This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d371929d-c3d0-4daa-b5fd-a249560d5d04/0/A142E54B1173D871802220D7946F31C1C8F55F58.mft File: A142E54B1173D871802220D7946F31C1C8F55F58.mft (raw, json) Hash identifier: +KCUF5YtuuH4MKnC8Zo4BlBWW1YDj/XWKmvj0lvx3XA= Subject key identifier: BD:2E:A1:B8:4D:14:7E:ED:0A:28:67:74:49:2D:49:A5:88:B1:3B:D2 Authority key identifier: A1:42:E5:4B:11:73:D8:71:80:22:20:D7:94:6F:31:C1:C8:F5:5F:58 Certificate issuer: /CN=A142E54B1173D871802220D7946F31C1C8F55F58 Certificate serial: 7906371B6DFF86DE49BD77D190E3F6F8475FF7C7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A142E54B1173D871802220D7946F31C1C8F55F58.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d371929d-c3d0-4daa-b5fd-a249560d5d04/0/A142E54B1173D871802220D7946F31C1C8F55F58.mft Manifest number: 3E Signing time: Wed 03 Dec 2025 02:20:00 +0000 Manifest this update: Wed 03 Dec 2025 02:15:00 +0000 Manifest next update: Sat 06 Dec 2025 11:26:00 +0000 Files and hashes: 1: 3130332e34392e3233312e302f32342d3234203d3e203633383638.roa (hash: A87x9izjeE8fUDhqMlkHjoCuxbSOiZqmsAQhFIKjo7Y=) 2: A142E54B1173D871802220D7946F31C1C8F55F58.crl (hash: pyTu7Kd+xbSoFaijaULnxJezu5NNG7XU+ICnaHmEXtU=) 3: 3130332e34392e3232392e302f32342d3234203d3e203633383638.roa (hash: bojMt0gtubfTBb5QRBM0eDsyEh+eiJmKiv8uVqn90p8=) 4: 3130332e34392e3232382e302f32342d3234203d3e203633383638.roa (hash: +fz1OVHlNgOBqr0lbQQ+JDq3kgo82i16sacdT062DE8=) 5: 3130332e34392e3233302e302f32342d3234203d3e203633383638.roa (hash: OBFtgkraA2mAt61IcdsL1WjQ+6oatnIwsFiBr9g1HRk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d371929d-c3d0-4daa-b5fd-a249560d5d04/0/A142E54B1173D871802220D7946F31C1C8F55F58.crl rsync://repo-rpki.idnic.net/repo/d371929d-c3d0-4daa-b5fd-a249560d5d04/0/A142E54B1173D871802220D7946F31C1C8F55F58.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A142E54B1173D871802220D7946F31C1C8F55F58.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 11:26:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:06:37:1b:6d:ff:86:de:49:bd:77:d1:90:e3:f6:f8:47:5f:f7:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A142E54B1173D871802220D7946F31C1C8F55F58 Validity Not Before: Dec 3 02:15:00 2025 GMT Not After : Dec 6 11:26:00 2025 GMT Subject: CN=BD2EA1B84D147EED0A286774492D49A588B13BD2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:92:2d:2f:2d:30:bb:b3:0b:25:05:d6:5d:e7: d2:73:35:60:7f:32:10:6b:85:af:08:0c:5e:ad:ff: 99:9c:3e:a5:4f:59:46:4c:b7:7d:f0:6e:39:b3:84: 70:57:f2:e2:f6:ec:53:44:c1:5b:8b:f3:cb:0f:5a: 8b:be:a2:37:86:e0:e7:89:6d:e3:aa:a7:59:cd:05: 29:24:fb:34:55:7f:a3:ac:20:31:73:7a:3b:ea:d6: d5:e6:4e:bf:1d:26:1c:b8:f4:cd:08:3e:54:bc:46: 5d:b6:52:83:c1:bd:ee:55:d4:6e:1f:ff:dd:33:ec: c8:08:07:6f:d9:38:a7:2b:02:81:94:a6:1e:bb:64: 65:6b:a5:74:9e:8c:82:a4:a4:c4:78:a3:2e:dc:4a: ed:11:f8:7c:6e:78:0a:ca:90:1a:4f:f8:59:79:40: 9e:f6:31:ac:08:7d:eb:21:a8:c2:55:c7:91:de:23: e4:de:1e:67:35:a5:b9:13:f6:ee:c5:b1:26:8d:4d: b5:16:1b:2a:1c:0f:49:7a:87:0e:c2:82:20:5d:ec: af:d3:ef:65:c9:d9:b6:c3:00:cc:95:f7:09:c0:a9: 5a:5d:82:ac:28:85:9f:f2:30:21:fc:dd:d8:83:12: fe:10:87:da:58:bc:c9:55:8f:ac:da:9f:11:bd:65: 67:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:2E:A1:B8:4D:14:7E:ED:0A:28:67:74:49:2D:49:A5:88:B1:3B:D2 X509v3 Authority Key Identifier: keyid:A1:42:E5:4B:11:73:D8:71:80:22:20:D7:94:6F:31:C1:C8:F5:5F:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d371929d-c3d0-4daa-b5fd-a249560d5d04/0/A142E54B1173D871802220D7946F31C1C8F55F58.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A142E54B1173D871802220D7946F31C1C8F55F58.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d371929d-c3d0-4daa-b5fd-a249560d5d04/0/A142E54B1173D871802220D7946F31C1C8F55F58.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:43:2d:ca:df:68:8b:55:1a:77:b7:14:83:56:b2:c8:f8:7e: 9c:3a:73:42:23:df:34:44:4d:c0:b1:15:0f:60:cc:00:b5:4e: ed:35:c0:5c:8c:c0:0c:fd:18:8d:87:6b:c7:37:07:eb:29:15: d5:87:f2:d3:78:3b:d2:16:54:99:b0:40:07:3c:47:b3:d2:44: 72:63:3d:f1:d0:bd:16:cd:88:9c:a3:54:2d:1c:c7:1c:03:7c: 6b:89:1a:64:8e:c0:90:3d:ec:08:a6:8c:6c:44:ef:82:2a:cb: a1:bc:fd:32:ec:34:70:fb:70:fb:53:c4:88:a0:b6:e1:83:2d: 83:28:fa:96:d0:05:ab:21:0c:fe:a9:9c:ab:bb:74:eb:ab:5e: b4:27:52:55:d4:a0:91:38:8a:6d:cf:8e:16:03:03:7b:cd:ca: 0b:a0:7a:3b:ac:0e:36:b8:0e:e9:87:de:e3:9d:8c:ee:c1:30: f8:d1:8a:83:ec:60:a0:b8:39:55:75:89:e6:55:54:16:b0:ee: 48:a1:c2:fb:ce:01:bd:10:dc:49:d7:ef:ca:aa:f3:13:dc:1a: 1a:4c:84:b1:59:a0:60:cb:d0:74:d5:68:f0:69:3a:4d:73:5c: 7b:10:c2:ea:28:a8:16:2a:db:9b:5e:7a:7e:aa:07:00:f4:dd: ac:7b:71:03 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeQY3G23/ht5JvXfRkOP2+Edf98cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTE0MkU1NEIxMTczRDg3MTgwMjIyMEQ3OTQ2RjMxQzFD OEY1NUY1ODAeFw0yNTEyMDMwMjE1MDBaFw0yNTEyMDYxMTI2MDBaMDMxMTAvBgNV BAMTKEJEMkVBMUI4NEQxNDdFRUQwQTI4Njc3NDQ5MkQ0OUE1ODhCMTNCRDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2ki0vLTC7swslBdZd59JzNWB/ MhBrha8IDF6t/5mcPqVPWUZMt33wbjmzhHBX8uL27FNEwVuL88sPWou+ojeG4OeJ beOqp1nNBSkk+zRVf6OsIDFzejvq1tXmTr8dJhy49M0IPlS8Rl22UoPBve5V1G4f /90z7MgIB2/ZOKcrAoGUph67ZGVrpXSejIKkpMR4oy7cSu0R+HxueArKkBpP+Fl5 QJ72MawIfeshqMJVx5HeI+TeHmc1pbkT9u7FsSaNTbUWGyocD0l6hw7CgiBd7K/T 72XJ2bbDAMyV9wnAqVpdgqwohZ/yMCH83diDEv4Qh9pYvMlVj6zanxG9ZWdJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvS6huE0Ufu0KKGd0SS1JpYixO9IwHwYDVR0j BBgwFoAUoULlSxFz2HGAIiDXlG8xwcj1X1gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MzcxOTI5ZC1jM2QwLTRkYWEtYjVmZC1hMjQ5NTYwZDVkMDQvMC9BMTQyRTU0QjEx NzNEODcxODAyMjIwRDc5NDZGMzFDMUM4RjU1RjU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTE0MkU1NEIxMTczRDg3MTgwMjIyMEQ3OTQ2RjMxQzFDOEY1 NUY1OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDM3MTkyOWQtYzNkMC00ZGFhLWI1 ZmQtYTI0OTU2MGQ1ZDA0LzAvQTE0MkU1NEIxMTczRDg3MTgwMjIyMEQ3OTQ2RjMx QzFDOEY1NUY1OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHxDLcrfaItVGne3FINWssj4fpw6c0Ij3zRE TcCxFQ9gzAC1Tu01wFyMwAz9GI2Ha8c3B+spFdWH8tN4O9IWVJmwQAc8R7PSRHJj PfHQvRbNiJyjVC0cxxwDfGuJGmSOwJA97AimjGxE74Iqy6G8/TLsNHD7cPtTxIig tuGDLYMo+pbQBashDP6pnKu7dOurXrQnUlXUoJE4im3PjhYDA3vNygugejusDja4 DumH3uOdjO7BMPjRioPsYKC4OVV1ieZVVBaw7kihwvvOAb0Q3EnX78qq8xPcGhpM hLFZoGDL0HTVaPBpOk1zXHsQwuooqBYq25teen6qBwD03ax7cQM= -----END CERTIFICATE-----Generated at Wed Dec 3 14:13:22 2025 by rpki-client