This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/51292911-da7d-4636-b153-02a4b66205b5/0/42CD38BF795E0099BD3E143DD8383778ADEAE850.mft File: 42CD38BF795E0099BD3E143DD8383778ADEAE850.mft (raw, json) Hash identifier: eiHsoe+ktmVMtGJ97nx3YQhDtT3kUmbfPXyVbK93yYA= Subject key identifier: 8F:E8:7C:59:32:0F:93:7B:A6:EE:BF:7E:6D:98:9A:01:16:57:A6:71 Authority key identifier: 42:CD:38:BF:79:5E:00:99:BD:3E:14:3D:D8:38:37:78:AD:EA:E8:50 Certificate issuer: /CN=42CD38BF795E0099BD3E143DD8383778ADEAE850 Certificate serial: 052B12521521B74168FBF60CE3A592F24FE34C4D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42CD38BF795E0099BD3E143DD8383778ADEAE850.cer Subject info access: rsync://repo-rpki.idnic.net/repo/51292911-da7d-4636-b153-02a4b66205b5/0/42CD38BF795E0099BD3E143DD8383778ADEAE850.mft Manifest number: 04F9 Signing time: Tue 02 Dec 2025 10:21:58 +0000 Manifest this update: Tue 02 Dec 2025 10:16:58 +0000 Manifest next update: Fri 05 Dec 2025 19:59:58 +0000 Files and hashes: 1: 3130332e3135382e39372e302f32342d3234203d3e20313431313330.roa (hash: EWWFrGWk8wRtOz9/UzZazsAdPEBVpBh7hezsdiFevxg=) 2: 42CD38BF795E0099BD3E143DD8383778ADEAE850.crl (hash: WGy1wOnQwAXqK1nrRMsWbtYD2UpNIYroDg5zvHFOJMw=) 3: 3130332e3135382e39362e302f32342d3234203d3e20313431313330.roa (hash: QMIo9UWJEyfgKZ8vcrZkyTvmeP7BIt+ZlmY9Lk3KGaA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/51292911-da7d-4636-b153-02a4b66205b5/0/42CD38BF795E0099BD3E143DD8383778ADEAE850.crl rsync://repo-rpki.idnic.net/repo/51292911-da7d-4636-b153-02a4b66205b5/0/42CD38BF795E0099BD3E143DD8383778ADEAE850.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42CD38BF795E0099BD3E143DD8383778ADEAE850.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 19:59:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:2b:12:52:15:21:b7:41:68:fb:f6:0c:e3:a5:92:f2:4f:e3:4c:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42CD38BF795E0099BD3E143DD8383778ADEAE850 Validity Not Before: Dec 2 10:16:58 2025 GMT Not After : Dec 5 19:59:58 2025 GMT Subject: CN=8FE87C59320F937BA6EEBF7E6D989A011657A671 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:c6:39:f6:91:79:8f:0a:86:58:38:5a:ea:df: 2a:0d:89:22:59:17:98:aa:a9:16:6a:c4:2b:ce:91: 88:1f:8f:93:a0:2b:d6:bb:b5:a9:aa:4a:d8:ad:33: 50:c6:63:f7:a3:c1:4d:3d:99:1c:7b:78:73:3c:e3: 0f:3a:79:45:58:31:d8:b8:42:a3:e5:61:22:38:78: 50:c2:95:ab:07:5e:30:75:cd:bf:c9:0e:29:a5:98: c8:30:a1:f6:1c:00:ba:c5:25:af:e6:10:02:80:6d: 4c:ff:c7:97:5f:74:26:c2:eb:3d:dd:5f:77:80:62: 19:17:83:7d:62:6c:4d:3e:53:75:89:58:3c:fb:9c: 48:02:52:5c:f3:7a:48:29:72:27:38:96:88:f8:c3: 9b:32:8e:e4:b8:b0:b2:8f:45:c2:48:23:39:65:dd: aa:25:c4:be:94:9e:a6:39:74:a5:e0:58:90:f2:69: cb:9f:71:2d:a2:69:a8:2d:fe:31:27:0c:35:5c:cf: 47:5d:09:99:6a:1a:3a:20:ed:a1:df:1b:d0:ac:a5: 8d:49:2a:16:b5:0a:f4:0d:9d:f1:fb:6d:52:63:5a: 84:6f:1c:f4:aa:fc:c7:56:b1:eb:9c:3d:f4:47:4f: 68:46:b5:b7:ab:f4:16:94:29:d2:9e:f1:11:ca:5a: 41:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:E8:7C:59:32:0F:93:7B:A6:EE:BF:7E:6D:98:9A:01:16:57:A6:71 X509v3 Authority Key Identifier: keyid:42:CD:38:BF:79:5E:00:99:BD:3E:14:3D:D8:38:37:78:AD:EA:E8:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/51292911-da7d-4636-b153-02a4b66205b5/0/42CD38BF795E0099BD3E143DD8383778ADEAE850.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42CD38BF795E0099BD3E143DD8383778ADEAE850.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/51292911-da7d-4636-b153-02a4b66205b5/0/42CD38BF795E0099BD3E143DD8383778ADEAE850.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:1d:a3:02:f7:cc:2b:18:d5:0f:84:1d:17:1e:d5:be:d3:2c: 7d:7e:b4:9d:a2:5c:85:5c:f6:bd:0f:e5:7f:06:e0:4e:b3:52: ba:54:15:63:6f:22:d7:a1:85:d9:03:c6:c4:1e:9b:e4:78:79: 2a:b9:61:8f:8d:21:59:c9:08:d1:08:4c:4c:05:46:8f:8c:4c: 6f:66:b0:5e:13:66:ed:52:e4:c1:b3:0f:14:80:69:9f:22:8a: 2c:9d:44:23:b1:b0:e3:29:71:49:d5:4f:0c:63:27:ea:a4:61: 18:51:d3:6a:68:1e:17:28:5b:db:9d:34:c2:70:92:aa:5f:09: 3a:3b:ca:e0:cb:08:98:be:de:4d:5c:24:8a:6d:62:cf:8d:50: e7:c3:a5:f7:5c:41:a5:4b:3f:26:17:44:9e:4d:90:ce:c6:24: f5:6d:0d:f7:d6:c4:55:bf:f3:1c:78:a3:30:41:f1:bf:16:16: d0:12:9a:44:20:96:53:a4:4b:e4:cf:95:da:8d:05:a4:d7:6c: 06:5e:39:af:c9:72:6d:1a:29:03:71:16:f9:37:59:05:48:ec: e1:cb:b2:59:ca:b9:10:ab:db:66:9d:12:a2:96:62:db:71:03: a7:77:29:69:84:ba:ce:a5:b2:a1:d2:f5:41:6f:f4:d4:15:d5: a2:86:e3:15 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBSsSUhUht0Fo+/YM46WS8k/jTE0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDJDRDM4QkY3OTVFMDA5OUJEM0UxNDNERDgzODM3NzhB REVBRTg1MDAeFw0yNTEyMDIxMDE2NThaFw0yNTEyMDUxOTU5NThaMDMxMTAvBgNV BAMTKDhGRTg3QzU5MzIwRjkzN0JBNkVFQkY3RTZEOTg5QTAxMTY1N0E2NzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfxjn2kXmPCoZYOFrq3yoNiSJZ F5iqqRZqxCvOkYgfj5OgK9a7tamqStitM1DGY/ejwU09mRx7eHM84w86eUVYMdi4 QqPlYSI4eFDClasHXjB1zb/JDimlmMgwofYcALrFJa/mEAKAbUz/x5dfdCbC6z3d X3eAYhkXg31ibE0+U3WJWDz7nEgCUlzzekgpcic4loj4w5syjuS4sLKPRcJIIzll 3aolxL6UnqY5dKXgWJDyacufcS2iaagt/jEnDDVcz0ddCZlqGjog7aHfG9CspY1J Kha1CvQNnfH7bVJjWoRvHPSq/MdWseucPfRHT2hGtber9BaUKdKe8RHKWkG3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUj+h8WTIPk3um7r9+bZiaARZXpnEwHwYDVR0j BBgwFoAUQs04v3leAJm9PhQ92Dg3eK3q6FAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MTI5MjkxMS1kYTdkLTQ2MzYtYjE1My0wMmE0YjY2MjA1YjUvMC80MkNEMzhCRjc5 NUUwMDk5QkQzRTE0M0REODM4Mzc3OEFERUFFODUwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDJDRDM4QkY3OTVFMDA5OUJEM0UxNDNERDgzODM3NzhBREVB RTg1MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTEyOTI5MTEtZGE3ZC00NjM2LWIx NTMtMDJhNGI2NjIwNWI1LzAvNDJDRDM4QkY3OTVFMDA5OUJEM0UxNDNERDgzODM3 NzhBREVBRTg1MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKkdowL3zCsY1Q+EHRce1b7TLH1+tJ2iXIVc 9r0P5X8G4E6zUrpUFWNvItehhdkDxsQem+R4eSq5YY+NIVnJCNEITEwFRo+MTG9m sF4TZu1S5MGzDxSAaZ8iiiydRCOxsOMpcUnVTwxjJ+qkYRhR02poHhcoW9udNMJw kqpfCTo7yuDLCJi+3k1cJIptYs+NUOfDpfdcQaVLPyYXRJ5NkM7GJPVtDffWxFW/ 8xx4ozBB8b8WFtASmkQgllOkS+TPldqNBaTXbAZeOa/Jcm0aKQNxFvk3WQVI7OHL slnKuRCr22adEqKWYttxA6d3KWmEus6lsqHS9UFv9NQV1aKG4xU= -----END CERTIFICATE-----Generated at Wed Dec 3 16:37:07 2025 by rpki-client