This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/9b6ae2a2-d93f-49ca-ba4b-171ff8d1e57f/0/242C3836E42CEB6F48A0A20E144027DB2E93307A.mft File: 242C3836E42CEB6F48A0A20E144027DB2E93307A.mft (raw, json) Hash identifier: WVvb/XCqLlJNe5AiivdYzxCFstkHVOQamNwFFtxR6ho= Subject key identifier: BD:C5:CB:1E:23:0C:CB:E8:29:D0:2E:08:34:06:69:CE:1E:F1:41:D9 Authority key identifier: 24:2C:38:36:E4:2C:EB:6F:48:A0:A2:0E:14:40:27:DB:2E:93:30:7A Certificate issuer: /CN=242C3836E42CEB6F48A0A20E144027DB2E93307A Certificate serial: 02AAC67F2205E1043C2BD019484509AF8BDBC01B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/242C3836E42CEB6F48A0A20E144027DB2E93307A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9b6ae2a2-d93f-49ca-ba4b-171ff8d1e57f/0/242C3836E42CEB6F48A0A20E144027DB2E93307A.mft Manifest number: 7E Signing time: Wed 03 Dec 2025 08:00:58 +0000 Manifest this update: Wed 03 Dec 2025 07:55:58 +0000 Manifest next update: Sat 06 Dec 2025 16:36:58 +0000 Files and hashes: 1: 242C3836E42CEB6F48A0A20E144027DB2E93307A.crl (hash: 6VloONnGCLQ+L2tfPCAxJTFhjyleEwMig7o3wBy3gaA=) 2: 3130332e3131322e3232382e302f32332d3234203d3e20313336313136.roa (hash: ha26MLoUyK6b5d5kt9GKeHc9oZd5tUAA9ACK3IzpaG8=) 3: 3130332e39332e3135382e302f32332d3234203d3e20313336313136.roa (hash: 3U6lR/C8HotepmDhEyu2e7oeFyixGt1wVJMmtsRpijM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9b6ae2a2-d93f-49ca-ba4b-171ff8d1e57f/0/242C3836E42CEB6F48A0A20E144027DB2E93307A.crl rsync://repo-rpki.idnic.net/repo/9b6ae2a2-d93f-49ca-ba4b-171ff8d1e57f/0/242C3836E42CEB6F48A0A20E144027DB2E93307A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/242C3836E42CEB6F48A0A20E144027DB2E93307A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:aa:c6:7f:22:05:e1:04:3c:2b:d0:19:48:45:09:af:8b:db:c0:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=242C3836E42CEB6F48A0A20E144027DB2E93307A Validity Not Before: Dec 3 07:55:58 2025 GMT Not After : Dec 6 16:36:58 2025 GMT Subject: CN=BDC5CB1E230CCBE829D02E08340669CE1EF141D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:d8:b4:e2:c9:d2:3e:bb:b4:70:00:f1:2d:d7: 07:96:6f:ae:db:79:77:1d:99:ee:03:5b:6b:de:c7: b4:6b:35:f7:f4:34:a2:74:f4:99:e4:61:c8:16:79: ca:40:49:ba:fb:8f:32:4a:1c:fd:be:2d:7f:3a:38: b3:bd:87:30:ea:6f:67:e3:c5:b2:69:e6:91:82:f3: 82:c7:ec:56:00:bf:64:bd:5a:ff:64:b3:ed:04:aa: 63:12:1e:e3:ff:a1:a1:e7:0a:f5:8e:42:fd:0c:8d: f0:3d:b4:87:0b:56:91:33:f4:1f:39:4f:f9:cd:ad: 66:de:32:9e:dc:72:6c:8f:83:53:f2:b6:2d:00:24: e1:bb:5b:34:09:cb:24:33:63:52:d2:13:13:aa:8f: e1:6a:54:7e:78:92:63:8e:58:fa:dd:ff:de:fd:1e: 2b:72:4c:65:11:0c:84:13:a8:51:ea:40:d4:ad:39: 1b:52:86:7a:80:34:22:2b:1a:b2:8c:4d:f0:31:42: 10:ba:12:a1:a4:a2:3f:79:11:5c:7a:98:42:e5:64: 13:b5:ac:a8:9b:53:04:2b:bd:c3:bc:60:d6:0e:27: 2f:4a:b3:ac:6f:a7:2a:46:ff:5c:d0:a8:20:cc:b2: d3:8a:f2:34:27:77:8f:fe:ce:e4:af:35:3b:88:8e: ef:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:C5:CB:1E:23:0C:CB:E8:29:D0:2E:08:34:06:69:CE:1E:F1:41:D9 X509v3 Authority Key Identifier: keyid:24:2C:38:36:E4:2C:EB:6F:48:A0:A2:0E:14:40:27:DB:2E:93:30:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9b6ae2a2-d93f-49ca-ba4b-171ff8d1e57f/0/242C3836E42CEB6F48A0A20E144027DB2E93307A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/242C3836E42CEB6F48A0A20E144027DB2E93307A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9b6ae2a2-d93f-49ca-ba4b-171ff8d1e57f/0/242C3836E42CEB6F48A0A20E144027DB2E93307A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:ac:a8:f4:3a:35:d2:89:7a:6c:e0:9e:f2:1e:0f:43:d8:f9: fa:31:55:1b:3a:e6:f7:54:11:c8:8e:8c:0f:c2:ed:59:89:b3: 44:02:b3:77:1e:df:00:c3:04:70:e4:2e:d3:97:98:7e:d2:37: 17:f0:f8:bd:5a:cb:16:78:5a:1d:44:25:09:34:6a:4b:df:81: 21:26:23:4c:18:99:1a:49:9a:2e:c3:7b:7a:a3:74:af:7d:d9: cc:8c:b4:b6:39:01:2d:52:da:dd:05:5b:81:a3:a0:4d:84:73: 9a:99:fc:4e:94:1c:84:5f:3b:2a:b4:e0:2f:40:73:9e:c4:ea: 89:8b:5c:ac:64:15:ed:39:b8:59:24:18:1e:ad:86:14:9d:54: ac:f5:ab:2f:ab:bf:a9:a0:bf:3b:52:f2:19:08:7f:22:5b:fb: 19:b0:e8:a1:7a:1f:9c:5e:02:1b:b9:62:16:64:09:07:e6:f4: 79:2e:7b:4f:59:7b:b1:1b:24:41:41:1d:dd:01:91:1f:e7:bd: e0:9b:32:9e:b0:26:bc:87:36:32:f8:9d:8e:76:d9:08:30:93: d4:e9:69:50:c3:08:08:14:b4:60:ad:4f:14:31:4b:7c:19:eb: 46:2d:d4:30:be:dc:6d:56:cb:a4:a3:2c:4b:51:e6:75:8c:e7: 1d:9f:6a:1e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAqrGfyIF4QQ8K9AZSEUJr4vbwBswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjQyQzM4MzZFNDJDRUI2RjQ4QTBBMjBFMTQ0MDI3REIy RTkzMzA3QTAeFw0yNTEyMDMwNzU1NThaFw0yNTEyMDYxNjM2NThaMDMxMTAvBgNV BAMTKEJEQzVDQjFFMjMwQ0NCRTgyOUQwMkUwODM0MDY2OUNFMUVGMTQxRDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCl2LTiydI+u7RwAPEt1weWb67b eXcdme4DW2vex7RrNff0NKJ09JnkYcgWecpASbr7jzJKHP2+LX86OLO9hzDqb2fj xbJp5pGC84LH7FYAv2S9Wv9ks+0EqmMSHuP/oaHnCvWOQv0MjfA9tIcLVpEz9B85 T/nNrWbeMp7ccmyPg1Pyti0AJOG7WzQJyyQzY1LSExOqj+FqVH54kmOOWPrd/979 HityTGURDIQTqFHqQNStORtShnqANCIrGrKMTfAxQhC6EqGkoj95EVx6mELlZBO1 rKibUwQrvcO8YNYOJy9Ks6xvpypG/1zQqCDMstOK8jQnd4/+zuSvNTuIju+rAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvcXLHiMMy+gp0C4INAZpzh7xQdkwHwYDVR0j BBgwFoAUJCw4NuQs629IoKIOFEAn2y6TMHowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YjZhZTJhMi1kOTNmLTQ5Y2EtYmE0Yi0xNzFmZjhkMWU1N2YvMC8yNDJDMzgzNkU0 MkNFQjZGNDhBMEEyMEUxNDQwMjdEQjJFOTMzMDdBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjQyQzM4MzZFNDJDRUI2RjQ4QTBBMjBFMTQ0MDI3REIyRTkz MzA3QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWI2YWUyYTItZDkzZi00OWNhLWJh NGItMTcxZmY4ZDFlNTdmLzAvMjQyQzM4MzZFNDJDRUI2RjQ4QTBBMjBFMTQ0MDI3 REIyRTkzMzA3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAmsqPQ6NdKJemzgnvIeD0PY+foxVRs65vdU EciOjA/C7VmJs0QCs3ce3wDDBHDkLtOXmH7SNxfw+L1ayxZ4Wh1EJQk0akvfgSEm I0wYmRpJmi7De3qjdK992cyMtLY5AS1S2t0FW4GjoE2Ec5qZ/E6UHIRfOyq04C9A c57E6omLXKxkFe05uFkkGB6thhSdVKz1qy+rv6mgvztS8hkIfyJb+xmw6KF6H5xe Ahu5YhZkCQfm9Hkue09Ze7EbJEFBHd0BkR/nveCbMp6wJryHNjL4nY522Qgwk9Tp aVDDCAgUtGCtTxQxS3wZ60Yt1DC+3G1Wy6SjLEtR5nWM5x2fah4= -----END CERTIFICATE-----Generated at Wed Dec 3 13:56:35 2025 by rpki-client