This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/e7d9f745-faa4-48ce-83b1-0bde33c2447f/0/43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.mft File: 43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.mft (raw, json) Hash identifier: hFMmfLGbwuOTjGkDLOr/U1xvY+7jJLyzBGGuYjclDew= Subject key identifier: A5:3B:DE:80:8D:BC:EF:A2:E7:D6:EB:C0:8B:D8:F9:53:A9:A0:6C:46 Authority key identifier: 43:35:2C:F2:FE:94:54:8E:EF:08:0C:0D:6A:6D:A5:C0:7E:E6:27:AB Certificate issuer: /CN=43352CF2FE94548EEF080C0D6A6DA5C07EE627AB Certificate serial: 66120328AAD4C94FFF95FC7D35CF87592FC97D42 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e7d9f745-faa4-48ce-83b1-0bde33c2447f/0/43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.mft Manifest number: 014B Signing time: Sat 20 Dec 2025 05:22:43 +0000 Manifest this update: Sat 20 Dec 2025 05:17:43 +0000 Manifest next update: Tue 23 Dec 2025 13:58:43 +0000 Files and hashes: 1: 3230332e3134352e36302e302f32332d3234203d3e203435323935.roa (hash: q3+/tfcea23JBjvDKOPYoF0T8lJl4/w1ukwF8DCr3Dg=) 2: 43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.crl (hash: vbexjIxwqG9f7NcxvAuYL78Rz4OZdSPSaIsDSFxPi6s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e7d9f745-faa4-48ce-83b1-0bde33c2447f/0/43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.crl rsync://repo-rpki.idnic.net/repo/e7d9f745-faa4-48ce-83b1-0bde33c2447f/0/43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Dec 2025 13:58:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:12:03:28:aa:d4:c9:4f:ff:95:fc:7d:35:cf:87:59:2f:c9:7d:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43352CF2FE94548EEF080C0D6A6DA5C07EE627AB Validity Not Before: Dec 20 05:17:43 2025 GMT Not After : Dec 23 13:58:43 2025 GMT Subject: CN=A53BDE808DBCEFA2E7D6EBC08BD8F953A9A06C46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:7c:c6:7d:aa:6b:1d:bd:58:f5:16:2d:b8:0d: cf:b3:32:b6:42:ca:15:c7:2d:2a:7b:70:a9:f7:64: 9e:ac:7d:d5:dd:8e:90:99:9c:8c:f0:00:62:c4:a1: 2a:b3:8a:5e:f2:de:d2:d3:a2:63:8c:1f:98:40:60: 5e:4c:9f:52:34:51:f4:16:b2:56:2c:3e:14:86:e0: 15:6c:f2:6a:92:95:74:1f:2d:8a:04:98:46:c5:32: 45:4a:31:a5:97:52:39:23:ac:9e:12:35:5a:be:61: bf:0a:bf:ae:5e:a1:20:eb:7b:72:0d:59:7c:1c:e1: 9c:37:d8:e7:ef:25:b1:d4:d4:8e:fd:57:64:c7:cd: a8:34:80:31:be:fe:98:46:80:8d:c2:2d:eb:20:04: eb:4c:06:b8:f4:58:81:5e:33:db:0e:34:0d:81:ce: c6:2f:68:83:ad:0e:d3:6c:2d:5f:b7:90:5e:e1:53: d3:50:1b:c2:3b:bd:f3:8d:55:01:e7:c4:8d:96:23: ea:1c:33:1a:e0:93:f1:b0:65:a6:77:d0:10:3a:40: a1:85:f8:c4:d2:3c:d7:e1:fb:09:56:03:55:f6:6b: 5d:93:e6:96:5d:d3:19:ae:13:fa:08:7e:46:6a:c7: 31:92:e7:93:c0:65:09:11:ac:9c:39:ee:0a:cf:c2: 4b:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:3B:DE:80:8D:BC:EF:A2:E7:D6:EB:C0:8B:D8:F9:53:A9:A0:6C:46 X509v3 Authority Key Identifier: keyid:43:35:2C:F2:FE:94:54:8E:EF:08:0C:0D:6A:6D:A5:C0:7E:E6:27:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e7d9f745-faa4-48ce-83b1-0bde33c2447f/0/43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e7d9f745-faa4-48ce-83b1-0bde33c2447f/0/43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:b4:f0:2e:65:01:c7:40:b4:f7:5f:5e:1a:15:ee:af:e8:48: bd:06:28:d5:e5:b7:72:a9:ba:07:97:ba:5e:b5:4c:56:72:90: 7e:28:98:e3:49:3b:52:1c:6c:85:b0:96:b3:4b:6e:cf:3a:8d: 8c:35:3d:a7:5d:94:6f:63:ca:36:f8:9e:e4:2b:b8:bf:2b:ae: da:9e:46:7d:dc:c3:f1:ca:67:4c:0d:80:ab:32:43:f8:de:eb: 93:9b:fa:a6:78:90:f0:8e:83:ef:4e:ee:43:07:13:98:69:e8: b3:a9:0e:e3:38:6a:46:07:5b:84:dd:42:c5:88:1a:6b:43:36: 66:25:6f:3e:8e:8b:b3:82:09:f2:2b:b9:d5:ca:2f:76:fa:53: 42:1a:5b:f2:13:87:b8:48:f9:b6:52:f3:7c:3d:c1:5d:d0:fa: 19:c1:d2:0b:84:e4:b6:cf:34:80:39:25:7b:dc:3f:a0:41:98: 48:ac:d5:db:1f:65:76:d6:08:40:dc:bc:cf:76:3b:4b:9a:4c: 7f:58:17:a8:87:03:78:3f:4e:33:8d:76:31:35:30:f2:5e:d2: 5f:bb:f2:d7:1b:09:04:ef:68:ee:e2:29:3a:7b:1d:b4:2a:74: 74:47:e5:35:c7:87:b2:ad:95:2f:a7:44:23:85:ec:ef:05:74: db:32:9a:18 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZhIDKKrUyU//lfx9Nc+HWS/JfUIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDMzNTJDRjJGRTk0NTQ4RUVGMDgwQzBENkE2REE1QzA3 RUU2MjdBQjAeFw0yNTEyMjAwNTE3NDNaFw0yNTEyMjMxMzU4NDNaMDMxMTAvBgNV BAMTKEE1M0JERTgwOERCQ0VGQTJFN0Q2RUJDMDhCRDhGOTUzQTlBMDZDNDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD4fMZ9qmsdvVj1Fi24Dc+zMrZC yhXHLSp7cKn3ZJ6sfdXdjpCZnIzwAGLEoSqzil7y3tLTomOMH5hAYF5Mn1I0UfQW slYsPhSG4BVs8mqSlXQfLYoEmEbFMkVKMaWXUjkjrJ4SNVq+Yb8Kv65eoSDre3IN WXwc4Zw32OfvJbHU1I79V2THzag0gDG+/phGgI3CLesgBOtMBrj0WIFeM9sONA2B zsYvaIOtDtNsLV+3kF7hU9NQG8I7vfONVQHnxI2WI+ocMxrgk/GwZaZ30BA6QKGF +MTSPNfh+wlWA1X2a12T5pZd0xmuE/oIfkZqxzGS55PAZQkRrJw57grPwktzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpTvegI2876Ln1uvAi9j5U6mgbEYwHwYDVR0j BBgwFoAUQzUs8v6UVI7vCAwNam2lwH7mJ6swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l N2Q5Zjc0NS1mYWE0LTQ4Y2UtODNiMS0wYmRlMzNjMjQ0N2YvMC80MzM1MkNGMkZF OTQ1NDhFRUYwODBDMEQ2QTZEQTVDMDdFRTYyN0FCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDMzNTJDRjJGRTk0NTQ4RUVGMDgwQzBENkE2REE1QzA3RUU2 MjdBQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTdkOWY3NDUtZmFhNC00OGNlLTgz YjEtMGJkZTMzYzI0NDdmLzAvNDMzNTJDRjJGRTk0NTQ4RUVGMDgwQzBENkE2REE1 QzA3RUU2MjdBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALS08C5lAcdAtPdfXhoV7q/oSL0GKNXlt3Kp ugeXul61TFZykH4omONJO1IcbIWwlrNLbs86jYw1PaddlG9jyjb4nuQruL8rrtqe Rn3cw/HKZ0wNgKsyQ/je65Ob+qZ4kPCOg+9O7kMHE5hp6LOpDuM4akYHW4TdQsWI GmtDNmYlbz6Oi7OCCfIrudXKL3b6U0IaW/ITh7hI+bZS83w9wV3Q+hnB0guE5LbP NIA5JXvcP6BBmEis1dsfZXbWCEDcvM92O0uaTH9YF6iHA3g/TjONdjE1MPJe0l+7 8tcbCQTvaO7iKTp7HbQqdHRH5TXHh7KtlS+nRCOF7O8FdNsymhg= -----END CERTIFICATE-----Generated at Sun Dec 21 16:55:38 2025 by rpki-client