roa (hash: ItE1oa3zcA/J6v7neMwAUFSJuwJHlB5fYUCcNJ52lrY=) 20: 34332e3235322e3138342e302f32322d3232203d3e203538383136.roa (hash: SEJtrFMzCIxaL5HsTowHqKeGBeSHdUF6h109MbSr1hY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/2042008AEC80152F373D2A04DFD3893EE2F92166.crl rsync://repo-rpki.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/2042008AEC80152F373D2A04DFD3893EE2F92166.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2042008AEC80152F373D2A04DFD3893EE2F92166.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 00:51:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:01:b1:b9:44:2b:74:6c:15:a5:7e:f5:a2:b8:10:7b:59:dd:c9:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2042008AEC80152F373D2A04DFD3893EE2F92166 Validity Not Before: Dec 5 13:26:36 2025 GMT Not After : Dec 9 00:51:36 2025 GMT Subject: CN=C86E70F94821A09285C356A1E6D4C5177E3161F5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:cd:7a:10:1b:e9:c7:af:1e:93:90:9d:2e:41: e1:cf:64:81:75:11:78:e1:9f:6f:00:a7:3e:28:39: fb:cb:51:d7:cd:eb:a0:f7:ff:47:9d:36:0c:8c:f5: d1:08:af:f0:bc:f3:ee:42:46:d9:c8:60:cf:7c:79: 3a:b4:4e:9e:3a:e0:75:14:3c:15:06:d5:08:d8:43: 3b:1d:c4:7a:7c:9b:48:5a:54:58:7b:93:ec:07:97: 7c:82:23:17:6c:12:5a:37:48:76:c4:e4:73:3f:3f: eb:49:e5:0a:0b:c0:52:dc:17:9b:fd:1e:10:a1:0d: 13:51:8e:59:5c:89:e0:54:09:35:19:d6:d3:bb:60: b4:31:91:9e:7a:db:31:9b:21:67:44:9d:06:6b:e8: 61:94:c2:c4:f0:24:bc:6d:3b:31:f8:7a:e2:7d:5f: 24:2e:72:8b:eb:94:80:7f:c6:d0:96:5c:41:07:ef: 06:da:19:f9:db:e3:f9:d3:aa:57:fe:fb:30:69:5f: 7d:6c:4c:45:cb:39:d8:0e:ca:0e:3f:6b:12:fa:ee: 27:d5:b8:a5:f3:20:a8:8d:5a:8e:e6:4e:9d:e7:6a: 30:51:13:a7:a5:dc:20:ad:ac:67:2b:51:c1:dc:ec: 44:aa:38:48:b1:74:0c:e7:f7:f7:3b:46:18:b1:7e: c2:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:6E:70:F9:48:21:A0:92:85:C3:56:A1:E6:D4:C5:17:7E:31:61:F5 X509v3 Authority Key Identifier: keyid:20:42:00:8A:EC:80:15:2F:37:3D:2A:04:DF:D3:89:3E:E2:F9:21:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/2042008AEC80152F373D2A04DFD3893EE2F92166.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2042008AEC80152F373D2A04DFD3893EE2F92166.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/2042008AEC80152F373D2A04DFD3893EE2F92166.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:07:a6:a9:a5:2d:08:d1:35:db:47:40:b5:52:e0:8b:71:43: 7e:4c:ce:06:f7:2f:88:40:dc:9f:9c:6c:7c:84:9f:7a:3f:2f: 0a:c0:8a:72:30:d5:28:08:8b:75:d9:62:be:d2:54:32:b7:44: eb:2c:32:21:12:15:90:f5:72:50:9b:12:41:f0:6c:ec:4a:a2: b7:8b:63:c4:03:b2:12:c2:ac:16:82:11:2c:9a:1f:be:b7:2b: e7:45:03:df:fb:3f:8e:64:59:c1:b1:ec:79:84:18:65:f8:97: 17:c2:1b:55:ba:09:ee:a6:99:86:27:ae:34:61:95:b9:d4:e1: 79:83:de:c7:ef:9e:1a:14:d6:a4:78:85:43:ac:3b:9d:48:a1: 70:c2:41:42:f6:91:7e:e4:42:86:6a:99:01:5a:63:57:fd:5c: b5:05:7c:d6:47:3d:7b:36:84:be:5c:a9:b4:53:01:42:0f:6e: 55:2c:77:e9:68:8f:12:63:ad:d7:6a:d7:3b:47:75:d8:85:35: 99:be:c5:7b:26:fb:16:24:bd:7d:ca:8c:6b:13:3f:85:a3:82: a5:b6:53:f6:41:97:8e:03:f6:9c:97:ed:5b:19:eb:fc:01:57: 1a:5d:6c:c0:8a:94:96:76:79:50:6e:8c:02:d7:a5:24:35:7c: d2:d6:aa:7e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKQGxuUQrdGwVpX71orgQe1ndyT0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjA0MjAwOEFFQzgwMTUyRjM3M0QyQTA0REZEMzg5M0VF MkY5MjE2NjAeFw0yNTEyMDUxMzI2MzZaFw0yNTEyMDkwMDUxMzZaMDMxMTAvBgNV BAMTKEM4NkU3MEY5NDgyMUEwOTI4NUMzNTZBMUU2RDRDNTE3N0UzMTYxRjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDzXoQG+nHrx6TkJ0uQeHPZIF1 EXjhn28Apz4oOfvLUdfN66D3/0edNgyM9dEIr/C88+5CRtnIYM98eTq0Tp464HUU PBUG1QjYQzsdxHp8m0haVFh7k+wHl3yCIxdsElo3SHbE5HM/P+tJ5QoLwFLcF5v9 HhChDRNRjllcieBUCTUZ1tO7YLQxkZ562zGbIWdEnQZr6GGUwsTwJLxtOzH4euJ9 XyQucovrlIB/xtCWXEEH7wbaGfnb4/nTqlf++zBpX31sTEXLOdgOyg4/axL67ifV uKXzIKiNWo7mTp3najBRE6el3CCtrGcrUcHc7ESqOEixdAzn9/c7RhixfsJ5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyG5w+UghoJKFw1ah5tTFF34xYfUwHwYDVR0j BBgwFoAUIEIAiuyAFS83PSoE39OJPuL5IWYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZmMzY2JjNC04ODgzLTQxMWMtODc2ZS1lOWUyM2E4ZDhhZDkvMC8yMDQyMDA4QUVD ODAxNTJGMzczRDJBMDRERkQzODkzRUUyRjkyMTY2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjA0MjAwOEFFQzgwMTUyRjM3M0QyQTA0REZEMzg5M0VFMkY5 MjE2Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmZjM2NiYzQtODg4My00MTFjLTg3 NmUtZTllMjNhOGQ4YWQ5LzAvMjA0MjAwOEFFQzgwMTUyRjM3M0QyQTA0REZEMzg5 M0VFMkY5MjE2Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA0HpqmlLQjRNdtHQLVS4ItxQ35Mzgb3L4hA 3J+cbHyEn3o/LwrAinIw1SgIi3XZYr7SVDK3ROssMiESFZD1clCbEkHwbOxKoreL Y8QDshLCrBaCESyaH763K+dFA9/7P45kWcGx7HmEGGX4lxfCG1W6Ce6mmYYnrjRh lbnU4XmD3sfvnhoU1qR4hUOsO51IoXDCQUL2kX7kQoZqmQFaY1f9XLUFfNZHPXs2 hL5cqbRTAUIPblUsd+lojxJjrddq1ztHddiFNZm+xXsm+xYkvX3KjGsTP4WjgqW2 U/ZBl44D9pyX7VsZ6/wBVxpdbMCKlJZ2eVBujALXpSQ1fNLWqn4= -----END CERTIFICATE-----Generated at Sun Dec 7 07:00:01 2025 by rpki-client