This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/448407e3-2cb1-4c6e-8aeb-5e0d355e8c96/0/43E94F4D6572FA61C908F2C122712EB0A696EF96.mft File: 43E94F4D6572FA61C908F2C122712EB0A696EF96.mft (raw, json) Hash identifier: ZM0BNy42FgExb0zsFwUmwW6NMpdV3eWyVDv6J6i7VMw= Subject key identifier: F3:5E:F3:49:39:9C:AA:EF:01:3A:14:84:78:2B:74:B6:08:7B:4D:D8 Authority key identifier: 43:E9:4F:4D:65:72:FA:61:C9:08:F2:C1:22:71:2E:B0:A6:96:EF:96 Certificate issuer: /CN=43E94F4D6572FA61C908F2C122712EB0A696EF96 Certificate serial: 0BCB0411A725DF9C40289F0A869A961CE9C04D62 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/43E94F4D6572FA61C908F2C122712EB0A696EF96.cer Subject info access: rsync://repo-rpki.idnic.net/repo/448407e3-2cb1-4c6e-8aeb-5e0d355e8c96/0/43E94F4D6572FA61C908F2C122712EB0A696EF96.mft Manifest number: 0162 Signing time: Sun 25 Jan 2026 05:20:48 +0000 Manifest this update: Sun 25 Jan 2026 05:15:48 +0000 Manifest next update: Wed 28 Jan 2026 06:04:48 +0000 Files and hashes: 1: 43E94F4D6572FA61C908F2C122712EB0A696EF96.crl (hash: +Qou/tM6H5KRWrEHH9ekSRNMbSac8/U6RbjPiEFtGIU=) 2: 34352e3132362e34302e302f32332d3234203d3e203634333030.roa (hash: qxQ+6T9yrSIPoh+WZqiNWh2YyFV04+QAx96S0X8/TDk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/448407e3-2cb1-4c6e-8aeb-5e0d355e8c96/0/43E94F4D6572FA61C908F2C122712EB0A696EF96.crl rsync://repo-rpki.idnic.net/repo/448407e3-2cb1-4c6e-8aeb-5e0d355e8c96/0/43E94F4D6572FA61C908F2C122712EB0A696EF96.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/43E94F4D6572FA61C908F2C122712EB0A696EF96.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 06:04:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:cb:04:11:a7:25:df:9c:40:28:9f:0a:86:9a:96:1c:e9:c0:4d:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43E94F4D6572FA61C908F2C122712EB0A696EF96 Validity Not Before: Jan 25 05:15:48 2026 GMT Not After : Jan 28 06:04:48 2026 GMT Subject: CN=F35EF349399CAAEF013A1484782B74B6087B4DD8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:f0:7d:ca:ed:94:9a:ca:40:d8:39:cc:02:ee: 39:ef:82:ab:92:d0:f0:58:75:ce:23:cd:ba:11:3f: 4f:dd:1e:2e:f6:ef:e3:fe:69:a1:09:cf:3b:11:67: 80:28:a4:8c:f2:f5:49:af:26:b8:5c:7f:49:b0:2c: 55:d0:ec:02:2a:cf:a3:37:13:52:31:b7:e7:c6:6c: 99:78:d3:eb:cf:fa:96:13:ce:31:e5:01:d3:9f:b1: b4:8f:38:e6:6b:45:42:78:49:28:eb:11:1e:f2:ab: 3f:71:40:80:d6:ab:c5:6c:78:9f:e8:01:6d:01:de: ee:98:60:5e:a9:41:26:40:8d:78:61:22:85:74:69: f9:1a:bd:01:74:b7:17:89:d6:f1:d8:d2:ce:a5:47: 20:27:c6:e2:04:e8:b8:e9:f3:5d:b9:e7:96:1c:73: fa:bd:5f:8d:a4:f5:82:99:c9:f4:d9:77:c0:98:b8: 77:45:ee:30:2f:bb:3a:ea:56:0a:81:0f:03:c6:9d: 69:4a:8a:8e:e4:ef:93:ea:2f:73:03:a6:af:90:3f: 1d:2a:2e:48:06:85:47:c4:1d:fc:41:6d:8f:61:20: a7:f7:e0:98:20:40:39:f4:16:65:7b:92:50:ab:f7: 75:6a:cb:f8:13:98:d7:72:b4:ce:2b:db:c0:07:f3: bd:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:5E:F3:49:39:9C:AA:EF:01:3A:14:84:78:2B:74:B6:08:7B:4D:D8 X509v3 Authority Key Identifier: keyid:43:E9:4F:4D:65:72:FA:61:C9:08:F2:C1:22:71:2E:B0:A6:96:EF:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/448407e3-2cb1-4c6e-8aeb-5e0d355e8c96/0/43E94F4D6572FA61C908F2C122712EB0A696EF96.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/43E94F4D6572FA61C908F2C122712EB0A696EF96.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/448407e3-2cb1-4c6e-8aeb-5e0d355e8c96/0/43E94F4D6572FA61C908F2C122712EB0A696EF96.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:57:82:42:57:cd:d9:eb:c7:79:5e:38:2f:18:6b:01:80:83: 9c:cd:5d:b7:b5:0b:6c:4b:97:d1:f7:03:83:4e:b2:c4:e2:27: 53:03:96:f6:c8:94:fb:51:3b:05:33:24:93:70:9a:8d:06:7d: 42:47:30:f8:ad:ee:91:b6:d7:8b:67:75:1e:db:c3:10:98:4c: 8d:1e:9b:1a:63:63:5e:9c:c6:eb:21:68:3b:46:5a:cb:0b:c6: d5:e2:68:0c:6a:fd:3b:3d:2d:af:e3:7f:6e:d4:85:93:43:fa: 1e:5f:dd:ef:07:b0:1b:50:bb:31:1f:bd:f6:7c:b7:bf:39:6d: 4f:75:c6:81:a3:e6:bf:a8:72:72:c5:5e:84:07:88:9e:65:28: 9a:54:d1:74:d5:cd:c0:de:d6:5e:24:d0:32:7c:ce:69:a9:98: 80:ab:4f:2e:7d:4e:2c:78:f2:35:f8:05:c4:88:6f:fc:e4:a4: e5:0e:2a:49:9f:ae:ef:6a:05:11:d0:09:56:22:ec:a2:93:b1: b1:fb:2e:7d:19:b2:a1:ed:fa:b4:01:e7:49:e5:b7:6e:c5:9e: c5:01:96:86:fc:bb:a4:c8:85:d1:28:54:eb:2c:db:e3:6c:e1: 2d:d7:bd:76:22:61:07:c7:c1:c3:c0:3c:84:f4:2f:38:8c:8e: e3:19:f6:ea -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC8sEEacl35xAKJ8KhpqWHOnATWIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDNFOTRGNEQ2NTcyRkE2MUM5MDhGMkMxMjI3MTJFQjBB Njk2RUY5NjAeFw0yNjAxMjUwNTE1NDhaFw0yNjAxMjgwNjA0NDhaMDMxMTAvBgNV BAMTKEYzNUVGMzQ5Mzk5Q0FBRUYwMTNBMTQ4NDc4MkI3NEI2MDg3QjRERDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN8H3K7ZSaykDYOcwC7jnvgquS 0PBYdc4jzboRP0/dHi727+P+aaEJzzsRZ4AopIzy9UmvJrhcf0mwLFXQ7AIqz6M3 E1Ixt+fGbJl40+vP+pYTzjHlAdOfsbSPOOZrRUJ4SSjrER7yqz9xQIDWq8VseJ/o AW0B3u6YYF6pQSZAjXhhIoV0afkavQF0txeJ1vHY0s6lRyAnxuIE6Ljp812555Yc c/q9X42k9YKZyfTZd8CYuHdF7jAvuzrqVgqBDwPGnWlKio7k75PqL3MDpq+QPx0q LkgGhUfEHfxBbY9hIKf34JggQDn0FmV7klCr93Vqy/gTmNdytM4r28AH870dAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU817zSTmcqu8BOhSEeCt0tgh7TdgwHwYDVR0j BBgwFoAUQ+lPTWVy+mHJCPLBInEusKaW75YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NDg0MDdlMy0yY2IxLTRjNmUtOGFlYi01ZTBkMzU1ZThjOTYvMC80M0U5NEY0RDY1 NzJGQTYxQzkwOEYyQzEyMjcxMkVCMEE2OTZFRjk2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDNFOTRGNEQ2NTcyRkE2MUM5MDhGMkMxMjI3MTJFQjBBNjk2 RUY5Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDQ4NDA3ZTMtMmNiMS00YzZlLThh ZWItNWUwZDM1NWU4Yzk2LzAvNDNFOTRGNEQ2NTcyRkE2MUM5MDhGMkMxMjI3MTJF QjBBNjk2RUY5Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFlXgkJXzdnrx3leOC8YawGAg5zNXbe1C2xL l9H3A4NOssTiJ1MDlvbIlPtROwUzJJNwmo0GfUJHMPit7pG214tndR7bwxCYTI0e mxpjY16cxushaDtGWssLxtXiaAxq/Ts9La/jf27UhZND+h5f3e8HsBtQuzEfvfZ8 t785bU91xoGj5r+ocnLFXoQHiJ5lKJpU0XTVzcDe1l4k0DJ8zmmpmICrTy59Tix4 8jX4BcSIb/zkpOUOKkmfru9qBRHQCVYi7KKTsbH7Ln0ZsqHt+rQB50nlt27FnsUB lob8u6TIhdEoVOss2+Ns4S3XvXYiYQfHwcPAPIT0LziMjuMZ9uo= -----END CERTIFICATE-----Generated at Sun Jan 25 18:44:25 2026 by rpki-client