This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/e7d9f745-faa4-48ce-83b1-0bde33c2447f/0/43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.mft File: 43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.mft (raw, json) Hash identifier: xv+I+/HhxH+wHfqPE4lnwbLK+FymqGYyEmCumieRRbs= Subject key identifier: 6D:EC:8B:F5:2A:DC:F8:75:CE:0B:5C:4B:6A:46:E2:29:7C:58:D0:1F Authority key identifier: 43:35:2C:F2:FE:94:54:8E:EF:08:0C:0D:6A:6D:A5:C0:7E:E6:27:AB Certificate issuer: /CN=43352CF2FE94548EEF080C0D6A6DA5C07EE627AB Certificate serial: 3E00880C9857CEF7A993A02BE43638F8966D32A2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e7d9f745-faa4-48ce-83b1-0bde33c2447f/0/43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.mft Manifest number: 0144 Signing time: Thu 04 Dec 2025 17:51:40 +0000 Manifest this update: Thu 04 Dec 2025 17:46:40 +0000 Manifest next update: Mon 08 Dec 2025 02:25:40 +0000 Files and hashes: 1: 3230332e3134352e36302e302f32332d3234203d3e203435323935.roa (hash: q3+/tfcea23JBjvDKOPYoF0T8lJl4/w1ukwF8DCr3Dg=) 2: 43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.crl (hash: nH+TC/A5lQSdGaxpYYDLnRhZg0zJxGbIq3TAkKJmiV0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e7d9f745-faa4-48ce-83b1-0bde33c2447f/0/43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.crl rsync://repo-rpki.idnic.net/repo/e7d9f745-faa4-48ce-83b1-0bde33c2447f/0/43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 02:25:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:00:88:0c:98:57:ce:f7:a9:93:a0:2b:e4:36:38:f8:96:6d:32:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43352CF2FE94548EEF080C0D6A6DA5C07EE627AB Validity Not Before: Dec 4 17:46:40 2025 GMT Not After : Dec 8 02:25:40 2025 GMT Subject: CN=6DEC8BF52ADCF875CE0B5C4B6A46E2297C58D01F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ed:94:a3:ed:01:1b:b4:97:21:4f:03:0a:51: 38:0a:61:1a:3d:64:0f:d0:33:04:bd:09:22:ec:5f: 29:a5:6c:4d:3e:ab:fa:c5:e1:0a:8b:70:59:27:7f: 87:19:cf:09:75:73:5f:0a:71:70:d6:33:f4:f4:6d: f9:15:ab:19:e5:95:05:fa:a5:1c:c8:9a:62:1b:18: ea:ae:8f:51:a2:e2:65:f0:9d:64:f1:13:60:6a:81: 4b:86:dc:fc:b1:f3:93:9d:e5:6d:af:f7:ff:61:f1: 36:cc:6a:4a:c3:64:15:75:00:95:ea:19:c7:06:f9: db:ae:07:6b:93:b0:01:34:15:ab:d3:3e:23:d5:6b: ab:7c:af:12:da:f4:08:f3:ca:26:f4:f4:b2:73:40: 96:aa:65:d7:66:c6:b2:70:dd:74:df:c1:b3:8b:cd: ee:bc:96:dc:b2:ca:38:ff:fc:74:c0:04:a4:0f:06: 7d:f3:4c:57:cf:61:ad:f1:ba:87:01:da:da:ea:25: 58:c2:17:e7:a0:d2:63:4a:79:c5:b5:7c:50:8e:df: a6:3c:d2:53:7e:89:02:81:20:2c:a7:8f:9c:27:fc: c9:84:c3:96:35:c2:cd:c3:02:68:53:69:52:4c:da: 77:6a:d1:06:9b:09:65:11:71:60:50:9c:cb:c3:27: 6d:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:EC:8B:F5:2A:DC:F8:75:CE:0B:5C:4B:6A:46:E2:29:7C:58:D0:1F X509v3 Authority Key Identifier: keyid:43:35:2C:F2:FE:94:54:8E:EF:08:0C:0D:6A:6D:A5:C0:7E:E6:27:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e7d9f745-faa4-48ce-83b1-0bde33c2447f/0/43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e7d9f745-faa4-48ce-83b1-0bde33c2447f/0/43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:5f:df:8e:71:09:d8:85:d5:d6:3a:cd:f2:17:b4:5b:05:05: b6:e0:e9:9d:87:c8:24:fa:5f:c0:53:b8:25:2e:ea:12:c3:f6: 93:54:b1:3d:d3:1b:cb:1f:91:65:e5:5a:32:db:87:3e:a5:be: 78:61:3b:55:7f:a7:b5:5c:10:41:a0:14:d8:0d:32:de:2e:92: 7e:d7:c1:3c:d7:90:18:be:af:83:d6:fd:93:6d:89:02:2d:c5: 04:9c:f9:96:6f:e3:ca:1e:4e:1a:43:7b:52:58:4f:b1:27:79: a8:fd:77:b6:47:9c:bc:6b:57:bb:0c:1c:bd:1c:3f:dc:69:64: ed:1a:7b:e7:a2:54:21:9e:53:0b:66:76:f9:4a:34:64:e0:de: e6:6f:ab:5e:d8:93:8f:85:fc:bf:f7:04:a2:3e:38:98:05:4d: b7:f9:58:d8:0d:10:5c:2b:f8:02:2a:7e:7e:ac:ef:54:a0:fb: 92:c2:26:04:2b:e7:c1:5f:a1:d0:35:b6:99:cb:16:79:b0:57: 68:99:c1:ff:78:6d:51:9e:78:8a:90:ba:ec:ad:bd:c6:4d:5b: 92:7b:75:3c:20:73:fa:e5:a4:26:80:d2:30:3f:f0:35:26:14: 29:e7:31:5c:f4:5f:89:4e:a1:45:d0:2b:8a:a5:4d:6e:e9:d0: 4a:69:c4:42 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPgCIDJhXzvepk6Ar5DY4+JZtMqIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDMzNTJDRjJGRTk0NTQ4RUVGMDgwQzBENkE2REE1QzA3 RUU2MjdBQjAeFw0yNTEyMDQxNzQ2NDBaFw0yNTEyMDgwMjI1NDBaMDMxMTAvBgNV BAMTKDZERUM4QkY1MkFEQ0Y4NzVDRTBCNUM0QjZBNDZFMjI5N0M1OEQwMUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu7ZSj7QEbtJchTwMKUTgKYRo9 ZA/QMwS9CSLsXymlbE0+q/rF4QqLcFknf4cZzwl1c18KcXDWM/T0bfkVqxnllQX6 pRzImmIbGOquj1Gi4mXwnWTxE2BqgUuG3Pyx85Od5W2v9/9h8TbMakrDZBV1AJXq GccG+duuB2uTsAE0FavTPiPVa6t8rxLa9Ajzyib09LJzQJaqZddmxrJw3XTfwbOL ze68ltyyyjj//HTABKQPBn3zTFfPYa3xuocB2trqJVjCF+eg0mNKecW1fFCO36Y8 0lN+iQKBICynj5wn/MmEw5Y1ws3DAmhTaVJM2ndq0QabCWURcWBQnMvDJ20FAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbeyL9Src+HXOC1xLakbiKXxY0B8wHwYDVR0j BBgwFoAUQzUs8v6UVI7vCAwNam2lwH7mJ6swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l N2Q5Zjc0NS1mYWE0LTQ4Y2UtODNiMS0wYmRlMzNjMjQ0N2YvMC80MzM1MkNGMkZF OTQ1NDhFRUYwODBDMEQ2QTZEQTVDMDdFRTYyN0FCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDMzNTJDRjJGRTk0NTQ4RUVGMDgwQzBENkE2REE1QzA3RUU2 MjdBQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTdkOWY3NDUtZmFhNC00OGNlLTgz YjEtMGJkZTMzYzI0NDdmLzAvNDMzNTJDRjJGRTk0NTQ4RUVGMDgwQzBENkE2REE1 QzA3RUU2MjdBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJFf345xCdiF1dY6zfIXtFsFBbbg6Z2HyCT6 X8BTuCUu6hLD9pNUsT3TG8sfkWXlWjLbhz6lvnhhO1V/p7VcEEGgFNgNMt4ukn7X wTzXkBi+r4PW/ZNtiQItxQSc+ZZv48oeThpDe1JYT7Eneaj9d7ZHnLxrV7sMHL0c P9xpZO0ae+eiVCGeUwtmdvlKNGTg3uZvq17Yk4+F/L/3BKI+OJgFTbf5WNgNEFwr +AIqfn6s71Sg+5LCJgQr58FfodA1tpnLFnmwV2iZwf94bVGeeIqQuuytvcZNW5J7 dTwgc/rlpCaA0jA/8DUmFCnnMVz0X4lOoUXQK4qlTW7p0EppxEI= -----END CERTIFICATE-----Generated at Sat Dec 6 22:51:09 2025 by rpki-client