This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7fc5a1cc-cc5e-4e58-8df4-f886718313aa/0/142A78CA51D88042BA512A1BB46D6DF44F63BBD7.mft File: 142A78CA51D88042BA512A1BB46D6DF44F63BBD7.mft (raw, json) Hash identifier: dALPSJsdzuqCvdJTxwm4KhYWrY49yUUYAJG/8mrbfN4= Subject key identifier: 3B:2D:27:2D:9D:10:D5:92:B4:B8:25:40:13:F7:DB:B6:91:4F:A8:66 Authority key identifier: 14:2A:78:CA:51:D8:80:42:BA:51:2A:1B:B4:6D:6D:F4:4F:63:BB:D7 Certificate issuer: /CN=142A78CA51D88042BA512A1BB46D6DF44F63BBD7 Certificate serial: 015252E36DE65C0D7D8949851D249375FB2952D7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/142A78CA51D88042BA512A1BB46D6DF44F63BBD7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7fc5a1cc-cc5e-4e58-8df4-f886718313aa/0/142A78CA51D88042BA512A1BB46D6DF44F63BBD7.mft Manifest number: E7 Signing time: Mon 22 Dec 2025 21:50:40 +0000 Manifest this update: Mon 22 Dec 2025 21:45:40 +0000 Manifest next update: Fri 26 Dec 2025 06:01:40 +0000 Files and hashes: 1: 142A78CA51D88042BA512A1BB46D6DF44F63BBD7.crl (hash: 4rU5GVivtipSZJlHJbDdpJ7rNSnZYnVLI1tTaYALPOQ=) 2: 3136302e32302e3234302e302f32342d3234203d3e20313532383035.roa (hash: Ags6qEj8G1tNVxqoTo734mNPZsVwGq25ouTkNgTgiXA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7fc5a1cc-cc5e-4e58-8df4-f886718313aa/0/142A78CA51D88042BA512A1BB46D6DF44F63BBD7.crl rsync://repo-rpki.idnic.net/repo/7fc5a1cc-cc5e-4e58-8df4-f886718313aa/0/142A78CA51D88042BA512A1BB46D6DF44F63BBD7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/142A78CA51D88042BA512A1BB46D6DF44F63BBD7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 06:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:52:52:e3:6d:e6:5c:0d:7d:89:49:85:1d:24:93:75:fb:29:52:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=142A78CA51D88042BA512A1BB46D6DF44F63BBD7 Validity Not Before: Dec 22 21:45:40 2025 GMT Not After : Dec 26 06:01:40 2025 GMT Subject: CN=3B2D272D9D10D592B4B8254013F7DBB6914FA866 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:0f:23:a6:1f:14:9d:86:1f:1c:98:eb:18:ff: 3d:4d:cc:76:91:cd:2c:a3:cb:68:a0:7d:69:16:2d: e1:af:d9:f7:60:47:0c:b2:70:66:a4:b2:9b:11:3b: 16:36:ca:b1:a1:92:8d:44:ee:e0:d3:c2:63:5d:7d: 53:be:80:dd:5b:f1:3b:81:e9:20:ec:41:1e:f4:9f: 36:c5:c9:e6:61:c8:f9:60:f7:e0:5b:3f:51:c4:25: 69:50:97:29:00:6f:74:f0:f7:2b:a9:da:de:67:09: f3:47:af:e3:e1:25:f4:fd:ec:cf:ee:ac:14:20:97: 50:7c:dd:53:04:9c:25:f2:7d:2a:36:11:f2:8e:aa: 54:30:03:10:95:b5:8b:c9:a5:08:43:1e:85:6f:a7: 85:6c:fa:a7:9d:58:7f:93:cb:ba:3b:61:cd:93:93: a8:f1:09:dc:58:08:af:76:b2:25:77:0f:c3:4e:31: 4c:de:2b:3b:c9:6a:c9:0b:00:45:94:ea:16:8c:37: 07:22:68:fd:1c:a1:7a:2c:43:1e:44:d2:71:f3:bb: 65:e1:79:66:68:f9:7b:63:e6:37:36:77:76:2c:41: c9:3a:e9:b8:b2:40:00:d1:f0:a5:65:33:54:7b:12: 83:f3:7d:e9:e8:ee:41:97:6b:e1:70:21:67:db:90: 70:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:2D:27:2D:9D:10:D5:92:B4:B8:25:40:13:F7:DB:B6:91:4F:A8:66 X509v3 Authority Key Identifier: keyid:14:2A:78:CA:51:D8:80:42:BA:51:2A:1B:B4:6D:6D:F4:4F:63:BB:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7fc5a1cc-cc5e-4e58-8df4-f886718313aa/0/142A78CA51D88042BA512A1BB46D6DF44F63BBD7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/142A78CA51D88042BA512A1BB46D6DF44F63BBD7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7fc5a1cc-cc5e-4e58-8df4-f886718313aa/0/142A78CA51D88042BA512A1BB46D6DF44F63BBD7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:77:60:58:78:6a:38:f8:75:15:23:8b:5d:c3:d9:7b:d7:db: 41:73:10:d6:5d:70:e1:a9:d6:79:d7:0a:36:a5:00:de:74:58: 6b:2a:4d:42:ad:62:f9:ba:01:a9:89:0f:dc:68:85:50:53:4c: 3b:cf:36:52:5d:c4:fe:a3:74:92:d6:98:70:3e:00:6b:81:27: c5:8e:18:f8:d4:e9:0c:1c:5e:c1:51:c7:81:5d:61:73:fd:8c: 90:43:f8:53:ae:80:31:02:40:4b:6e:0b:99:44:18:c3:3d:98: 75:5c:10:1b:fa:f7:cd:e0:7c:85:c4:7a:81:1a:77:a9:f9:ee: 3b:36:79:e6:b8:7b:67:0b:dd:fc:c3:4e:aa:43:6a:dd:fe:fe: 53:a4:52:9f:76:f8:8f:0b:b4:44:7b:2d:42:d7:15:f9:7a:3a: e8:8a:15:88:7d:1f:9f:c5:0b:55:70:2e:74:6a:30:fd:e5:c6: 5e:64:86:17:95:5b:84:9a:f9:44:de:03:0b:c0:d6:42:20:3f: 96:c6:25:36:21:f3:4a:f5:e4:3b:13:13:d3:f2:a4:a7:ee:2a: 8b:39:da:7d:c9:35:c0:af:62:40:b2:98:f6:06:29:56:21:8a: e9:5b:ff:65:9a:d8:94:80:b9:e4:61:85:3d:95:84:2f:d6:75: bc:99:6f:7d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAVJS423mXA19iUmFHSSTdfspUtcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTQyQTc4Q0E1MUQ4ODA0MkJBNTEyQTFCQjQ2RDZERjQ0 RjYzQkJENzAeFw0yNTEyMjIyMTQ1NDBaFw0yNTEyMjYwNjAxNDBaMDMxMTAvBgNV BAMTKDNCMkQyNzJEOUQxMEQ1OTJCNEI4MjU0MDEzRjdEQkI2OTE0RkE4NjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzDyOmHxSdhh8cmOsY/z1NzHaR zSyjy2igfWkWLeGv2fdgRwyycGakspsROxY2yrGhko1E7uDTwmNdfVO+gN1b8TuB 6SDsQR70nzbFyeZhyPlg9+BbP1HEJWlQlykAb3Tw9yup2t5nCfNHr+PhJfT97M/u rBQgl1B83VMEnCXyfSo2EfKOqlQwAxCVtYvJpQhDHoVvp4Vs+qedWH+Ty7o7Yc2T k6jxCdxYCK92siV3D8NOMUzeKzvJaskLAEWU6haMNwciaP0coXosQx5E0nHzu2Xh eWZo+Xtj5jc2d3YsQck66biyQADR8KVlM1R7EoPzfeno7kGXa+FwIWfbkHBPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOy0nLZ0Q1ZK0uCVAE/fbtpFPqGYwHwYDVR0j BBgwFoAUFCp4ylHYgEK6USobtG1t9E9ju9cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZmM1YTFjYy1jYzVlLTRlNTgtOGRmNC1mODg2NzE4MzEzYWEvMC8xNDJBNzhDQTUx RDg4MDQyQkE1MTJBMUJCNDZENkRGNDRGNjNCQkQ3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMTQyQTc4Q0E1MUQ4ODA0MkJBNTEyQTFCQjQ2RDZERjQ0RjYz QkJENy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2ZjNWExY2MtY2M1ZS00ZTU4LThk ZjQtZjg4NjcxODMxM2FhLzAvMTQyQTc4Q0E1MUQ4ODA0MkJBNTEyQTFCQjQ2RDZE RjQ0RjYzQkJENy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGx3YFh4ajj4dRUji13D2XvX20FzENZdcOGp 1nnXCjalAN50WGsqTUKtYvm6AamJD9xohVBTTDvPNlJdxP6jdJLWmHA+AGuBJ8WO GPjU6QwcXsFRx4FdYXP9jJBD+FOugDECQEtuC5lEGMM9mHVcEBv6983gfIXEeoEa d6n57js2eea4e2cL3fzDTqpDat3+/lOkUp92+I8LtER7LULXFfl6OuiKFYh9H5/F C1VwLnRqMP3lxl5khheVW4Sa+UTeAwvA1kIgP5bGJTYh80r15DsTE9PypKfuKos5 2n3JNcCvYkCymPYGKVYhiulb/2Wa2JSAueRhhT2VhC/WdbyZb30= -----END CERTIFICATE-----Generated at Wed Dec 24 20:03:29 2025 by rpki-client