This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/f9003d6c-95f1-47a4-9d5d-f7b48caaa7f4/0/42CB30013F9704EFBDCF784FCD60289C7620A373.mft File: 42CB30013F9704EFBDCF784FCD60289C7620A373.mft (raw, json) Hash identifier: AEEsNSV7mpni97lh6p9EXhSVqkk1pa4SVpFCbShi73U= Subject key identifier: 05:C1:F3:8B:3D:2D:0F:F9:2A:1C:39:57:F9:54:A9:F7:BE:4F:5B:74 Authority key identifier: 42:CB:30:01:3F:97:04:EF:BD:CF:78:4F:CD:60:28:9C:76:20:A3:73 Certificate issuer: /CN=42CB30013F9704EFBDCF784FCD60289C7620A373 Certificate serial: 3FB029F80C7476C9225C566C4C1DB1B4DB415C1F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42CB30013F9704EFBDCF784FCD60289C7620A373.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f9003d6c-95f1-47a4-9d5d-f7b48caaa7f4/0/42CB30013F9704EFBDCF784FCD60289C7620A373.mft Manifest number: 03A4 Signing time: Wed 03 Dec 2025 08:51:15 +0000 Manifest this update: Wed 03 Dec 2025 08:46:15 +0000 Manifest next update: Sat 06 Dec 2025 12:20:15 +0000 Files and hashes: 1: 3130332e3136392e3133352e302f32342d3234203d3e20313432333338.roa (hash: tZygjXNqZieNjL+HqAvvCVSbJQiTp3/pMsS78j175rQ=) 2: 3130332e3136392e3133342e302f32342d3234203d3e20313432333338.roa (hash: hMyDLqAom528DiTqwsKMUbv/O7C6Y2ZAhArZmLvzcpE=) 3: 3130332e3136392e3133342e302f32332d3233203d3e20313432333338.roa (hash: PLelRX92KnqBZTiq93z7FJFIC0ok4NpLF8ErJ3rGKfw=) 4: 42CB30013F9704EFBDCF784FCD60289C7620A373.crl (hash: 8KKAOb/Dxmh6WT1xGr6eqWV8+YwtJ4rrCftNOFBE8J0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f9003d6c-95f1-47a4-9d5d-f7b48caaa7f4/0/42CB30013F9704EFBDCF784FCD60289C7620A373.crl rsync://repo-rpki.idnic.net/repo/f9003d6c-95f1-47a4-9d5d-f7b48caaa7f4/0/42CB30013F9704EFBDCF784FCD60289C7620A373.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42CB30013F9704EFBDCF784FCD60289C7620A373.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:b0:29:f8:0c:74:76:c9:22:5c:56:6c:4c:1d:b1:b4:db:41:5c:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42CB30013F9704EFBDCF784FCD60289C7620A373 Validity Not Before: Dec 3 08:46:15 2025 GMT Not After : Dec 6 12:20:15 2025 GMT Subject: CN=05C1F38B3D2D0FF92A1C3957F954A9F7BE4F5B74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:45:29:d9:ee:7e:b8:b5:d7:dd:dd:b8:06:94: a8:72:bb:e1:e9:56:89:41:c8:6f:00:90:37:c3:fe: ae:ea:a9:9f:40:11:a2:a1:b7:e2:9c:4a:a9:28:10: 64:da:d1:35:55:77:7f:35:83:3f:83:d2:6c:4f:75: 14:d3:fd:00:6b:fb:93:62:ea:ed:94:69:2d:3c:95: 88:13:17:41:97:84:61:fa:92:03:b9:9b:17:5b:2b: 73:c9:a4:d1:d2:a3:9f:cc:d2:2a:70:5d:1b:99:81: b6:ca:6a:c7:49:0a:fd:26:2d:f7:4c:20:cf:04:96: 2e:ef:36:85:12:40:0a:57:a8:ad:b9:50:f9:86:e0: c6:ba:fc:2a:a8:7a:af:f1:4c:5d:51:df:70:35:6a: 88:f7:d8:1b:a9:18:e7:33:12:de:6e:66:ee:03:3c: e1:ca:bc:37:14:e2:70:a6:1f:b2:15:ee:02:0b:d6: a4:ae:e2:f2:9b:83:a8:91:81:bb:cb:2b:07:b1:e7: 6c:d8:b0:61:d3:7e:a9:eb:d4:a9:7c:23:c5:ca:0d: 17:db:4b:1b:ce:c5:ce:b1:81:c8:01:a0:83:e9:88: b3:8f:36:c5:c8:da:fa:21:ed:0c:51:92:04:42:e9: 16:12:93:21:86:36:bf:f9:9f:2e:7a:73:5d:1f:af: f9:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:C1:F3:8B:3D:2D:0F:F9:2A:1C:39:57:F9:54:A9:F7:BE:4F:5B:74 X509v3 Authority Key Identifier: keyid:42:CB:30:01:3F:97:04:EF:BD:CF:78:4F:CD:60:28:9C:76:20:A3:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f9003d6c-95f1-47a4-9d5d-f7b48caaa7f4/0/42CB30013F9704EFBDCF784FCD60289C7620A373.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42CB30013F9704EFBDCF784FCD60289C7620A373.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f9003d6c-95f1-47a4-9d5d-f7b48caaa7f4/0/42CB30013F9704EFBDCF784FCD60289C7620A373.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:63:89:64:9b:67:bf:3e:59:91:2a:0e:0d:f4:ac:b5:d2:46: 34:d2:b3:dc:a3:9b:b5:ab:b5:64:46:17:c3:ea:5d:9a:2b:62: 25:4a:12:d4:12:d2:19:f4:ee:90:aa:15:b1:74:da:ee:eb:d5: 08:1a:bf:21:72:11:ff:c4:d9:d0:07:cd:40:00:61:7d:04:39: f0:21:0e:fc:44:e6:6f:13:f5:7a:50:9d:87:b7:60:10:42:2c: c4:f3:b8:59:6f:1f:ff:d3:86:ed:0d:21:0e:ae:fe:f8:7b:8f: 4c:57:1f:72:a9:83:75:5b:e6:bf:55:33:42:be:f4:15:14:fd: 2b:8e:cb:99:7a:a3:05:04:4e:3d:1b:af:bd:3c:b9:be:4e:26: de:2b:94:3b:9f:9a:19:79:c9:7d:e3:d3:bf:b0:87:46:8c:f6: f8:03:89:b1:27:92:92:e7:5a:8c:0b:6c:9d:df:50:8d:82:48: 9a:6e:d6:f3:23:73:d1:1a:3b:a2:bf:f4:d7:21:e1:ad:05:7e: c3:1a:b0:9e:5f:c4:d3:b6:8b:39:95:f5:5d:d0:6b:90:72:c2: b1:38:a5:14:18:44:1b:b2:ef:fc:bc:86:81:2e:d6:4c:99:37: 4b:2b:0a:3e:9e:c9:be:32:dd:67:f9:49:51:9e:22:f1:e2:03: 80:d4:e7:10 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP7Ap+Ax0dskiXFZsTB2xtNtBXB8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDJDQjMwMDEzRjk3MDRFRkJEQ0Y3ODRGQ0Q2MDI4OUM3 NjIwQTM3MzAeFw0yNTEyMDMwODQ2MTVaFw0yNTEyMDYxMjIwMTVaMDMxMTAvBgNV BAMTKDA1QzFGMzhCM0QyRDBGRjkyQTFDMzk1N0Y5NTRBOUY3QkU0RjVCNzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHRSnZ7n64tdfd3bgGlKhyu+Hp VolByG8AkDfD/q7qqZ9AEaKht+KcSqkoEGTa0TVVd381gz+D0mxPdRTT/QBr+5Ni 6u2UaS08lYgTF0GXhGH6kgO5mxdbK3PJpNHSo5/M0ipwXRuZgbbKasdJCv0mLfdM IM8Eli7vNoUSQApXqK25UPmG4Ma6/Cqoeq/xTF1R33A1aoj32BupGOczEt5uZu4D POHKvDcU4nCmH7IV7gIL1qSu4vKbg6iRgbvLKwex52zYsGHTfqnr1Kl8I8XKDRfb SxvOxc6xgcgBoIPpiLOPNsXI2voh7QxRkgRC6RYSkyGGNr/5ny56c10fr/krAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBcHziz0tD/kqHDlX+VSp975PW3QwHwYDVR0j BBgwFoAUQsswAT+XBO+9z3hPzWAonHYgo3MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m OTAwM2Q2Yy05NWYxLTQ3YTQtOWQ1ZC1mN2I0OGNhYWE3ZjQvMC80MkNCMzAwMTNG OTcwNEVGQkRDRjc4NEZDRDYwMjg5Qzc2MjBBMzczLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDJDQjMwMDEzRjk3MDRFRkJEQ0Y3ODRGQ0Q2MDI4OUM3NjIw QTM3My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjkwMDNkNmMtOTVmMS00N2E0LTlk NWQtZjdiNDhjYWFhN2Y0LzAvNDJDQjMwMDEzRjk3MDRFRkJEQ0Y3ODRGQ0Q2MDI4 OUM3NjIwQTM3My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACxjiWSbZ78+WZEqDg30rLXSRjTSs9yjm7Wr tWRGF8PqXZorYiVKEtQS0hn07pCqFbF02u7r1QgavyFyEf/E2dAHzUAAYX0EOfAh DvxE5m8T9XpQnYe3YBBCLMTzuFlvH//Thu0NIQ6u/vh7j0xXH3Kpg3Vb5r9VM0K+ 9BUU/SuOy5l6owUETj0br708ub5OJt4rlDufmhl5yX3j07+wh0aM9vgDibEnkpLn WowLbJ3fUI2CSJpu1vMjc9EaO6K/9Nch4a0FfsMasJ5fxNO2izmV9V3Qa5BywrE4 pRQYRBuy7/y8hoEu1kyZN0srCj6eyb4y3Wf5SVGeIvHiA4DU5xA= -----END CERTIFICATE-----Generated at Wed Dec 3 14:58:09 2025 by rpki-client