This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/37b33412-be5b-463e-8233-9eab848a5976/0/F42062F52121FB3EF6D96AC88F6B88347E4607E7.mft File: F42062F52121FB3EF6D96AC88F6B88347E4607E7.mft (raw, json) Hash identifier: 4lhxi6SO5a0CQCVP5DN7NwUODcxIOlYPdcCr9zBSlIY= Subject key identifier: BE:D5:28:68:A2:9B:51:54:89:62:61:3A:9D:38:16:CF:EB:04:FD:DF Authority key identifier: F4:20:62:F5:21:21:FB:3E:F6:D9:6A:C8:8F:6B:88:34:7E:46:07:E7 Certificate issuer: /CN=F42062F52121FB3EF6D96AC88F6B88347E4607E7 Certificate serial: 77F64AC2B69DF56A974F643FAB30886CA3D46D02 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F42062F52121FB3EF6D96AC88F6B88347E4607E7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/37b33412-be5b-463e-8233-9eab848a5976/0/F42062F52121FB3EF6D96AC88F6B88347E4607E7.mft Manifest number: 04DF Signing time: Tue 02 Dec 2025 08:01:10 +0000 Manifest this update: Tue 02 Dec 2025 07:56:10 +0000 Manifest next update: Fri 05 Dec 2025 19:21:10 +0000 Files and hashes: 1: F42062F52121FB3EF6D96AC88F6B88347E4607E7.crl (hash: AJ7+C7Or8cbhrAv+1qw6VGgJ8y2JRxyiOM+hoMbbIWg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/37b33412-be5b-463e-8233-9eab848a5976/0/F42062F52121FB3EF6D96AC88F6B88347E4607E7.crl rsync://repo-rpki.idnic.net/repo/37b33412-be5b-463e-8233-9eab848a5976/0/F42062F52121FB3EF6D96AC88F6B88347E4607E7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F42062F52121FB3EF6D96AC88F6B88347E4607E7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 19:21:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:f6:4a:c2:b6:9d:f5:6a:97:4f:64:3f:ab:30:88:6c:a3:d4:6d:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F42062F52121FB3EF6D96AC88F6B88347E4607E7 Validity Not Before: Dec 2 07:56:10 2025 GMT Not After : Dec 5 19:21:10 2025 GMT Subject: CN=BED52868A29B51548962613A9D3816CFEB04FDDF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:60:9b:7e:87:3c:7a:5d:15:d9:31:a9:b0:f4: 1a:e6:31:59:13:d5:01:27:30:91:05:02:c1:85:10: 4e:7e:17:58:b3:d6:b4:b5:20:0b:93:90:c2:87:e2: 07:67:cb:50:ab:35:8e:cc:c3:7d:19:cf:e7:68:16: 15:6e:c7:0f:53:f5:95:76:77:a2:65:4f:80:ea:ce: 7f:06:fa:04:e1:bd:80:77:df:f4:69:14:4e:5b:48: 8a:a9:a1:61:95:45:e9:46:e0:cb:2f:b4:87:b9:9a: dd:0b:af:9c:6a:4c:ca:26:cb:76:eb:87:a8:63:c4: 4d:a0:7e:8b:19:13:37:41:6d:1f:e1:d2:ac:b3:bc: 55:dc:da:36:b7:97:d3:d2:73:45:17:88:fb:85:f5: dd:b9:96:23:18:81:62:e1:c7:23:af:43:c4:72:47: 1e:0f:38:56:60:dd:e9:9c:4d:8f:37:b6:f2:da:43: 75:74:75:8d:31:eb:ca:3f:fb:84:16:9a:58:43:62: f9:3f:35:02:9b:1a:c3:93:1b:95:db:14:81:0b:45: 87:f6:de:96:d1:4e:80:66:ee:ea:95:eb:79:ad:bb: 36:45:e3:ab:59:ed:39:71:cc:33:5d:40:53:77:0d: 12:ba:4b:24:76:fc:b8:b7:b8:f1:18:d6:39:58:b9: 35:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:D5:28:68:A2:9B:51:54:89:62:61:3A:9D:38:16:CF:EB:04:FD:DF X509v3 Authority Key Identifier: keyid:F4:20:62:F5:21:21:FB:3E:F6:D9:6A:C8:8F:6B:88:34:7E:46:07:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/37b33412-be5b-463e-8233-9eab848a5976/0/F42062F52121FB3EF6D96AC88F6B88347E4607E7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F42062F52121FB3EF6D96AC88F6B88347E4607E7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/37b33412-be5b-463e-8233-9eab848a5976/0/F42062F52121FB3EF6D96AC88F6B88347E4607E7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:8f:b2:78:14:88:e7:67:8c:e5:b1:2c:32:30:b3:e0:f4:f1: 8d:3f:30:f5:84:12:ee:c4:46:ef:d7:a4:d5:d4:63:ef:9a:9a: 60:28:95:66:39:b0:a7:a1:77:ef:a4:bf:43:14:c9:29:ef:37: af:fe:29:00:9f:74:cd:62:30:c5:07:ec:53:78:75:c3:46:1c: ae:94:ab:31:f4:54:74:75:f5:0f:ad:e1:3d:53:fd:61:c5:d0: af:27:8d:9b:4a:56:20:28:c8:b4:87:46:6e:5e:c9:25:a0:96: 2e:d1:13:9f:4c:1a:cb:7e:58:9d:3e:e9:06:86:72:73:2b:3c: f7:63:14:fd:d2:44:e2:82:55:56:16:be:4f:01:2e:78:0c:49: 11:d1:72:6d:cb:89:78:38:f2:23:fa:bc:63:3a:73:09:3b:0e: 51:da:94:9b:01:72:ab:48:af:ca:ba:e6:06:83:51:aa:c3:1f: 23:d0:8b:8a:56:e4:cc:04:b3:bc:ad:1b:f8:fb:18:64:68:26: 8a:32:06:25:4b:13:3f:72:b0:2e:1c:61:a3:fa:f2:eb:c7:fb: 34:7c:b0:5a:6e:2b:bc:12:45:af:a6:35:04:1e:6d:e9:23:6c: 28:ec:73:dc:9e:52:71:e4:ba:d1:fd:ad:da:73:4d:6b:4b:e5: 53:02:ac:78 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUd/ZKwrad9WqXT2Q/qzCIbKPUbQIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjQyMDYyRjUyMTIxRkIzRUY2RDk2QUM4OEY2Qjg4MzQ3 RTQ2MDdFNzAeFw0yNTEyMDIwNzU2MTBaFw0yNTEyMDUxOTIxMTBaMDMxMTAvBgNV BAMTKEJFRDUyODY4QTI5QjUxNTQ4OTYyNjEzQTlEMzgxNkNGRUIwNEZEREYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrYJt+hzx6XRXZMamw9BrmMVkT 1QEnMJEFAsGFEE5+F1iz1rS1IAuTkMKH4gdny1CrNY7Mw30Zz+doFhVuxw9T9ZV2 d6JlT4Dqzn8G+gThvYB33/RpFE5bSIqpoWGVRelG4MsvtIe5mt0Lr5xqTMomy3br h6hjxE2gfosZEzdBbR/h0qyzvFXc2ja3l9PSc0UXiPuF9d25liMYgWLhxyOvQ8Ry Rx4POFZg3emcTY83tvLaQ3V0dY0x68o/+4QWmlhDYvk/NQKbGsOTG5XbFIELRYf2 3pbRToBm7uqV63mtuzZF46tZ7TlxzDNdQFN3DRK6SyR2/Li3uPEY1jlYuTU7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvtUoaKKbUVSJYmE6nTgWz+sE/d8wHwYDVR0j BBgwFoAU9CBi9SEh+z722WrIj2uINH5GB+cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z N2IzMzQxMi1iZTViLTQ2M2UtODIzMy05ZWFiODQ4YTU5NzYvMC9GNDIwNjJGNTIx MjFGQjNFRjZEOTZBQzg4RjZCODgzNDdFNDYwN0U3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjQyMDYyRjUyMTIxRkIzRUY2RDk2QUM4OEY2Qjg4MzQ3RTQ2 MDdFNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzdiMzM0MTItYmU1Yi00NjNlLTgy MzMtOWVhYjg0OGE1OTc2LzAvRjQyMDYyRjUyMTIxRkIzRUY2RDk2QUM4OEY2Qjg4 MzQ3RTQ2MDdFNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAISPsngUiOdnjOWxLDIws+D08Y0/MPWEEu7E Ru/XpNXUY++ammAolWY5sKehd++kv0MUySnvN6/+KQCfdM1iMMUH7FN4dcNGHK6U qzH0VHR19Q+t4T1T/WHF0K8njZtKViAoyLSHRm5eySWgli7RE59MGst+WJ0+6QaG cnMrPPdjFP3SROKCVVYWvk8BLngMSRHRcm3LiXg48iP6vGM6cwk7DlHalJsBcqtI r8q65gaDUarDHyPQi4pW5MwEs7ytG/j7GGRoJooyBiVLEz9ysC4cYaP68uvH+zR8 sFpuK7wSRa+mNQQebekjbCjsc9yeUnHkutH9rdpzTWtL5VMCrHg= -----END CERTIFICATE-----Generated at Wed Dec 3 13:56:40 2025 by rpki-client