This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/448407e3-2cb1-4c6e-8aeb-5e0d355e8c96/0/43E94F4D6572FA61C908F2C122712EB0A696EF96.mft File: 43E94F4D6572FA61C908F2C122712EB0A696EF96.mft (raw, json) Hash identifier: aV0ml8hks9+ytaFF7fkRaShL29u5rBLnJTVhUjVRapA= Subject key identifier: C8:6F:A4:33:36:61:9B:3B:71:DD:DD:91:16:42:FF:13:53:F0:F6:A2 Authority key identifier: 43:E9:4F:4D:65:72:FA:61:C9:08:F2:C1:22:71:2E:B0:A6:96:EF:96 Certificate issuer: /CN=43E94F4D6572FA61C908F2C122712EB0A696EF96 Certificate serial: 2E8C20A7C97606DA3C35ED6F0E208DCE487DC0E1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/43E94F4D6572FA61C908F2C122712EB0A696EF96.cer Subject info access: rsync://repo-rpki.idnic.net/repo/448407e3-2cb1-4c6e-8aeb-5e0d355e8c96/0/43E94F4D6572FA61C908F2C122712EB0A696EF96.mft Manifest number: 014C Signing time: Sat 06 Dec 2025 09:10:46 +0000 Manifest this update: Sat 06 Dec 2025 09:05:46 +0000 Manifest next update: Tue 09 Dec 2025 14:59:46 +0000 Files and hashes: 1: 34352e3132362e34302e302f32332d3234203d3e203634333030.roa (hash: qxQ+6T9yrSIPoh+WZqiNWh2YyFV04+QAx96S0X8/TDk=) 2: 43E94F4D6572FA61C908F2C122712EB0A696EF96.crl (hash: Lr+/GI6RVbmiNNcJgE61tBDMSZ0NJUiRrNvdKACY45w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/448407e3-2cb1-4c6e-8aeb-5e0d355e8c96/0/43E94F4D6572FA61C908F2C122712EB0A696EF96.crl rsync://repo-rpki.idnic.net/repo/448407e3-2cb1-4c6e-8aeb-5e0d355e8c96/0/43E94F4D6572FA61C908F2C122712EB0A696EF96.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/43E94F4D6572FA61C908F2C122712EB0A696EF96.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 14:59:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:8c:20:a7:c9:76:06:da:3c:35:ed:6f:0e:20:8d:ce:48:7d:c0:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43E94F4D6572FA61C908F2C122712EB0A696EF96 Validity Not Before: Dec 6 09:05:46 2025 GMT Not After : Dec 9 14:59:46 2025 GMT Subject: CN=C86FA43336619B3B71DDDD911642FF1353F0F6A2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:dd:d1:5e:10:8b:99:7a:f0:14:65:1b:f9:ae: c0:65:b9:08:80:6b:a8:f8:79:a9:19:5b:0c:af:3c: 30:80:e8:11:c5:8d:ff:6b:9d:d5:5b:7f:0e:5c:2d: ee:7e:26:e7:c6:41:18:ed:86:6b:fb:94:33:b3:d1: 1c:0e:5d:e8:8d:cb:af:0d:de:ff:ac:7f:fa:7d:35: 54:84:39:ee:42:6e:a9:3f:9f:a9:86:ea:79:27:f4: ca:8c:7a:f7:c4:7b:70:84:fb:56:6e:92:c4:98:a8: e5:19:2d:84:31:aa:58:6f:07:08:08:5c:63:07:cf: 08:7b:b2:1e:93:5c:c9:35:4b:37:1e:c7:74:a2:d0: 04:92:99:24:6f:66:e6:b3:05:58:19:97:05:c2:bb: 40:43:7d:d6:36:0c:2b:70:9d:86:bf:40:ad:13:80: be:25:0e:fb:e8:5f:a7:0e:fb:f3:19:8d:fa:b9:b1: 15:e8:c2:2f:98:27:39:a0:3c:df:29:5c:9b:01:0d: de:33:8b:02:6e:46:75:d2:9f:8f:f4:57:b9:41:17: 2a:10:a9:c1:3c:a0:5d:64:8c:f3:f7:54:80:b0:aa: 45:18:64:d5:9c:d7:19:bb:0c:5c:fb:99:b2:0a:84: 5b:73:d4:f8:3a:2d:16:c1:85:e7:af:76:36:5a:65: fd:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:6F:A4:33:36:61:9B:3B:71:DD:DD:91:16:42:FF:13:53:F0:F6:A2 X509v3 Authority Key Identifier: keyid:43:E9:4F:4D:65:72:FA:61:C9:08:F2:C1:22:71:2E:B0:A6:96:EF:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/448407e3-2cb1-4c6e-8aeb-5e0d355e8c96/0/43E94F4D6572FA61C908F2C122712EB0A696EF96.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/43E94F4D6572FA61C908F2C122712EB0A696EF96.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/448407e3-2cb1-4c6e-8aeb-5e0d355e8c96/0/43E94F4D6572FA61C908F2C122712EB0A696EF96.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:ff:76:11:fd:01:b4:c0:59:57:4c:b0:0e:e7:3a:9b:db:c5: ae:a9:e8:25:32:fd:cf:ea:ad:9a:f4:83:00:88:56:08:cf:bd: 7c:f1:d5:96:16:d9:f4:8b:73:3a:52:a6:f3:ad:52:cf:31:2c: e8:77:92:25:33:89:4c:c8:dd:61:2d:ec:b5:4b:02:ef:5d:b2: bf:4c:85:1c:ea:35:af:61:aa:b2:ca:36:d4:a3:30:71:18:7b: f8:01:e3:13:42:62:fc:7d:90:d0:a8:f1:8c:60:97:3e:f0:81: b0:53:4d:90:82:ac:c2:61:b7:8e:5f:04:31:46:7a:1f:89:fa: 1e:d7:83:f6:1d:8a:3a:6f:d3:20:05:f9:7f:33:6f:c0:cf:66: 8b:10:05:6a:e5:2d:ce:02:d1:e7:90:7d:d0:84:68:fa:6d:84: 21:1b:39:bb:ab:86:30:35:90:86:36:db:e5:a6:66:92:9f:67: ae:f6:86:2d:b6:81:4e:3c:33:0e:12:b1:6b:5e:75:f9:ee:91: 63:7d:da:7d:61:0e:54:ec:3e:14:df:7b:35:02:77:dc:e2:6b: 08:ae:92:27:03:f3:24:9a:95:54:26:11:54:0e:de:93:c9:a5: 84:d0:8f:4d:0f:93:99:2b:1f:65:28:88:6d:e3:3c:95:a7:df: cf:7e:0c:a7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULowgp8l2Bto8Ne1vDiCNzkh9wOEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDNFOTRGNEQ2NTcyRkE2MUM5MDhGMkMxMjI3MTJFQjBB Njk2RUY5NjAeFw0yNTEyMDYwOTA1NDZaFw0yNTEyMDkxNDU5NDZaMDMxMTAvBgNV BAMTKEM4NkZBNDMzMzY2MTlCM0I3MUREREQ5MTE2NDJGRjEzNTNGMEY2QTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDh3dFeEIuZevAUZRv5rsBluQiA a6j4eakZWwyvPDCA6BHFjf9rndVbfw5cLe5+JufGQRjthmv7lDOz0RwOXeiNy68N 3v+sf/p9NVSEOe5Cbqk/n6mG6nkn9MqMevfEe3CE+1ZuksSYqOUZLYQxqlhvBwgI XGMHzwh7sh6TXMk1Szcex3Si0ASSmSRvZuazBVgZlwXCu0BDfdY2DCtwnYa/QK0T gL4lDvvoX6cO+/MZjfq5sRXowi+YJzmgPN8pXJsBDd4ziwJuRnXSn4/0V7lBFyoQ qcE8oF1kjPP3VICwqkUYZNWc1xm7DFz7mbIKhFtz1Pg6LRbBheevdjZaZf2PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyG+kMzZhmztx3d2RFkL/E1Pw9qIwHwYDVR0j BBgwFoAUQ+lPTWVy+mHJCPLBInEusKaW75YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NDg0MDdlMy0yY2IxLTRjNmUtOGFlYi01ZTBkMzU1ZThjOTYvMC80M0U5NEY0RDY1 NzJGQTYxQzkwOEYyQzEyMjcxMkVCMEE2OTZFRjk2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDNFOTRGNEQ2NTcyRkE2MUM5MDhGMkMxMjI3MTJFQjBBNjk2 RUY5Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDQ4NDA3ZTMtMmNiMS00YzZlLThh ZWItNWUwZDM1NWU4Yzk2LzAvNDNFOTRGNEQ2NTcyRkE2MUM5MDhGMkMxMjI3MTJF QjBBNjk2RUY5Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFr/dhH9AbTAWVdMsA7nOpvbxa6p6CUy/c/q rZr0gwCIVgjPvXzx1ZYW2fSLczpSpvOtUs8xLOh3kiUziUzI3WEt7LVLAu9dsr9M hRzqNa9hqrLKNtSjMHEYe/gB4xNCYvx9kNCo8Yxglz7wgbBTTZCCrMJht45fBDFG eh+J+h7Xg/Ydijpv0yAF+X8zb8DPZosQBWrlLc4C0eeQfdCEaPpthCEbOburhjA1 kIY22+WmZpKfZ672hi22gU48Mw4SsWtedfnukWN92n1hDlTsPhTfezUCd9ziawiu kicD8ySalVQmEVQO3pPJpYTQj00Pk5krH2UoiG3jPJWn389+DKc= -----END CERTIFICATE-----Generated at Sun Dec 7 00:18:12 2025 by rpki-client