This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/aee2088a-c9ff-4d84-be4e-141d5b80b543/0/42467B1885830A9908EAE67935311639B090AA77.mft File: 42467B1885830A9908EAE67935311639B090AA77.mft (raw, json) Hash identifier: hr9+X/rnpBwQLg6+a6m4jt/19tWT4hv7hT5oPY0izY4= Subject key identifier: 28:E7:E1:3F:DA:A8:59:9E:BF:60:DF:DC:7A:77:9E:24:11:E8:57:47 Authority key identifier: 42:46:7B:18:85:83:0A:99:08:EA:E6:79:35:31:16:39:B0:90:AA:77 Certificate issuer: /CN=42467B1885830A9908EAE67935311639B090AA77 Certificate serial: 65D7B05329566E9166B4332432DB5B654A73CB02 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42467B1885830A9908EAE67935311639B090AA77.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aee2088a-c9ff-4d84-be4e-141d5b80b543/0/42467B1885830A9908EAE67935311639B090AA77.mft Manifest number: 0162 Signing time: Sat 06 Dec 2025 10:11:46 +0000 Manifest this update: Sat 06 Dec 2025 10:06:46 +0000 Manifest next update: Tue 09 Dec 2025 10:57:46 +0000 Files and hashes: 1: 3130332e37362e3130362e302f32332d3234203d3e20313531353737.roa (hash: DxKIyMO6WjD2qxH8BuKIvj+fKDvOwuaoHadDVnwc7A0=) 2: 42467B1885830A9908EAE67935311639B090AA77.crl (hash: mnoV+RZkVH59ktq5SXNtNK24GaHBM5iKaN69HjrlE88=) 3: 3130332e37362e3130372e302f32342d3234203d3e20313531353737.roa (hash: ZWtRALMquKEFwYIWcUiF1poTwDnT8MPEPPx4FTc8PK0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aee2088a-c9ff-4d84-be4e-141d5b80b543/0/42467B1885830A9908EAE67935311639B090AA77.crl rsync://repo-rpki.idnic.net/repo/aee2088a-c9ff-4d84-be4e-141d5b80b543/0/42467B1885830A9908EAE67935311639B090AA77.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42467B1885830A9908EAE67935311639B090AA77.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 10:57:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:d7:b0:53:29:56:6e:91:66:b4:33:24:32:db:5b:65:4a:73:cb:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42467B1885830A9908EAE67935311639B090AA77 Validity Not Before: Dec 6 10:06:46 2025 GMT Not After : Dec 9 10:57:46 2025 GMT Subject: CN=28E7E13FDAA8599EBF60DFDC7A779E2411E85747 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:ce:0e:94:fe:ea:f6:ed:2e:df:70:0a:a7:4e: e0:f5:58:7d:51:de:f3:68:5b:86:f6:d9:53:21:82: 24:0c:39:d7:b7:eb:e1:2a:bc:20:81:43:7d:76:75: b7:11:8f:cd:4c:95:ac:34:9e:5b:22:74:41:d2:ae: 5f:ce:8f:4e:a8:56:54:0d:78:86:7d:82:8b:a7:1a: 76:f0:6a:9d:c0:57:00:9b:57:cb:88:9d:bc:56:a5: 71:18:18:1b:c9:12:be:69:d1:eb:cc:9a:fa:e1:74: 8f:3c:0b:b1:50:24:a6:a7:f2:f5:74:4f:7d:48:6f: 08:66:6e:59:2e:df:7b:45:39:a8:8d:2f:9d:29:45: 01:92:45:92:f4:8f:9b:ef:6d:d2:4e:92:e2:c9:4f: d0:11:64:4d:a4:9c:2d:15:d2:5c:e8:88:96:ce:2e: e9:4d:34:54:09:ec:7d:af:f2:da:a8:04:00:95:54: 92:20:cb:e5:3b:f0:e7:5f:d8:69:30:50:43:05:17: f2:07:32:e2:fc:02:a7:c8:e3:f6:5f:b3:d0:fb:5c: 19:37:82:9d:6b:c9:9c:e5:3a:fa:f1:27:15:fe:93: 4d:ea:c2:51:0c:46:1c:5e:6a:9d:f7:f1:ae:7f:19: bd:e6:bc:3a:20:a4:17:1c:33:c9:73:55:0e:31:39: 46:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:E7:E1:3F:DA:A8:59:9E:BF:60:DF:DC:7A:77:9E:24:11:E8:57:47 X509v3 Authority Key Identifier: keyid:42:46:7B:18:85:83:0A:99:08:EA:E6:79:35:31:16:39:B0:90:AA:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aee2088a-c9ff-4d84-be4e-141d5b80b543/0/42467B1885830A9908EAE67935311639B090AA77.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42467B1885830A9908EAE67935311639B090AA77.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aee2088a-c9ff-4d84-be4e-141d5b80b543/0/42467B1885830A9908EAE67935311639B090AA77.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:b2:47:33:d3:f9:d1:3f:03:e2:12:4c:85:bb:b2:d6:0d:38: 85:fd:91:63:b8:fd:20:8e:31:c3:85:a4:c6:1d:d0:6a:89:ad: b9:8c:46:8e:d5:3c:75:57:e8:47:a4:78:0c:c0:1f:64:68:85: 79:23:d3:77:f5:24:bc:b6:0f:aa:4e:13:50:2c:9f:1b:ac:f3: 4b:e1:b5:72:f7:42:25:3f:62:11:45:aa:a6:33:70:d9:fe:c0: 5a:19:bf:ec:ad:10:93:86:ff:84:88:2d:4a:65:05:56:1c:d5: 5f:8e:2c:04:06:d3:0a:ed:c7:fd:63:9e:1d:5f:7b:bf:ba:c6: 5d:63:45:d2:3f:1a:f8:2f:9b:b7:b6:12:16:41:f3:15:fa:ac: 04:67:b8:04:ea:d0:65:b0:4c:78:03:0b:e3:f2:c7:65:2c:aa: 5b:88:1f:4f:0f:bc:a5:60:9c:da:47:e8:07:43:14:10:10:dd: 8b:e3:70:1b:e2:2a:87:6f:20:a2:b8:e3:6f:13:0f:b1:b9:62: c4:11:de:71:55:22:9d:e3:c4:1c:4a:38:6c:50:df:0b:60:67: ac:eb:c6:c3:53:de:70:6f:3a:06:20:aa:6b:ae:dc:be:be:1d: 58:2e:c1:44:ce:c3:36:10:99:f9:1f:4e:64:2a:a8:a9:ac:bb: 25:3a:d7:d3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZdewUylWbpFmtDMkMttbZUpzywIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDI0NjdCMTg4NTgzMEE5OTA4RUFFNjc5MzUzMTE2MzlC MDkwQUE3NzAeFw0yNTEyMDYxMDA2NDZaFw0yNTEyMDkxMDU3NDZaMDMxMTAvBgNV BAMTKDI4RTdFMTNGREFBODU5OUVCRjYwREZEQzdBNzc5RTI0MTFFODU3NDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDezg6U/ur27S7fcAqnTuD1WH1R 3vNoW4b22VMhgiQMOde36+EqvCCBQ312dbcRj81Mlaw0nlsidEHSrl/Oj06oVlQN eIZ9gounGnbwap3AVwCbV8uInbxWpXEYGBvJEr5p0evMmvrhdI88C7FQJKan8vV0 T31Ibwhmblku33tFOaiNL50pRQGSRZL0j5vvbdJOkuLJT9ARZE2knC0V0lzoiJbO LulNNFQJ7H2v8tqoBACVVJIgy+U78Odf2GkwUEMFF/IHMuL8AqfI4/Zfs9D7XBk3 gp1ryZzlOvrxJxX+k03qwlEMRhxeap338a5/Gb3mvDogpBccM8lzVQ4xOUbrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKOfhP9qoWZ6/YN/ceneeJBHoV0cwHwYDVR0j BBgwFoAUQkZ7GIWDCpkI6uZ5NTEWObCQqncwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZWUyMDg4YS1jOWZmLTRkODQtYmU0ZS0xNDFkNWI4MGI1NDMvMC80MjQ2N0IxODg1 ODMwQTk5MDhFQUU2NzkzNTMxMTYzOUIwOTBBQTc3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDI0NjdCMTg4NTgzMEE5OTA4RUFFNjc5MzUzMTE2MzlCMDkw QUE3Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWVlMjA4OGEtYzlmZi00ZDg0LWJl NGUtMTQxZDViODBiNTQzLzAvNDI0NjdCMTg4NTgzMEE5OTA4RUFFNjc5MzUzMTE2 MzlCMDkwQUE3Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHayRzPT+dE/A+ISTIW7stYNOIX9kWO4/SCO McOFpMYd0GqJrbmMRo7VPHVX6EekeAzAH2RohXkj03f1JLy2D6pOE1Asnxus80vh tXL3QiU/YhFFqqYzcNn+wFoZv+ytEJOG/4SILUplBVYc1V+OLAQG0wrtx/1jnh1f e7+6xl1jRdI/Gvgvm7e2EhZB8xX6rARnuATq0GWwTHgDC+Pyx2UsqluIH08PvKVg nNpH6AdDFBAQ3YvjcBviKodvIKK4428TD7G5YsQR3nFVIp3jxBxKOGxQ3wtgZ6zr xsNT3nBvOgYgqmuu3L6+HVguwUTOwzYQmfkfTmQqqKmsuyU619M= -----END CERTIFICATE-----Generated at Sun Dec 7 04:35:17 2025 by rpki-client