This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/0401b2d1-01ca-40e8-bf77-986159867a04/0/43A0899A11D5A51202F1304338672AF19B201A74.mft File: 43A0899A11D5A51202F1304338672AF19B201A74.mft (raw, json) Hash identifier: jO2QkEDgvcw/3pTuWW9D8rNqsgc+WeOnuTMbn7CwnBc= Subject key identifier: A5:3E:D0:0F:1A:B5:C0:EA:5F:DB:C1:D3:B0:4E:07:3B:4F:CC:93:3E Authority key identifier: 43:A0:89:9A:11:D5:A5:12:02:F1:30:43:38:67:2A:F1:9B:20:1A:74 Certificate issuer: /CN=43A0899A11D5A51202F1304338672AF19B201A74 Certificate serial: 5B411033F19F70CF5780D935FFB35B01F867F36A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/43A0899A11D5A51202F1304338672AF19B201A74.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0401b2d1-01ca-40e8-bf77-986159867a04/0/43A0899A11D5A51202F1304338672AF19B201A74.mft Manifest number: 0403 Signing time: Wed 03 Dec 2025 05:52:06 +0000 Manifest this update: Wed 03 Dec 2025 05:47:06 +0000 Manifest next update: Sat 06 Dec 2025 11:44:06 +0000 Files and hashes: 1: 43A0899A11D5A51202F1304338672AF19B201A74.crl (hash: x4rXjkqzjKyITI149Co6CqifqUEuUHGirM1Pm4TjLFg=) 2: 3130332e32392e3231322e302f32322d3234203d3e203538333737.roa (hash: bEv5NJFvGjCqOM99MFNub18kUBXqluJLuz63DD7/xZ4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0401b2d1-01ca-40e8-bf77-986159867a04/0/43A0899A11D5A51202F1304338672AF19B201A74.crl rsync://repo-rpki.idnic.net/repo/0401b2d1-01ca-40e8-bf77-986159867a04/0/43A0899A11D5A51202F1304338672AF19B201A74.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/43A0899A11D5A51202F1304338672AF19B201A74.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 11:44:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:41:10:33:f1:9f:70:cf:57:80:d9:35:ff:b3:5b:01:f8:67:f3:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43A0899A11D5A51202F1304338672AF19B201A74 Validity Not Before: Dec 3 05:47:06 2025 GMT Not After : Dec 6 11:44:06 2025 GMT Subject: CN=A53ED00F1AB5C0EA5FDBC1D3B04E073B4FCC933E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:74:ce:ad:8e:60:65:5d:91:e4:e2:01:9f:32: 98:3b:34:d5:4b:e5:e2:48:e4:eb:e9:91:ff:ea:4c: 96:f7:21:55:01:e0:1a:a3:29:e1:e8:9c:23:59:84: 32:9c:5a:22:a7:b4:af:cb:06:20:96:2b:76:d6:e0: 78:d6:f1:14:a6:b8:96:8f:bd:d4:a4:b1:96:dd:5c: 3a:da:13:b7:7a:ab:f1:8d:f5:b2:63:85:8e:82:65: e9:84:aa:58:38:f0:be:d8:93:10:b9:e0:fc:48:21: 45:6e:48:1d:ba:0c:90:0d:b5:6c:15:10:a7:93:61: 7a:57:f5:30:fb:9c:f8:64:eb:ac:5f:e8:f2:87:cb: e3:67:de:d6:83:5d:c6:11:d5:6c:4b:69:98:d3:6c: ed:a2:4c:e3:69:18:43:d7:22:b0:d3:fd:3b:24:b5: 4c:97:46:a8:07:aa:ca:b2:fa:1f:1a:cd:4f:18:d7: 7f:a9:8a:d7:53:67:ab:c2:b2:cd:43:48:dd:7f:8c: b0:c9:10:15:ed:36:5e:fd:1b:6d:fd:25:1a:40:f1: 40:79:68:a6:2a:e3:a2:3b:40:c5:64:e9:dc:3b:f3: 31:54:f5:ca:8c:3b:56:af:12:40:80:bf:23:21:28: 99:79:ae:ec:6b:6a:08:5e:4e:c5:a2:86:03:38:b6: e3:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:3E:D0:0F:1A:B5:C0:EA:5F:DB:C1:D3:B0:4E:07:3B:4F:CC:93:3E X509v3 Authority Key Identifier: keyid:43:A0:89:9A:11:D5:A5:12:02:F1:30:43:38:67:2A:F1:9B:20:1A:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0401b2d1-01ca-40e8-bf77-986159867a04/0/43A0899A11D5A51202F1304338672AF19B201A74.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/43A0899A11D5A51202F1304338672AF19B201A74.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0401b2d1-01ca-40e8-bf77-986159867a04/0/43A0899A11D5A51202F1304338672AF19B201A74.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:6b:5b:08:19:38:05:c4:68:0d:b9:fc:eb:d4:76:f2:96:4d: 75:94:d3:79:ad:23:1c:fe:3a:32:79:96:ed:ce:09:e9:90:b6: 61:a2:52:8c:dd:ca:bc:c8:39:32:fb:f8:ac:c6:2f:01:e4:8e: 0d:47:02:47:69:ae:d2:8f:89:9c:3c:5e:a5:59:1d:91:e5:22: 66:8e:0c:3c:32:fa:e7:6b:a1:b3:61:05:9a:d1:2d:b7:2c:33: 08:26:c0:6f:8c:24:4f:b3:85:81:23:ce:b1:10:da:fd:45:7c: 13:1f:f1:39:8a:74:52:81:e7:cc:ee:b2:35:5c:56:ef:cb:44: 3a:58:58:93:9e:7a:47:da:25:28:16:2f:e6:dd:3e:d0:7a:a0: c1:30:02:4e:84:c0:d7:c2:2b:ce:ff:46:a5:6f:cf:92:ed:0a: 09:36:b0:07:f8:0e:52:f6:1d:4f:85:39:c1:5d:ab:7c:ae:5b: 91:2f:54:2b:d0:49:a6:6a:2c:6d:42:8c:48:5c:77:94:0c:83: 38:6e:6e:77:a3:89:e4:fd:01:f2:b3:f0:6b:c0:bd:ac:49:46: 98:77:42:4f:4e:57:39:b9:8c:43:cb:55:7b:17:81:ea:9a:76: c3:3b:b5:97:8b:1f:c7:cb:38:e5:f5:44:1a:cf:6c:0a:9d:f8: 09:53:53:0f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUW0EQM/GfcM9XgNk1/7NbAfhn82owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDNBMDg5OUExMUQ1QTUxMjAyRjEzMDQzMzg2NzJBRjE5 QjIwMUE3NDAeFw0yNTEyMDMwNTQ3MDZaFw0yNTEyMDYxMTQ0MDZaMDMxMTAvBgNV BAMTKEE1M0VEMDBGMUFCNUMwRUE1RkRCQzFEM0IwNEUwNzNCNEZDQzkzM0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2dM6tjmBlXZHk4gGfMpg7NNVL 5eJI5Ovpkf/qTJb3IVUB4BqjKeHonCNZhDKcWiKntK/LBiCWK3bW4HjW8RSmuJaP vdSksZbdXDraE7d6q/GN9bJjhY6CZemEqlg48L7YkxC54PxIIUVuSB26DJANtWwV EKeTYXpX9TD7nPhk66xf6PKHy+Nn3taDXcYR1WxLaZjTbO2iTONpGEPXIrDT/Tsk tUyXRqgHqsqy+h8azU8Y13+pitdTZ6vCss1DSN1/jLDJEBXtNl79G239JRpA8UB5 aKYq46I7QMVk6dw78zFU9cqMO1avEkCAvyMhKJl5ruxragheTsWihgM4tuNjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpT7QDxq1wOpf28HTsE4HO0/Mkz4wHwYDVR0j BBgwFoAUQ6CJmhHVpRIC8TBDOGcq8ZsgGnQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NDAxYjJkMS0wMWNhLTQwZTgtYmY3Ny05ODYxNTk4NjdhMDQvMC80M0EwODk5QTEx RDVBNTEyMDJGMTMwNDMzODY3MkFGMTlCMjAxQTc0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDNBMDg5OUExMUQ1QTUxMjAyRjEzMDQzMzg2NzJBRjE5QjIw MUE3NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDQwMWIyZDEtMDFjYS00MGU4LWJm NzctOTg2MTU5ODY3YTA0LzAvNDNBMDg5OUExMUQ1QTUxMjAyRjEzMDQzMzg2NzJB RjE5QjIwMUE3NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADRrWwgZOAXEaA25/OvUdvKWTXWU03mtIxz+ OjJ5lu3OCemQtmGiUozdyrzIOTL7+KzGLwHkjg1HAkdprtKPiZw8XqVZHZHlImaO DDwy+udrobNhBZrRLbcsMwgmwG+MJE+zhYEjzrEQ2v1FfBMf8TmKdFKB58zusjVc Vu/LRDpYWJOeekfaJSgWL+bdPtB6oMEwAk6EwNfCK87/RqVvz5LtCgk2sAf4DlL2 HU+FOcFdq3yuW5EvVCvQSaZqLG1CjEhcd5QMgzhubnejieT9AfKz8GvAvaxJRph3 Qk9OVzm5jEPLVXsXgeqadsM7tZeLH8fLOOX1RBrPbAqd+AlTUw8= -----END CERTIFICATE-----Generated at Wed Dec 3 13:56:31 2025 by rpki-client