This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/0401b2d1-01ca-40e8-bf77-986159867a04/0/43A0899A11D5A51202F1304338672AF19B201A74.mft File: 43A0899A11D5A51202F1304338672AF19B201A74.mft (raw, json) Hash identifier: OINjiLfIxlrIjssS+UX5ynP4pYqf4xk8WG09CVb6RM8= Subject key identifier: F7:D8:F1:DC:79:2F:31:47:25:CF:4E:75:D0:C9:EC:5A:42:3A:A4:76 Authority key identifier: 43:A0:89:9A:11:D5:A5:12:02:F1:30:43:38:67:2A:F1:9B:20:1A:74 Certificate issuer: /CN=43A0899A11D5A51202F1304338672AF19B201A74 Certificate serial: 6767DBD5DE73D0CA18A3CA5659E3B9A2161C9576 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/43A0899A11D5A51202F1304338672AF19B201A74.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0401b2d1-01ca-40e8-bf77-986159867a04/0/43A0899A11D5A51202F1304338672AF19B201A74.mft Manifest number: 040B Signing time: Sun 21 Dec 2025 06:02:48 +0000 Manifest this update: Sun 21 Dec 2025 05:57:48 +0000 Manifest next update: Wed 24 Dec 2025 10:02:48 +0000 Files and hashes: 1: 43A0899A11D5A51202F1304338672AF19B201A74.crl (hash: 5jHuvwI6xRD+S6BDJGRLJLZInEoRHpR8VT21KmomCAM=) 2: 3130332e32392e3231322e302f32322d3234203d3e203538333737.roa (hash: bEv5NJFvGjCqOM99MFNub18kUBXqluJLuz63DD7/xZ4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0401b2d1-01ca-40e8-bf77-986159867a04/0/43A0899A11D5A51202F1304338672AF19B201A74.crl rsync://repo-rpki.idnic.net/repo/0401b2d1-01ca-40e8-bf77-986159867a04/0/43A0899A11D5A51202F1304338672AF19B201A74.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/43A0899A11D5A51202F1304338672AF19B201A74.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Dec 2025 07:39:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:67:db:d5:de:73:d0:ca:18:a3:ca:56:59:e3:b9:a2:16:1c:95:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43A0899A11D5A51202F1304338672AF19B201A74 Validity Not Before: Dec 21 05:57:48 2025 GMT Not After : Dec 24 10:02:48 2025 GMT Subject: CN=F7D8F1DC792F314725CF4E75D0C9EC5A423AA476 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:0b:9d:ee:fb:ba:7f:95:07:62:1d:83:b4:02: 34:38:08:94:7c:b8:6d:0e:40:0a:35:90:af:0a:d1: 85:12:6a:53:27:27:bc:61:12:40:ef:b2:2a:9c:38: 0f:f9:f2:c6:cc:73:29:bf:a9:99:62:59:b6:eb:83: 76:ad:f9:19:fe:9c:c0:a0:8d:17:57:1f:18:6d:28: f9:98:12:bb:9a:e5:d1:c2:c5:f6:69:3a:af:4a:fc: d1:03:0d:5c:5f:45:61:a8:be:de:1f:54:5a:7f:81: 49:5f:ac:6a:fb:ba:24:53:b9:db:e0:f3:11:ca:f3: 93:a0:99:ad:62:5a:07:6c:6d:fe:56:93:d8:14:c0: ac:8a:c0:b3:a3:56:37:b1:91:63:3a:63:de:4e:92: 98:51:22:98:56:20:af:f7:86:37:4d:5b:5d:ff:5c: 25:48:13:08:32:a0:1e:3f:a3:41:4a:30:28:10:8e: 70:45:e4:6e:ed:5a:af:7f:9a:1a:3d:53:f4:76:e9: 0a:bb:e4:3b:a1:18:28:e7:d5:a8:3e:ff:da:ed:cb: 9b:8b:7c:ac:7f:86:77:f7:2a:2d:6a:f3:3e:e5:8d: 44:b6:49:5c:1f:bc:2c:8f:2d:6a:0b:f1:ed:c6:25: a9:05:84:5e:b2:89:fb:18:a3:e5:a3:5c:45:c5:00: 0a:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:D8:F1:DC:79:2F:31:47:25:CF:4E:75:D0:C9:EC:5A:42:3A:A4:76 X509v3 Authority Key Identifier: keyid:43:A0:89:9A:11:D5:A5:12:02:F1:30:43:38:67:2A:F1:9B:20:1A:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0401b2d1-01ca-40e8-bf77-986159867a04/0/43A0899A11D5A51202F1304338672AF19B201A74.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/43A0899A11D5A51202F1304338672AF19B201A74.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0401b2d1-01ca-40e8-bf77-986159867a04/0/43A0899A11D5A51202F1304338672AF19B201A74.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:e5:34:87:8e:f7:37:40:a2:95:7c:ba:e5:49:c7:81:a9:b8: 67:ae:b3:03:84:b0:15:35:19:5d:86:c4:6a:00:d9:44:28:bf: 53:8a:b5:b9:b9:45:a3:21:d4:89:a0:ca:3e:30:51:36:16:c7: e8:f6:08:19:97:ae:d1:b2:87:42:18:b5:2b:c1:08:b3:f6:4f: 9f:9f:d7:b1:f7:f1:f6:bf:5e:34:f6:ba:07:0b:5c:bc:92:30: cb:fe:6b:88:4d:66:5d:e8:42:b7:8e:76:10:17:d4:5b:9f:a4: 6d:c9:4c:17:c0:e1:ff:1c:93:0d:33:16:4e:f7:c2:e9:58:b6: 95:78:88:4c:8c:20:b1:89:a7:75:78:e1:bb:2e:10:2d:b2:59: 63:e3:23:66:ac:1e:4d:f3:15:2b:0d:d3:c9:08:dc:67:1b:85: f9:71:3c:1d:66:8f:2b:f8:0b:52:be:35:e1:cd:37:ff:74:3f: 29:01:3e:b4:27:37:95:7a:59:5f:ce:97:0a:4f:1d:6e:4a:dc: 39:12:31:5f:60:08:c5:11:2a:66:fe:dd:bb:db:38:0b:d4:42: 2b:84:ee:1f:60:cc:b5:4f:3d:34:12:7c:6d:c8:7e:38:50:03: dc:ce:48:41:bf:56:a3:d2:f1:54:c0:5b:eb:e3:65:3f:2f:20: 08:2d:8f:6c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZ2fb1d5z0MoYo8pWWeO5ohYclXYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDNBMDg5OUExMUQ1QTUxMjAyRjEzMDQzMzg2NzJBRjE5 QjIwMUE3NDAeFw0yNTEyMjEwNTU3NDhaFw0yNTEyMjQxMDAyNDhaMDMxMTAvBgNV BAMTKEY3RDhGMURDNzkyRjMxNDcyNUNGNEU3NUQwQzlFQzVBNDIzQUE0NzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyC53u+7p/lQdiHYO0AjQ4CJR8 uG0OQAo1kK8K0YUSalMnJ7xhEkDvsiqcOA/58sbMcym/qZliWbbrg3at+Rn+nMCg jRdXHxhtKPmYErua5dHCxfZpOq9K/NEDDVxfRWGovt4fVFp/gUlfrGr7uiRTudvg 8xHK85Ogma1iWgdsbf5Wk9gUwKyKwLOjVjexkWM6Y95OkphRIphWIK/3hjdNW13/ XCVIEwgyoB4/o0FKMCgQjnBF5G7tWq9/mho9U/R26Qq75DuhGCjn1ag+/9rty5uL fKx/hnf3Ki1q8z7ljUS2SVwfvCyPLWoL8e3GJakFhF6yifsYo+WjXEXFAArDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU99jx3HkvMUclz0510MnsWkI6pHYwHwYDVR0j BBgwFoAUQ6CJmhHVpRIC8TBDOGcq8ZsgGnQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NDAxYjJkMS0wMWNhLTQwZTgtYmY3Ny05ODYxNTk4NjdhMDQvMC80M0EwODk5QTEx RDVBNTEyMDJGMTMwNDMzODY3MkFGMTlCMjAxQTc0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDNBMDg5OUExMUQ1QTUxMjAyRjEzMDQzMzg2NzJBRjE5QjIw MUE3NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDQwMWIyZDEtMDFjYS00MGU4LWJm NzctOTg2MTU5ODY3YTA0LzAvNDNBMDg5OUExMUQ1QTUxMjAyRjEzMDQzMzg2NzJB RjE5QjIwMUE3NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD/lNIeO9zdAopV8uuVJx4GpuGeuswOEsBU1 GV2GxGoA2UQov1OKtbm5RaMh1Imgyj4wUTYWx+j2CBmXrtGyh0IYtSvBCLP2T5+f 17H38fa/XjT2ugcLXLySMMv+a4hNZl3oQreOdhAX1FufpG3JTBfA4f8ckw0zFk73 wulYtpV4iEyMILGJp3V44bsuEC2yWWPjI2asHk3zFSsN08kI3GcbhflxPB1mjyv4 C1K+NeHNN/90PykBPrQnN5V6WV/OlwpPHW5K3DkSMV9gCMURKmb+3bvbOAvUQiuE 7h9gzLVPPTQSfG3IfjhQA9zOSEG/VqPS8VTAW+vjZT8vIAgtj2w= -----END CERTIFICATE-----Generated at Tue Dec 23 22:38:00 2025 by rpki-client