This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d835cb4a-2fb9-40d7-b155-dcce7cb00293/0/A42F07BEA859C831526717AB1D092E11E7890BDD.mft File: A42F07BEA859C831526717AB1D092E11E7890BDD.mft (raw, json) Hash identifier: o+AuSbMI/w4xROnIVRwWg0YmvJa9lTo+ZpE1oDXWsuI= Subject key identifier: 89:2C:3E:04:96:F6:17:66:4F:CF:07:0B:9E:48:35:CF:6B:05:45:D5 Authority key identifier: A4:2F:07:BE:A8:59:C8:31:52:67:17:AB:1D:09:2E:11:E7:89:0B:DD Certificate issuer: /CN=A42F07BEA859C831526717AB1D092E11E7890BDD Certificate serial: 6FDE1735E2BF887E17E6EEA6D1C0A024F6A8783D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A42F07BEA859C831526717AB1D092E11E7890BDD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d835cb4a-2fb9-40d7-b155-dcce7cb00293/0/A42F07BEA859C831526717AB1D092E11E7890BDD.mft Manifest number: 01BA Signing time: Fri 05 Dec 2025 04:41:44 +0000 Manifest this update: Fri 05 Dec 2025 04:36:44 +0000 Manifest next update: Mon 08 Dec 2025 12:35:44 +0000 Files and hashes: 1: 3130332e3130392e32372e302f32342d3234203d3e20313337333131.roa (hash: r6XX55Z5GiGICbCeAD8AU4m9N2hnvF3QzH54gdTf7xc=) 2: 3130332e3130392e32342e302f32342d3234203d3e20313337333131.roa (hash: oJ+JZotG4pgzmmZEecq6pD6dBlLqMF5qvUlg8uJjk3E=) 3: A42F07BEA859C831526717AB1D092E11E7890BDD.crl (hash: I/OYRlnxuoRiRO+TcrCNJKh26L2p3WXrqR163mFx0/Q=) 4: 3130332e3130392e32352e302f32342d3234203d3e20313337333131.roa (hash: 7NKvITl62S90UpwEPzaOqbyqSHza97/1Ajqk2WKR9R8=) 5: 3130332e3130392e32362e302f32342d3234203d3e20313337333131.roa (hash: 7ElLxeF9NMId5JMzZBtmpoup1Mi3rpbDW9f/VToW4OQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d835cb4a-2fb9-40d7-b155-dcce7cb00293/0/A42F07BEA859C831526717AB1D092E11E7890BDD.crl rsync://repo-rpki.idnic.net/repo/d835cb4a-2fb9-40d7-b155-dcce7cb00293/0/A42F07BEA859C831526717AB1D092E11E7890BDD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A42F07BEA859C831526717AB1D092E11E7890BDD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 12:35:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:de:17:35:e2:bf:88:7e:17:e6:ee:a6:d1:c0:a0:24:f6:a8:78:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A42F07BEA859C831526717AB1D092E11E7890BDD Validity Not Before: Dec 5 04:36:44 2025 GMT Not After : Dec 8 12:35:44 2025 GMT Subject: CN=892C3E0496F617664FCF070B9E4835CF6B0545D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:3d:c2:c6:fc:d2:bb:c7:d4:e5:14:c8:ba:88: f0:59:36:d2:8f:68:9d:1d:54:ac:3f:d9:fe:bf:bd: ff:cd:71:a6:ad:5d:5e:14:03:92:f2:a8:f1:db:83: 9c:9c:ec:70:9d:90:9c:2b:33:4e:7e:33:f1:af:25: 67:2e:14:14:38:81:42:68:07:c3:b2:74:2b:da:87: 09:e1:eb:d2:14:f9:a6:80:d7:cb:72:d9:75:38:ef: a7:ff:aa:92:ed:5a:9c:8f:b2:09:51:05:c0:38:9c: dc:25:d6:aa:14:cd:e1:98:7b:42:ca:5a:2d:bb:5a: 6a:a8:2e:7b:5c:9f:4b:95:70:56:5d:fc:d0:a2:a3: 9b:ac:12:ab:97:22:ee:d4:92:c3:1a:2d:a0:ec:4a: ef:d7:dd:2f:43:f4:b1:5d:98:78:ee:ce:89:a7:3f: 54:3c:a0:90:2d:55:d9:73:34:dc:e3:88:72:f5:68: b8:30:12:b0:4c:57:45:fc:fa:e6:b3:72:ec:fc:5a: 1e:54:8d:b0:b7:3b:98:07:cf:9a:b2:f1:f7:92:79: d5:4a:02:65:a6:45:1e:0d:99:ef:38:18:77:9b:f7: bb:4b:6b:3e:a2:b0:24:73:35:17:fa:1b:da:0f:7f: 54:d9:ec:3a:63:3b:58:87:df:e6:b0:bb:e7:e5:fd: 0b:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:2C:3E:04:96:F6:17:66:4F:CF:07:0B:9E:48:35:CF:6B:05:45:D5 X509v3 Authority Key Identifier: keyid:A4:2F:07:BE:A8:59:C8:31:52:67:17:AB:1D:09:2E:11:E7:89:0B:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d835cb4a-2fb9-40d7-b155-dcce7cb00293/0/A42F07BEA859C831526717AB1D092E11E7890BDD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A42F07BEA859C831526717AB1D092E11E7890BDD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d835cb4a-2fb9-40d7-b155-dcce7cb00293/0/A42F07BEA859C831526717AB1D092E11E7890BDD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:9d:e4:08:32:d1:c5:26:01:79:fd:bb:e0:2c:3d:8d:1e:55: 75:3e:33:ed:db:f5:e0:ea:9a:df:6c:01:bb:28:90:6e:8f:68: 79:8a:94:fe:3f:56:3e:91:0e:86:a0:cf:53:08:80:46:16:a6: c0:32:24:0f:02:93:db:92:1d:e9:fa:53:86:23:15:32:77:4a: ee:88:67:aa:c2:6d:8d:d0:98:1d:82:69:3f:87:41:35:a6:20: b7:76:30:0e:e5:7c:0d:3e:2a:7a:a2:f2:dc:77:b5:4a:06:1a: 4e:f6:85:81:36:26:19:8e:7e:93:81:d6:33:6f:db:70:b0:a1: 5b:ad:e9:c5:20:a0:ae:e6:6d:91:77:3a:10:13:02:2e:37:cd: 10:d8:df:df:dc:28:8d:d5:cc:d8:d3:48:87:4d:24:41:5d:a9: e5:a1:d1:7c:59:75:b1:74:d0:1c:f3:41:71:e1:07:3d:ba:3f: 4c:b9:ee:7c:03:a3:48:a3:71:58:1b:c7:82:b9:dd:97:b5:cd: 4a:fd:c2:c4:ad:7d:de:f9:d4:1b:1a:66:fd:22:0c:44:49:ca: 67:95:3f:d5:8d:09:de:92:7d:42:d2:0d:60:ac:15:87:46:52: 5a:6e:8a:2e:82:4d:c3:6d:38:61:b2:29:27:e6:41:49:17:84: 88:02:f0:eb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUb94XNeK/iH4X5u6m0cCgJPaoeD0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTQyRjA3QkVBODU5QzgzMTUyNjcxN0FCMUQwOTJFMTFF Nzg5MEJERDAeFw0yNTEyMDUwNDM2NDRaFw0yNTEyMDgxMjM1NDRaMDMxMTAvBgNV BAMTKDg5MkMzRTA0OTZGNjE3NjY0RkNGMDcwQjlFNDgzNUNGNkIwNTQ1RDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUPcLG/NK7x9TlFMi6iPBZNtKP aJ0dVKw/2f6/vf/NcaatXV4UA5LyqPHbg5yc7HCdkJwrM05+M/GvJWcuFBQ4gUJo B8OydCvahwnh69IU+aaA18ty2XU476f/qpLtWpyPsglRBcA4nNwl1qoUzeGYe0LK Wi27WmqoLntcn0uVcFZd/NCio5usEquXIu7UksMaLaDsSu/X3S9D9LFdmHjuzomn P1Q8oJAtVdlzNNzjiHL1aLgwErBMV0X8+uazcuz8Wh5UjbC3O5gHz5qy8feSedVK AmWmRR4Nme84GHeb97tLaz6isCRzNRf6G9oPf1TZ7DpjO1iH3+awu+fl/Qu7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiSw+BJb2F2ZPzwcLnkg1z2sFRdUwHwYDVR0j BBgwFoAUpC8HvqhZyDFSZxerHQkuEeeJC90wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ODM1Y2I0YS0yZmI5LTQwZDctYjE1NS1kY2NlN2NiMDAyOTMvMC9BNDJGMDdCRUE4 NTlDODMxNTI2NzE3QUIxRDA5MkUxMUU3ODkwQkRELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTQyRjA3QkVBODU5QzgzMTUyNjcxN0FCMUQwOTJFMTFFNzg5 MEJERC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDgzNWNiNGEtMmZiOS00MGQ3LWIx NTUtZGNjZTdjYjAwMjkzLzAvQTQyRjA3QkVBODU5QzgzMTUyNjcxN0FCMUQwOTJF MTFFNzg5MEJERC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF+d5Agy0cUmAXn9u+AsPY0eVXU+M+3b9eDq mt9sAbsokG6PaHmKlP4/Vj6RDoagz1MIgEYWpsAyJA8Ck9uSHen6U4YjFTJ3Su6I Z6rCbY3QmB2CaT+HQTWmILd2MA7lfA0+Knqi8tx3tUoGGk72hYE2JhmOfpOB1jNv 23CwoVut6cUgoK7mbZF3OhATAi43zRDY39/cKI3VzNjTSIdNJEFdqeWh0XxZdbF0 0BzzQXHhBz26P0y57nwDo0ijcVgbx4K53Ze1zUr9wsStfd751BsaZv0iDERJymeV P9WNCd6SfULSDWCsFYdGUlpuii6CTcNtOGGyKSfmQUkXhIgC8Os= -----END CERTIFICATE-----Generated at Sun Dec 7 03:13:12 2025 by rpki-client