This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d835cb4a-2fb9-40d7-b155-dcce7cb00293/0/A42F07BEA859C831526717AB1D092E11E7890BDD.mft File: A42F07BEA859C831526717AB1D092E11E7890BDD.mft (raw, json) Hash identifier: wZMNklIcEwIiEYSsTPCRM5wIVv4cZ2S/qzftLaz4r0U= Subject key identifier: BA:EE:53:5D:57:0A:98:40:DE:72:D5:1C:EC:A3:70:06:36:EE:75:B7 Authority key identifier: A4:2F:07:BE:A8:59:C8:31:52:67:17:AB:1D:09:2E:11:E7:89:0B:DD Certificate issuer: /CN=A42F07BEA859C831526717AB1D092E11E7890BDD Certificate serial: 3CCAB5A2C34915B30B62776E55AB92AD8AFE637B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A42F07BEA859C831526717AB1D092E11E7890BDD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d835cb4a-2fb9-40d7-b155-dcce7cb00293/0/A42F07BEA859C831526717AB1D092E11E7890BDD.mft Manifest number: 01B9 Signing time: Tue 02 Dec 2025 21:51:44 +0000 Manifest this update: Tue 02 Dec 2025 21:46:44 +0000 Manifest next update: Sat 06 Dec 2025 04:32:44 +0000 Files and hashes: 1: 3130332e3130392e32372e302f32342d3234203d3e20313337333131.roa (hash: r6XX55Z5GiGICbCeAD8AU4m9N2hnvF3QzH54gdTf7xc=) 2: 3130332e3130392e32362e302f32342d3234203d3e20313337333131.roa (hash: 7ElLxeF9NMId5JMzZBtmpoup1Mi3rpbDW9f/VToW4OQ=) 3: 3130332e3130392e32342e302f32342d3234203d3e20313337333131.roa (hash: oJ+JZotG4pgzmmZEecq6pD6dBlLqMF5qvUlg8uJjk3E=) 4: A42F07BEA859C831526717AB1D092E11E7890BDD.crl (hash: Y/9OGysUa9OlcqNOtW6mJ3UoEtzitSdCmw2l0l3udGc=) 5: 3130332e3130392e32352e302f32342d3234203d3e20313337333131.roa (hash: 7NKvITl62S90UpwEPzaOqbyqSHza97/1Ajqk2WKR9R8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d835cb4a-2fb9-40d7-b155-dcce7cb00293/0/A42F07BEA859C831526717AB1D092E11E7890BDD.crl rsync://repo-rpki.idnic.net/repo/d835cb4a-2fb9-40d7-b155-dcce7cb00293/0/A42F07BEA859C831526717AB1D092E11E7890BDD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A42F07BEA859C831526717AB1D092E11E7890BDD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 04:32:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:ca:b5:a2:c3:49:15:b3:0b:62:77:6e:55:ab:92:ad:8a:fe:63:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A42F07BEA859C831526717AB1D092E11E7890BDD Validity Not Before: Dec 2 21:46:44 2025 GMT Not After : Dec 6 04:32:44 2025 GMT Subject: CN=BAEE535D570A9840DE72D51CECA3700636EE75B7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:eb:27:31:b4:84:21:32:91:09:0e:ab:69:f3: 6e:d0:05:2e:f9:aa:7b:e4:7b:5c:d0:41:cf:52:a8: 2f:5c:8e:95:76:5f:db:8c:30:12:d5:7c:94:a0:69: 3d:fc:93:a2:f8:d6:21:5d:78:fc:94:8b:45:4c:e6: e2:45:b2:6e:18:d1:2e:90:c4:a1:a0:2f:0a:ea:89: 45:b1:62:4f:18:a3:02:5c:e8:97:e8:76:a8:77:91: 5d:51:c0:8d:27:79:97:ef:cf:ce:43:03:35:92:c5: 0d:fd:06:7d:14:cb:2c:ab:7c:dc:a4:bb:7d:0a:18: 44:9f:5e:8a:fc:a5:3e:f3:6f:16:ac:b9:6c:39:a5: 41:68:97:e7:cc:2b:2b:14:59:a0:45:93:91:91:5f: 12:a2:07:74:6b:38:92:f4:2a:d8:31:0b:99:79:7d: 90:3e:67:31:8a:3a:7e:b9:ff:dd:05:40:ee:8f:32: 89:e6:4c:61:1e:cb:aa:9e:87:bf:e2:22:43:39:b1: 9e:27:d9:9f:ce:0d:fb:51:6c:2a:31:fe:4c:33:95: ae:44:49:5a:d7:55:bd:96:e5:e7:62:1f:20:33:92: 58:b0:8d:d6:a8:81:30:dc:69:16:b5:aa:92:30:ed: 3e:d5:24:62:ca:d1:50:2a:82:1e:8d:13:07:c3:01: a7:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:EE:53:5D:57:0A:98:40:DE:72:D5:1C:EC:A3:70:06:36:EE:75:B7 X509v3 Authority Key Identifier: keyid:A4:2F:07:BE:A8:59:C8:31:52:67:17:AB:1D:09:2E:11:E7:89:0B:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d835cb4a-2fb9-40d7-b155-dcce7cb00293/0/A42F07BEA859C831526717AB1D092E11E7890BDD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A42F07BEA859C831526717AB1D092E11E7890BDD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d835cb4a-2fb9-40d7-b155-dcce7cb00293/0/A42F07BEA859C831526717AB1D092E11E7890BDD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:2e:bf:6e:45:a3:47:42:17:f2:35:7d:61:9c:a0:71:fb:b8: b3:ac:68:64:24:11:a8:11:e5:ce:d0:b6:a7:43:37:f3:f8:c6: ce:2b:85:a5:03:7f:bb:47:57:2c:ad:ed:51:1a:33:2e:a0:03: d1:7b:a4:29:64:58:30:64:24:38:cc:41:80:3f:04:eb:e1:53: d5:4b:2a:c5:a0:0f:92:1c:3f:19:41:d4:5f:33:e8:6f:d0:15: 20:b1:e1:a0:aa:fb:45:3f:44:0e:9a:b5:be:07:e6:aa:55:99: b5:fd:87:8a:1d:a2:11:4a:9f:c3:00:93:5e:d4:82:af:f1:27: 89:4b:fd:8c:f3:aa:9d:d0:80:60:a7:67:93:9d:19:00:58:b9: 70:d3:fd:b6:e8:40:0f:e8:3d:d3:76:5d:dc:21:ab:fb:e1:fb: c4:4e:0f:43:f8:f2:de:ad:f8:47:3e:52:49:6c:1d:5e:2c:20: 7f:33:b7:49:56:56:fd:10:d2:f9:87:3f:ca:23:96:47:2a:5d: b7:2c:68:af:5c:66:8c:4a:64:67:dd:61:67:65:3d:6d:b2:56: ec:a7:6a:50:9c:59:7e:03:da:0c:d8:3f:02:3f:4c:be:13:62: 04:88:86:1a:df:2b:97:de:58:cc:42:b9:8a:9c:d0:12:38:80: de:47:b1:69 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPMq1osNJFbMLYnduVauSrYr+Y3swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTQyRjA3QkVBODU5QzgzMTUyNjcxN0FCMUQwOTJFMTFF Nzg5MEJERDAeFw0yNTEyMDIyMTQ2NDRaFw0yNTEyMDYwNDMyNDRaMDMxMTAvBgNV BAMTKEJBRUU1MzVENTcwQTk4NDBERTcyRDUxQ0VDQTM3MDA2MzZFRTc1QjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCd6ycxtIQhMpEJDqtp827QBS75 qnvke1zQQc9SqC9cjpV2X9uMMBLVfJSgaT38k6L41iFdePyUi0VM5uJFsm4Y0S6Q xKGgLwrqiUWxYk8YowJc6Jfodqh3kV1RwI0neZfvz85DAzWSxQ39Bn0UyyyrfNyk u30KGESfXor8pT7zbxasuWw5pUFol+fMKysUWaBFk5GRXxKiB3RrOJL0KtgxC5l5 fZA+ZzGKOn65/90FQO6PMonmTGEey6qeh7/iIkM5sZ4n2Z/ODftRbCox/kwzla5E SVrXVb2W5ediHyAzkliwjdaogTDcaRa1qpIw7T7VJGLK0VAqgh6NEwfDAafrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuu5TXVcKmEDectUc7KNwBjbudbcwHwYDVR0j BBgwFoAUpC8HvqhZyDFSZxerHQkuEeeJC90wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ODM1Y2I0YS0yZmI5LTQwZDctYjE1NS1kY2NlN2NiMDAyOTMvMC9BNDJGMDdCRUE4 NTlDODMxNTI2NzE3QUIxRDA5MkUxMUU3ODkwQkRELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTQyRjA3QkVBODU5QzgzMTUyNjcxN0FCMUQwOTJFMTFFNzg5 MEJERC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDgzNWNiNGEtMmZiOS00MGQ3LWIx NTUtZGNjZTdjYjAwMjkzLzAvQTQyRjA3QkVBODU5QzgzMTUyNjcxN0FCMUQwOTJF MTFFNzg5MEJERC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABcuv25Fo0dCF/I1fWGcoHH7uLOsaGQkEagR 5c7QtqdDN/P4xs4rhaUDf7tHVyyt7VEaMy6gA9F7pClkWDBkJDjMQYA/BOvhU9VL KsWgD5IcPxlB1F8z6G/QFSCx4aCq+0U/RA6atb4H5qpVmbX9h4odohFKn8MAk17U gq/xJ4lL/Yzzqp3QgGCnZ5OdGQBYuXDT/bboQA/oPdN2Xdwhq/vh+8ROD0P48t6t +Ec+UklsHV4sIH8zt0lWVv0Q0vmHP8ojlkcqXbcsaK9cZoxKZGfdYWdlPW2yVuyn alCcWX4D2gzYPwI/TL4TYgSIhhrfK5feWMxCuYqc0BI4gN5HsWk= -----END CERTIFICATE-----Generated at Wed Dec 3 14:44:13 2025 by rpki-client