This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/e7d9f745-faa4-48ce-83b1-0bde33c2447f/0/43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.mft File: 43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.mft (raw, json) Hash identifier: piyj18NOKgpiDZ+6g+grrvxPkut3UiR2iEvXkcN4d68= Subject key identifier: 10:F4:A0:D0:B5:0B:F9:B8:90:71:2D:81:31:90:4E:89:8E:F9:3F:E0 Authority key identifier: 43:35:2C:F2:FE:94:54:8E:EF:08:0C:0D:6A:6D:A5:C0:7E:E6:27:AB Certificate issuer: /CN=43352CF2FE94548EEF080C0D6A6DA5C07EE627AB Certificate serial: 5A3AC0D62C273D9B9101C687A1CB872D7454C110 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e7d9f745-faa4-48ce-83b1-0bde33c2447f/0/43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.mft Manifest number: 0143 Signing time: Tue 02 Dec 2025 12:01:40 +0000 Manifest this update: Tue 02 Dec 2025 11:56:40 +0000 Manifest next update: Fri 05 Dec 2025 17:45:40 +0000 Files and hashes: 1: 3230332e3134352e36302e302f32332d3234203d3e203435323935.roa (hash: q3+/tfcea23JBjvDKOPYoF0T8lJl4/w1ukwF8DCr3Dg=) 2: 43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.crl (hash: qQu6EmUvKbpDXJ6gL64OkVJinEuGjidV1FSe8npT024=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e7d9f745-faa4-48ce-83b1-0bde33c2447f/0/43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.crl rsync://repo-rpki.idnic.net/repo/e7d9f745-faa4-48ce-83b1-0bde33c2447f/0/43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 17:45:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:3a:c0:d6:2c:27:3d:9b:91:01:c6:87:a1:cb:87:2d:74:54:c1:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43352CF2FE94548EEF080C0D6A6DA5C07EE627AB Validity Not Before: Dec 2 11:56:40 2025 GMT Not After : Dec 5 17:45:40 2025 GMT Subject: CN=10F4A0D0B50BF9B890712D8131904E898EF93FE0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:43:96:c3:1c:d5:83:14:ad:23:57:78:9a:c6: 3c:7f:93:ff:c5:1b:a6:08:2a:ed:34:d8:56:63:7e: 13:f2:82:8d:44:d5:71:da:92:63:86:21:aa:11:13: 1f:f2:d6:ea:fa:a5:09:4d:65:0a:2a:1e:39:47:32: c9:44:a7:6c:3f:da:9e:89:61:c4:36:dd:5c:8d:f3: cc:ad:f7:42:2b:82:8b:a9:8f:aa:93:a3:47:a0:55: 29:66:0f:54:d5:64:ac:9f:5e:97:7a:3c:23:fa:f9: 61:10:21:b3:20:42:95:24:04:92:25:3a:b9:2e:f9: be:d5:c8:f9:4d:f4:d9:8d:9b:ac:97:30:71:f3:3b: 56:1a:81:1f:16:29:f2:b2:f7:9f:48:ed:56:3a:6c: d0:df:bd:37:05:9d:09:5c:63:d4:f8:26:7b:ab:17: 42:47:77:7b:b1:81:f4:dc:d4:71:5f:53:0c:49:d0: 1a:f2:a3:55:54:17:b3:df:e7:bd:55:2a:b4:57:04: 2a:fe:65:aa:63:69:94:fe:61:28:e8:5b:8a:6f:bb: 5c:79:dc:55:8d:ba:10:c1:88:aa:35:f9:15:a6:64: f5:e2:fa:0e:ce:f0:9e:e3:2b:f0:2c:cd:1b:2f:1e: 90:ab:69:16:e0:79:ed:d4:02:32:e8:77:7b:9a:23: 43:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:F4:A0:D0:B5:0B:F9:B8:90:71:2D:81:31:90:4E:89:8E:F9:3F:E0 X509v3 Authority Key Identifier: keyid:43:35:2C:F2:FE:94:54:8E:EF:08:0C:0D:6A:6D:A5:C0:7E:E6:27:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e7d9f745-faa4-48ce-83b1-0bde33c2447f/0/43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e7d9f745-faa4-48ce-83b1-0bde33c2447f/0/43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:ae:ef:a4:23:4a:7f:a0:79:5c:61:b5:a3:a8:8c:0f:f5:24: 49:15:c8:97:e5:c6:41:5a:1f:89:70:e5:01:81:5b:d7:f7:8a: 55:41:95:f0:35:98:28:f0:ae:f5:b4:a6:08:81:b4:fd:7b:c6: af:6c:63:a4:a9:e6:2b:4b:f8:b7:6c:20:f6:42:87:83:dd:17: 5f:f6:85:d4:dc:42:59:c6:53:c9:1f:ba:e1:6a:19:4f:cb:e7: 1d:cc:f7:a6:95:97:8b:b1:c5:3e:e0:51:57:1a:6b:31:bd:bb: 47:14:d5:3d:3e:b0:84:0c:94:0e:3d:f7:77:84:10:dd:d4:a9: f3:df:14:c0:7b:8a:dd:55:fe:a1:75:1d:a2:0e:55:3d:af:f4: ce:dd:b4:2b:05:c8:79:bc:ca:80:05:6c:bc:87:ba:3b:dd:0d: c1:e1:29:71:e0:f7:80:1d:92:3e:b7:ca:16:d9:d2:c9:b3:33: 01:8f:e1:74:60:ec:fb:e7:5a:a7:b9:49:80:06:31:10:58:74: 4e:c7:5b:99:08:77:ae:25:a2:3c:13:f9:95:b4:b4:87:60:b7: 51:58:b8:f9:75:41:63:3a:94:31:af:7e:ba:34:53:2f:7b:69: 80:67:b5:41:45:38:de:01:2e:39:60:a6:cb:4e:41:8b:d0:2b: 6f:81:e9:c5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWjrA1iwnPZuRAcaHocuHLXRUwRAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDMzNTJDRjJGRTk0NTQ4RUVGMDgwQzBENkE2REE1QzA3 RUU2MjdBQjAeFw0yNTEyMDIxMTU2NDBaFw0yNTEyMDUxNzQ1NDBaMDMxMTAvBgNV BAMTKDEwRjRBMEQwQjUwQkY5Qjg5MDcxMkQ4MTMxOTA0RTg5OEVGOTNGRTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeQ5bDHNWDFK0jV3iaxjx/k//F G6YIKu002FZjfhPygo1E1XHakmOGIaoREx/y1ur6pQlNZQoqHjlHMslEp2w/2p6J YcQ23VyN88yt90Irgoupj6qTo0egVSlmD1TVZKyfXpd6PCP6+WEQIbMgQpUkBJIl Orku+b7VyPlN9NmNm6yXMHHzO1YagR8WKfKy959I7VY6bNDfvTcFnQlcY9T4Jnur F0JHd3uxgfTc1HFfUwxJ0Bryo1VUF7Pf571VKrRXBCr+ZapjaZT+YSjoW4pvu1x5 3FWNuhDBiKo1+RWmZPXi+g7O8J7jK/AszRsvHpCraRbgee3UAjLod3uaI0PPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEPSg0LUL+biQcS2BMZBOiY75P+AwHwYDVR0j BBgwFoAUQzUs8v6UVI7vCAwNam2lwH7mJ6swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l N2Q5Zjc0NS1mYWE0LTQ4Y2UtODNiMS0wYmRlMzNjMjQ0N2YvMC80MzM1MkNGMkZF OTQ1NDhFRUYwODBDMEQ2QTZEQTVDMDdFRTYyN0FCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDMzNTJDRjJGRTk0NTQ4RUVGMDgwQzBENkE2REE1QzA3RUU2 MjdBQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTdkOWY3NDUtZmFhNC00OGNlLTgz YjEtMGJkZTMzYzI0NDdmLzAvNDMzNTJDRjJGRTk0NTQ4RUVGMDgwQzBENkE2REE1 QzA3RUU2MjdBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGiu76QjSn+geVxhtaOojA/1JEkVyJflxkFa H4lw5QGBW9f3ilVBlfA1mCjwrvW0pgiBtP17xq9sY6Sp5itL+LdsIPZCh4PdF1/2 hdTcQlnGU8kfuuFqGU/L5x3M96aVl4uxxT7gUVcaazG9u0cU1T0+sIQMlA4993eE EN3UqfPfFMB7it1V/qF1HaIOVT2v9M7dtCsFyHm8yoAFbLyHujvdDcHhKXHg94Ad kj63yhbZ0smzMwGP4XRg7PvnWqe5SYAGMRBYdE7HW5kId64lojwT+ZW0tIdgt1FY uPl1QWM6lDGvfro0Uy97aYBntUFFON4BLjlgpstOQYvQK2+B6cU= -----END CERTIFICATE-----Generated at Wed Dec 3 13:55:08 2025 by rpki-client