This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/57be8b7c-232f-47e8-9cdd-8817d39b70ea/0/843FDF32A52D11795BBFB0918ABF926E0A210870.mft File: 843FDF32A52D11795BBFB0918ABF926E0A210870.mft (raw, json) Hash identifier: VboF4sPv6vaQA/jhKXh6IjrAm6JIUvi2PvTkyYtBFrM= Subject key identifier: 86:13:16:38:B0:86:16:C5:A1:AB:6A:EE:AF:1A:6A:D3:D1:BC:11:10 Authority key identifier: 84:3F:DF:32:A5:2D:11:79:5B:BF:B0:91:8A:BF:92:6E:0A:21:08:70 Certificate issuer: /CN=843FDF32A52D11795BBFB0918ABF926E0A210870 Certificate serial: 4D5A09F7B8E878B798C8CCA6750E2F71796CF860 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/843FDF32A52D11795BBFB0918ABF926E0A210870.cer Subject info access: rsync://repo-rpki.idnic.net/repo/57be8b7c-232f-47e8-9cdd-8817d39b70ea/0/843FDF32A52D11795BBFB0918ABF926E0A210870.mft Manifest number: 012E Signing time: Mon 22 Dec 2025 21:02:54 +0000 Manifest this update: Mon 22 Dec 2025 20:57:54 +0000 Manifest next update: Fri 26 Dec 2025 04:05:54 +0000 Files and hashes: 1: 3231302e38372e3132342e302f32332d3234203d3e20313532303539.roa (hash: EWhTaEy0kSyTN6Oh9f79SCw3rvXkaSbLCftfTIrzMKE=) 2: 843FDF32A52D11795BBFB0918ABF926E0A210870.crl (hash: dwU+Oc7pO385zqhbItfJ8eJEFZDNwnfwDg60EDRHCkU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/57be8b7c-232f-47e8-9cdd-8817d39b70ea/0/843FDF32A52D11795BBFB0918ABF926E0A210870.crl rsync://repo-rpki.idnic.net/repo/57be8b7c-232f-47e8-9cdd-8817d39b70ea/0/843FDF32A52D11795BBFB0918ABF926E0A210870.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/843FDF32A52D11795BBFB0918ABF926E0A210870.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 04:05:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:5a:09:f7:b8:e8:78:b7:98:c8:cc:a6:75:0e:2f:71:79:6c:f8:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=843FDF32A52D11795BBFB0918ABF926E0A210870 Validity Not Before: Dec 22 20:57:54 2025 GMT Not After : Dec 26 04:05:54 2025 GMT Subject: CN=86131638B08616C5A1AB6AEEAF1A6AD3D1BC1110 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:b3:40:e9:61:79:b9:fe:be:95:4f:fb:2c:cd: 27:a4:b5:57:72:0e:67:56:93:25:28:37:5a:39:e1: 1f:84:c1:07:80:f4:93:9e:b1:3e:20:1e:ab:df:55: a5:ff:bb:0d:85:c7:81:01:b4:25:c6:ce:ca:6a:51: 19:9d:3c:20:6f:bc:93:c9:b1:f2:86:96:d7:12:ca: f7:bd:e0:d3:06:8f:37:c6:8f:09:91:af:0b:e7:3e: 25:b6:77:32:c7:c4:e0:7e:7d:35:65:fc:57:a7:b4: 8f:e2:10:b3:dc:ec:f1:22:6e:41:4c:57:0a:e8:da: 02:b0:f1:2b:97:36:98:71:1c:4b:89:da:28:f1:ae: ad:8b:38:69:82:2c:c0:fd:64:5f:a9:f0:3d:e9:2b: ca:e2:16:75:49:33:cf:0b:6d:6b:d3:b4:35:53:2d: e0:d8:46:71:31:fd:61:39:7a:2b:df:c3:8c:03:64: 28:5f:ba:8e:e0:72:4c:34:33:c4:84:44:28:5d:00: 82:15:76:2c:06:47:fa:e4:9f:ec:5f:26:86:41:a3: dd:b2:2f:42:d6:76:82:30:72:58:cd:e6:ea:5a:f0: 49:21:98:a3:65:97:5c:ac:70:e0:2f:61:e5:bc:7b: 15:b0:b3:de:cc:a0:7e:46:55:43:f9:b1:c8:8c:f3: 2e:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:13:16:38:B0:86:16:C5:A1:AB:6A:EE:AF:1A:6A:D3:D1:BC:11:10 X509v3 Authority Key Identifier: keyid:84:3F:DF:32:A5:2D:11:79:5B:BF:B0:91:8A:BF:92:6E:0A:21:08:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/57be8b7c-232f-47e8-9cdd-8817d39b70ea/0/843FDF32A52D11795BBFB0918ABF926E0A210870.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/843FDF32A52D11795BBFB0918ABF926E0A210870.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/57be8b7c-232f-47e8-9cdd-8817d39b70ea/0/843FDF32A52D11795BBFB0918ABF926E0A210870.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:bb:9e:db:56:d4:ca:1b:ef:91:a8:b2:2f:9e:63:97:c4:4e: 37:2f:c9:7c:26:33:83:48:f8:10:80:55:ed:4e:91:3e:4f:4e: da:53:08:3c:7a:0f:b2:6d:48:d8:93:c2:ea:ed:3d:8e:cd:56: 21:0b:36:91:af:27:00:da:11:a6:7a:c8:e0:c6:2e:30:fa:61: f7:ad:04:54:a9:ff:18:28:30:9a:fa:ce:97:7b:71:2b:4f:4f: 94:e8:d3:62:e4:d3:a4:d6:58:92:27:2b:5e:71:01:31:92:50: e0:66:3e:83:f1:e6:e4:a8:dd:e0:42:41:43:07:52:1c:45:b7: e0:81:87:32:6a:aa:93:b8:99:95:9a:e3:6a:29:0c:f1:59:e7: 30:0f:b3:23:4e:fd:27:6b:07:82:91:1d:4e:e2:a1:a6:fa:55: 77:ff:8f:24:e1:92:08:7a:d6:c2:1e:a5:c0:69:fa:ef:01:f7: 86:30:74:00:8d:8f:31:76:ef:16:b1:4d:97:44:21:48:64:88: d2:3b:12:c0:6d:7d:d0:0f:7c:41:bf:17:68:6a:7c:dc:a9:3e: d4:2e:4a:2f:59:fc:ce:0a:8b:2d:72:ca:2d:02:49:94:8a:95: 5a:9c:9b:a6:8c:cc:a9:fe:de:45:a8:d6:7a:56:70:31:87:02: 22:ff:d1:a6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTVoJ97joeLeYyMymdQ4vcXls+GAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQzRkRGMzJBNTJEMTE3OTVCQkZCMDkxOEFCRjkyNkUw QTIxMDg3MDAeFw0yNTEyMjIyMDU3NTRaFw0yNTEyMjYwNDA1NTRaMDMxMTAvBgNV BAMTKDg2MTMxNjM4QjA4NjE2QzVBMUFCNkFFRUFGMUE2QUQzRDFCQzExMTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcs0DpYXm5/r6VT/sszSektVdy DmdWkyUoN1o54R+EwQeA9JOesT4gHqvfVaX/uw2Fx4EBtCXGzspqURmdPCBvvJPJ sfKGltcSyve94NMGjzfGjwmRrwvnPiW2dzLHxOB+fTVl/FentI/iELPc7PEibkFM Vwro2gKw8SuXNphxHEuJ2ijxrq2LOGmCLMD9ZF+p8D3pK8riFnVJM88LbWvTtDVT LeDYRnEx/WE5eivfw4wDZChfuo7gckw0M8SERChdAIIVdiwGR/rkn+xfJoZBo92y L0LWdoIwcljN5upa8EkhmKNll1yscOAvYeW8exWws97MoH5GVUP5sciM8y5BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhhMWOLCGFsWhq2rurxpq09G8ERAwHwYDVR0j BBgwFoAUhD/fMqUtEXlbv7CRir+SbgohCHAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 N2JlOGI3Yy0yMzJmLTQ3ZTgtOWNkZC04ODE3ZDM5YjcwZWEvMC84NDNGREYzMkE1 MkQxMTc5NUJCRkIwOTE4QUJGOTI2RTBBMjEwODcwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODQzRkRGMzJBNTJEMTE3OTVCQkZCMDkxOEFCRjkyNkUwQTIx MDg3MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTdiZThiN2MtMjMyZi00N2U4LTlj ZGQtODgxN2QzOWI3MGVhLzAvODQzRkRGMzJBNTJEMTE3OTVCQkZCMDkxOEFCRjky NkUwQTIxMDg3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEO7nttW1Mob75Gosi+eY5fETjcvyXwmM4NI +BCAVe1OkT5PTtpTCDx6D7JtSNiTwurtPY7NViELNpGvJwDaEaZ6yODGLjD6Yfet BFSp/xgoMJr6zpd7cStPT5To02Lk06TWWJInK15xATGSUOBmPoPx5uSo3eBCQUMH UhxFt+CBhzJqqpO4mZWa42opDPFZ5zAPsyNO/SdrB4KRHU7ioab6VXf/jyThkgh6 1sIepcBp+u8B94YwdACNjzF27xaxTZdEIUhkiNI7EsBtfdAPfEG/F2hqfNypPtQu Si9Z/M4Kiy1yyi0CSZSKlVqcm6aMzKn+3kWo1npWcDGHAiL/0aY= -----END CERTIFICATE-----Generated at Thu Dec 25 00:41:19 2025 by rpki-client