This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/aee2088a-c9ff-4d84-be4e-141d5b80b543/0/42467B1885830A9908EAE67935311639B090AA77.mft File: 42467B1885830A9908EAE67935311639B090AA77.mft (raw, json) Hash identifier: RA8TUl3297HSKM3ypDG2Sv7AbrvntibdWVMh+iknqbE= Subject key identifier: 58:DA:D8:53:63:76:C9:C0:85:D8:D9:60:62:26:50:21:0E:FF:CC:FB Authority key identifier: 42:46:7B:18:85:83:0A:99:08:EA:E6:79:35:31:16:39:B0:90:AA:77 Certificate issuer: /CN=42467B1885830A9908EAE67935311639B090AA77 Certificate serial: 33F1CFF5144AAF90C4290C6FD2E44B512BFA8EA3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42467B1885830A9908EAE67935311639B090AA77.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aee2088a-c9ff-4d84-be4e-141d5b80b543/0/42467B1885830A9908EAE67935311639B090AA77.mft Manifest number: 016A Signing time: Wed 24 Dec 2025 03:52:34 +0000 Manifest this update: Wed 24 Dec 2025 03:47:34 +0000 Manifest next update: Sat 27 Dec 2025 04:54:34 +0000 Files and hashes: 1: 3130332e37362e3130362e302f32332d3234203d3e20313531353737.roa (hash: DxKIyMO6WjD2qxH8BuKIvj+fKDvOwuaoHadDVnwc7A0=) 2: 42467B1885830A9908EAE67935311639B090AA77.crl (hash: +quexcek5e1314JMwAcBOxWSg3hxdXCvu4/r1BmiWow=) 3: 3130332e37362e3130372e302f32342d3234203d3e20313531353737.roa (hash: ZWtRALMquKEFwYIWcUiF1poTwDnT8MPEPPx4FTc8PK0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aee2088a-c9ff-4d84-be4e-141d5b80b543/0/42467B1885830A9908EAE67935311639B090AA77.crl rsync://repo-rpki.idnic.net/repo/aee2088a-c9ff-4d84-be4e-141d5b80b543/0/42467B1885830A9908EAE67935311639B090AA77.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42467B1885830A9908EAE67935311639B090AA77.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 04:54:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:f1:cf:f5:14:4a:af:90:c4:29:0c:6f:d2:e4:4b:51:2b:fa:8e:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42467B1885830A9908EAE67935311639B090AA77 Validity Not Before: Dec 24 03:47:34 2025 GMT Not After : Dec 27 04:54:34 2025 GMT Subject: CN=58DAD8536376C9C085D8D960622650210EFFCCFB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:a4:de:e4:ef:73:56:4f:9c:e7:ce:1a:23:c7: da:28:8d:65:66:d2:cd:6e:47:92:1a:3b:2a:c5:f2: b2:92:7b:4a:6e:a2:ca:09:88:34:15:f0:38:73:b1: ed:cb:2c:fd:39:1e:f5:fd:88:cc:cd:a8:8e:f2:a9: ab:ca:a6:eb:f4:e2:9a:13:6b:61:ed:ee:be:4f:ee: 5b:62:0e:07:20:f3:42:0e:c3:cc:27:96:48:91:35: 13:4b:24:94:4d:e5:75:8f:b7:7b:e5:18:1c:23:0b: b1:51:bf:69:5f:d0:14:1f:5d:32:ad:18:1c:e5:31: 8b:6b:f1:a0:df:f0:9e:da:86:c2:00:02:85:72:e9: 99:3d:91:68:f8:16:8a:08:7b:ed:e1:0e:d1:12:76: c4:a6:34:ed:15:d8:5e:1f:ff:8a:06:dc:c6:0f:aa: d2:e8:d7:c6:b8:ee:33:49:8d:06:c7:ee:72:30:f2: de:ff:73:cd:c5:39:22:bc:46:e3:53:51:b4:25:e6: e5:05:07:66:3c:f4:ff:0e:9c:df:41:49:25:83:dc: 41:36:02:6d:97:82:d2:dc:75:48:4c:ce:c0:4c:1c: 7f:73:2c:e7:03:f0:99:d9:b2:a6:ec:b9:76:54:e3: 75:6e:88:34:3d:ed:c5:8c:43:ae:fc:da:27:f6:cc: 75:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:DA:D8:53:63:76:C9:C0:85:D8:D9:60:62:26:50:21:0E:FF:CC:FB X509v3 Authority Key Identifier: keyid:42:46:7B:18:85:83:0A:99:08:EA:E6:79:35:31:16:39:B0:90:AA:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aee2088a-c9ff-4d84-be4e-141d5b80b543/0/42467B1885830A9908EAE67935311639B090AA77.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42467B1885830A9908EAE67935311639B090AA77.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aee2088a-c9ff-4d84-be4e-141d5b80b543/0/42467B1885830A9908EAE67935311639B090AA77.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:36:7f:dd:80:9f:c8:f0:44:c4:87:ce:28:2e:f2:aa:48:d0: 8e:c7:22:fd:4f:a4:14:7b:cc:d6:91:4f:d0:99:9a:90:81:49: bb:72:28:25:f7:6d:c7:ef:2e:30:81:45:0c:e8:91:8e:f7:43: f7:18:ea:d9:a0:ce:83:b0:27:52:af:92:af:dd:6c:40:d1:26: 90:20:63:39:06:26:24:9e:30:e0:cf:5f:2c:51:1f:79:7a:5f: f2:80:dd:63:b8:a6:e1:30:e1:d9:58:05:92:28:2e:b0:da:07: 89:30:21:3d:f0:e5:84:d2:bc:4d:ff:71:02:b7:5b:11:71:41: 47:70:ec:78:8c:c1:fb:30:a9:e3:ae:a0:a4:74:e9:7a:39:56: 23:8e:c4:e8:9d:7b:a4:60:77:1a:75:40:8f:55:4c:c0:aa:35: 11:37:e0:a7:24:2a:67:ab:d0:0a:98:4c:10:79:43:70:82:68: 98:fe:8e:7d:4f:e0:7b:8e:f6:73:9c:87:6a:6d:7b:36:80:7f: 2e:be:46:09:55:0c:d0:42:65:2f:a4:57:71:70:6d:fb:d5:dc: a0:1a:ff:c4:94:b4:a8:e7:6a:2b:17:2e:a6:61:29:19:aa:52: 5f:59:81:9f:a4:a1:71:cb:75:f4:56:e0:22:eb:67:d8:2e:8b: cc:c1:c1:39 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUM/HP9RRKr5DEKQxv0uRLUSv6jqMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDI0NjdCMTg4NTgzMEE5OTA4RUFFNjc5MzUzMTE2MzlC MDkwQUE3NzAeFw0yNTEyMjQwMzQ3MzRaFw0yNTEyMjcwNDU0MzRaMDMxMTAvBgNV BAMTKDU4REFEODUzNjM3NkM5QzA4NUQ4RDk2MDYyMjY1MDIxMEVGRkNDRkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2pN7k73NWT5znzhojx9oojWVm 0s1uR5IaOyrF8rKSe0puosoJiDQV8Dhzse3LLP05HvX9iMzNqI7yqavKpuv04poT a2Ht7r5P7ltiDgcg80IOw8wnlkiRNRNLJJRN5XWPt3vlGBwjC7FRv2lf0BQfXTKt GBzlMYtr8aDf8J7ahsIAAoVy6Zk9kWj4FooIe+3hDtESdsSmNO0V2F4f/4oG3MYP qtLo18a47jNJjQbH7nIw8t7/c83FOSK8RuNTUbQl5uUFB2Y89P8OnN9BSSWD3EE2 Am2XgtLcdUhMzsBMHH9zLOcD8JnZsqbsuXZU43VuiDQ97cWMQ6782if2zHV9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWNrYU2N2ycCF2NlgYiZQIQ7/zPswHwYDVR0j BBgwFoAUQkZ7GIWDCpkI6uZ5NTEWObCQqncwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZWUyMDg4YS1jOWZmLTRkODQtYmU0ZS0xNDFkNWI4MGI1NDMvMC80MjQ2N0IxODg1 ODMwQTk5MDhFQUU2NzkzNTMxMTYzOUIwOTBBQTc3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDI0NjdCMTg4NTgzMEE5OTA4RUFFNjc5MzUzMTE2MzlCMDkw QUE3Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWVlMjA4OGEtYzlmZi00ZDg0LWJl NGUtMTQxZDViODBiNTQzLzAvNDI0NjdCMTg4NTgzMEE5OTA4RUFFNjc5MzUzMTE2 MzlCMDkwQUE3Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIk2f92An8jwRMSHzigu8qpI0I7HIv1PpBR7 zNaRT9CZmpCBSbtyKCX3bcfvLjCBRQzokY73Q/cY6tmgzoOwJ1Kvkq/dbEDRJpAg YzkGJiSeMODPXyxRH3l6X/KA3WO4puEw4dlYBZIoLrDaB4kwIT3w5YTSvE3/cQK3 WxFxQUdw7HiMwfswqeOuoKR06Xo5ViOOxOide6Rgdxp1QI9VTMCqNRE34KckKmer 0AqYTBB5Q3CCaJj+jn1P4HuO9nOch2ptezaAfy6+RglVDNBCZS+kV3FwbfvV3KAa /8SUtKjnaisXLqZhKRmqUl9ZgZ+koXHLdfRW4CLrZ9gui8zBwTk= -----END CERTIFICATE-----Generated at Wed Dec 24 20:23:46 2025 by rpki-client