This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/581274af-7cd0-40af-a321-676898d58db8/0/842233D6E756BC93C0DB9A45DD2F7BCD97CB29AF.mft File: 842233D6E756BC93C0DB9A45DD2F7BCD97CB29AF.mft (raw, json) Hash identifier: wPeDjJMTJvCB0S97fgbFUVxxLWmW7lKLgavs7PuFLKo= Subject key identifier: D7:EB:9C:B4:C1:B1:9F:79:7F:28:35:A9:9B:7F:9E:B4:0F:C1:F2:F0 Authority key identifier: 84:22:33:D6:E7:56:BC:93:C0:DB:9A:45:DD:2F:7B:CD:97:CB:29:AF Certificate issuer: /CN=842233D6E756BC93C0DB9A45DD2F7BCD97CB29AF Certificate serial: 72304CCD04D57D079858848750C0C14DFCD74D75 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/842233D6E756BC93C0DB9A45DD2F7BCD97CB29AF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/581274af-7cd0-40af-a321-676898d58db8/0/842233D6E756BC93C0DB9A45DD2F7BCD97CB29AF.mft Manifest number: 014F Signing time: Wed 03 Dec 2025 10:00:47 +0000 Manifest this update: Wed 03 Dec 2025 09:55:47 +0000 Manifest next update: Sat 06 Dec 2025 18:03:47 +0000 Files and hashes: 1: 3230322e34372e3136322e302f32342d3234203d3e20313532303337.roa (hash: 8svYl0PSwXQA1Wds9/vDZkzwkfX8sX1XjqIKznjwc2w=) 2: 3230322e34372e3136332e302f32342d3234203d3e20313532303337.roa (hash: /URm5Kz+lOTj8/0VCDqZYq+wPeWuBT+Tq5QLg7+ZM+8=) 3: 842233D6E756BC93C0DB9A45DD2F7BCD97CB29AF.crl (hash: jKm0XUmttOpgXCQKYwObgf8wi77M8qYgJPWzzRO+vBo=) 4: 3230322e34372e3136322e302f32332d3233203d3e20313532303337.roa (hash: 9S64FqiohF4/G4AR4prN454MPd/66wEeqEDt9vo/F+Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/581274af-7cd0-40af-a321-676898d58db8/0/842233D6E756BC93C0DB9A45DD2F7BCD97CB29AF.crl rsync://repo-rpki.idnic.net/repo/581274af-7cd0-40af-a321-676898d58db8/0/842233D6E756BC93C0DB9A45DD2F7BCD97CB29AF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/842233D6E756BC93C0DB9A45DD2F7BCD97CB29AF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:30:4c:cd:04:d5:7d:07:98:58:84:87:50:c0:c1:4d:fc:d7:4d:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=842233D6E756BC93C0DB9A45DD2F7BCD97CB29AF Validity Not Before: Dec 3 09:55:47 2025 GMT Not After : Dec 6 18:03:47 2025 GMT Subject: CN=D7EB9CB4C1B19F797F2835A99B7F9EB40FC1F2F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:40:77:e1:19:8e:d6:cf:51:13:89:06:9e:da: 26:f0:e8:a0:cf:be:e8:d7:c7:38:d9:06:b8:d7:69: a7:44:2c:2c:2b:62:ea:f6:9b:07:c5:7f:7d:30:8a: 2a:2a:b3:f6:4d:dd:23:30:5e:f3:4d:5b:67:06:42: 8b:ce:a5:66:d2:14:8d:a8:22:90:91:63:24:16:17: b1:f1:95:d3:8b:17:bc:4f:1e:12:9b:bf:9f:83:a1: a6:fd:08:ec:ae:ea:3e:8a:4f:38:ae:28:68:31:b1: bf:bf:da:5c:2d:a1:ec:f4:78:94:a3:a3:04:3e:84: cc:b4:37:9f:dd:57:27:42:e1:85:59:91:22:18:29: 84:d1:a8:5b:99:c8:a9:49:9c:16:a9:40:e4:1c:d4: 41:c0:fc:d1:72:0a:f6:77:73:7e:ad:9f:21:59:32: d2:bd:62:d4:1f:fb:28:96:6a:b7:bb:74:45:4c:79: 94:fa:ad:68:0d:9e:b7:45:09:47:4a:24:9b:d8:b8: 42:17:97:ac:50:6f:c5:81:d5:8e:14:9b:b7:7c:ae: 9c:23:43:64:35:45:91:ff:6d:0f:0d:a2:05:f7:e3: 98:d5:09:b1:94:99:a4:5c:bf:92:ea:48:ee:1a:55: de:e3:41:99:3c:c2:e9:5f:8c:ee:32:c1:e5:55:f6: 97:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:EB:9C:B4:C1:B1:9F:79:7F:28:35:A9:9B:7F:9E:B4:0F:C1:F2:F0 X509v3 Authority Key Identifier: keyid:84:22:33:D6:E7:56:BC:93:C0:DB:9A:45:DD:2F:7B:CD:97:CB:29:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/581274af-7cd0-40af-a321-676898d58db8/0/842233D6E756BC93C0DB9A45DD2F7BCD97CB29AF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/842233D6E756BC93C0DB9A45DD2F7BCD97CB29AF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/581274af-7cd0-40af-a321-676898d58db8/0/842233D6E756BC93C0DB9A45DD2F7BCD97CB29AF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ca:e5:fc:3c:d7:47:14:4b:28:23:43:f3:04:d9:51:72:e3:22: 3f:e1:5c:ad:51:89:f4:44:96:0f:dc:7b:15:d0:b7:21:c4:dc: ab:e1:a1:59:05:6e:0e:64:9b:db:7e:68:4c:6c:59:0e:8f:eb: 6e:03:a1:61:21:e0:15:63:11:d3:b1:c9:6c:16:e5:ed:18:1b: 1a:65:86:e7:6b:f6:87:bf:96:bd:fb:80:46:25:7e:8c:ac:29: 10:e3:35:12:0a:87:57:77:f1:ac:eb:47:e9:be:7f:98:11:80: 48:0e:85:c2:1e:44:71:71:84:bd:d2:fe:e5:2b:b1:96:c4:47: bc:41:bf:72:27:e9:ff:b5:90:a8:d3:fd:91:d8:5a:3f:a1:6d: 11:37:01:38:dd:aa:5d:1e:1a:83:5f:b5:cb:b1:db:25:f2:8c: 26:75:86:ba:6e:d6:cd:ac:5b:f8:e8:c3:c7:a6:d5:28:82:ac: a5:1d:d4:99:ba:a3:1c:15:3a:54:22:99:5c:58:c2:a1:2e:9c: 2c:cb:4c:42:4f:30:94:2d:07:bd:74:d7:1f:12:69:15:b3:64: 51:17:83:f5:a9:c5:b8:e4:04:83:b2:a9:de:98:83:eb:b2:93: aa:63:cb:3a:63:ee:1c:a1:dd:76:61:ad:f3:41:73:13:36:d3: 85:d6:18:9d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcjBMzQTVfQeYWISHUMDBTfzXTXUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQyMjMzRDZFNzU2QkM5M0MwREI5QTQ1REQyRjdCQ0Q5 N0NCMjlBRjAeFw0yNTEyMDMwOTU1NDdaFw0yNTEyMDYxODAzNDdaMDMxMTAvBgNV BAMTKEQ3RUI5Q0I0QzFCMTlGNzk3RjI4MzVBOTlCN0Y5RUI0MEZDMUYyRjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtQHfhGY7Wz1ETiQae2ibw6KDP vujXxzjZBrjXaadELCwrYur2mwfFf30wiioqs/ZN3SMwXvNNW2cGQovOpWbSFI2o IpCRYyQWF7HxldOLF7xPHhKbv5+Doab9COyu6j6KTziuKGgxsb+/2lwtoez0eJSj owQ+hMy0N5/dVydC4YVZkSIYKYTRqFuZyKlJnBapQOQc1EHA/NFyCvZ3c36tnyFZ MtK9YtQf+yiWare7dEVMeZT6rWgNnrdFCUdKJJvYuEIXl6xQb8WB1Y4Um7d8rpwj Q2Q1RZH/bQ8NogX345jVCbGUmaRcv5LqSO4aVd7jQZk8wulfjO4yweVV9pfPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1+uctMGxn3l/KDWpm3+etA/B8vAwHwYDVR0j BBgwFoAUhCIz1udWvJPA25pF3S97zZfLKa8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ODEyNzRhZi03Y2QwLTQwYWYtYTMyMS02NzY4OThkNThkYjgvMC84NDIyMzNENkU3 NTZCQzkzQzBEQjlBNDVERDJGN0JDRDk3Q0IyOUFGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODQyMjMzRDZFNzU2QkM5M0MwREI5QTQ1REQyRjdCQ0Q5N0NC MjlBRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTgxMjc0YWYtN2NkMC00MGFmLWEz MjEtNjc2ODk4ZDU4ZGI4LzAvODQyMjMzRDZFNzU2QkM5M0MwREI5QTQ1REQyRjdC Q0Q5N0NCMjlBRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMrl/DzXRxRLKCND8wTZUXLjIj/hXK1RifRE lg/cexXQtyHE3KvhoVkFbg5km9t+aExsWQ6P624DoWEh4BVjEdOxyWwW5e0YGxpl hudr9oe/lr37gEYlfoysKRDjNRIKh1d38azrR+m+f5gRgEgOhcIeRHFxhL3S/uUr sZbER7xBv3In6f+1kKjT/ZHYWj+hbRE3ATjdql0eGoNftcux2yXyjCZ1hrpu1s2s W/jow8em1SiCrKUd1Jm6oxwVOlQimVxYwqEunCzLTEJPMJQtB7101x8SaRWzZFEX g/WpxbjkBIOyqd6Yg+uyk6pjyzpj7hyh3XZhrfNBcxM204XWGJ0= -----END CERTIFICATE-----Generated at Wed Dec 3 13:56:39 2025 by rpki-client