This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/f418dea2-a891-49ef-a06f-fe7f2c83258b/0/42199169944ED22D1FEACFCC408FAEE536FBB6AF.mft File: 42199169944ED22D1FEACFCC408FAEE536FBB6AF.mft (raw, json) Hash identifier: dv6ArVYQeNsA9bIB+hYyPxsc2PChnuTJ/0xa0RuGo9k= Subject key identifier: 75:8F:1B:A9:70:97:3C:B4:45:01:5F:63:4E:A0:A0:6D:EA:47:C0:9A Authority key identifier: 42:19:91:69:94:4E:D2:2D:1F:EA:CF:CC:40:8F:AE:E5:36:FB:B6:AF Certificate issuer: /CN=42199169944ED22D1FEACFCC408FAEE536FBB6AF Certificate serial: 664F5F617D83FF5C492F6F19E361BEB5AA96F2FC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42199169944ED22D1FEACFCC408FAEE536FBB6AF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f418dea2-a891-49ef-a06f-fe7f2c83258b/0/42199169944ED22D1FEACFCC408FAEE536FBB6AF.mft Manifest number: 01C7 Signing time: Thu 18 Dec 2025 08:21:19 +0000 Manifest this update: Thu 18 Dec 2025 08:16:19 +0000 Manifest next update: Sun 21 Dec 2025 13:52:19 +0000 Files and hashes: 1: 3130332e3134382e38362e302f32332d3234203d3e20313430343136.roa (hash: Im9caE29LrIEyyw1N4Depx5/vTj8Y8+2ed9BSKso6Pk=) 2: 42199169944ED22D1FEACFCC408FAEE536FBB6AF.crl (hash: ieiyECm3NRT2kXE3vp2Ej65aI8iEgs59dLcppWMLhoA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f418dea2-a891-49ef-a06f-fe7f2c83258b/0/42199169944ED22D1FEACFCC408FAEE536FBB6AF.crl rsync://repo-rpki.idnic.net/repo/f418dea2-a891-49ef-a06f-fe7f2c83258b/0/42199169944ED22D1FEACFCC408FAEE536FBB6AF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42199169944ED22D1FEACFCC408FAEE536FBB6AF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 13:52:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:4f:5f:61:7d:83:ff:5c:49:2f:6f:19:e3:61:be:b5:aa:96:f2:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42199169944ED22D1FEACFCC408FAEE536FBB6AF Validity Not Before: Dec 18 08:16:19 2025 GMT Not After : Dec 21 13:52:19 2025 GMT Subject: CN=758F1BA970973CB445015F634EA0A06DEA47C09A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:a3:4e:5d:52:94:b7:33:09:3c:87:da:d9:86: 68:5f:c6:42:28:a4:c4:04:6a:2e:de:16:aa:6a:e8: f3:eb:0e:76:9f:d5:2d:93:df:e8:20:12:93:e6:99: 13:83:42:02:65:fd:0f:58:3a:f0:4f:a0:d3:df:5a: 1d:b4:25:1a:27:5c:bd:c4:f6:5f:7f:61:57:f8:f5: 9a:d4:f2:58:7f:ba:1e:ee:69:ee:6b:aa:78:64:ae: 21:9e:1f:cf:d4:02:3b:8d:94:22:6a:21:4d:ac:7b: 36:02:5f:12:7b:28:ba:0d:9c:54:88:1b:6a:fb:84: 8c:9e:12:99:d7:55:98:d0:b0:90:ec:1e:17:20:f4: d1:14:a2:53:b2:40:a4:ad:43:3e:e2:4d:39:aa:05: 23:59:6f:8c:a6:54:70:c3:e0:fa:5c:da:67:a8:32: c2:b3:be:d0:a0:d2:e1:4f:f9:1e:f3:11:c0:c9:ca: 3d:a6:c9:1d:a3:d8:d5:1b:07:83:e1:ac:04:bc:a3: e7:0b:60:4f:0d:59:6d:c3:10:75:41:99:f8:7e:5b: 24:9b:a1:12:47:60:67:e4:9e:c1:05:64:a2:8c:73: da:a2:bf:7a:63:8c:b6:18:cc:e2:78:b9:f2:ab:40: ba:88:3e:9f:45:7c:ab:93:5c:06:18:62:8d:77:34: 9c:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:8F:1B:A9:70:97:3C:B4:45:01:5F:63:4E:A0:A0:6D:EA:47:C0:9A X509v3 Authority Key Identifier: keyid:42:19:91:69:94:4E:D2:2D:1F:EA:CF:CC:40:8F:AE:E5:36:FB:B6:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f418dea2-a891-49ef-a06f-fe7f2c83258b/0/42199169944ED22D1FEACFCC408FAEE536FBB6AF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42199169944ED22D1FEACFCC408FAEE536FBB6AF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f418dea2-a891-49ef-a06f-fe7f2c83258b/0/42199169944ED22D1FEACFCC408FAEE536FBB6AF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:fa:d3:f3:2c:ea:39:71:02:72:b8:09:15:12:5f:a6:40:83: 45:d9:bc:62:45:2d:b4:00:77:7d:a1:39:1d:25:43:a1:2b:78: 88:a8:84:9d:b1:bb:5a:5e:87:a6:a2:b6:4b:f1:f8:b1:0d:11: 06:b2:84:24:f8:16:fa:31:47:5d:2b:06:a9:9c:b0:d7:1a:d3: 0b:f2:f7:52:fc:03:2c:17:f4:6b:3d:ae:04:9c:5e:42:3c:84: 09:8f:30:90:05:7f:6f:ec:1c:15:54:65:f6:ed:0c:d2:74:f6: 27:b5:04:46:6c:2f:ec:8b:29:c0:45:5a:cc:74:25:70:50:00: 25:06:02:7c:e8:8d:3f:ea:f7:aa:39:db:19:f0:fd:fd:09:ce: 26:29:47:23:ca:d9:e5:61:c7:92:1d:ac:04:b5:8f:ce:d0:af: bf:b2:d0:2d:75:a0:bd:71:83:de:7f:88:7a:bf:b7:f4:cd:f2: 01:81:42:82:72:3c:1d:be:c6:0c:69:75:26:91:42:38:d9:9f: c6:d0:73:c9:54:c8:4b:bd:f5:94:f4:36:bb:f1:4c:2f:d1:04: 99:d1:e2:0c:fe:b3:d3:4a:a2:32:4c:fe:77:02:46:ad:b7:bf: 7b:6c:d1:c4:58:5a:53:7f:3d:1f:03:f1:74:3b:b4:d6:04:d1: ee:70:be:ec -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZk9fYX2D/1xJL28Z42G+taqW8vwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDIxOTkxNjk5NDRFRDIyRDFGRUFDRkNDNDA4RkFFRTUz NkZCQjZBRjAeFw0yNTEyMTgwODE2MTlaFw0yNTEyMjExMzUyMTlaMDMxMTAvBgNV BAMTKDc1OEYxQkE5NzA5NzNDQjQ0NTAxNUY2MzRFQTBBMDZERUE0N0MwOUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjo05dUpS3Mwk8h9rZhmhfxkIo pMQEai7eFqpq6PPrDnaf1S2T3+ggEpPmmRODQgJl/Q9YOvBPoNPfWh20JRonXL3E 9l9/YVf49ZrU8lh/uh7uae5rqnhkriGeH8/UAjuNlCJqIU2sezYCXxJ7KLoNnFSI G2r7hIyeEpnXVZjQsJDsHhcg9NEUolOyQKStQz7iTTmqBSNZb4ymVHDD4Ppc2meo MsKzvtCg0uFP+R7zEcDJyj2myR2j2NUbB4PhrAS8o+cLYE8NWW3DEHVBmfh+WySb oRJHYGfknsEFZKKMc9qiv3pjjLYYzOJ4ufKrQLqIPp9FfKuTXAYYYo13NJw9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdY8bqXCXPLRFAV9jTqCgbepHwJowHwYDVR0j BBgwFoAUQhmRaZRO0i0f6s/MQI+u5Tb7tq8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NDE4ZGVhMi1hODkxLTQ5ZWYtYTA2Zi1mZTdmMmM4MzI1OGIvMC80MjE5OTE2OTk0 NEVEMjJEMUZFQUNGQ0M0MDhGQUVFNTM2RkJCNkFGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDIxOTkxNjk5NDRFRDIyRDFGRUFDRkNDNDA4RkFFRTUzNkZC QjZBRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjQxOGRlYTItYTg5MS00OWVmLWEw NmYtZmU3ZjJjODMyNThiLzAvNDIxOTkxNjk5NDRFRDIyRDFGRUFDRkNDNDA4RkFF RTUzNkZCQjZBRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFX60/Ms6jlxAnK4CRUSX6ZAg0XZvGJFLbQA d32hOR0lQ6EreIiohJ2xu1peh6aitkvx+LENEQayhCT4FvoxR10rBqmcsNca0wvy 91L8AywX9Gs9rgScXkI8hAmPMJAFf2/sHBVUZfbtDNJ09ie1BEZsL+yLKcBFWsx0 JXBQACUGAnzojT/q96o52xnw/f0JziYpRyPK2eVhx5IdrAS1j87Qr7+y0C11oL1x g95/iHq/t/TN8gGBQoJyPB2+xgxpdSaRQjjZn8bQc8lUyEu99ZT0NrvxTC/RBJnR 4gz+s9NKojJM/ncCRq23v3ts0cRYWlN/PR8D8XQ7tNYE0e5wvuw= -----END CERTIFICATE-----Generated at Fri Dec 19 11:16:59 2025 by rpki-client