This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/9b6ae2a2-d93f-49ca-ba4b-171ff8d1e57f/0/242C3836E42CEB6F48A0A20E144027DB2E93307A.mft File: 242C3836E42CEB6F48A0A20E144027DB2E93307A.mft (raw, json) Hash identifier: w37EaYfjJKUFFeIRI7+1m5+EV+b73gMDMC4DrjNUHW8= Subject key identifier: C9:86:A6:DB:04:31:18:B7:A3:22:3C:A5:54:1F:16:91:08:81:B5:6C Authority key identifier: 24:2C:38:36:E4:2C:EB:6F:48:A0:A2:0E:14:40:27:DB:2E:93:30:7A Certificate issuer: /CN=242C3836E42CEB6F48A0A20E144027DB2E93307A Certificate serial: 25923FC2F906EAD6D51B1BD2BC16C236F1E41EE9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/242C3836E42CEB6F48A0A20E144027DB2E93307A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9b6ae2a2-d93f-49ca-ba4b-171ff8d1e57f/0/242C3836E42CEB6F48A0A20E144027DB2E93307A.mft Manifest number: 7F Signing time: Fri 05 Dec 2025 16:40:56 +0000 Manifest this update: Fri 05 Dec 2025 16:35:56 +0000 Manifest next update: Tue 09 Dec 2025 04:28:56 +0000 Files and hashes: 1: 242C3836E42CEB6F48A0A20E144027DB2E93307A.crl (hash: I+QSi+Vqlewe260B5tnpR078MDAtVqcssxmFFW2+hPQ=) 2: 3130332e39332e3135382e302f32332d3234203d3e20313336313136.roa (hash: 3U6lR/C8HotepmDhEyu2e7oeFyixGt1wVJMmtsRpijM=) 3: 3130332e3131322e3232382e302f32332d3234203d3e20313336313136.roa (hash: ha26MLoUyK6b5d5kt9GKeHc9oZd5tUAA9ACK3IzpaG8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9b6ae2a2-d93f-49ca-ba4b-171ff8d1e57f/0/242C3836E42CEB6F48A0A20E144027DB2E93307A.crl rsync://repo-rpki.idnic.net/repo/9b6ae2a2-d93f-49ca-ba4b-171ff8d1e57f/0/242C3836E42CEB6F48A0A20E144027DB2E93307A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/242C3836E42CEB6F48A0A20E144027DB2E93307A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 04:28:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:92:3f:c2:f9:06:ea:d6:d5:1b:1b:d2:bc:16:c2:36:f1:e4:1e:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=242C3836E42CEB6F48A0A20E144027DB2E93307A Validity Not Before: Dec 5 16:35:56 2025 GMT Not After : Dec 9 04:28:56 2025 GMT Subject: CN=C986A6DB043118B7A3223CA5541F16910881B56C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:4f:d0:11:72:c7:16:23:89:e9:1d:12:8b:6d: 8f:c4:12:9d:71:b4:63:da:4b:49:e2:84:97:ed:72: e1:10:02:f4:87:ec:2c:c1:bf:d4:4a:db:db:d0:df: 50:cd:18:be:32:f9:c2:50:c6:f7:d5:2e:bf:ee:59: 31:98:76:de:cd:0d:3d:6a:90:86:8d:42:62:ab:ec: 8e:84:21:db:98:22:44:ae:87:09:54:b3:f9:a0:5b: db:82:3d:ae:20:b9:2e:97:47:3d:10:38:a3:22:5b: 85:09:20:9a:b7:d2:25:db:bd:0c:0e:fc:cc:3b:97: 0c:dd:dc:a9:81:69:c8:f3:49:df:b1:31:6a:c1:7b: 79:6d:66:91:1c:c0:f9:f1:a6:61:9c:a8:52:8f:5a: 21:38:7e:a0:f4:1d:c0:8f:91:d2:c0:6e:8d:d0:6a: 6d:27:fb:34:05:f5:ee:1e:98:04:4f:c1:3d:6a:f2: 14:11:81:75:eb:a0:4e:04:a0:6d:68:84:0a:e4:4c: f0:11:4e:44:25:14:5d:c6:4c:03:33:2d:7e:38:e9: 79:47:57:cd:00:fa:f8:19:9d:3d:45:ed:39:dd:36: fc:c4:5b:dd:d5:d1:94:92:81:d7:08:91:2b:2b:07: 34:49:20:3f:cc:7c:62:84:d3:7b:a7:1e:b0:c9:37: 89:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:86:A6:DB:04:31:18:B7:A3:22:3C:A5:54:1F:16:91:08:81:B5:6C X509v3 Authority Key Identifier: keyid:24:2C:38:36:E4:2C:EB:6F:48:A0:A2:0E:14:40:27:DB:2E:93:30:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9b6ae2a2-d93f-49ca-ba4b-171ff8d1e57f/0/242C3836E42CEB6F48A0A20E144027DB2E93307A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/242C3836E42CEB6F48A0A20E144027DB2E93307A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9b6ae2a2-d93f-49ca-ba4b-171ff8d1e57f/0/242C3836E42CEB6F48A0A20E144027DB2E93307A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:52:ff:4f:84:e1:d6:52:0b:33:4e:db:f1:2f:f0:8b:22:f8: a3:f5:98:bd:21:e8:10:5c:45:e6:f6:0e:8c:ad:02:cd:78:2c: 7d:27:8b:c1:fb:b7:13:c5:9a:07:f9:9f:33:0b:f0:ab:ca:91: cf:08:36:f6:78:c0:6f:34:c2:fa:a0:cc:d4:47:e9:3f:46:4c: 68:36:be:53:4e:db:dd:5e:7e:8c:a3:2c:64:af:9c:8e:d7:81: 21:85:07:37:15:c0:e4:4a:ed:4b:cd:66:b6:72:42:0d:b4:05: ad:6a:46:f0:b5:a3:f5:70:b1:23:8f:32:85:50:e6:36:4f:ae: 9a:f5:8a:76:72:ef:15:1a:9e:02:c5:7a:fb:23:db:39:44:62: 64:88:e9:65:3d:7f:f1:32:05:7c:b2:75:d7:25:13:1c:4c:cf: 68:d1:bd:ed:db:b0:10:9c:11:ee:72:91:6f:0c:7b:ae:c4:85: 85:b8:b3:cd:19:6d:43:53:b2:b1:3f:c1:fb:95:a4:3b:1b:10: 51:fc:ae:46:1a:8a:13:63:66:93:a6:f5:ea:30:07:2c:90:9b: 1f:c6:7b:24:a6:02:8e:4d:4c:d7:d3:87:31:e3:f6:ce:b2:98: 62:c3:68:97:93:5f:d5:eb:cc:60:c8:10:90:6d:29:c4:0a:ec: a6:12:13:2e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJZI/wvkG6tbVGxvSvBbCNvHkHukwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjQyQzM4MzZFNDJDRUI2RjQ4QTBBMjBFMTQ0MDI3REIy RTkzMzA3QTAeFw0yNTEyMDUxNjM1NTZaFw0yNTEyMDkwNDI4NTZaMDMxMTAvBgNV BAMTKEM5ODZBNkRCMDQzMTE4QjdBMzIyM0NBNTU0MUYxNjkxMDg4MUI1NkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjT9ARcscWI4npHRKLbY/EEp1x tGPaS0nihJftcuEQAvSH7CzBv9RK29vQ31DNGL4y+cJQxvfVLr/uWTGYdt7NDT1q kIaNQmKr7I6EIduYIkSuhwlUs/mgW9uCPa4guS6XRz0QOKMiW4UJIJq30iXbvQwO /Mw7lwzd3KmBacjzSd+xMWrBe3ltZpEcwPnxpmGcqFKPWiE4fqD0HcCPkdLAbo3Q am0n+zQF9e4emARPwT1q8hQRgXXroE4EoG1ohArkTPARTkQlFF3GTAMzLX446XlH V80A+vgZnT1F7TndNvzEW93V0ZSSgdcIkSsrBzRJID/MfGKE03unHrDJN4k3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyYam2wQxGLejIjylVB8WkQiBtWwwHwYDVR0j BBgwFoAUJCw4NuQs629IoKIOFEAn2y6TMHowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YjZhZTJhMi1kOTNmLTQ5Y2EtYmE0Yi0xNzFmZjhkMWU1N2YvMC8yNDJDMzgzNkU0 MkNFQjZGNDhBMEEyMEUxNDQwMjdEQjJFOTMzMDdBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjQyQzM4MzZFNDJDRUI2RjQ4QTBBMjBFMTQ0MDI3REIyRTkz MzA3QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWI2YWUyYTItZDkzZi00OWNhLWJh NGItMTcxZmY4ZDFlNTdmLzAvMjQyQzM4MzZFNDJDRUI2RjQ4QTBBMjBFMTQ0MDI3 REIyRTkzMzA3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE5S/0+E4dZSCzNO2/Ev8Isi+KP1mL0h6BBc Reb2DoytAs14LH0ni8H7txPFmgf5nzML8KvKkc8INvZ4wG80wvqgzNRH6T9GTGg2 vlNO291efoyjLGSvnI7XgSGFBzcVwORK7UvNZrZyQg20Ba1qRvC1o/VwsSOPMoVQ 5jZPrpr1inZy7xUangLFevsj2zlEYmSI6WU9f/EyBXyyddclExxMz2jRve3bsBCc Ee5ykW8Me67EhYW4s80ZbUNTsrE/wfuVpDsbEFH8rkYaihNjZpOm9eowByyQmx/G eySmAo5NTNfThzHj9s6ymGLDaJeTX9XrzGDIEJBtKcQK7KYSEy4= -----END CERTIFICATE-----Generated at Sun Dec 7 03:05:31 2025 by rpki-client