This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/f418dea2-a891-49ef-a06f-fe7f2c83258b/0/42199169944ED22D1FEACFCC408FAEE536FBB6AF.mft File: 42199169944ED22D1FEACFCC408FAEE536FBB6AF.mft (raw, json) Hash identifier: zZQUOdVQHE6jf8yu8r/EY7jqevYiWCDPPhDCaaA9veI= Subject key identifier: 90:DA:BD:59:AC:F2:74:27:87:A8:FC:79:70:A3:FC:B2:A2:BF:9A:DC Authority key identifier: 42:19:91:69:94:4E:D2:2D:1F:EA:CF:CC:40:8F:AE:E5:36:FB:B6:AF Certificate issuer: /CN=42199169944ED22D1FEACFCC408FAEE536FBB6AF Certificate serial: 4638152398A90F667B0CE5AB974E1A0DD8626605 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42199169944ED22D1FEACFCC408FAEE536FBB6AF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f418dea2-a891-49ef-a06f-fe7f2c83258b/0/42199169944ED22D1FEACFCC408FAEE536FBB6AF.mft Manifest number: 01C0 Signing time: Wed 03 Dec 2025 23:01:16 +0000 Manifest this update: Wed 03 Dec 2025 22:56:16 +0000 Manifest next update: Sun 07 Dec 2025 05:43:16 +0000 Files and hashes: 1: 42199169944ED22D1FEACFCC408FAEE536FBB6AF.crl (hash: mrZvfLPEOa0AQ4XiVKwKVFCTkKIbIHxF8bmjie2Oy5U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f418dea2-a891-49ef-a06f-fe7f2c83258b/0/42199169944ED22D1FEACFCC408FAEE536FBB6AF.crl rsync://repo-rpki.idnic.net/repo/f418dea2-a891-49ef-a06f-fe7f2c83258b/0/42199169944ED22D1FEACFCC408FAEE536FBB6AF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42199169944ED22D1FEACFCC408FAEE536FBB6AF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Dec 2025 05:43:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:38:15:23:98:a9:0f:66:7b:0c:e5:ab:97:4e:1a:0d:d8:62:66:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42199169944ED22D1FEACFCC408FAEE536FBB6AF Validity Not Before: Dec 3 22:56:16 2025 GMT Not After : Dec 7 05:43:16 2025 GMT Subject: CN=90DABD59ACF2742787A8FC7970A3FCB2A2BF9ADC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:47:ec:18:f9:fd:5d:b0:f3:d8:eb:2e:02:a3: a8:a0:95:28:5b:7f:49:b8:bb:1d:8d:ec:74:53:b5: 99:ba:d2:3f:ed:28:39:e6:b4:bd:9b:f2:1e:73:12: 75:2e:e6:62:8a:08:b2:1e:58:22:fb:55:2a:63:d0: 39:ed:95:37:41:be:5d:f9:5b:ad:ba:08:db:5a:a1: 86:af:9f:87:68:10:91:c6:ac:3c:05:6d:f2:84:b5: 5d:da:02:df:49:60:ce:1c:36:2a:8e:71:33:32:9d: 9e:7b:68:38:f4:b3:3e:1c:9d:fb:ff:e8:33:73:0b: c5:de:91:e3:7d:c8:6e:e4:93:87:e3:e9:f4:b1:97: 25:6d:41:35:70:87:21:14:8e:c6:cc:c5:81:1e:70: 0d:79:e5:47:43:f4:18:90:38:dc:d5:14:1f:4c:e5: 2e:4d:24:7d:33:c5:98:2b:f4:6a:02:89:81:43:6a: 59:7f:06:a9:82:62:e7:87:12:43:ec:41:30:31:2b: 93:a4:8b:8c:ac:ec:28:19:c9:c1:23:61:b7:96:44: ea:99:ce:d4:70:77:d4:a6:cf:b2:24:1b:2b:d7:84: f7:44:74:16:ad:f3:f0:8d:4f:ee:01:58:23:3e:29: 9a:f2:a3:8f:cd:1a:7f:e7:ef:bd:95:82:c6:e1:ff: a8:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:DA:BD:59:AC:F2:74:27:87:A8:FC:79:70:A3:FC:B2:A2:BF:9A:DC X509v3 Authority Key Identifier: keyid:42:19:91:69:94:4E:D2:2D:1F:EA:CF:CC:40:8F:AE:E5:36:FB:B6:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f418dea2-a891-49ef-a06f-fe7f2c83258b/0/42199169944ED22D1FEACFCC408FAEE536FBB6AF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42199169944ED22D1FEACFCC408FAEE536FBB6AF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f418dea2-a891-49ef-a06f-fe7f2c83258b/0/42199169944ED22D1FEACFCC408FAEE536FBB6AF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:eb:72:13:cb:ed:c0:6c:86:74:67:b4:1a:ab:6c:34:9f:2e: d9:28:21:aa:a9:36:cc:56:a1:6e:41:8e:f7:14:3c:7a:49:ad: 8c:85:3b:97:dc:65:f5:e4:a8:67:9d:0c:e6:dd:05:88:55:39: 2d:48:62:63:21:5a:3a:fc:46:d7:d2:3a:70:01:2b:bc:b5:6d: c8:7e:80:2a:13:07:c6:38:c8:49:28:2f:c2:80:4a:28:ad:f2: 71:84:56:b4:7b:e6:6d:55:5d:d1:df:cc:f0:5c:30:12:d0:9e: 1c:d2:8d:11:22:52:58:04:c4:9b:10:95:20:e2:f3:77:09:6e: 0a:12:55:d2:15:18:4c:71:f7:a8:c7:c7:f7:e9:d7:17:8c:19: dd:19:6e:ce:91:55:12:5f:5a:55:6a:9a:e6:cb:41:88:eb:89: 4b:03:c4:a9:18:36:74:4b:09:61:dc:42:e0:d7:df:7a:30:67: fc:dd:12:58:43:36:0a:fb:34:ff:dd:d5:bd:ec:4c:23:b5:19: ee:6a:9e:11:ac:e6:46:e3:3d:b2:ee:26:76:63:20:53:e4:9a: 1a:32:6e:80:a2:c8:2a:5d:b1:a2:37:ac:38:60:f6:ec:50:84: 57:43:1e:7c:d9:87:49:e0:3b:92:13:e0:8d:8a:6c:7f:cd:74: df:09:d8:01 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURjgVI5ipD2Z7DOWrl04aDdhiZgUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDIxOTkxNjk5NDRFRDIyRDFGRUFDRkNDNDA4RkFFRTUz NkZCQjZBRjAeFw0yNTEyMDMyMjU2MTZaFw0yNTEyMDcwNTQzMTZaMDMxMTAvBgNV BAMTKDkwREFCRDU5QUNGMjc0Mjc4N0E4RkM3OTcwQTNGQ0IyQTJCRjlBREMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdR+wY+f1dsPPY6y4Co6iglShb f0m4ux2N7HRTtZm60j/tKDnmtL2b8h5zEnUu5mKKCLIeWCL7VSpj0DntlTdBvl35 W626CNtaoYavn4doEJHGrDwFbfKEtV3aAt9JYM4cNiqOcTMynZ57aDj0sz4cnfv/ 6DNzC8XekeN9yG7kk4fj6fSxlyVtQTVwhyEUjsbMxYEecA155UdD9BiQONzVFB9M 5S5NJH0zxZgr9GoCiYFDall/BqmCYueHEkPsQTAxK5Oki4ys7CgZycEjYbeWROqZ ztRwd9Smz7IkGyvXhPdEdBat8/CNT+4BWCM+KZryo4/NGn/n772Vgsbh/6j3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkNq9WazydCeHqPx5cKP8sqK/mtwwHwYDVR0j BBgwFoAUQhmRaZRO0i0f6s/MQI+u5Tb7tq8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NDE4ZGVhMi1hODkxLTQ5ZWYtYTA2Zi1mZTdmMmM4MzI1OGIvMC80MjE5OTE2OTk0 NEVEMjJEMUZFQUNGQ0M0MDhGQUVFNTM2RkJCNkFGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDIxOTkxNjk5NDRFRDIyRDFGRUFDRkNDNDA4RkFFRTUzNkZC QjZBRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjQxOGRlYTItYTg5MS00OWVmLWEw NmYtZmU3ZjJjODMyNThiLzAvNDIxOTkxNjk5NDRFRDIyRDFGRUFDRkNDNDA4RkFF RTUzNkZCQjZBRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIbrchPL7cBshnRntBqrbDSfLtkoIaqpNsxW oW5BjvcUPHpJrYyFO5fcZfXkqGedDObdBYhVOS1IYmMhWjr8RtfSOnABK7y1bch+ gCoTB8Y4yEkoL8KASiit8nGEVrR75m1VXdHfzPBcMBLQnhzSjREiUlgExJsQlSDi 83cJbgoSVdIVGExx96jHx/fp1xeMGd0Zbs6RVRJfWlVqmubLQYjriUsDxKkYNnRL CWHcQuDX33owZ/zdElhDNgr7NP/d1b3sTCO1Ge5qnhGs5kbjPbLuJnZjIFPkmhoy boCiyCpdsaI3rDhg9uxQhFdDHnzZh0ngO5IT4I2KbH/NdN8J2AE= -----END CERTIFICATE-----Generated at Sun Dec 7 03:28:09 2025 by rpki-client