This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/448407e3-2cb1-4c6e-8aeb-5e0d355e8c96/0/43E94F4D6572FA61C908F2C122712EB0A696EF96.mft File: 43E94F4D6572FA61C908F2C122712EB0A696EF96.mft (raw, json) Hash identifier: X+HjM7S5XPbDWQbnv73lxZA0TTm9YlCEvT09Zbmv21E= Subject key identifier: 0A:88:55:BE:B7:62:22:3F:58:45:68:1A:7C:D8:9F:F1:B9:75:E1:FD Authority key identifier: 43:E9:4F:4D:65:72:FA:61:C9:08:F2:C1:22:71:2E:B0:A6:96:EF:96 Certificate issuer: /CN=43E94F4D6572FA61C908F2C122712EB0A696EF96 Certificate serial: 1FE6C668CE84FA52CE4FE75BF2AC65572BB7C707 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/43E94F4D6572FA61C908F2C122712EB0A696EF96.cer Subject info access: rsync://repo-rpki.idnic.net/repo/448407e3-2cb1-4c6e-8aeb-5e0d355e8c96/0/43E94F4D6572FA61C908F2C122712EB0A696EF96.mft Manifest number: 015B Signing time: Fri 09 Jan 2026 00:30:48 +0000 Manifest this update: Fri 09 Jan 2026 00:25:48 +0000 Manifest next update: Mon 12 Jan 2026 08:25:48 +0000 Files and hashes: 1: 34352e3132362e34302e302f32332d3234203d3e203634333030.roa (hash: qxQ+6T9yrSIPoh+WZqiNWh2YyFV04+QAx96S0X8/TDk=) 2: 43E94F4D6572FA61C908F2C122712EB0A696EF96.crl (hash: oSUeHScBn/3Jhz8yqGphWqKS9iuHl+KHcZWAvVBvGT4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/448407e3-2cb1-4c6e-8aeb-5e0d355e8c96/0/43E94F4D6572FA61C908F2C122712EB0A696EF96.crl rsync://repo-rpki.idnic.net/repo/448407e3-2cb1-4c6e-8aeb-5e0d355e8c96/0/43E94F4D6572FA61C908F2C122712EB0A696EF96.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/43E94F4D6572FA61C908F2C122712EB0A696EF96.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Jan 2026 08:25:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:e6:c6:68:ce:84:fa:52:ce:4f:e7:5b:f2:ac:65:57:2b:b7:c7:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43E94F4D6572FA61C908F2C122712EB0A696EF96 Validity Not Before: Jan 9 00:25:48 2026 GMT Not After : Jan 12 08:25:48 2026 GMT Subject: CN=0A8855BEB762223F5845681A7CD89FF1B975E1FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:06:c1:cc:83:5d:dc:b9:c5:80:5b:8b:d3:80: 59:75:94:ca:ec:89:a7:8d:3e:dc:ef:0a:37:22:0b: ba:1d:dd:98:bc:4a:50:e3:f4:fa:70:fd:6e:3b:ff: eb:1e:8b:48:8a:ab:0e:c0:48:16:3e:7d:cf:b2:ca: 2f:2b:cb:fc:37:00:fb:4c:08:a2:91:bb:2d:81:bb: 11:34:2c:4d:3f:2d:05:5f:04:b7:c7:c5:c2:8b:bd: 92:b0:b0:79:9d:db:ce:c2:68:32:97:c7:09:5b:39: d3:99:e2:24:82:02:3b:da:05:2c:66:ca:56:d4:2a: ac:69:25:20:be:4d:4c:d8:ba:55:85:3d:f1:c2:01: 92:08:9e:d7:36:e7:4d:29:7e:b7:bf:49:48:fb:03: 46:1e:e3:94:e8:bc:a6:61:71:17:68:2e:a2:44:13: 61:62:a4:e4:b4:ba:a2:ae:ad:28:d2:41:8d:4b:6e: 27:d4:eb:17:3e:f6:a3:e9:b9:08:d4:28:d1:96:b8: a7:00:22:80:d3:b5:55:dc:c1:88:29:f1:8d:71:8b: b0:70:0c:15:ac:38:83:45:72:5a:60:8d:a5:3a:73: 25:7c:42:fd:f5:a0:62:4f:3c:8f:99:7b:2b:4f:90: e4:8d:bf:6e:4b:86:6f:7a:05:5d:9b:28:07:64:f7: 19:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:88:55:BE:B7:62:22:3F:58:45:68:1A:7C:D8:9F:F1:B9:75:E1:FD X509v3 Authority Key Identifier: keyid:43:E9:4F:4D:65:72:FA:61:C9:08:F2:C1:22:71:2E:B0:A6:96:EF:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/448407e3-2cb1-4c6e-8aeb-5e0d355e8c96/0/43E94F4D6572FA61C908F2C122712EB0A696EF96.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/43E94F4D6572FA61C908F2C122712EB0A696EF96.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/448407e3-2cb1-4c6e-8aeb-5e0d355e8c96/0/43E94F4D6572FA61C908F2C122712EB0A696EF96.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption be:d8:5d:e1:84:69:9e:55:27:e6:af:a5:1a:bb:70:97:51:12: 13:4e:fc:9a:22:7e:7a:87:19:9d:f8:72:22:89:fc:a3:6b:30: 16:0e:4b:e5:16:d2:a5:6b:ec:9d:6d:66:44:40:4f:fc:17:0b: bb:a3:7a:6c:0c:2c:41:dc:0e:a2:58:ec:3a:a4:cd:07:03:6c: 03:b7:b4:4d:3a:b1:38:a7:cc:91:de:1e:95:8b:67:3e:28:66: 2b:d4:18:4e:ea:5b:20:6e:b1:08:08:52:b4:ea:a8:d9:1d:21: 0b:b3:fb:18:2a:bb:7e:5f:22:41:69:5a:0f:13:0d:e1:5e:37: ef:d7:c2:16:01:e1:d9:e6:31:41:ec:f8:d1:3e:b4:ad:88:fc: 40:de:61:9b:c5:c3:4f:91:cb:c9:5d:c3:5d:76:1c:9c:8d:81: 1a:23:7b:c6:ec:15:0a:15:f3:d1:31:c1:68:84:38:2f:f5:cf: 00:0a:54:b8:fa:95:1c:c7:f2:be:11:0f:a7:e1:64:19:8a:a1: d6:f6:3c:8d:63:d3:e5:eb:e7:8d:dd:66:7c:3b:b3:8b:5f:b0: 29:92:30:1b:e2:a8:9d:03:04:dc:31:10:46:6f:b4:50:e0:9b: c2:d2:02:cf:b0:cf:28:b0:0b:5c:7c:05:02:e2:7b:c7:fb:9c: 68:c0:7b:5e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH+bGaM6E+lLOT+db8qxlVyu3xwcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDNFOTRGNEQ2NTcyRkE2MUM5MDhGMkMxMjI3MTJFQjBB Njk2RUY5NjAeFw0yNjAxMDkwMDI1NDhaFw0yNjAxMTIwODI1NDhaMDMxMTAvBgNV BAMTKDBBODg1NUJFQjc2MjIyM0Y1ODQ1NjgxQTdDRDg5RkYxQjk3NUUxRkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChBsHMg13cucWAW4vTgFl1lMrs iaeNPtzvCjciC7od3Zi8SlDj9Ppw/W47/+sei0iKqw7ASBY+fc+yyi8ry/w3APtM CKKRuy2BuxE0LE0/LQVfBLfHxcKLvZKwsHmd287CaDKXxwlbOdOZ4iSCAjvaBSxm ylbUKqxpJSC+TUzYulWFPfHCAZIIntc2500pfre/SUj7A0Ye45TovKZhcRdoLqJE E2FipOS0uqKurSjSQY1LbifU6xc+9qPpuQjUKNGWuKcAIoDTtVXcwYgp8Y1xi7Bw DBWsOINFclpgjaU6cyV8Qv31oGJPPI+ZeytPkOSNv25Lhm96BV2bKAdk9xmpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCohVvrdiIj9YRWgafNif8bl14f0wHwYDVR0j BBgwFoAUQ+lPTWVy+mHJCPLBInEusKaW75YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NDg0MDdlMy0yY2IxLTRjNmUtOGFlYi01ZTBkMzU1ZThjOTYvMC80M0U5NEY0RDY1 NzJGQTYxQzkwOEYyQzEyMjcxMkVCMEE2OTZFRjk2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDNFOTRGNEQ2NTcyRkE2MUM5MDhGMkMxMjI3MTJFQjBBNjk2 RUY5Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDQ4NDA3ZTMtMmNiMS00YzZlLThh ZWItNWUwZDM1NWU4Yzk2LzAvNDNFOTRGNEQ2NTcyRkE2MUM5MDhGMkMxMjI3MTJF QjBBNjk2RUY5Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL7YXeGEaZ5VJ+avpRq7cJdREhNO/JoifnqH GZ34ciKJ/KNrMBYOS+UW0qVr7J1tZkRAT/wXC7ujemwMLEHcDqJY7DqkzQcDbAO3 tE06sTinzJHeHpWLZz4oZivUGE7qWyBusQgIUrTqqNkdIQuz+xgqu35fIkFpWg8T DeFeN+/XwhYB4dnmMUHs+NE+tK2I/EDeYZvFw0+Ry8ldw112HJyNgRoje8bsFQoV 89ExwWiEOC/1zwAKVLj6lRzH8r4RD6fhZBmKodb2PI1j0+Xr543dZnw7s4tfsCmS MBviqJ0DBNwxEEZvtFDgm8LSAs+wzyiwC1x8BQLie8f7nGjAe14= -----END CERTIFICATE-----Generated at Sat Jan 10 01:18:02 2026 by rpki-client