This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/f9003d6c-95f1-47a4-9d5d-f7b48caaa7f4/0/42CB30013F9704EFBDCF784FCD60289C7620A373.mft File: 42CB30013F9704EFBDCF784FCD60289C7620A373.mft (raw, json) Hash identifier: cTdHZdwPtqqruU+gUkuHgi3QoQgYtYvnT9ucdT3IT6I= Subject key identifier: AE:EC:37:31:51:35:47:BA:B2:E4:AC:52:BD:D7:43:0C:EB:6E:72:03 Authority key identifier: 42:CB:30:01:3F:97:04:EF:BD:CF:78:4F:CD:60:28:9C:76:20:A3:73 Certificate issuer: /CN=42CB30013F9704EFBDCF784FCD60289C7620A373 Certificate serial: 76D6AA06087BE6DB475C42EF9934225A4392B02C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42CB30013F9704EFBDCF784FCD60289C7620A373.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f9003d6c-95f1-47a4-9d5d-f7b48caaa7f4/0/42CB30013F9704EFBDCF784FCD60289C7620A373.mft Manifest number: 03A5 Signing time: Fri 05 Dec 2025 12:21:16 +0000 Manifest this update: Fri 05 Dec 2025 12:16:16 +0000 Manifest next update: Mon 08 Dec 2025 20:15:16 +0000 Files and hashes: 1: 3130332e3136392e3133352e302f32342d3234203d3e20313432333338.roa (hash: tZygjXNqZieNjL+HqAvvCVSbJQiTp3/pMsS78j175rQ=) 2: 3130332e3136392e3133342e302f32342d3234203d3e20313432333338.roa (hash: hMyDLqAom528DiTqwsKMUbv/O7C6Y2ZAhArZmLvzcpE=) 3: 42CB30013F9704EFBDCF784FCD60289C7620A373.crl (hash: kX35xVVBvkngQXJu3QrdMfOSlkMnICK4g/CnL3lFZ5I=) 4: 3130332e3136392e3133342e302f32332d3233203d3e20313432333338.roa (hash: PLelRX92KnqBZTiq93z7FJFIC0ok4NpLF8ErJ3rGKfw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f9003d6c-95f1-47a4-9d5d-f7b48caaa7f4/0/42CB30013F9704EFBDCF784FCD60289C7620A373.crl rsync://repo-rpki.idnic.net/repo/f9003d6c-95f1-47a4-9d5d-f7b48caaa7f4/0/42CB30013F9704EFBDCF784FCD60289C7620A373.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42CB30013F9704EFBDCF784FCD60289C7620A373.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 20:15:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:d6:aa:06:08:7b:e6:db:47:5c:42:ef:99:34:22:5a:43:92:b0:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42CB30013F9704EFBDCF784FCD60289C7620A373 Validity Not Before: Dec 5 12:16:16 2025 GMT Not After : Dec 8 20:15:16 2025 GMT Subject: CN=AEEC3731513547BAB2E4AC52BDD7430CEB6E7203 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:65:6c:ad:a1:9f:cc:13:b1:d2:7f:ed:bc:d9: 8d:de:e6:28:77:a0:54:b4:c8:45:78:ec:16:bf:38: db:98:39:09:2d:56:ba:d3:e7:31:96:b7:9b:30:1c: 9f:4a:f6:13:ab:d0:c5:d3:7a:ae:06:c1:34:66:03: 23:6f:cc:16:28:81:7c:60:bf:bb:f3:f0:7f:ce:bb: 98:d9:d6:2f:3f:b8:bc:40:0d:c2:49:3d:4a:33:f6: e0:3c:49:fd:67:c5:0d:08:9c:dd:81:56:e7:a7:af: c2:17:91:be:b7:b2:10:b8:2e:c7:df:d0:5b:a3:b8: ad:59:63:9e:a5:a1:6e:32:d4:e5:34:75:98:05:fb: 78:86:87:8c:30:77:ca:92:a8:9d:b7:3f:73:41:9d: e4:86:c5:bf:37:55:0b:f6:13:92:8f:68:2c:c8:a5: 6d:0f:f3:d7:29:57:fb:27:1f:46:c1:d0:a8:34:bb: 3d:7f:0f:a9:fe:51:38:e6:d3:64:6e:75:ee:a3:41: 4f:f5:94:20:f9:51:dc:48:6e:d9:11:6b:28:c1:42: 75:66:73:df:9c:c8:c3:53:06:7f:fb:a0:84:55:d5: 8a:1c:44:2b:64:85:25:fb:86:60:04:ca:93:2c:84: ab:a6:a5:5f:c1:66:da:2a:89:a6:ba:9a:eb:d4:4d: 38:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:EC:37:31:51:35:47:BA:B2:E4:AC:52:BD:D7:43:0C:EB:6E:72:03 X509v3 Authority Key Identifier: keyid:42:CB:30:01:3F:97:04:EF:BD:CF:78:4F:CD:60:28:9C:76:20:A3:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f9003d6c-95f1-47a4-9d5d-f7b48caaa7f4/0/42CB30013F9704EFBDCF784FCD60289C7620A373.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42CB30013F9704EFBDCF784FCD60289C7620A373.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f9003d6c-95f1-47a4-9d5d-f7b48caaa7f4/0/42CB30013F9704EFBDCF784FCD60289C7620A373.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:a9:09:04:19:56:ae:dc:d7:2d:4a:8c:c7:45:51:aa:6b:ff: fc:4e:c1:44:7f:ab:f6:df:15:4c:55:f5:ea:ee:51:81:4d:ac: ac:b5:54:9c:20:e5:53:a0:ec:b0:e0:9e:42:b7:cb:75:a4:de: bf:57:8e:79:af:78:a3:e3:ad:5a:3a:bc:01:04:4d:49:7b:9e: dc:d6:ec:33:2c:b9:54:15:0f:96:d5:c4:e9:12:d9:48:74:7d: f0:98:90:61:37:fb:78:17:4e:8b:da:c1:d1:28:47:8b:56:e9: 88:33:fa:09:9d:5f:5c:8f:30:3c:cb:46:4c:78:5c:e4:cc:a1: b4:52:13:52:51:94:b2:a1:c4:7b:2d:c3:d8:0b:da:fd:13:eb: 0d:5a:08:28:f7:e7:eb:87:65:6f:e9:5a:32:d6:5c:dc:fd:3c: d7:a3:c6:d3:9b:a6:47:cc:c6:01:12:93:fd:5d:c3:48:7d:a7: 06:6a:da:0f:3e:5b:41:c6:bb:c2:4c:67:b1:c4:99:93:d1:7c: c2:9b:3f:7c:40:c6:c9:b6:b3:46:86:50:b8:f6:cb:19:f9:87: 8b:71:be:01:d9:22:3c:bc:51:81:8f:eb:12:27:f5:44:9b:5f: 70:e7:e9:07:74:a7:9c:48:16:dc:44:03:52:b7:5d:11:3a:10: 39:03:ce:67 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdtaqBgh75ttHXELvmTQiWkOSsCwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDJDQjMwMDEzRjk3MDRFRkJEQ0Y3ODRGQ0Q2MDI4OUM3 NjIwQTM3MzAeFw0yNTEyMDUxMjE2MTZaFw0yNTEyMDgyMDE1MTZaMDMxMTAvBgNV BAMTKEFFRUMzNzMxNTEzNTQ3QkFCMkU0QUM1MkJERDc0MzBDRUI2RTcyMDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSZWytoZ/ME7HSf+282Y3e5ih3 oFS0yEV47Ba/ONuYOQktVrrT5zGWt5swHJ9K9hOr0MXTeq4GwTRmAyNvzBYogXxg v7vz8H/Ou5jZ1i8/uLxADcJJPUoz9uA8Sf1nxQ0InN2BVuenr8IXkb63shC4Lsff 0FujuK1ZY56loW4y1OU0dZgF+3iGh4wwd8qSqJ23P3NBneSGxb83VQv2E5KPaCzI pW0P89cpV/snH0bB0Kg0uz1/D6n+UTjm02Rude6jQU/1lCD5UdxIbtkRayjBQnVm c9+cyMNTBn/7oIRV1YocRCtkhSX7hmAEypMshKumpV/BZtoqiaa6muvUTTgXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUruw3MVE1R7qy5KxSvddDDOtucgMwHwYDVR0j BBgwFoAUQsswAT+XBO+9z3hPzWAonHYgo3MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m OTAwM2Q2Yy05NWYxLTQ3YTQtOWQ1ZC1mN2I0OGNhYWE3ZjQvMC80MkNCMzAwMTNG OTcwNEVGQkRDRjc4NEZDRDYwMjg5Qzc2MjBBMzczLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDJDQjMwMDEzRjk3MDRFRkJEQ0Y3ODRGQ0Q2MDI4OUM3NjIw QTM3My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjkwMDNkNmMtOTVmMS00N2E0LTlk NWQtZjdiNDhjYWFhN2Y0LzAvNDJDQjMwMDEzRjk3MDRFRkJEQ0Y3ODRGQ0Q2MDI4 OUM3NjIwQTM3My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFOpCQQZVq7c1y1KjMdFUapr//xOwUR/q/bf FUxV9eruUYFNrKy1VJwg5VOg7LDgnkK3y3Wk3r9XjnmveKPjrVo6vAEETUl7ntzW 7DMsuVQVD5bVxOkS2Uh0ffCYkGE3+3gXTovawdEoR4tW6Ygz+gmdX1yPMDzLRkx4 XOTMobRSE1JRlLKhxHstw9gL2v0T6w1aCCj35+uHZW/pWjLWXNz9PNejxtObpkfM xgESk/1dw0h9pwZq2g8+W0HGu8JMZ7HEmZPRfMKbP3xAxsm2s0aGULj2yxn5h4tx vgHZIjy8UYGP6xIn9USbX3Dn6Qd0p5xIFtxEA1K3XRE6EDkDzmc= -----END CERTIFICATE-----Generated at Sun Dec 7 08:10:18 2025 by rpki-client