This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/9b6ae2a2-d93f-49ca-ba4b-171ff8d1e57f/0/242C3836E42CEB6F48A0A20E144027DB2E93307A.mft File: 242C3836E42CEB6F48A0A20E144027DB2E93307A.mft (raw, json) Hash identifier: 3U8NbREj2P/ZthjYuAjdxclWgznEv+27owYdE/s6mC0= Subject key identifier: F8:FA:18:47:E9:1A:90:6E:41:DE:E9:71:2B:30:FB:B0:76:44:A2:B0 Authority key identifier: 24:2C:38:36:E4:2C:EB:6F:48:A0:A2:0E:14:40:27:DB:2E:93:30:7A Certificate issuer: /CN=242C3836E42CEB6F48A0A20E144027DB2E93307A Certificate serial: 6F6A10853E9D15B55378504AD934788AB6CDDF22 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/242C3836E42CEB6F48A0A20E144027DB2E93307A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9b6ae2a2-d93f-49ca-ba4b-171ff8d1e57f/0/242C3836E42CEB6F48A0A20E144027DB2E93307A.mft Manifest number: 84 Signing time: Wed 17 Dec 2025 13:20:58 +0000 Manifest this update: Wed 17 Dec 2025 13:15:58 +0000 Manifest next update: Sat 20 Dec 2025 20:40:58 +0000 Files and hashes: 1: 3130332e3131322e3232382e302f32332d3234203d3e20313336313136.roa (hash: ha26MLoUyK6b5d5kt9GKeHc9oZd5tUAA9ACK3IzpaG8=) 2: 3130332e39332e3135382e302f32332d3234203d3e20313336313136.roa (hash: 3U6lR/C8HotepmDhEyu2e7oeFyixGt1wVJMmtsRpijM=) 3: 242C3836E42CEB6F48A0A20E144027DB2E93307A.crl (hash: pLFZWn2uOon90aSDvfFt+jq/kmNqkpRxJgexpnCRoJU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9b6ae2a2-d93f-49ca-ba4b-171ff8d1e57f/0/242C3836E42CEB6F48A0A20E144027DB2E93307A.crl rsync://repo-rpki.idnic.net/repo/9b6ae2a2-d93f-49ca-ba4b-171ff8d1e57f/0/242C3836E42CEB6F48A0A20E144027DB2E93307A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/242C3836E42CEB6F48A0A20E144027DB2E93307A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 20:40:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:6a:10:85:3e:9d:15:b5:53:78:50:4a:d9:34:78:8a:b6:cd:df:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=242C3836E42CEB6F48A0A20E144027DB2E93307A Validity Not Before: Dec 17 13:15:58 2025 GMT Not After : Dec 20 20:40:58 2025 GMT Subject: CN=F8FA1847E91A906E41DEE9712B30FBB07644A2B0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:19:8b:9b:0b:cf:b0:82:74:69:6f:e7:b8:b5: d7:e1:d5:55:9e:77:7e:36:5a:bc:53:41:92:dc:7d: ad:54:f1:66:14:f5:2d:d4:85:a6:91:61:c5:0d:f8: 65:f6:35:a9:c2:37:3f:2a:e7:ba:e1:73:73:78:88: 7f:7f:ec:1e:59:6c:d0:bc:0a:0d:c7:32:5e:2c:d0: 73:3d:7e:ca:7a:30:35:ee:30:21:79:b0:1a:df:ca: bf:23:7b:72:8c:08:a9:8b:f0:b6:cc:73:db:e8:38: 16:16:3e:20:a7:4b:cc:4d:a6:e1:e9:d0:5c:0a:6a: e0:d9:56:3e:cb:b9:95:b7:3b:28:51:b1:cd:76:c1: f3:26:89:0a:d4:c0:23:f1:ce:69:09:93:7a:22:8a: 2c:54:d6:9c:8c:f4:ce:68:ca:fe:23:f4:87:9c:4a: af:4b:6b:0e:c0:db:0f:97:ff:c5:0a:0b:70:0b:af: 15:48:61:22:8e:7e:80:52:5c:d5:ed:b1:60:10:26: 1a:ca:be:c3:7e:a7:b6:3b:27:3f:0a:36:35:4f:6e: aa:c9:39:b2:e2:cf:45:4f:28:7d:d0:4f:eb:84:96: 77:36:cd:48:fe:b1:07:a6:fd:28:d4:b7:0d:4e:4e: 0c:be:48:23:e2:2a:75:46:a1:8f:f4:0f:d4:24:b8: 21:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:FA:18:47:E9:1A:90:6E:41:DE:E9:71:2B:30:FB:B0:76:44:A2:B0 X509v3 Authority Key Identifier: keyid:24:2C:38:36:E4:2C:EB:6F:48:A0:A2:0E:14:40:27:DB:2E:93:30:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9b6ae2a2-d93f-49ca-ba4b-171ff8d1e57f/0/242C3836E42CEB6F48A0A20E144027DB2E93307A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/242C3836E42CEB6F48A0A20E144027DB2E93307A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9b6ae2a2-d93f-49ca-ba4b-171ff8d1e57f/0/242C3836E42CEB6F48A0A20E144027DB2E93307A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:7e:7e:78:61:25:c3:22:d4:cc:8e:82:41:39:59:ab:9a:3b: 98:a4:52:77:fd:39:6b:44:f3:9c:4b:8b:9a:fd:fb:50:a9:be: 59:18:b0:dc:27:23:3a:fa:59:42:db:f0:5c:bc:bb:b7:1b:64: d9:64:10:c1:6e:c0:08:68:56:df:34:42:e1:99:ac:9d:ff:7b: 1e:1a:fc:db:94:b6:4d:45:29:47:d1:77:f5:0d:a0:cf:d4:d7: 84:00:87:6b:47:da:2a:49:18:be:0a:e9:cf:34:98:e2:c0:a2: 3e:2a:18:f5:e7:22:65:6e:51:90:1e:b8:d4:df:8b:ff:f5:db: 23:ed:a2:de:e6:1e:3a:b4:fa:1b:35:71:9e:ec:72:c6:49:1b: 2c:20:34:07:f8:34:f7:3f:3f:e5:9a:30:2c:cb:75:25:b1:ed: 79:33:74:69:a9:f7:b7:43:cb:51:08:93:67:44:70:28:6a:d0: 74:54:75:8b:4c:19:19:2e:36:fb:c6:f0:6e:69:18:36:15:2b: 27:24:50:6e:0a:e3:48:f1:3d:3e:75:8b:ea:d5:0a:4a:13:4f: b6:b4:b3:9b:d7:76:32:5a:63:6d:44:33:ff:26:c6:4e:0c:15: 30:80:a8:d2:c2:f3:e9:4a:93:38:fa:63:41:2d:d5:9f:90:23: ff:08:4e:e3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUb2oQhT6dFbVTeFBK2TR4irbN3yIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjQyQzM4MzZFNDJDRUI2RjQ4QTBBMjBFMTQ0MDI3REIy RTkzMzA3QTAeFw0yNTEyMTcxMzE1NThaFw0yNTEyMjAyMDQwNThaMDMxMTAvBgNV BAMTKEY4RkExODQ3RTkxQTkwNkU0MURFRTk3MTJCMzBGQkIwNzY0NEEyQjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZGYubC8+wgnRpb+e4tdfh1VWe d342WrxTQZLcfa1U8WYU9S3UhaaRYcUN+GX2NanCNz8q57rhc3N4iH9/7B5ZbNC8 Cg3HMl4s0HM9fsp6MDXuMCF5sBrfyr8je3KMCKmL8LbMc9voOBYWPiCnS8xNpuHp 0FwKauDZVj7LuZW3OyhRsc12wfMmiQrUwCPxzmkJk3oiiixU1pyM9M5oyv4j9Iec Sq9Law7A2w+X/8UKC3ALrxVIYSKOfoBSXNXtsWAQJhrKvsN+p7Y7Jz8KNjVPbqrJ ObLiz0VPKH3QT+uElnc2zUj+sQem/SjUtw1OTgy+SCPiKnVGoY/0D9QkuCHlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+PoYR+kakG5B3ulxKzD7sHZEorAwHwYDVR0j BBgwFoAUJCw4NuQs629IoKIOFEAn2y6TMHowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YjZhZTJhMi1kOTNmLTQ5Y2EtYmE0Yi0xNzFmZjhkMWU1N2YvMC8yNDJDMzgzNkU0 MkNFQjZGNDhBMEEyMEUxNDQwMjdEQjJFOTMzMDdBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjQyQzM4MzZFNDJDRUI2RjQ4QTBBMjBFMTQ0MDI3REIyRTkz MzA3QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWI2YWUyYTItZDkzZi00OWNhLWJh NGItMTcxZmY4ZDFlNTdmLzAvMjQyQzM4MzZFNDJDRUI2RjQ4QTBBMjBFMTQ0MDI3 REIyRTkzMzA3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAR+fnhhJcMi1MyOgkE5WauaO5ikUnf9OWtE 85xLi5r9+1CpvlkYsNwnIzr6WULb8Fy8u7cbZNlkEMFuwAhoVt80QuGZrJ3/ex4a /NuUtk1FKUfRd/UNoM/U14QAh2tH2ipJGL4K6c80mOLAoj4qGPXnImVuUZAeuNTf i//12yPtot7mHjq0+hs1cZ7scsZJGywgNAf4NPc/P+WaMCzLdSWx7XkzdGmp97dD y1EIk2dEcChq0HRUdYtMGRkuNvvG8G5pGDYVKyckUG4K40jxPT51i+rVCkoTT7a0 s5vXdjJaY21EM/8mxk4MFTCAqNLC8+lKkzj6Y0Et1Z+QI/8ITuM= -----END CERTIFICATE-----Generated at Thu Dec 18 07:57:45 2025 by rpki-client