This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/57be8b7c-232f-47e8-9cdd-8817d39b70ea/0/843FDF32A52D11795BBFB0918ABF926E0A210870.mft File: 843FDF32A52D11795BBFB0918ABF926E0A210870.mft (raw, json) Hash identifier: 9LLY71Ip/GknhmsOzINHPmab0acANXIdVH6OkxGI6gU= Subject key identifier: 70:A6:1F:3D:80:E4:EE:3B:67:B9:DE:45:D9:63:BB:EB:7E:9B:AE:2C Authority key identifier: 84:3F:DF:32:A5:2D:11:79:5B:BF:B0:91:8A:BF:92:6E:0A:21:08:70 Certificate issuer: /CN=843FDF32A52D11795BBFB0918ABF926E0A210870 Certificate serial: 5E0C3D3B0D05A5B1527BFD3FD67C77A129F82284 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/843FDF32A52D11795BBFB0918ABF926E0A210870.cer Subject info access: rsync://repo-rpki.idnic.net/repo/57be8b7c-232f-47e8-9cdd-8817d39b70ea/0/843FDF32A52D11795BBFB0918ABF926E0A210870.mft Manifest number: 012B Signing time: Tue 16 Dec 2025 16:22:17 +0000 Manifest this update: Tue 16 Dec 2025 16:17:17 +0000 Manifest next update: Sat 20 Dec 2025 01:29:17 +0000 Files and hashes: 1: 843FDF32A52D11795BBFB0918ABF926E0A210870.crl (hash: 1O3Xs5IW3Gs5cb/rMt8qe7eo7kLbFN0qagUcuSLzXjg=) 2: 3231302e38372e3132342e302f32332d3234203d3e20313532303539.roa (hash: bZtCXaxnCo0kXFhv+UgtkdHVo3axHOoHwsSEN85b1Nc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/57be8b7c-232f-47e8-9cdd-8817d39b70ea/0/843FDF32A52D11795BBFB0918ABF926E0A210870.crl rsync://repo-rpki.idnic.net/repo/57be8b7c-232f-47e8-9cdd-8817d39b70ea/0/843FDF32A52D11795BBFB0918ABF926E0A210870.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/843FDF32A52D11795BBFB0918ABF926E0A210870.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 01:29:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:0c:3d:3b:0d:05:a5:b1:52:7b:fd:3f:d6:7c:77:a1:29:f8:22:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=843FDF32A52D11795BBFB0918ABF926E0A210870 Validity Not Before: Dec 16 16:17:17 2025 GMT Not After : Dec 20 01:29:17 2025 GMT Subject: CN=70A61F3D80E4EE3B67B9DE45D963BBEB7E9BAE2C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:5e:dc:f1:09:f3:09:0b:63:75:9b:f4:f7:f2: b3:96:7f:b3:78:52:fb:44:c4:2b:88:e8:18:a9:e2: 45:da:bf:08:8a:17:52:28:a7:9c:72:43:00:e2:80: 8c:92:ba:33:a9:d8:8c:0c:50:a6:86:11:cd:13:54: b0:6a:24:6d:3d:75:0e:c4:39:e5:ca:cc:5f:28:d3: ac:3c:b3:61:84:8e:a0:65:47:66:f6:39:f3:7e:a6: c2:68:84:d3:2f:11:be:bb:f6:d1:13:ae:8b:a2:2c: fc:e7:2d:24:49:a5:32:e2:2b:84:16:63:d6:d0:d5: 26:ca:79:a2:b8:bb:69:9a:06:19:ad:1a:19:96:ab: d8:26:b5:d9:49:f9:dc:9e:47:30:a2:5e:29:21:01: 93:99:f4:62:b5:50:5d:9d:d5:96:0e:37:bd:4e:2a: bb:36:67:d1:16:9a:8a:30:97:66:9c:66:ad:47:ec: 88:af:b9:c9:1b:d4:b7:28:f5:1a:c7:38:24:9d:37: 4f:38:09:2c:40:4e:c6:0a:78:b8:ac:71:34:e6:80: 51:f0:47:aa:05:56:ae:5c:00:fa:16:fa:eb:7a:f5: 43:38:0e:f9:fb:45:2d:7f:c4:4d:78:c1:3e:37:6a: 69:a9:7a:e2:34:6e:d4:f8:5a:3d:ea:d5:92:1b:b6: 1c:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:A6:1F:3D:80:E4:EE:3B:67:B9:DE:45:D9:63:BB:EB:7E:9B:AE:2C X509v3 Authority Key Identifier: keyid:84:3F:DF:32:A5:2D:11:79:5B:BF:B0:91:8A:BF:92:6E:0A:21:08:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/57be8b7c-232f-47e8-9cdd-8817d39b70ea/0/843FDF32A52D11795BBFB0918ABF926E0A210870.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/843FDF32A52D11795BBFB0918ABF926E0A210870.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/57be8b7c-232f-47e8-9cdd-8817d39b70ea/0/843FDF32A52D11795BBFB0918ABF926E0A210870.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:1b:ab:b3:41:77:a7:d9:d0:9f:b0:06:0a:01:b2:8e:8f:87: d4:40:02:4c:fe:a1:54:3d:53:1b:1d:ab:cd:d0:86:ac:c3:20: 1f:d4:e1:27:c1:8f:f5:ff:23:b9:a1:2b:f3:3a:de:fa:bf:e8: 43:a7:c3:6c:a6:58:14:85:50:19:3c:0d:7a:8d:59:f8:c6:03: 27:8d:95:97:2a:79:24:09:85:d6:60:91:7c:62:2c:ec:b9:96: 90:da:8c:d7:9f:db:29:32:99:ea:d8:a1:21:6d:e8:20:a5:42: 30:4f:c7:36:63:ba:da:e9:af:ae:82:4e:d4:fc:7f:08:5a:ff: ce:e1:90:6e:c5:fe:bf:da:72:c7:14:2a:27:17:3f:c0:e5:ac: 2b:1d:f9:f5:6d:6f:2d:b5:2f:8d:8b:1a:c2:21:e9:bb:e2:5f: 5f:db:56:75:1d:74:19:16:75:78:27:ab:f3:d8:e2:9f:a2:ab: a4:6a:8f:be:54:d4:0e:b0:8d:ee:ef:f4:ae:25:bb:6b:f6:a6: cd:4a:88:67:be:9a:bb:de:cb:34:48:cb:26:75:0f:2f:40:10: 74:e5:c7:4a:87:ad:29:38:70:7a:f7:a8:db:21:27:d1:49:fd: 00:87:84:bf:74:43:b5:f8:05:46:d2:e4:9f:b5:a2:92:37:c9: cc:24:98:cf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXgw9Ow0FpbFSe/0/1nx3oSn4IoQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQzRkRGMzJBNTJEMTE3OTVCQkZCMDkxOEFCRjkyNkUw QTIxMDg3MDAeFw0yNTEyMTYxNjE3MTdaFw0yNTEyMjAwMTI5MTdaMDMxMTAvBgNV BAMTKDcwQTYxRjNEODBFNEVFM0I2N0I5REU0NUQ5NjNCQkVCN0U5QkFFMkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/XtzxCfMJC2N1m/T38rOWf7N4 UvtExCuI6Bip4kXavwiKF1Iop5xyQwDigIySujOp2IwMUKaGEc0TVLBqJG09dQ7E OeXKzF8o06w8s2GEjqBlR2b2OfN+psJohNMvEb679tETrouiLPznLSRJpTLiK4QW Y9bQ1SbKeaK4u2maBhmtGhmWq9gmtdlJ+dyeRzCiXikhAZOZ9GK1UF2d1ZYON71O Krs2Z9EWmoowl2acZq1H7Iivuckb1Lco9RrHOCSdN084CSxATsYKeLiscTTmgFHw R6oFVq5cAPoW+ut69UM4Dvn7RS1/xE14wT43ammpeuI0btT4Wj3q1ZIbthwVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcKYfPYDk7jtnud5F2WO7636briwwHwYDVR0j BBgwFoAUhD/fMqUtEXlbv7CRir+SbgohCHAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 N2JlOGI3Yy0yMzJmLTQ3ZTgtOWNkZC04ODE3ZDM5YjcwZWEvMC84NDNGREYzMkE1 MkQxMTc5NUJCRkIwOTE4QUJGOTI2RTBBMjEwODcwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODQzRkRGMzJBNTJEMTE3OTVCQkZCMDkxOEFCRjkyNkUwQTIx MDg3MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTdiZThiN2MtMjMyZi00N2U4LTlj ZGQtODgxN2QzOWI3MGVhLzAvODQzRkRGMzJBNTJEMTE3OTVCQkZCMDkxOEFCRjky NkUwQTIxMDg3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKsbq7NBd6fZ0J+wBgoBso6Ph9RAAkz+oVQ9 Uxsdq83QhqzDIB/U4SfBj/X/I7mhK/M63vq/6EOnw2ymWBSFUBk8DXqNWfjGAyeN lZcqeSQJhdZgkXxiLOy5lpDajNef2ykymerYoSFt6CClQjBPxzZjutrpr66CTtT8 fwha/87hkG7F/r/acscUKicXP8DlrCsd+fVtby21L42LGsIh6bviX1/bVnUddBkW dXgnq/PY4p+iq6Rqj75U1A6wje7v9K4lu2v2ps1KiGe+mrveyzRIyyZ1Dy9AEHTl x0qHrSk4cHr3qNshJ9FJ/QCHhL90Q7X4BUbS5J+1opI3ycwkmM8= -----END CERTIFICATE-----Generated at Wed Dec 17 20:37:19 2025 by rpki-client