This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/51292911-da7d-4636-b153-02a4b66205b5/0/42CD38BF795E0099BD3E143DD8383778ADEAE850.mft File: 42CD38BF795E0099BD3E143DD8383778ADEAE850.mft (raw, json) Hash identifier: VdbOiNxDod5R/NYnfqlLd+eYA5eY7J8gJI+d9PTn//o= Subject key identifier: 3D:58:AF:F9:C3:F5:AC:B9:A3:7D:35:8B:05:EA:64:DC:3E:FE:AE:6E Authority key identifier: 42:CD:38:BF:79:5E:00:99:BD:3E:14:3D:D8:38:37:78:AD:EA:E8:50 Certificate issuer: /CN=42CD38BF795E0099BD3E143DD8383778ADEAE850 Certificate serial: 062405B606914EE444162B08193DC4E25996DD7D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42CD38BF795E0099BD3E143DD8383778ADEAE850.cer Subject info access: rsync://repo-rpki.idnic.net/repo/51292911-da7d-4636-b153-02a4b66205b5/0/42CD38BF795E0099BD3E143DD8383778ADEAE850.mft Manifest number: 0500 Signing time: Thu 18 Dec 2025 14:42:00 +0000 Manifest this update: Thu 18 Dec 2025 14:37:00 +0000 Manifest next update: Mon 22 Dec 2025 01:43:00 +0000 Files and hashes: 1: 3130332e3135382e39372e302f32342d3234203d3e20313431313330.roa (hash: EWWFrGWk8wRtOz9/UzZazsAdPEBVpBh7hezsdiFevxg=) 2: 3130332e3135382e39362e302f32342d3234203d3e20313431313330.roa (hash: QMIo9UWJEyfgKZ8vcrZkyTvmeP7BIt+ZlmY9Lk3KGaA=) 3: 42CD38BF795E0099BD3E143DD8383778ADEAE850.crl (hash: Bneo4zYCeO7dSDMaErY4RdLuY9TMlKuOe69yVFdB2rA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/51292911-da7d-4636-b153-02a4b66205b5/0/42CD38BF795E0099BD3E143DD8383778ADEAE850.crl rsync://repo-rpki.idnic.net/repo/51292911-da7d-4636-b153-02a4b66205b5/0/42CD38BF795E0099BD3E143DD8383778ADEAE850.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42CD38BF795E0099BD3E143DD8383778ADEAE850.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 01:43:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:24:05:b6:06:91:4e:e4:44:16:2b:08:19:3d:c4:e2:59:96:dd:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42CD38BF795E0099BD3E143DD8383778ADEAE850 Validity Not Before: Dec 18 14:37:00 2025 GMT Not After : Dec 22 01:43:00 2025 GMT Subject: CN=3D58AFF9C3F5ACB9A37D358B05EA64DC3EFEAE6E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:4d:2f:fc:cf:55:65:af:e7:bd:05:dd:b7:94: 34:97:81:de:25:b6:f4:d4:23:4e:3a:d4:7e:ae:f5: 21:cf:ff:30:89:a0:24:46:e2:39:5a:fe:bb:38:18: e7:69:69:46:13:83:7a:47:d5:8e:39:13:35:c6:11: 61:bf:52:ee:04:c9:2f:ce:cc:85:a0:45:ce:fb:a2: 8f:73:57:c8:de:63:e9:76:6c:7b:74:3f:73:dd:49: 7a:d7:27:04:c0:43:70:5c:8b:25:15:fb:da:33:b6: aa:22:46:a2:43:d2:e6:62:ae:9d:9e:85:e5:b1:40: 31:d5:ca:cd:ad:0f:39:06:50:7a:37:bd:53:18:68: d3:55:4c:b3:7f:6f:8c:2a:e7:fd:8b:ad:b3:78:70: b0:07:56:83:b2:41:66:10:d7:94:af:7c:94:21:d9: d2:ad:33:48:80:9c:86:d5:d9:a7:b1:24:fc:c6:e9: d3:a6:07:45:82:ed:2f:e3:fb:9c:29:d1:57:9d:17: 73:e8:02:33:a5:57:f4:2b:c5:85:ec:47:86:b0:33: e3:fd:db:8b:e9:27:6e:f6:9f:b9:15:e1:ae:40:a8: ad:7f:19:f9:b8:5a:31:f9:09:bc:3f:8f:b4:fe:3b: 2d:54:3e:c5:c3:65:c8:94:85:a7:f6:ad:25:d8:91: 46:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:58:AF:F9:C3:F5:AC:B9:A3:7D:35:8B:05:EA:64:DC:3E:FE:AE:6E X509v3 Authority Key Identifier: keyid:42:CD:38:BF:79:5E:00:99:BD:3E:14:3D:D8:38:37:78:AD:EA:E8:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/51292911-da7d-4636-b153-02a4b66205b5/0/42CD38BF795E0099BD3E143DD8383778ADEAE850.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42CD38BF795E0099BD3E143DD8383778ADEAE850.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/51292911-da7d-4636-b153-02a4b66205b5/0/42CD38BF795E0099BD3E143DD8383778ADEAE850.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:a4:3f:6c:83:16:4c:4a:cc:23:5d:4c:fb:42:fe:46:58:be: ed:53:f5:35:40:0b:b3:cc:3f:86:a3:3d:c8:cc:62:18:a5:f2: 74:80:ed:ad:35:c1:a0:15:a5:88:03:7b:e2:4a:39:88:ec:d8: c5:81:b2:58:a8:51:99:d6:ab:cb:79:04:2f:40:a8:10:d8:af: 88:48:eb:f4:2e:4e:18:9a:2f:0a:b7:3e:69:65:fe:1a:f3:d5: bc:68:2a:d7:d8:0d:99:b4:a9:a9:32:00:dd:39:fe:6a:ad:6c: d8:e9:cb:94:28:fa:c5:30:d8:d9:04:eb:ee:e8:1a:1d:5e:97: 99:97:d0:be:fd:2e:af:32:0e:44:2a:59:c3:3e:6a:5a:2e:39: 59:32:eb:83:4b:56:44:f5:85:b3:73:aa:57:81:e4:fd:35:67: 7a:f5:c9:9c:de:8b:02:66:d5:a5:fb:16:4b:12:e2:cc:2d:e6: c1:87:9a:29:9a:e0:bd:2f:2f:f7:39:36:e3:29:1e:93:60:68: 77:e1:96:64:65:c0:d2:3c:35:38:40:f9:32:d0:68:1a:be:49: c5:cd:06:29:16:40:ff:3e:7b:92:0c:dd:9e:da:8a:a2:53:92: 5f:02:a0:e9:42:09:16:6a:07:8c:10:8d:17:00:e3:3b:6b:f3: 67:59:87:ec -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBiQFtgaRTuREFisIGT3E4lmW3X0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDJDRDM4QkY3OTVFMDA5OUJEM0UxNDNERDgzODM3NzhB REVBRTg1MDAeFw0yNTEyMTgxNDM3MDBaFw0yNTEyMjIwMTQzMDBaMDMxMTAvBgNV BAMTKDNENThBRkY5QzNGNUFDQjlBMzdEMzU4QjA1RUE2NERDM0VGRUFFNkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkTS/8z1Vlr+e9Bd23lDSXgd4l tvTUI0461H6u9SHP/zCJoCRG4jla/rs4GOdpaUYTg3pH1Y45EzXGEWG/Uu4EyS/O zIWgRc77oo9zV8jeY+l2bHt0P3PdSXrXJwTAQ3BciyUV+9oztqoiRqJD0uZirp2e heWxQDHVys2tDzkGUHo3vVMYaNNVTLN/b4wq5/2LrbN4cLAHVoOyQWYQ15SvfJQh 2dKtM0iAnIbV2aexJPzG6dOmB0WC7S/j+5wp0VedF3PoAjOlV/QrxYXsR4awM+P9 24vpJ272n7kV4a5AqK1/Gfm4WjH5Cbw/j7T+Oy1UPsXDZciUhaf2rSXYkUbFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPViv+cP1rLmjfTWLBepk3D7+rm4wHwYDVR0j BBgwFoAUQs04v3leAJm9PhQ92Dg3eK3q6FAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MTI5MjkxMS1kYTdkLTQ2MzYtYjE1My0wMmE0YjY2MjA1YjUvMC80MkNEMzhCRjc5 NUUwMDk5QkQzRTE0M0REODM4Mzc3OEFERUFFODUwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDJDRDM4QkY3OTVFMDA5OUJEM0UxNDNERDgzODM3NzhBREVB RTg1MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTEyOTI5MTEtZGE3ZC00NjM2LWIx NTMtMDJhNGI2NjIwNWI1LzAvNDJDRDM4QkY3OTVFMDA5OUJEM0UxNDNERDgzODM3 NzhBREVBRTg1MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALOkP2yDFkxKzCNdTPtC/kZYvu1T9TVAC7PM P4ajPcjMYhil8nSA7a01waAVpYgDe+JKOYjs2MWBslioUZnWq8t5BC9AqBDYr4hI 6/QuThiaLwq3Pmll/hrz1bxoKtfYDZm0qakyAN05/mqtbNjpy5Qo+sUw2NkE6+7o Gh1el5mX0L79Lq8yDkQqWcM+alouOVky64NLVkT1hbNzqleB5P01Z3r1yZzeiwJm 1aX7FksS4swt5sGHmima4L0vL/c5NuMpHpNgaHfhlmRlwNI8NThA+TLQaBq+ScXN BikWQP8+e5IM3Z7aiqJTkl8CoOlCCRZqB4wQjRcA4ztr82dZh+w= -----END CERTIFICATE-----Generated at Fri Dec 19 03:11:19 2025 by rpki-client