This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/aee2088a-c9ff-4d84-be4e-141d5b80b543/0/42467B1885830A9908EAE67935311639B090AA77.mft File: 42467B1885830A9908EAE67935311639B090AA77.mft (raw, json) Hash identifier: BIhz1AzpDbetWO41wzybqPK2AxNZlaZART+y+PRtyJc= Subject key identifier: B6:8B:18:C5:AF:2C:7A:F5:EB:85:A4:BF:B6:16:32:05:97:04:6F:D5 Authority key identifier: 42:46:7B:18:85:83:0A:99:08:EA:E6:79:35:31:16:39:B0:90:AA:77 Certificate issuer: /CN=42467B1885830A9908EAE67935311639B090AA77 Certificate serial: 4F8EA20D236E39A84EB68FF941735256EBE26F40 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42467B1885830A9908EAE67935311639B090AA77.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aee2088a-c9ff-4d84-be4e-141d5b80b543/0/42467B1885830A9908EAE67935311639B090AA77.mft Manifest number: 0160 Signing time: Mon 01 Dec 2025 19:41:50 +0000 Manifest this update: Mon 01 Dec 2025 19:36:50 +0000 Manifest next update: Fri 05 Dec 2025 07:07:50 +0000 Files and hashes: 1: 3130332e37362e3130362e302f32332d3234203d3e20313531353737.roa (hash: DxKIyMO6WjD2qxH8BuKIvj+fKDvOwuaoHadDVnwc7A0=) 2: 42467B1885830A9908EAE67935311639B090AA77.crl (hash: 0xKwPxe7jKD6xxHUUOhE29y71cyJZCL8EWsO84/SifI=) 3: 3130332e37362e3130372e302f32342d3234203d3e20313531353737.roa (hash: ZWtRALMquKEFwYIWcUiF1poTwDnT8MPEPPx4FTc8PK0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aee2088a-c9ff-4d84-be4e-141d5b80b543/0/42467B1885830A9908EAE67935311639B090AA77.crl rsync://repo-rpki.idnic.net/repo/aee2088a-c9ff-4d84-be4e-141d5b80b543/0/42467B1885830A9908EAE67935311639B090AA77.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42467B1885830A9908EAE67935311639B090AA77.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 07:07:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:8e:a2:0d:23:6e:39:a8:4e:b6:8f:f9:41:73:52:56:eb:e2:6f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42467B1885830A9908EAE67935311639B090AA77 Validity Not Before: Dec 1 19:36:50 2025 GMT Not After : Dec 5 07:07:50 2025 GMT Subject: CN=B68B18C5AF2C7AF5EB85A4BFB616320597046FD5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:fc:5c:ec:36:1b:53:d0:06:ee:ce:b0:6e:e2: 1a:fc:63:d0:5d:68:46:c4:d3:14:22:28:bf:a7:c4: 23:aa:2a:88:fe:2f:8a:48:90:e5:fc:1f:37:4e:d2: 2c:ee:5d:5a:dd:0c:1c:c2:7f:32:fa:df:9b:ed:6c: 33:36:e7:8e:a7:5f:b8:f3:9c:ae:6b:97:9c:92:0c: c9:6e:50:64:18:48:1b:1b:46:f6:b4:1e:cf:bc:7d: 62:44:4e:f0:90:c5:0f:12:4d:6a:30:19:dd:df:e1: b8:7d:98:53:d8:e7:d3:57:03:f7:12:3b:b5:f5:89: a5:96:cd:73:e5:c0:3c:93:12:e7:20:8b:74:c3:83: c6:e3:bf:07:cb:2d:48:00:ee:ed:b5:58:86:86:db: ce:d9:2b:ea:39:d9:c9:f9:fe:29:09:66:df:54:9a: cd:d3:92:fe:3b:70:07:ad:80:23:0b:2b:1a:5a:bb: 59:02:75:2f:39:a3:87:df:c0:82:ba:17:8c:1e:e4: 65:25:12:82:97:b5:3a:2d:34:8f:3b:fb:57:3c:6e: e9:e7:01:7f:67:2e:1a:b0:c8:6c:af:c1:8c:b4:3e: a0:7d:93:0c:04:d0:0f:95:26:d5:e1:fd:72:82:84: f2:ac:5c:18:bc:b1:af:6c:15:57:4d:3c:b0:aa:d9: 0e:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:8B:18:C5:AF:2C:7A:F5:EB:85:A4:BF:B6:16:32:05:97:04:6F:D5 X509v3 Authority Key Identifier: keyid:42:46:7B:18:85:83:0A:99:08:EA:E6:79:35:31:16:39:B0:90:AA:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aee2088a-c9ff-4d84-be4e-141d5b80b543/0/42467B1885830A9908EAE67935311639B090AA77.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42467B1885830A9908EAE67935311639B090AA77.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aee2088a-c9ff-4d84-be4e-141d5b80b543/0/42467B1885830A9908EAE67935311639B090AA77.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:16:0e:b3:e9:ed:a8:a3:a0:ac:f2:54:4f:7a:7f:6c:d3:7d: 0d:64:02:fc:c4:9b:ec:1f:cf:3f:c8:4a:15:eb:19:1b:35:13: f6:ab:1f:ca:9c:5a:35:1d:b5:ee:e4:b9:24:82:1a:ba:10:ab: 17:75:2b:4d:e5:81:26:a0:61:eb:48:90:06:cd:6f:e5:7b:b4: b3:bb:93:01:1c:23:f1:de:6a:b6:b2:8a:34:06:17:a9:6a:91: 08:27:91:ad:41:36:d9:f0:84:41:78:14:d3:c3:80:c6:4d:b7: 6e:2d:4b:59:8a:f8:ec:3c:4c:4b:fe:d5:92:9f:2a:ef:bd:d0: 60:8a:80:db:f6:72:19:33:b4:65:30:d3:0f:17:5e:43:d6:d9: 5e:0e:96:be:ec:b7:68:66:7f:a2:b9:66:f7:fa:42:26:59:fd: 69:0f:e7:33:85:f8:ea:73:ea:0a:6a:a0:c9:ab:95:09:6a:97: c2:0e:10:9e:f8:3f:4b:2b:ba:2d:af:17:d8:a0:23:95:a6:a6: 30:86:ff:36:e8:20:64:e6:36:07:7d:fe:ef:3b:2f:28:4f:5f: c2:e3:7e:9e:72:3f:73:80:9f:8e:74:a8:4e:0c:68:74:77:3a: 01:2a:3c:2c:36:c4:b8:77:6b:c5:60:6a:3a:7d:5c:1d:99:96: 05:9b:82:ac -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUT46iDSNuOahOto/5QXNSVuvib0AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDI0NjdCMTg4NTgzMEE5OTA4RUFFNjc5MzUzMTE2MzlC MDkwQUE3NzAeFw0yNTEyMDExOTM2NTBaFw0yNTEyMDUwNzA3NTBaMDMxMTAvBgNV BAMTKEI2OEIxOEM1QUYyQzdBRjVFQjg1QTRCRkI2MTYzMjA1OTcwNDZGRDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp/FzsNhtT0AbuzrBu4hr8Y9Bd aEbE0xQiKL+nxCOqKoj+L4pIkOX8HzdO0izuXVrdDBzCfzL635vtbDM2546nX7jz nK5rl5ySDMluUGQYSBsbRva0Hs+8fWJETvCQxQ8STWowGd3f4bh9mFPY59NXA/cS O7X1iaWWzXPlwDyTEucgi3TDg8bjvwfLLUgA7u21WIaG287ZK+o52cn5/ikJZt9U ms3Tkv47cAetgCMLKxpau1kCdS85o4ffwIK6F4we5GUlEoKXtTotNI87+1c8bunn AX9nLhqwyGyvwYy0PqB9kwwE0A+VJtXh/XKChPKsXBi8sa9sFVdNPLCq2Q4RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtosYxa8sevXrhaS/thYyBZcEb9UwHwYDVR0j BBgwFoAUQkZ7GIWDCpkI6uZ5NTEWObCQqncwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZWUyMDg4YS1jOWZmLTRkODQtYmU0ZS0xNDFkNWI4MGI1NDMvMC80MjQ2N0IxODg1 ODMwQTk5MDhFQUU2NzkzNTMxMTYzOUIwOTBBQTc3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDI0NjdCMTg4NTgzMEE5OTA4RUFFNjc5MzUzMTE2MzlCMDkw QUE3Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWVlMjA4OGEtYzlmZi00ZDg0LWJl NGUtMTQxZDViODBiNTQzLzAvNDI0NjdCMTg4NTgzMEE5OTA4RUFFNjc5MzUzMTE2 MzlCMDkwQUE3Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAYWDrPp7aijoKzyVE96f2zTfQ1kAvzEm+wf zz/IShXrGRs1E/arH8qcWjUdte7kuSSCGroQqxd1K03lgSagYetIkAbNb+V7tLO7 kwEcI/HearayijQGF6lqkQgnka1BNtnwhEF4FNPDgMZNt24tS1mK+Ow8TEv+1ZKf Ku+90GCKgNv2chkztGUw0w8XXkPW2V4Olr7st2hmf6K5Zvf6QiZZ/WkP5zOF+Opz 6gpqoMmrlQlql8IOEJ74P0srui2vF9igI5WmpjCG/zboIGTmNgd9/u87LyhPX8Lj fp5yP3OAn450qE4MaHR3OgEqPCw2xLh3a8Vgajp9XB2ZlgWbgqw= -----END CERTIFICATE-----Generated at Wed Dec 3 13:58:04 2025 by rpki-client