This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d371929d-c3d0-4daa-b5fd-a249560d5d04/0/A142E54B1173D871802220D7946F31C1C8F55F58.mft File: A142E54B1173D871802220D7946F31C1C8F55F58.mft (raw, json) Hash identifier: uiApHq3K5M6khHU/8TQ0J58pK9LNvMHI3MJiXo9lyJc= Subject key identifier: 3F:E2:5A:BA:B7:9B:5B:3B:89:5C:7B:82:09:84:5C:7E:A4:D5:14:BB Authority key identifier: A1:42:E5:4B:11:73:D8:71:80:22:20:D7:94:6F:31:C1:C8:F5:5F:58 Certificate issuer: /CN=A142E54B1173D871802220D7946F31C1C8F55F58 Certificate serial: 230433941203B31998857CCCF8BBA4C0A436B4B8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A142E54B1173D871802220D7946F31C1C8F55F58.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d371929d-c3d0-4daa-b5fd-a249560d5d04/0/A142E54B1173D871802220D7946F31C1C8F55F58.mft Manifest number: 46 Signing time: Sun 21 Dec 2025 02:40:00 +0000 Manifest this update: Sun 21 Dec 2025 02:35:00 +0000 Manifest next update: Wed 24 Dec 2025 09:27:00 +0000 Files and hashes: 1: 3130332e34392e3232392e302f32342d3234203d3e203633383638.roa (hash: bojMt0gtubfTBb5QRBM0eDsyEh+eiJmKiv8uVqn90p8=) 2: A142E54B1173D871802220D7946F31C1C8F55F58.crl (hash: pK136q1l7vEB5n9SN69jynmtGShgFrDRLYTsVf5ev+k=) 3: 3130332e34392e3233312e302f32342d3234203d3e203633383638.roa (hash: A87x9izjeE8fUDhqMlkHjoCuxbSOiZqmsAQhFIKjo7Y=) 4: 3130332e34392e3233302e302f32342d3234203d3e203633383638.roa (hash: OBFtgkraA2mAt61IcdsL1WjQ+6oatnIwsFiBr9g1HRk=) 5: 3130332e34392e3232382e302f32342d3234203d3e203633383638.roa (hash: +fz1OVHlNgOBqr0lbQQ+JDq3kgo82i16sacdT062DE8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d371929d-c3d0-4daa-b5fd-a249560d5d04/0/A142E54B1173D871802220D7946F31C1C8F55F58.crl rsync://repo-rpki.idnic.net/repo/d371929d-c3d0-4daa-b5fd-a249560d5d04/0/A142E54B1173D871802220D7946F31C1C8F55F58.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A142E54B1173D871802220D7946F31C1C8F55F58.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Dec 2025 07:39:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:04:33:94:12:03:b3:19:98:85:7c:cc:f8:bb:a4:c0:a4:36:b4:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A142E54B1173D871802220D7946F31C1C8F55F58 Validity Not Before: Dec 21 02:35:00 2025 GMT Not After : Dec 24 09:27:00 2025 GMT Subject: CN=3FE25ABAB79B5B3B895C7B8209845C7EA4D514BB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:7c:e0:d0:27:8d:ea:be:46:fc:2a:23:e6:51: b9:36:f6:59:73:1b:4f:7e:38:fa:13:d6:82:a7:0d: 70:45:17:ed:e6:13:d1:0a:1b:1f:0a:00:f4:54:c3: 23:36:84:a7:5b:6b:59:fc:86:08:7a:c2:86:bb:66: df:88:26:53:c5:22:fd:3b:5a:5c:7c:8a:cb:03:68: 16:f7:61:39:ab:3d:59:88:34:6c:5a:dc:9d:ca:55: ce:74:a7:5b:6e:90:6b:b3:13:4c:b1:93:01:6d:c8: 29:11:2e:d6:c7:c7:64:d8:19:4c:63:5c:83:f0:63: 8c:e7:05:e2:33:2e:d7:9e:0b:0f:7a:03:fa:1e:42: 0b:ce:24:88:aa:b2:bb:5d:f6:78:cb:c8:5d:33:dc: 23:c1:b1:40:e3:6c:36:49:b2:08:2a:0b:fa:25:1e: 83:0b:7b:6b:33:9f:f5:01:d5:c9:90:4c:52:c9:07: 42:42:b3:29:1c:c4:51:c3:77:da:6a:63:cf:ee:7e: db:2f:96:e3:5d:73:f3:55:ff:b6:db:67:01:0a:5e: 92:0a:cc:67:0c:17:d8:16:98:e8:ca:45:d8:df:53: 61:e3:c4:55:8d:bb:f8:02:d7:46:01:b7:ed:e2:0e: 81:8a:5d:79:9a:25:03:f9:e5:ac:3c:2e:97:0a:cc: cb:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:E2:5A:BA:B7:9B:5B:3B:89:5C:7B:82:09:84:5C:7E:A4:D5:14:BB X509v3 Authority Key Identifier: keyid:A1:42:E5:4B:11:73:D8:71:80:22:20:D7:94:6F:31:C1:C8:F5:5F:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d371929d-c3d0-4daa-b5fd-a249560d5d04/0/A142E54B1173D871802220D7946F31C1C8F55F58.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A142E54B1173D871802220D7946F31C1C8F55F58.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d371929d-c3d0-4daa-b5fd-a249560d5d04/0/A142E54B1173D871802220D7946F31C1C8F55F58.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:d6:b8:d8:db:64:85:b9:11:8e:53:5f:e4:a8:ec:0e:21:75: 35:23:49:f0:49:69:a4:f3:7c:fb:bc:43:ff:86:c2:69:55:f8: ab:3e:f1:7b:89:fe:a1:10:79:91:c6:53:dd:a4:e4:19:37:81: ef:e4:f2:3e:ea:83:fd:f2:d4:17:82:db:8c:6f:89:ff:cc:c2: 6d:5c:5b:0e:08:69:1a:2c:db:b5:ed:5b:38:2c:52:fe:cd:00: 8c:31:09:84:80:91:2f:36:ff:e4:c1:32:9a:60:d2:65:7d:22: 82:33:61:36:21:62:36:84:36:a7:7b:df:39:e4:c1:17:fd:85: 65:93:d0:9e:ef:32:a7:eb:8f:e1:09:c8:07:d9:ae:ce:e0:6a: d1:3b:ec:ed:d1:b1:d7:f8:6b:20:f5:33:8e:57:c4:f8:31:e1: ae:2a:32:0c:d1:22:c2:07:a6:73:fc:6c:9b:e8:d0:1c:79:9e: 61:f0:d7:cc:88:4c:17:5a:9d:cf:85:e3:ff:8a:85:e8:db:4c: 1f:be:89:93:84:d5:df:3f:8f:37:d5:8d:da:e8:91:cb:e6:00: 8f:17:50:f1:33:34:ae:02:5d:0c:72:cc:30:d8:ae:da:4e:64: e9:5a:7c:fd:34:93:c0:80:f6:bd:35:9a:6a:ff:b3:f2:27:6e: c5:6e:cb:86 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIwQzlBIDsxmYhXzM+LukwKQ2tLgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTE0MkU1NEIxMTczRDg3MTgwMjIyMEQ3OTQ2RjMxQzFD OEY1NUY1ODAeFw0yNTEyMjEwMjM1MDBaFw0yNTEyMjQwOTI3MDBaMDMxMTAvBgNV BAMTKDNGRTI1QUJBQjc5QjVCM0I4OTVDN0I4MjA5ODQ1QzdFQTRENTE0QkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZfODQJ43qvkb8KiPmUbk29llz G09+OPoT1oKnDXBFF+3mE9EKGx8KAPRUwyM2hKdba1n8hgh6woa7Zt+IJlPFIv07 Wlx8issDaBb3YTmrPVmINGxa3J3KVc50p1tukGuzE0yxkwFtyCkRLtbHx2TYGUxj XIPwY4znBeIzLteeCw96A/oeQgvOJIiqsrtd9njLyF0z3CPBsUDjbDZJsggqC/ol HoMLe2szn/UB1cmQTFLJB0JCsykcxFHDd9pqY8/uftsvluNdc/NV/7bbZwEKXpIK zGcMF9gWmOjKRdjfU2HjxFWNu/gC10YBt+3iDoGKXXmaJQP55aw8LpcKzMvxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUP+JaurebWzuJXHuCCYRcfqTVFLswHwYDVR0j BBgwFoAUoULlSxFz2HGAIiDXlG8xwcj1X1gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MzcxOTI5ZC1jM2QwLTRkYWEtYjVmZC1hMjQ5NTYwZDVkMDQvMC9BMTQyRTU0QjEx NzNEODcxODAyMjIwRDc5NDZGMzFDMUM4RjU1RjU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTE0MkU1NEIxMTczRDg3MTgwMjIyMEQ3OTQ2RjMxQzFDOEY1 NUY1OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDM3MTkyOWQtYzNkMC00ZGFhLWI1 ZmQtYTI0OTU2MGQ1ZDA0LzAvQTE0MkU1NEIxMTczRDg3MTgwMjIyMEQ3OTQ2RjMx QzFDOEY1NUY1OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD/WuNjbZIW5EY5TX+So7A4hdTUjSfBJaaTz fPu8Q/+GwmlV+Ks+8XuJ/qEQeZHGU92k5Bk3ge/k8j7qg/3y1BeC24xvif/Mwm1c Ww4IaRos27XtWzgsUv7NAIwxCYSAkS82/+TBMppg0mV9IoIzYTYhYjaENqd73znk wRf9hWWT0J7vMqfrj+EJyAfZrs7gatE77O3Rsdf4ayD1M45XxPgx4a4qMgzRIsIH pnP8bJvo0Bx5nmHw18yITBdanc+F4/+KhejbTB++iZOE1d8/jzfVjdrokcvmAI8X UPEzNK4CXQxyzDDYrtpOZOlafP00k8CA9r01mmr/s/InbsVuy4Y= -----END CERTIFICATE-----Generated at Mon Dec 22 07:51:05 2025 by rpki-client