This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/e73419b9-5422-4fc2-a3e0-c49a8aa07f73/0/42C6E10CB4D5AF0F92CCA6A9595CCC05E2E829AE.mft File: 42C6E10CB4D5AF0F92CCA6A9595CCC05E2E829AE.mft (raw, json) Hash identifier: LaPZwHSoprrCA0ruhGEf/JusmYa4V76LQR7j2T/Lf1U= Subject key identifier: C9:8D:5C:04:3C:12:C1:0E:D4:98:D6:0E:E8:DD:27:F6:92:55:38:24 Authority key identifier: 42:C6:E1:0C:B4:D5:AF:0F:92:CC:A6:A9:59:5C:CC:05:E2:E8:29:AE Certificate issuer: /CN=42C6E10CB4D5AF0F92CCA6A9595CCC05E2E829AE Certificate serial: 2427EC96BD78D3DDA9EFC57A44A4A35DE9C77A06 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42C6E10CB4D5AF0F92CCA6A9595CCC05E2E829AE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e73419b9-5422-4fc2-a3e0-c49a8aa07f73/0/42C6E10CB4D5AF0F92CCA6A9595CCC05E2E829AE.mft Manifest number: 014D Signing time: Mon 01 Dec 2025 23:11:48 +0000 Manifest this update: Mon 01 Dec 2025 23:06:48 +0000 Manifest next update: Fri 05 Dec 2025 07:42:48 +0000 Files and hashes: 1: 3130332e3135392e39322e302f32342d3234203d3e20313431313339.roa (hash: fg/QZptFLqxRoiOqaYt9GVklul/Zo57x2b9Yx8hCCKw=) 2: 42C6E10CB4D5AF0F92CCA6A9595CCC05E2E829AE.crl (hash: bz1lcQ6W/H95V/f7ZHeV1IH5tqmtNA8lBqCFCg6hcUs=) 3: 3130332e3135392e39332e302f32342d3234203d3e20313431313339.roa (hash: jur3GwCCR/cxdnMD6W4cwMvOKZw4VghZsOtg/kxwW48=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e73419b9-5422-4fc2-a3e0-c49a8aa07f73/0/42C6E10CB4D5AF0F92CCA6A9595CCC05E2E829AE.crl rsync://repo-rpki.idnic.net/repo/e73419b9-5422-4fc2-a3e0-c49a8aa07f73/0/42C6E10CB4D5AF0F92CCA6A9595CCC05E2E829AE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42C6E10CB4D5AF0F92CCA6A9595CCC05E2E829AE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 07:42:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:27:ec:96:bd:78:d3:dd:a9:ef:c5:7a:44:a4:a3:5d:e9:c7:7a:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42C6E10CB4D5AF0F92CCA6A9595CCC05E2E829AE Validity Not Before: Dec 1 23:06:48 2025 GMT Not After : Dec 5 07:42:48 2025 GMT Subject: CN=C98D5C043C12C10ED498D60EE8DD27F692553824 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:b2:b5:b4:4b:f2:23:ca:fe:15:39:6b:f8:2a: 84:b3:8d:1a:d4:8d:cf:00:9c:62:22:ff:fd:aa:82: d3:85:59:80:3c:b6:8b:79:9a:b3:7e:dc:e3:89:2a: fd:97:43:08:43:18:d7:fd:8d:57:22:c4:aa:ed:26: 98:d0:c1:39:de:f9:af:1c:03:5f:e8:c2:9a:f8:23: 1e:c0:a9:a6:12:72:8b:92:78:da:da:ee:00:06:d9: 62:1b:bc:b4:ff:52:e8:47:ef:50:e9:95:a1:1e:6c: a7:82:d4:f6:66:e4:d0:1e:f8:46:d5:04:99:68:6f: ff:51:d0:b4:20:40:46:f8:42:c5:35:bc:6e:f9:f6: 3c:28:89:13:df:aa:af:88:05:c5:ac:f8:a0:98:a8: 6e:19:5d:e1:a7:00:5d:ec:2a:e3:5c:a3:da:88:e2: c3:9a:64:f1:f8:73:b7:b1:42:23:3e:58:ee:7e:b2: 73:85:dc:08:b8:88:4e:2f:e5:29:b3:19:58:02:47: bf:20:61:88:26:6e:91:2a:89:1b:18:01:0b:e9:a5: dc:e9:81:2b:5f:4c:f5:5a:49:bc:fe:58:26:ce:0c: ed:b2:6b:66:01:c4:2a:fd:7e:d4:ef:24:d5:4d:2e: de:55:11:b2:d4:bf:61:f8:22:7a:f3:bd:d1:b4:cb: ab:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:8D:5C:04:3C:12:C1:0E:D4:98:D6:0E:E8:DD:27:F6:92:55:38:24 X509v3 Authority Key Identifier: keyid:42:C6:E1:0C:B4:D5:AF:0F:92:CC:A6:A9:59:5C:CC:05:E2:E8:29:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e73419b9-5422-4fc2-a3e0-c49a8aa07f73/0/42C6E10CB4D5AF0F92CCA6A9595CCC05E2E829AE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42C6E10CB4D5AF0F92CCA6A9595CCC05E2E829AE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e73419b9-5422-4fc2-a3e0-c49a8aa07f73/0/42C6E10CB4D5AF0F92CCA6A9595CCC05E2E829AE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:bf:80:1a:ef:4c:89:18:67:f4:b6:a2:5a:bd:64:c9:c5:b6: 7f:9f:6f:e2:6e:2a:13:d1:be:44:c8:16:b0:e1:d4:57:5d:aa: ff:d3:c3:06:58:17:1e:2c:6a:bd:f1:b6:a4:98:32:d3:47:00: 3a:d7:96:fe:a4:b0:c5:87:df:49:fd:e4:78:98:b0:7e:dc:96: 74:80:4b:27:a5:22:f6:ba:07:53:de:c2:0f:85:f9:4d:c5:1d: 12:b5:4a:ab:d9:d9:13:d2:31:7e:2e:4f:9b:e9:72:1d:d0:e3: df:45:1d:dd:35:f2:02:4b:35:1b:db:73:16:3d:2b:40:15:b6: b3:72:22:30:80:7c:9f:07:dc:70:67:1f:fb:55:fd:96:e6:17: 17:ef:d3:f3:e5:d2:17:3c:c3:e6:dc:67:45:af:00:27:f9:30: 6e:14:08:c5:d1:a0:3d:d0:69:03:27:c2:27:15:81:0e:17:18: 6a:ab:0c:b8:1c:35:44:dc:de:90:c7:ba:2d:05:cd:f1:fc:d2: 72:6b:30:87:e4:22:52:bf:0b:10:aa:f5:e2:eb:0a:4e:d8:68: 4c:b6:f2:c2:9a:dd:d4:dc:e5:9c:58:98:b8:17:61:ca:4d:89: cc:73:51:94:94:bd:49:54:e8:45:c7:3e:eb:32:67:96:b3:9a: e1:4e:8e:9f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJCfslr14092p78V6RKSjXenHegYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDJDNkUxMENCNEQ1QUYwRjkyQ0NBNkE5NTk1Q0NDMDVF MkU4MjlBRTAeFw0yNTEyMDEyMzA2NDhaFw0yNTEyMDUwNzQyNDhaMDMxMTAvBgNV BAMTKEM5OEQ1QzA0M0MxMkMxMEVENDk4RDYwRUU4REQyN0Y2OTI1NTM4MjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1srW0S/Ijyv4VOWv4KoSzjRrU jc8AnGIi//2qgtOFWYA8tot5mrN+3OOJKv2XQwhDGNf9jVcixKrtJpjQwTne+a8c A1/owpr4Ix7AqaYScouSeNra7gAG2WIbvLT/UuhH71DplaEebKeC1PZm5NAe+EbV BJlob/9R0LQgQEb4QsU1vG759jwoiRPfqq+IBcWs+KCYqG4ZXeGnAF3sKuNco9qI 4sOaZPH4c7exQiM+WO5+snOF3Ai4iE4v5SmzGVgCR78gYYgmbpEqiRsYAQvppdzp gStfTPVaSbz+WCbODO2ya2YBxCr9ftTvJNVNLt5VEbLUv2H4InrzvdG0y6sVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyY1cBDwSwQ7UmNYO6N0n9pJVOCQwHwYDVR0j BBgwFoAUQsbhDLTVrw+SzKapWVzMBeLoKa4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NzM0MTliOS01NDIyLTRmYzItYTNlMC1jNDlhOGFhMDdmNzMvMC80MkM2RTEwQ0I0 RDVBRjBGOTJDQ0E2QTk1OTVDQ0MwNUUyRTgyOUFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDJDNkUxMENCNEQ1QUYwRjkyQ0NBNkE5NTk1Q0NDMDVFMkU4 MjlBRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTczNDE5YjktNTQyMi00ZmMyLWEz ZTAtYzQ5YThhYTA3ZjczLzAvNDJDNkUxMENCNEQ1QUYwRjkyQ0NBNkE5NTk1Q0ND MDVFMkU4MjlBRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACS/gBrvTIkYZ/S2olq9ZMnFtn+fb+JuKhPR vkTIFrDh1Fddqv/TwwZYFx4sar3xtqSYMtNHADrXlv6ksMWH30n95HiYsH7clnSA SyelIva6B1Pewg+F+U3FHRK1SqvZ2RPSMX4uT5vpch3Q499FHd018gJLNRvbcxY9 K0AVtrNyIjCAfJ8H3HBnH/tV/ZbmFxfv0/Pl0hc8w+bcZ0WvACf5MG4UCMXRoD3Q aQMnwicVgQ4XGGqrDLgcNUTc3pDHui0FzfH80nJrMIfkIlK/CxCq9eLrCk7YaEy2 8sKa3dTc5ZxYmLgXYcpNicxzUZSUvUlU6EXHPusyZ5azmuFOjp8= -----END CERTIFICATE-----Generated at Wed Dec 3 14:44:29 2025 by rpki-client