This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/f9003d6c-95f1-47a4-9d5d-f7b48caaa7f4/0/42CB30013F9704EFBDCF784FCD60289C7620A373.mft File: 42CB30013F9704EFBDCF784FCD60289C7620A373.mft (raw, json) Hash identifier: jZTvML1TAFcAdd/N73idadTsNb6pLqNbIXYWCEcQSsA= Subject key identifier: BC:34:68:E5:AA:BC:55:01:F1:88:9C:01:B5:B5:F0:2D:6C:B4:38:42 Authority key identifier: 42:CB:30:01:3F:97:04:EF:BD:CF:78:4F:CD:60:28:9C:76:20:A3:73 Certificate issuer: /CN=42CB30013F9704EFBDCF784FCD60289C7620A373 Certificate serial: 2ED8DCAA86A64375DDD70939ABD6C2ACEEE24F40 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42CB30013F9704EFBDCF784FCD60289C7620A373.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f9003d6c-95f1-47a4-9d5d-f7b48caaa7f4/0/42CB30013F9704EFBDCF784FCD60289C7620A373.mft Manifest number: 03AA Signing time: Wed 17 Dec 2025 03:01:15 +0000 Manifest this update: Wed 17 Dec 2025 02:56:15 +0000 Manifest next update: Sat 20 Dec 2025 08:15:15 +0000 Files and hashes: 1: 42CB30013F9704EFBDCF784FCD60289C7620A373.crl (hash: 3lE/HeZUIlYLw+uFMVJcq+Q0k+AI0TPV3HGTIwS4ca0=) 2: 3130332e3136392e3133342e302f32332d3233203d3e20313432333338.roa (hash: PLelRX92KnqBZTiq93z7FJFIC0ok4NpLF8ErJ3rGKfw=) 3: 3130332e3136392e3133342e302f32342d3234203d3e20313432333338.roa (hash: hMyDLqAom528DiTqwsKMUbv/O7C6Y2ZAhArZmLvzcpE=) 4: 3130332e3136392e3133352e302f32342d3234203d3e20313432333338.roa (hash: tZygjXNqZieNjL+HqAvvCVSbJQiTp3/pMsS78j175rQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f9003d6c-95f1-47a4-9d5d-f7b48caaa7f4/0/42CB30013F9704EFBDCF784FCD60289C7620A373.crl rsync://repo-rpki.idnic.net/repo/f9003d6c-95f1-47a4-9d5d-f7b48caaa7f4/0/42CB30013F9704EFBDCF784FCD60289C7620A373.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42CB30013F9704EFBDCF784FCD60289C7620A373.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 08:15:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:d8:dc:aa:86:a6:43:75:dd:d7:09:39:ab:d6:c2:ac:ee:e2:4f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42CB30013F9704EFBDCF784FCD60289C7620A373 Validity Not Before: Dec 17 02:56:15 2025 GMT Not After : Dec 20 08:15:15 2025 GMT Subject: CN=BC3468E5AABC5501F1889C01B5B5F02D6CB43842 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:72:c3:e2:4a:17:12:ca:e4:31:a9:b8:3c:ea: 6c:ee:bb:fe:a5:10:4d:f4:96:25:58:75:cf:77:a6: 4c:0e:75:58:4b:cc:91:8a:c5:9b:6f:ef:e0:56:4d: 2b:05:90:cf:d0:62:e5:ec:c2:c9:ef:30:04:c0:57: ed:60:d0:19:96:93:ff:cc:f7:ac:5a:8a:d5:aa:36: ce:94:31:1c:66:06:c8:1b:10:22:98:8b:29:4f:c0: d6:d7:64:be:53:ab:51:15:4b:f5:2d:20:fe:8e:3e: f3:cb:3c:d5:e6:d3:e3:a7:f0:7b:32:48:83:f7:e0: 35:7f:44:e7:f6:24:bb:1f:75:b5:50:c0:c4:85:c6: af:ae:97:14:80:19:10:88:ee:51:e3:07:48:bc:a2: e2:46:ea:32:3b:7a:e1:e1:93:57:cf:eb:f9:35:8e: a9:50:25:c3:23:0a:ad:20:2a:2d:51:ae:94:6e:0e: 22:e2:e1:a2:8e:18:8a:48:a0:f8:7f:a7:5c:87:ed: 40:d4:4f:5a:cf:d6:26:24:9c:49:7e:d9:10:a5:5a: 95:fa:d7:df:06:df:e4:ba:8f:d4:b1:1e:62:ed:be: a7:ea:d8:e8:0d:e7:36:00:e6:e9:3b:12:8d:9d:e1: fa:ce:6c:1e:ee:c1:17:31:88:52:1f:f3:c7:d1:aa: 4f:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:34:68:E5:AA:BC:55:01:F1:88:9C:01:B5:B5:F0:2D:6C:B4:38:42 X509v3 Authority Key Identifier: keyid:42:CB:30:01:3F:97:04:EF:BD:CF:78:4F:CD:60:28:9C:76:20:A3:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f9003d6c-95f1-47a4-9d5d-f7b48caaa7f4/0/42CB30013F9704EFBDCF784FCD60289C7620A373.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42CB30013F9704EFBDCF784FCD60289C7620A373.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f9003d6c-95f1-47a4-9d5d-f7b48caaa7f4/0/42CB30013F9704EFBDCF784FCD60289C7620A373.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:28:f0:88:af:ff:91:69:e8:e9:2d:50:d1:dc:54:c5:50:98: 59:e3:f6:b4:77:26:e0:8f:ca:11:b2:98:31:e6:8a:4b:3b:4c: ca:31:c6:e8:27:5d:c2:ec:20:72:e6:33:22:d6:47:b1:79:4d: 63:03:b9:41:a6:e0:d6:95:38:2a:0a:9e:3c:aa:88:8d:85:80: f4:a3:e4:96:ef:b6:b9:2e:bc:78:40:05:1b:96:09:be:30:a6: 9d:89:bb:e0:d8:e3:e2:37:c7:ac:c5:90:aa:75:d5:bc:62:04: 15:09:91:b8:0b:64:ad:bc:0c:9d:b0:f6:a1:0f:bc:7a:ab:72: 0f:01:8c:e3:92:10:5b:f4:1b:ac:45:44:ca:04:34:f1:50:ab: b2:f9:92:1e:75:ce:35:7f:79:60:09:c5:4e:40:e2:d6:7e:0f: 54:ae:80:eb:14:8f:31:57:85:1f:7a:69:3d:f8:ae:95:ae:b0: bf:ac:3e:2f:1a:54:0e:6a:0b:0b:e4:dd:d0:1d:8d:cd:44:26: c0:7d:9b:15:c0:c9:a4:25:35:84:f3:7e:21:7d:bb:f6:20:41: a3:9b:0e:ad:da:15:7c:cf:d4:f5:81:45:70:29:3f:32:ec:81: b3:30:7b:55:73:fb:4c:90:48:ce:d3:89:86:b4:e6:2b:04:c6: a4:e2:74:3d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULtjcqoamQ3Xd1wk5q9bCrO7iT0AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDJDQjMwMDEzRjk3MDRFRkJEQ0Y3ODRGQ0Q2MDI4OUM3 NjIwQTM3MzAeFw0yNTEyMTcwMjU2MTVaFw0yNTEyMjAwODE1MTVaMDMxMTAvBgNV BAMTKEJDMzQ2OEU1QUFCQzU1MDFGMTg4OUMwMUI1QjVGMDJENkNCNDM4NDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIcsPiShcSyuQxqbg86mzuu/6l EE30liVYdc93pkwOdVhLzJGKxZtv7+BWTSsFkM/QYuXswsnvMATAV+1g0BmWk//M 96xaitWqNs6UMRxmBsgbECKYiylPwNbXZL5Tq1EVS/UtIP6OPvPLPNXm0+On8Hsy SIP34DV/ROf2JLsfdbVQwMSFxq+ulxSAGRCI7lHjB0i8ouJG6jI7euHhk1fP6/k1 jqlQJcMjCq0gKi1RrpRuDiLi4aKOGIpIoPh/p1yH7UDUT1rP1iYknEl+2RClWpX6 198G3+S6j9SxHmLtvqfq2OgN5zYA5uk7Eo2d4frObB7uwRcxiFIf88fRqk9jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvDRo5aq8VQHxiJwBtbXwLWy0OEIwHwYDVR0j BBgwFoAUQsswAT+XBO+9z3hPzWAonHYgo3MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m OTAwM2Q2Yy05NWYxLTQ3YTQtOWQ1ZC1mN2I0OGNhYWE3ZjQvMC80MkNCMzAwMTNG OTcwNEVGQkRDRjc4NEZDRDYwMjg5Qzc2MjBBMzczLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDJDQjMwMDEzRjk3MDRFRkJEQ0Y3ODRGQ0Q2MDI4OUM3NjIw QTM3My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjkwMDNkNmMtOTVmMS00N2E0LTlk NWQtZjdiNDhjYWFhN2Y0LzAvNDJDQjMwMDEzRjk3MDRFRkJEQ0Y3ODRGQ0Q2MDI4 OUM3NjIwQTM3My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEUo8Iiv/5Fp6OktUNHcVMVQmFnj9rR3JuCP yhGymDHmiks7TMoxxugnXcLsIHLmMyLWR7F5TWMDuUGm4NaVOCoKnjyqiI2FgPSj 5JbvtrkuvHhABRuWCb4wpp2Ju+DY4+I3x6zFkKp11bxiBBUJkbgLZK28DJ2w9qEP vHqrcg8BjOOSEFv0G6xFRMoENPFQq7L5kh51zjV/eWAJxU5A4tZ+D1SugOsUjzFX hR96aT34rpWusL+sPi8aVA5qCwvk3dAdjc1EJsB9mxXAyaQlNYTzfiF9u/YgQaOb Dq3aFXzP1PWBRXApPzLsgbMwe1Vz+0yQSM7TiYa05isExqTidD0= -----END CERTIFICATE-----Generated at Thu Dec 18 06:58:58 2025 by rpki-client