This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/f418dea2-a891-49ef-a06f-fe7f2c83258b/0/42199169944ED22D1FEACFCC408FAEE536FBB6AF.mft File: 42199169944ED22D1FEACFCC408FAEE536FBB6AF.mft (raw, json) Hash identifier: 9/in/03zupEcN0vCekvoV/6hsnKwUmmjiWTQE6iezRo= Subject key identifier: 9B:30:21:EC:C3:4F:76:63:9E:7D:2D:FC:A4:37:5E:93:C1:92:1B:26 Authority key identifier: 42:19:91:69:94:4E:D2:2D:1F:EA:CF:CC:40:8F:AE:E5:36:FB:B6:AF Certificate issuer: /CN=42199169944ED22D1FEACFCC408FAEE536FBB6AF Certificate serial: 4B691C2656407FCD3587B7A44F18000F3F8C4FB5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42199169944ED22D1FEACFCC408FAEE536FBB6AF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f418dea2-a891-49ef-a06f-fe7f2c83258b/0/42199169944ED22D1FEACFCC408FAEE536FBB6AF.mft Manifest number: 01BF Signing time: Mon 01 Dec 2025 11:11:18 +0000 Manifest this update: Mon 01 Dec 2025 11:06:18 +0000 Manifest next update: Thu 04 Dec 2025 22:58:18 +0000 Files and hashes: 1: 42199169944ED22D1FEACFCC408FAEE536FBB6AF.crl (hash: mzEb2wdrzRJs5bwsg8wUqOpgfKX46NCUvFnVYrnCd9c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f418dea2-a891-49ef-a06f-fe7f2c83258b/0/42199169944ED22D1FEACFCC408FAEE536FBB6AF.crl rsync://repo-rpki.idnic.net/repo/f418dea2-a891-49ef-a06f-fe7f2c83258b/0/42199169944ED22D1FEACFCC408FAEE536FBB6AF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42199169944ED22D1FEACFCC408FAEE536FBB6AF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Dec 2025 22:58:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:69:1c:26:56:40:7f:cd:35:87:b7:a4:4f:18:00:0f:3f:8c:4f:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42199169944ED22D1FEACFCC408FAEE536FBB6AF Validity Not Before: Dec 1 11:06:18 2025 GMT Not After : Dec 4 22:58:18 2025 GMT Subject: CN=9B3021ECC34F76639E7D2DFCA4375E93C1921B26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:5d:b7:a2:d7:c3:6f:ce:46:8d:6d:dc:45:ce: a8:b9:e0:82:7f:4d:48:f4:ae:1f:9e:13:13:a2:25: f2:f3:b4:81:e8:7d:7f:4e:a3:f7:69:af:ae:79:a5: fc:d8:17:77:4c:c2:2a:ce:f3:97:76:0a:43:df:ad: 09:ab:a1:59:bf:d4:64:46:e9:5f:35:cd:17:d2:85: 05:ae:18:23:a4:bf:37:59:cb:57:55:e0:65:d5:b2: d8:39:09:e5:1e:a9:4d:4a:66:f0:06:42:da:3c:11: 22:c3:54:fe:ca:27:82:9d:08:f4:84:a2:e3:78:2d: ca:95:b9:e7:fc:aa:9a:fd:ba:ef:ee:eb:09:9e:8f: 74:a5:66:c1:8a:2f:88:fd:71:53:e6:7c:a3:fb:2d: 36:80:af:9d:12:48:e4:a1:ac:d0:9e:d0:8d:d4:e3: 80:10:74:37:6a:82:04:3f:fa:bc:dd:dd:fc:a3:ca: c7:20:71:e4:4f:68:78:ea:bb:7a:70:47:07:1f:f3: 05:2c:a1:c0:97:ad:1c:e1:55:1f:b0:86:a3:aa:ad: f4:6a:18:34:c6:13:57:4f:e7:14:e8:2a:ac:52:d1: f4:c8:13:b4:a2:d2:17:1e:50:e8:e5:48:85:fc:ad: 7d:ea:7a:36:21:b1:2d:97:3e:59:04:d4:b1:e5:10: 8b:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:30:21:EC:C3:4F:76:63:9E:7D:2D:FC:A4:37:5E:93:C1:92:1B:26 X509v3 Authority Key Identifier: keyid:42:19:91:69:94:4E:D2:2D:1F:EA:CF:CC:40:8F:AE:E5:36:FB:B6:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f418dea2-a891-49ef-a06f-fe7f2c83258b/0/42199169944ED22D1FEACFCC408FAEE536FBB6AF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42199169944ED22D1FEACFCC408FAEE536FBB6AF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f418dea2-a891-49ef-a06f-fe7f2c83258b/0/42199169944ED22D1FEACFCC408FAEE536FBB6AF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:30:59:4a:44:ea:83:3d:d0:0b:59:e8:0c:2c:33:56:65:ab: 25:e4:e1:e7:2d:0d:b8:fa:62:40:56:66:f7:37:b7:6a:53:d1: e6:3e:f4:a4:68:5a:dd:fd:59:56:f6:95:bf:e9:b3:75:d8:7f: 8c:7f:5c:f3:8e:90:19:75:29:97:ee:4c:03:62:b1:d0:34:e6: e8:58:8f:e5:a5:ee:d1:f7:24:2b:f7:b3:b6:3b:29:9b:b5:fb: 28:65:8d:70:ef:c0:f5:4f:a7:89:ed:61:19:34:ad:b1:d1:07: 75:38:31:78:9c:3c:c4:e9:b3:83:36:70:ba:58:bb:e9:e5:68: 8d:84:8d:ac:59:ca:da:0b:16:45:b7:46:19:e4:1d:58:ea:6d: e4:dd:34:2c:a6:73:6c:a3:9a:51:35:47:88:db:bd:07:0c:1f: f7:29:53:2e:7d:73:cc:1a:97:a8:5f:d7:4f:d2:95:76:c1:11: 13:2d:90:5f:d3:f1:40:1d:4d:11:da:1f:71:1c:d0:2d:38:cd: 38:59:cb:d7:a3:00:8d:20:34:ee:94:3b:24:ba:1e:13:1c:06: 7b:e8:58:fc:87:84:5b:e8:29:71:32:67:72:6b:f3:23:8e:f3: c8:fc:23:77:6f:59:b1:b6:33:74:2e:7c:11:1b:5d:91:4f:0e: 35:8f:ec:b9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS2kcJlZAf801h7ekTxgADz+MT7UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDIxOTkxNjk5NDRFRDIyRDFGRUFDRkNDNDA4RkFFRTUz NkZCQjZBRjAeFw0yNTEyMDExMTA2MThaFw0yNTEyMDQyMjU4MThaMDMxMTAvBgNV BAMTKDlCMzAyMUVDQzM0Rjc2NjM5RTdEMkRGQ0E0Mzc1RTkzQzE5MjFCMjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD2Xbei18NvzkaNbdxFzqi54IJ/ TUj0rh+eExOiJfLztIHofX9Oo/dpr655pfzYF3dMwirO85d2CkPfrQmroVm/1GRG 6V81zRfShQWuGCOkvzdZy1dV4GXVstg5CeUeqU1KZvAGQto8ESLDVP7KJ4KdCPSE ouN4LcqVuef8qpr9uu/u6wmej3SlZsGKL4j9cVPmfKP7LTaAr50SSOShrNCe0I3U 44AQdDdqggQ/+rzd3fyjyscgceRPaHjqu3pwRwcf8wUsocCXrRzhVR+whqOqrfRq GDTGE1dP5xToKqxS0fTIE7Si0hceUOjlSIX8rX3qejYhsS2XPlkE1LHlEIsjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmzAh7MNPdmOefS38pDdek8GSGyYwHwYDVR0j BBgwFoAUQhmRaZRO0i0f6s/MQI+u5Tb7tq8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NDE4ZGVhMi1hODkxLTQ5ZWYtYTA2Zi1mZTdmMmM4MzI1OGIvMC80MjE5OTE2OTk0 NEVEMjJEMUZFQUNGQ0M0MDhGQUVFNTM2RkJCNkFGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDIxOTkxNjk5NDRFRDIyRDFGRUFDRkNDNDA4RkFFRTUzNkZC QjZBRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjQxOGRlYTItYTg5MS00OWVmLWEw NmYtZmU3ZjJjODMyNThiLzAvNDIxOTkxNjk5NDRFRDIyRDFGRUFDRkNDNDA4RkFF RTUzNkZCQjZBRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF4wWUpE6oM90AtZ6AwsM1ZlqyXk4ectDbj6 YkBWZvc3t2pT0eY+9KRoWt39WVb2lb/ps3XYf4x/XPOOkBl1KZfuTANisdA05uhY j+Wl7tH3JCv3s7Y7KZu1+yhljXDvwPVPp4ntYRk0rbHRB3U4MXicPMTps4M2cLpY u+nlaI2EjaxZytoLFkW3RhnkHVjqbeTdNCymc2yjmlE1R4jbvQcMH/cpUy59c8wa l6hf10/SlXbBERMtkF/T8UAdTRHaH3Ec0C04zThZy9ejAI0gNO6UOyS6HhMcBnvo WPyHhFvoKXEyZ3Jr8yOO88j8I3dvWbG2M3QufBEbXZFPDjWP7Lk= -----END CERTIFICATE-----Generated at Wed Dec 3 16:06:09 2025 by rpki-client