This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/0/1A43B9C67646D3B8444E277C64D1FD489A45E536.mft File: 1A43B9C67646D3B8444E277C64D1FD489A45E536.mft (raw, json) Hash identifier: 1Fo3U+l7dDZbtig487CHHXzgn3eHeA9obPjQEkDdZx8= Subject key identifier: E2:67:88:28:FC:C3:26:C0:4B:B7:3C:EF:46:8A:26:15:D4:64:30:2D Authority key identifier: 1A:43:B9:C6:76:46:D3:B8:44:4E:27:7C:64:D1:FD:48:9A:45:E5:36 Certificate issuer: /CN=1A43B9C67646D3B8444E277C64D1FD489A45E536 Certificate serial: 2743DC9DDF9541AFCC66D7DF9174C143CD448107 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1A43B9C67646D3B8444E277C64D1FD489A45E536.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/0/1A43B9C67646D3B8444E277C64D1FD489A45E536.mft Manifest number: F8 Signing time: Fri 19 Dec 2025 21:42:53 +0000 Manifest this update: Fri 19 Dec 2025 21:37:53 +0000 Manifest next update: Tue 23 Dec 2025 07:03:53 +0000 Files and hashes: 1: 3135372e36362e3132352e302f32342d3234203d3e20313532373732.roa (hash: kqVD+n1IKw72OvnfLlVYQv+xCjn3zAPXv/doYj+5xns=) 2: 1A43B9C67646D3B8444E277C64D1FD489A45E536.crl (hash: k+KhZrL7hm8Gx/fceLvsjQf4j0qxuN8FVQ+WSPNvv24=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/0/1A43B9C67646D3B8444E277C64D1FD489A45E536.crl rsync://repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/0/1A43B9C67646D3B8444E277C64D1FD489A45E536.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1A43B9C67646D3B8444E277C64D1FD489A45E536.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Dec 2025 07:03:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:43:dc:9d:df:95:41:af:cc:66:d7:df:91:74:c1:43:cd:44:81:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A43B9C67646D3B8444E277C64D1FD489A45E536 Validity Not Before: Dec 19 21:37:53 2025 GMT Not After : Dec 23 07:03:53 2025 GMT Subject: CN=E2678828FCC326C04BB73CEF468A2615D464302D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:3a:c9:a9:d9:8e:00:40:d1:71:16:a9:03:79: 85:05:2d:13:f9:0e:85:6e:84:d3:4d:dd:cc:19:6a: 1a:4a:ae:63:20:4b:3c:71:46:72:2f:97:95:4d:ee: 66:9f:39:b1:67:33:9f:d5:8a:98:44:7d:a6:9c:67: a0:2c:b7:4c:ea:90:48:8e:f2:24:b9:96:d4:2f:29: 1a:17:99:d1:5a:c8:20:a9:4c:84:7a:67:de:f6:35: 9d:aa:09:b0:3e:6a:15:2a:31:f7:c2:bd:33:02:9e: 71:3d:62:36:e9:a8:6c:f5:bf:ab:91:10:13:34:94: e4:ff:6e:3e:4e:b1:55:f7:51:3c:c4:51:7c:b4:0c: 40:e3:ea:73:0e:9d:4b:e1:aa:1a:a8:51:70:df:95: d7:71:b1:e3:76:54:ea:de:fa:c9:8c:d6:ea:c9:db: e6:5d:a6:5f:92:84:ca:5b:64:d4:ab:66:80:fd:86: d8:cf:06:2e:2a:ea:fb:24:8b:51:60:c9:f9:4f:a1: 77:09:d9:35:5d:50:42:fa:61:d4:47:96:c7:f3:14: 6c:07:7d:55:00:15:5a:01:8e:b0:32:28:dc:99:4d: 7e:c3:51:3d:fd:49:63:fd:aa:89:ed:a5:55:ce:3a: e2:21:d6:96:5b:c7:ba:48:76:62:8e:23:a5:ba:fc: 2d:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:67:88:28:FC:C3:26:C0:4B:B7:3C:EF:46:8A:26:15:D4:64:30:2D X509v3 Authority Key Identifier: keyid:1A:43:B9:C6:76:46:D3:B8:44:4E:27:7C:64:D1:FD:48:9A:45:E5:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/0/1A43B9C67646D3B8444E277C64D1FD489A45E536.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1A43B9C67646D3B8444E277C64D1FD489A45E536.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/0/1A43B9C67646D3B8444E277C64D1FD489A45E536.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:1b:d7:6f:6b:cc:15:fc:20:3b:82:b0:b0:f3:7e:37:9e:c4: dc:3a:93:ef:55:da:71:ed:00:fa:bf:e7:d7:e2:22:a9:7a:cc: c2:eb:45:35:38:87:16:73:25:57:cf:cf:49:d7:dc:c0:8f:1a: e8:ae:82:bd:29:1a:ac:d1:fe:c4:b3:70:4a:48:d5:99:43:1a: e9:cc:2b:59:aa:3c:ed:65:b5:3a:95:2d:86:c0:6d:29:3a:bc: 6f:06:fc:de:61:1f:69:73:f6:06:56:37:d1:43:d9:44:19:0c: 20:b6:20:64:3d:ff:d8:3e:ae:55:43:b0:17:fb:b7:9b:f9:ac: 4d:6d:9b:f9:50:bd:05:be:dd:5d:14:be:9d:b1:9c:ab:5e:d1: 77:59:c3:fd:05:15:09:87:e6:e1:39:de:2a:5b:d1:1c:c6:eb: 22:21:ce:9d:58:91:b5:a3:63:14:a7:fd:52:8e:fc:96:cc:b0: 07:eb:a9:7e:48:53:ba:44:96:da:cf:bf:24:88:66:6c:cf:19: 0e:71:c2:d8:aa:c0:75:6c:8e:a2:22:86:e2:6e:1a:f8:90:43: 4b:19:e6:20:d0:2a:31:65:64:89:78:be:75:ce:f9:77:a3:92: ee:40:4c:7b:a9:04:5d:50:39:5f:3c:71:c5:5a:55:d9:fc:4c: 1e:e4:c0:0f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJ0Pcnd+VQa/MZtffkXTBQ81EgQcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE0M0I5QzY3NjQ2RDNCODQ0NEUyNzdDNjREMUZENDg5 QTQ1RTUzNjAeFw0yNTEyMTkyMTM3NTNaFw0yNTEyMjMwNzAzNTNaMDMxMTAvBgNV BAMTKEUyNjc4ODI4RkNDMzI2QzA0QkI3M0NFRjQ2OEEyNjE1RDQ2NDMwMkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6Osmp2Y4AQNFxFqkDeYUFLRP5 DoVuhNNN3cwZahpKrmMgSzxxRnIvl5VN7mafObFnM5/ViphEfaacZ6Ast0zqkEiO 8iS5ltQvKRoXmdFayCCpTIR6Z972NZ2qCbA+ahUqMffCvTMCnnE9YjbpqGz1v6uR EBM0lOT/bj5OsVX3UTzEUXy0DEDj6nMOnUvhqhqoUXDflddxseN2VOre+smM1urJ 2+Zdpl+ShMpbZNSrZoD9htjPBi4q6vski1FgyflPoXcJ2TVdUEL6YdRHlsfzFGwH fVUAFVoBjrAyKNyZTX7DUT39SWP9qontpVXOOuIh1pZbx7pIdmKOI6W6/C0HAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4meIKPzDJsBLtzzvRoomFdRkMC0wHwYDVR0j BBgwFoAUGkO5xnZG07hETid8ZNH9SJpF5TYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 Y2YwMWVjNi04ZTg5LTQwMmEtOTBjNy01MGM2ZjE0Y2QyNDIvMC8xQTQzQjlDNjc2 NDZEM0I4NDQ0RTI3N0M2NEQxRkQ0ODlBNDVFNTM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMUE0M0I5QzY3NjQ2RDNCODQ0NEUyNzdDNjREMUZENDg5QTQ1 RTUzNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2NmMDFlYzYtOGU4OS00MDJhLTkw YzctNTBjNmYxNGNkMjQyLzAvMUE0M0I5QzY3NjQ2RDNCODQ0NEUyNzdDNjREMUZE NDg5QTQ1RTUzNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHsb129rzBX8IDuCsLDzfjeexNw6k+9V2nHt APq/59fiIql6zMLrRTU4hxZzJVfPz0nX3MCPGuiugr0pGqzR/sSzcEpI1ZlDGunM K1mqPO1ltTqVLYbAbSk6vG8G/N5hH2lz9gZWN9FD2UQZDCC2IGQ9/9g+rlVDsBf7 t5v5rE1tm/lQvQW+3V0Uvp2xnKte0XdZw/0FFQmH5uE53ipb0RzG6yIhzp1YkbWj YxSn/VKO/JbMsAfrqX5IU7pEltrPvySIZmzPGQ5xwtiqwHVsjqIihuJuGviQQ0sZ 5iDQKjFlZIl4vnXO+Xejku5ATHupBF1QOV88ccVaVdn8TB7kwA8= -----END CERTIFICATE-----Generated at Sun Dec 21 19:17:43 2025 by rpki-client