This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/e7d9f745-faa4-48ce-83b1-0bde33c2447f/0/43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.mft File: 43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.mft (raw, json) Hash identifier: TLHJzbtRi8zZSrLF3jg1t3vfOP/lS1kkvjP3vC7wmjA= Subject key identifier: 4C:3B:E9:01:89:8C:38:97:0A:8C:D5:DB:77:73:0B:CB:2F:7E:E9:A0 Authority key identifier: 43:35:2C:F2:FE:94:54:8E:EF:08:0C:0D:6A:6D:A5:C0:7E:E6:27:AB Certificate issuer: /CN=43352CF2FE94548EEF080C0D6A6DA5C07EE627AB Certificate serial: 3831CA507BE6CCCE7A2F18F3B6F08A6F337361D9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e7d9f745-faa4-48ce-83b1-0bde33c2447f/0/43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.mft Manifest number: 0148 Signing time: Sat 13 Dec 2025 14:01:38 +0000 Manifest this update: Sat 13 Dec 2025 13:56:38 +0000 Manifest next update: Tue 16 Dec 2025 21:58:38 +0000 Files and hashes: 1: 43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.crl (hash: vkc2KJDY4mm6bm2v52m6mQwu0wZrR7DoSoV534aYi7Q=) 2: 3230332e3134352e36302e302f32332d3234203d3e203435323935.roa (hash: q3+/tfcea23JBjvDKOPYoF0T8lJl4/w1ukwF8DCr3Dg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e7d9f745-faa4-48ce-83b1-0bde33c2447f/0/43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.crl rsync://repo-rpki.idnic.net/repo/e7d9f745-faa4-48ce-83b1-0bde33c2447f/0/43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Dec 2025 13:15:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:31:ca:50:7b:e6:cc:ce:7a:2f:18:f3:b6:f0:8a:6f:33:73:61:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43352CF2FE94548EEF080C0D6A6DA5C07EE627AB Validity Not Before: Dec 13 13:56:38 2025 GMT Not After : Dec 16 21:58:38 2025 GMT Subject: CN=4C3BE901898C38970A8CD5DB77730BCB2F7EE9A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:9c:4c:ad:6d:61:95:45:8c:38:85:41:88:a1: 12:76:6f:58:ca:34:81:17:1d:aa:58:36:eb:61:98: d3:50:42:24:59:38:08:78:8b:ec:d0:a2:8e:63:67: fe:0f:ba:b5:3d:da:4d:f5:e0:a0:85:5a:de:65:36: 57:c8:91:cd:1a:08:9b:ea:1e:68:4f:89:e5:b9:98: db:39:91:1d:c2:27:fc:65:4b:ff:81:1c:41:71:1b: 27:ce:51:2f:59:51:2d:28:98:d9:23:b6:52:63:0a: 31:9f:d0:91:d9:63:62:a6:98:ca:ca:3c:04:ef:1c: ca:06:94:6f:48:de:64:c4:70:fb:cd:8c:04:91:ea: e9:f4:df:b3:b2:99:fe:83:13:34:07:61:6d:b0:21: 17:49:41:bb:d1:18:d1:aa:66:6b:ce:e7:42:ce:6e: 1f:4c:63:78:5d:e5:64:82:04:ff:a1:7c:22:6d:01: a5:59:27:18:95:be:52:b1:56:84:2d:e0:1f:40:34: 01:16:87:11:f4:f0:03:0d:0c:c2:bd:d6:06:26:9e: a2:89:83:dc:3b:62:68:18:9e:0d:96:cd:7e:85:23: cb:d2:48:ed:3f:a9:0a:d1:6a:67:a5:79:2f:2f:9a: 9f:cc:40:a6:15:d4:05:05:b6:6c:0f:54:c6:88:41: 09:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:3B:E9:01:89:8C:38:97:0A:8C:D5:DB:77:73:0B:CB:2F:7E:E9:A0 X509v3 Authority Key Identifier: keyid:43:35:2C:F2:FE:94:54:8E:EF:08:0C:0D:6A:6D:A5:C0:7E:E6:27:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e7d9f745-faa4-48ce-83b1-0bde33c2447f/0/43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e7d9f745-faa4-48ce-83b1-0bde33c2447f/0/43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:25:2f:47:8f:15:ba:43:12:c9:ef:a7:1b:ad:f2:b6:58:bf: 65:f7:c5:5a:8e:ba:82:ea:82:60:78:43:3e:ea:dc:24:81:e1: 7e:19:24:d9:99:d9:a3:c8:92:10:16:82:49:4b:f5:07:7c:84: 68:d5:30:ed:e2:b0:f5:43:5d:53:8c:8c:6f:e7:01:e0:b1:5b: 96:44:92:c0:b2:cf:e8:89:d4:db:1b:d2:41:fa:d4:c1:ff:96: 93:4f:14:bd:58:8d:e9:84:6e:d2:3b:0f:86:5c:d5:99:8c:1f: 60:27:df:05:42:53:bb:b9:38:db:d8:ee:ac:68:44:1c:a6:76: 95:9d:c5:3e:4a:9c:65:64:9d:c3:b2:99:6a:f9:0f:26:0a:ec: 90:ff:a6:cd:46:50:9c:dd:95:c6:99:1c:4e:69:b0:31:09:ab: 34:f8:75:2e:37:1b:72:7a:fa:c2:ce:08:24:2b:df:bb:00:ff: 19:6f:7f:23:6a:3d:c1:af:90:68:80:06:41:5e:38:05:a6:fe: 63:8c:17:4f:66:7c:e3:8e:77:26:de:e0:bd:03:6c:ec:10:c2: 5c:ac:87:7d:78:8b:05:40:7c:07:52:b1:8f:b6:96:d4:ab:f0: 62:9a:23:f1:4e:7d:de:e7:fb:74:8e:3d:27:31:35:34:95:8d: 5b:48:8f:e3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUODHKUHvmzM56LxjztvCKbzNzYdkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDMzNTJDRjJGRTk0NTQ4RUVGMDgwQzBENkE2REE1QzA3 RUU2MjdBQjAeFw0yNTEyMTMxMzU2MzhaFw0yNTEyMTYyMTU4MzhaMDMxMTAvBgNV BAMTKDRDM0JFOTAxODk4QzM4OTcwQThDRDVEQjc3NzMwQkNCMkY3RUU5QTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKnEytbWGVRYw4hUGIoRJ2b1jK NIEXHapYNuthmNNQQiRZOAh4i+zQoo5jZ/4PurU92k314KCFWt5lNlfIkc0aCJvq HmhPieW5mNs5kR3CJ/xlS/+BHEFxGyfOUS9ZUS0omNkjtlJjCjGf0JHZY2KmmMrK PATvHMoGlG9I3mTEcPvNjASR6un037Oymf6DEzQHYW2wIRdJQbvRGNGqZmvO50LO bh9MY3hd5WSCBP+hfCJtAaVZJxiVvlKxVoQt4B9ANAEWhxH08AMNDMK91gYmnqKJ g9w7YmgYng2WzX6FI8vSSO0/qQrRameleS8vmp/MQKYV1AUFtmwPVMaIQQmtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTDvpAYmMOJcKjNXbd3MLyy9+6aAwHwYDVR0j BBgwFoAUQzUs8v6UVI7vCAwNam2lwH7mJ6swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l N2Q5Zjc0NS1mYWE0LTQ4Y2UtODNiMS0wYmRlMzNjMjQ0N2YvMC80MzM1MkNGMkZF OTQ1NDhFRUYwODBDMEQ2QTZEQTVDMDdFRTYyN0FCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDMzNTJDRjJGRTk0NTQ4RUVGMDgwQzBENkE2REE1QzA3RUU2 MjdBQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTdkOWY3NDUtZmFhNC00OGNlLTgz YjEtMGJkZTMzYzI0NDdmLzAvNDMzNTJDRjJGRTk0NTQ4RUVGMDgwQzBENkE2REE1 QzA3RUU2MjdBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIslL0ePFbpDEsnvpxut8rZYv2X3xVqOuoLq gmB4Qz7q3CSB4X4ZJNmZ2aPIkhAWgklL9Qd8hGjVMO3isPVDXVOMjG/nAeCxW5ZE ksCyz+iJ1Nsb0kH61MH/lpNPFL1YjemEbtI7D4Zc1ZmMH2An3wVCU7u5ONvY7qxo RBymdpWdxT5KnGVkncOymWr5DyYK7JD/ps1GUJzdlcaZHE5psDEJqzT4dS43G3J6 +sLOCCQr37sA/xlvfyNqPcGvkGiABkFeOAWm/mOMF09mfOOOdybe4L0DbOwQwlys h314iwVAfAdSsY+2ltSr8GKaI/FOfd7n+3SOPScxNTSVjVtIj+M= -----END CERTIFICATE-----Generated at Sun Dec 14 03:28:05 2025 by rpki-client