This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/0/1A43B9C67646D3B8444E277C64D1FD489A45E536.mft File: 1A43B9C67646D3B8444E277C64D1FD489A45E536.mft (raw, json) Hash identifier: isW7xqZYWmd+N4GnPlJfahElzwmzpaaXstbSKko9mv8= Subject key identifier: C7:B7:1D:32:3F:76:77:1C:11:02:E4:F8:81:EC:6F:DE:8D:F6:8F:9F Authority key identifier: 1A:43:B9:C6:76:46:D3:B8:44:4E:27:7C:64:D1:FD:48:9A:45:E5:36 Certificate issuer: /CN=1A43B9C67646D3B8444E277C64D1FD489A45E536 Certificate serial: 5821FCB3DA7BB92B7453D6470D32B86198347C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1A43B9C67646D3B8444E277C64D1FD489A45E536.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/0/1A43B9C67646D3B8444E277C64D1FD489A45E536.mft Manifest number: F2 Signing time: Sat 06 Dec 2025 22:12:16 +0000 Manifest this update: Sat 06 Dec 2025 22:07:16 +0000 Manifest next update: Wed 10 Dec 2025 01:08:16 +0000 Files and hashes: 1: 1A43B9C67646D3B8444E277C64D1FD489A45E536.crl (hash: TMzyn0q09neukK5h5P19EwbmI3HjNRhOfSYqL2yqL6g=) 2: 3135372e36362e3132352e302f32342d3234203d3e20313532373732.roa (hash: kqVD+n1IKw72OvnfLlVYQv+xCjn3zAPXv/doYj+5xns=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/0/1A43B9C67646D3B8444E277C64D1FD489A45E536.crl rsync://repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/0/1A43B9C67646D3B8444E277C64D1FD489A45E536.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1A43B9C67646D3B8444E277C64D1FD489A45E536.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 06:55:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:21:fc:b3:da:7b:b9:2b:74:53:d6:47:0d:32:b8:61:98:34:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A43B9C67646D3B8444E277C64D1FD489A45E536 Validity Not Before: Dec 6 22:07:16 2025 GMT Not After : Dec 10 01:08:16 2025 GMT Subject: CN=C7B71D323F76771C1102E4F881EC6FDE8DF68F9F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:56:45:ff:eb:37:70:f2:72:01:63:0f:78:9a: df:93:f2:ce:1f:66:6f:8e:6c:a8:97:8a:ab:3f:43: d3:b5:4a:e6:22:cd:76:c2:74:b7:ae:18:c7:fc:ca: 0b:01:e9:cd:18:8f:75:f6:5d:0b:e9:57:38:3c:3c: 2f:1d:7a:c3:a5:c3:24:02:0b:df:a3:d8:04:45:71: 79:6d:31:12:95:4f:b3:82:d7:4d:84:d2:1b:1c:61: 95:08:60:99:d1:04:39:d8:85:d0:8c:76:cb:ff:7b: c9:46:86:2b:9c:a9:f2:8d:ac:cc:a3:48:1a:bb:8d: 48:58:4e:d4:e8:11:e0:de:92:30:b2:32:27:b0:75: 26:1f:c4:61:5b:dc:34:f3:d1:19:87:ac:d3:4a:fc: 5f:9c:48:5b:3d:07:b1:d2:65:c7:7f:79:65:54:90: 52:fa:0e:5c:28:32:f2:f0:c6:c5:6a:5d:8f:13:90: f3:84:28:3c:c6:d5:b0:ec:79:2c:1d:a4:23:40:89: e8:23:6a:0c:e4:d3:a1:0a:11:6c:8a:08:6f:4f:00: 97:0d:c0:cf:9e:d1:85:25:47:99:be:cb:d5:4d:fe: 5b:95:4e:ab:1a:9d:5c:4b:33:fc:21:6a:04:59:c6: f1:78:bc:35:c2:bf:db:b7:5c:fb:41:8e:b4:84:3e: a3:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:B7:1D:32:3F:76:77:1C:11:02:E4:F8:81:EC:6F:DE:8D:F6:8F:9F X509v3 Authority Key Identifier: keyid:1A:43:B9:C6:76:46:D3:B8:44:4E:27:7C:64:D1:FD:48:9A:45:E5:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/0/1A43B9C67646D3B8444E277C64D1FD489A45E536.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1A43B9C67646D3B8444E277C64D1FD489A45E536.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/0/1A43B9C67646D3B8444E277C64D1FD489A45E536.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:4e:b9:57:87:6e:e7:92:2b:4d:d1:bd:93:23:57:9e:c2:66: e1:54:b4:77:eb:aa:0f:66:8a:68:fd:b6:06:8a:10:7f:c9:7f: 46:7e:fa:fa:c9:34:bf:74:e6:3e:a4:af:ea:51:6a:55:93:63: c5:10:4b:ca:d5:d3:72:b0:e4:ec:66:d5:73:ad:21:d4:04:80: 6a:1a:98:7b:5b:9b:8f:ca:60:5a:79:3f:d9:ea:e4:32:9f:2c: 31:24:e4:0a:19:7c:07:34:48:8c:5b:86:fe:59:36:f9:ca:90: fb:ea:d2:c4:dc:95:64:76:a8:46:8f:fb:94:99:b4:ad:2e:8e: d1:90:50:e6:68:28:23:b0:19:8f:d9:19:f4:5c:74:fb:3c:a2: 11:5f:8d:a5:f3:f8:8d:36:0f:56:12:94:fb:cf:1d:4c:ad:90: 2d:b4:ba:f2:11:9e:ca:c0:f2:2c:51:10:8d:6f:36:9c:bb:20: 58:6a:b6:bd:9e:31:97:a4:32:73:0a:c6:d0:c0:65:a7:aa:0a: 97:97:b6:37:67:c4:cb:97:b8:3f:ec:d5:ee:4b:17:9e:5d:65: fb:74:ff:0c:14:4a:ca:be:ca:00:31:fa:d1:d7:cd:55:d3:35: c2:31:df:68:df:74:8e:8c:36:8c:9e:a6:f9:ab:06:92:c1:43: 25:72:c2:fe -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgITWCH8s9p7uSt0U9ZHDTK4YZg0fDANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEygxQTQzQjlDNjc2NDZEM0I4NDQ0RTI3N0M2NEQxRkQ0ODlB NDVFNTM2MB4XDTI1MTIwNjIyMDcxNloXDTI1MTIxMDAxMDgxNlowMzExMC8GA1UE AxMoQzdCNzFEMzIzRjc2NzcxQzExMDJFNEY4ODFFQzZGREU4REY2OEY5RjCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAL5WRf/rN3DycgFjD3ia35Pyzh9m b45sqJeKqz9D07VK5iLNdsJ0t64Yx/zKCwHpzRiPdfZdC+lXODw8Lx16w6XDJAIL 36PYBEVxeW0xEpVPs4LXTYTSGxxhlQhgmdEEOdiF0Ix2y/97yUaGK5yp8o2szKNI GruNSFhO1OgR4N6SMLIyJ7B1Jh/EYVvcNPPRGYes00r8X5xIWz0HsdJlx395ZVSQ UvoOXCgy8vDGxWpdjxOQ84QoPMbVsOx5LB2kI0CJ6CNqDOTToQoRbIoIb08Alw3A z57RhSVHmb7L1U3+W5VOqxqdXEsz/CFqBFnG8Xi8NcK/27dc+0GOtIQ+owkCAwEA AaOCAjwwggI4MB0GA1UdDgQWBBTHtx0yP3Z3HBEC5PiB7G/ejfaPnzAfBgNVHSME GDAWgBQaQ7nGdkbTuEROJ3xk0f1ImkXlNjAOBgNVHQ8BAf8EBAMCB4AwgYUGA1Ud HwR+MHwweqB4oHaGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzdj ZjAxZWM2LThlODktNDAyYS05MGM3LTUwYzZmMTRjZDI0Mi8wLzFBNDNCOUM2NzY0 NkQzQjg0NDRFMjc3QzY0RDFGRDQ4OUE0NUU1MzYuY3JsMHQGCCsGAQUFBwEBBGgw ZjBkBggrBgEFBQcwAoZYcnN5bmM6Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8v SUROSUMtSUQvMS8xQTQzQjlDNjc2NDZEM0I4NDQ0RTI3N0M2NEQxRkQ0ODlBNDVF NTM2LmNlcjCBkwYIKwYBBQUHAQsEgYYwgYMwgYAGCCsGAQUFBzALhnRyc3luYzov L3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83Y2YwMWVjNi04ZTg5LTQwMmEtOTBj Ny01MGM2ZjE0Y2QyNDIvMC8xQTQzQjlDNjc2NDZEM0I4NDQ0RTI3N0M2NEQxRkQ0 ODlBNDVFNTM2Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADANBgkqhkiG9w0BAQsFAAOCAQEAm065V4du55IrTdG9kyNXnsJm4VS0d+uqD2aK aP22BooQf8l/Rn76+sk0v3TmPqSv6lFqVZNjxRBLytXTcrDk7GbVc60h1ASAahqY e1ubj8pgWnk/2erkMp8sMSTkChl8BzRIjFuG/lk2+cqQ++rSxNyVZHaoRo/7lJm0 rS6O0ZBQ5mgoI7AZj9kZ9Fx0+zyiEV+NpfP4jTYPVhKU+88dTK2QLbS68hGeysDy LFEQjW82nLsgWGq2vZ4xl6QycwrG0MBlp6oKl5e2N2fEy5e4P+zV7ksXnl1l+3T/ DBRKyr7KADH60dfNVdM1wjHfaN90jow2jJ6m+asGksFDJXLC/g== -----END CERTIFICATE-----Generated at Sun Dec 7 01:42:37 2025 by rpki-client