This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d835cb4a-2fb9-40d7-b155-dcce7cb00293/0/A42F07BEA859C831526717AB1D092E11E7890BDD.mft File: A42F07BEA859C831526717AB1D092E11E7890BDD.mft (raw, json) Hash identifier: gDh5O2DgOBy5GP3DE495ey7LsWZj+9PlGS4c5C/k6dk= Subject key identifier: C0:E2:60:B3:74:B6:B4:A8:CB:F1:BF:54:01:FD:17:8E:2D:9B:CB:15 Authority key identifier: A4:2F:07:BE:A8:59:C8:31:52:67:17:AB:1D:09:2E:11:E7:89:0B:DD Certificate issuer: /CN=A42F07BEA859C831526717AB1D092E11E7890BDD Certificate serial: 0FBB56EE8277D9EC464802767CC8369AD50667FF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A42F07BEA859C831526717AB1D092E11E7890BDD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d835cb4a-2fb9-40d7-b155-dcce7cb00293/0/A42F07BEA859C831526717AB1D092E11E7890BDD.mft Manifest number: 01C2 Signing time: Tue 23 Dec 2025 08:01:46 +0000 Manifest this update: Tue 23 Dec 2025 07:56:46 +0000 Manifest next update: Fri 26 Dec 2025 11:55:46 +0000 Files and hashes: 1: A42F07BEA859C831526717AB1D092E11E7890BDD.crl (hash: 5HaoNOrakDjl/7wEZpXgYnXi0m4wk9sehMjMrFaauaE=) 2: 3130332e3130392e32342e302f32342d3234203d3e20313337333131.roa (hash: oJ+JZotG4pgzmmZEecq6pD6dBlLqMF5qvUlg8uJjk3E=) 3: 3130332e3130392e32352e302f32342d3234203d3e20313337333131.roa (hash: 7NKvITl62S90UpwEPzaOqbyqSHza97/1Ajqk2WKR9R8=) 4: 3130332e3130392e32372e302f32342d3234203d3e20313337333131.roa (hash: r6XX55Z5GiGICbCeAD8AU4m9N2hnvF3QzH54gdTf7xc=) 5: 3130332e3130392e32362e302f32342d3234203d3e20313337333131.roa (hash: 7ElLxeF9NMId5JMzZBtmpoup1Mi3rpbDW9f/VToW4OQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d835cb4a-2fb9-40d7-b155-dcce7cb00293/0/A42F07BEA859C831526717AB1D092E11E7890BDD.crl rsync://repo-rpki.idnic.net/repo/d835cb4a-2fb9-40d7-b155-dcce7cb00293/0/A42F07BEA859C831526717AB1D092E11E7890BDD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A42F07BEA859C831526717AB1D092E11E7890BDD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 11:55:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:bb:56:ee:82:77:d9:ec:46:48:02:76:7c:c8:36:9a:d5:06:67:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A42F07BEA859C831526717AB1D092E11E7890BDD Validity Not Before: Dec 23 07:56:46 2025 GMT Not After : Dec 26 11:55:46 2025 GMT Subject: CN=C0E260B374B6B4A8CBF1BF5401FD178E2D9BCB15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:36:04:4b:01:8c:0e:08:47:7e:f6:33:cd:47: 01:46:e5:76:bb:e1:d1:99:ac:f1:03:31:0e:e7:3d: c1:f1:1c:d3:00:dc:65:82:c8:53:6f:de:d9:12:cc: 83:97:0a:e8:e8:7d:cd:6a:b3:dc:bc:42:da:ec:48: 93:d7:6a:d0:78:7c:6d:23:aa:c9:64:45:ca:15:2a: b5:3a:de:47:99:8b:bb:b3:ed:5c:1b:8c:20:ac:f8: 5d:97:31:89:b0:6d:4a:7c:48:7b:1d:0d:d7:38:e1: 22:1c:d1:13:f3:dc:5e:8d:b4:c5:38:13:f0:9a:1a: 18:63:c6:cd:1f:d8:64:88:e6:b7:5f:f2:27:ef:1d: 34:22:d3:05:25:21:ae:10:21:ae:59:ad:ee:7e:d9: 24:e4:eb:d9:7f:45:77:db:ef:1c:9f:52:c1:f2:d2: 59:f7:8d:60:95:95:90:71:0e:be:1b:05:27:ff:d2: d9:42:58:60:8d:60:b1:f7:07:ac:ef:c5:79:28:45: 47:6d:5f:b9:34:08:da:b8:88:e8:34:09:cb:73:37: 55:9a:6e:8d:64:e1:bb:ae:74:da:90:7f:0a:98:53: 8f:25:87:f0:d7:2c:e7:79:5e:83:fd:30:cf:7a:e0: 62:08:02:e9:b5:e2:36:9f:9f:e6:3c:97:20:29:b7: c4:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:E2:60:B3:74:B6:B4:A8:CB:F1:BF:54:01:FD:17:8E:2D:9B:CB:15 X509v3 Authority Key Identifier: keyid:A4:2F:07:BE:A8:59:C8:31:52:67:17:AB:1D:09:2E:11:E7:89:0B:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d835cb4a-2fb9-40d7-b155-dcce7cb00293/0/A42F07BEA859C831526717AB1D092E11E7890BDD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A42F07BEA859C831526717AB1D092E11E7890BDD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d835cb4a-2fb9-40d7-b155-dcce7cb00293/0/A42F07BEA859C831526717AB1D092E11E7890BDD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:a0:b2:c2:60:c7:bf:6c:75:b7:ff:98:48:ef:1e:60:6a:a4: c1:30:f6:24:85:60:0e:a5:22:7b:e2:fa:8a:6c:54:28:4d:df: 4a:09:8d:6f:1a:85:ff:86:6a:bb:fa:7b:28:b3:f6:da:e5:bd: cc:61:39:52:1f:7e:af:84:65:d1:fb:10:ce:e8:b8:7e:dd:b5: 4e:b5:aa:2b:08:37:2f:2e:1f:53:96:09:96:03:19:d5:5a:3f: 52:b7:39:7a:58:cd:7b:30:7e:ee:b2:59:98:96:f8:e3:df:a5: c4:88:9b:e1:91:9d:a2:c5:d4:a4:ed:3f:8e:66:d7:51:eb:e2: be:92:89:da:71:ae:db:66:e6:f4:0a:b5:74:2e:1e:42:d5:ea: d7:d1:15:d5:38:44:62:04:83:f3:e9:78:52:48:92:02:7a:c5: e9:11:20:81:60:52:29:06:ce:1d:84:c2:f9:ed:43:32:90:aa: d4:64:bb:6d:92:37:ff:36:31:cb:9b:aa:33:bd:29:ab:79:e8: d0:95:a4:f7:41:de:00:51:6f:2c:59:0d:a6:01:50:39:5d:bd: 8b:1d:7d:5c:83:b1:0f:e3:9a:db:2c:99:ab:b4:35:62:e5:ee: ba:ac:42:ef:11:3b:5f:5f:41:e3:b4:10:d2:e5:0a:55:e5:51: f7:84:19:b8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD7tW7oJ32exGSAJ2fMg2mtUGZ/8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTQyRjA3QkVBODU5QzgzMTUyNjcxN0FCMUQwOTJFMTFF Nzg5MEJERDAeFw0yNTEyMjMwNzU2NDZaFw0yNTEyMjYxMTU1NDZaMDMxMTAvBgNV BAMTKEMwRTI2MEIzNzRCNkI0QThDQkYxQkY1NDAxRkQxNzhFMkQ5QkNCMTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwNgRLAYwOCEd+9jPNRwFG5Xa7 4dGZrPEDMQ7nPcHxHNMA3GWCyFNv3tkSzIOXCujofc1qs9y8QtrsSJPXatB4fG0j qslkRcoVKrU63keZi7uz7VwbjCCs+F2XMYmwbUp8SHsdDdc44SIc0RPz3F6NtMU4 E/CaGhhjxs0f2GSI5rdf8ifvHTQi0wUlIa4QIa5Zre5+2STk69l/RXfb7xyfUsHy 0ln3jWCVlZBxDr4bBSf/0tlCWGCNYLH3B6zvxXkoRUdtX7k0CNq4iOg0CctzN1Wa bo1k4buudNqQfwqYU48lh/DXLOd5XoP9MM964GIIAum14jafn+Y8lyApt8THAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwOJgs3S2tKjL8b9UAf0Xji2byxUwHwYDVR0j BBgwFoAUpC8HvqhZyDFSZxerHQkuEeeJC90wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ODM1Y2I0YS0yZmI5LTQwZDctYjE1NS1kY2NlN2NiMDAyOTMvMC9BNDJGMDdCRUE4 NTlDODMxNTI2NzE3QUIxRDA5MkUxMUU3ODkwQkRELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTQyRjA3QkVBODU5QzgzMTUyNjcxN0FCMUQwOTJFMTFFNzg5 MEJERC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDgzNWNiNGEtMmZiOS00MGQ3LWIx NTUtZGNjZTdjYjAwMjkzLzAvQTQyRjA3QkVBODU5QzgzMTUyNjcxN0FCMUQwOTJF MTFFNzg5MEJERC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAWgssJgx79sdbf/mEjvHmBqpMEw9iSFYA6l Invi+opsVChN30oJjW8ahf+Garv6eyiz9trlvcxhOVIffq+EZdH7EM7ouH7dtU61 qisINy8uH1OWCZYDGdVaP1K3OXpYzXswfu6yWZiW+OPfpcSIm+GRnaLF1KTtP45m 11Hr4r6Sidpxrttm5vQKtXQuHkLV6tfRFdU4RGIEg/PpeFJIkgJ6xekRIIFgUikG zh2EwvntQzKQqtRku22SN/82McubqjO9Kat56NCVpPdB3gBRbyxZDaYBUDldvYsd fVyDsQ/jmtssmau0NWLl7rqsQu8RO19fQeO0ENLlClXlUfeEGbg= -----END CERTIFICATE-----Generated at Wed Dec 24 20:23:40 2025 by rpki-client