This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/f2aa2d10-3faa-4272-be1f-8102957b65e6/0/C43D9C91D389ADDD2039882757F731CAFAAC740F.mft File: C43D9C91D389ADDD2039882757F731CAFAAC740F.mft (raw, json) Hash identifier: BT8UuDirLMU8l5fUgYXsKnE6xPx6LB/G+3RTT84n9OM= Subject key identifier: B1:E1:24:A6:23:24:A7:7E:7E:31:46:9F:C0:F9:08:DF:41:84:43:8C Authority key identifier: C4:3D:9C:91:D3:89:AD:DD:20:39:88:27:57:F7:31:CA:FA:AC:74:0F Certificate issuer: /CN=C43D9C91D389ADDD2039882757F731CAFAAC740F Certificate serial: 3BD544E6DF5FA93A58E2C807364388B271AEA035 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C43D9C91D389ADDD2039882757F731CAFAAC740F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f2aa2d10-3faa-4272-be1f-8102957b65e6/0/C43D9C91D389ADDD2039882757F731CAFAAC740F.mft Manifest number: 0244 Signing time: Sat 06 Dec 2025 06:40:52 +0000 Manifest this update: Sat 06 Dec 2025 06:35:52 +0000 Manifest next update: Tue 09 Dec 2025 16:20:52 +0000 Files and hashes: 1: 323030313a6466313a353438303a3a2f34382d3438203d3e20313339333737.roa (hash: L5SSKiEo+E6kMD2pTjeK2EegAPOEaiDjUkwPgfIZ0H0=) 2: 3130332e3134322e3139352e302f32342d3234203d3e20313339333737.roa (hash: xXmPg+qv24jKz/eXwVHYUpUxLnyd59IGPLP0enb+4aQ=) 3: C43D9C91D389ADDD2039882757F731CAFAAC740F.crl (hash: AYvj4hOE32YI9ix8P0lz8Fn1rIYv1pG2O+34vMoDcXE=) 4: 3130332e3134322e3139342e302f32342d3234203d3e20313338383636.roa (hash: O208rGlxXsDRg5ZQgFSHuXQXt753cTvrXuKq5DJTaZU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f2aa2d10-3faa-4272-be1f-8102957b65e6/0/C43D9C91D389ADDD2039882757F731CAFAAC740F.crl rsync://repo-rpki.idnic.net/repo/f2aa2d10-3faa-4272-be1f-8102957b65e6/0/C43D9C91D389ADDD2039882757F731CAFAAC740F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C43D9C91D389ADDD2039882757F731CAFAAC740F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:d5:44:e6:df:5f:a9:3a:58:e2:c8:07:36:43:88:b2:71:ae:a0:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C43D9C91D389ADDD2039882757F731CAFAAC740F Validity Not Before: Dec 6 06:35:52 2025 GMT Not After : Dec 9 16:20:52 2025 GMT Subject: CN=B1E124A62324A77E7E31469FC0F908DF4184438C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:41:d7:cc:7a:db:35:7c:1a:29:4b:51:05:05: 7d:e7:c5:e0:e0:d5:ce:34:67:fd:b9:d0:9e:b7:30: c4:09:cc:45:94:b4:22:1b:c9:f9:f4:09:04:36:29: d0:d2:c2:47:8a:b6:0d:b1:ae:9d:32:8c:d2:13:53: e6:4f:3d:c1:e4:f8:5f:df:a4:87:17:2c:c4:8c:1e: ce:e9:4f:8e:8e:fe:95:0e:d6:c6:23:39:38:59:1d: f2:72:05:da:19:1c:34:b1:5c:bb:f3:6b:fe:93:fd: 5d:67:35:38:cb:9f:40:dd:ee:1a:1c:cd:92:94:96: a7:33:77:84:ec:a0:5f:87:e7:fe:d9:ac:41:85:e8: 6b:4e:ce:ef:a9:0e:49:e5:c0:b0:86:d4:61:81:17: 7c:f7:e9:c5:fa:e4:c8:13:4d:4d:9f:8e:29:11:b7: 5f:96:5c:d5:74:b2:09:1c:22:a1:0e:ab:c2:c7:e9: e7:f1:18:75:2a:56:61:eb:25:95:2a:dc:ee:32:5b: 3d:83:67:51:f9:52:23:1f:fd:5b:89:46:44:b4:95: 86:d8:cf:03:e9:6b:84:11:b2:98:85:05:78:9f:36: bd:a2:fa:9b:0b:30:72:96:5e:97:70:35:36:fd:16: 63:6c:23:8b:f1:06:d5:05:0e:d8:c6:48:60:16:ec: e7:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:E1:24:A6:23:24:A7:7E:7E:31:46:9F:C0:F9:08:DF:41:84:43:8C X509v3 Authority Key Identifier: keyid:C4:3D:9C:91:D3:89:AD:DD:20:39:88:27:57:F7:31:CA:FA:AC:74:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f2aa2d10-3faa-4272-be1f-8102957b65e6/0/C43D9C91D389ADDD2039882757F731CAFAAC740F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C43D9C91D389ADDD2039882757F731CAFAAC740F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f2aa2d10-3faa-4272-be1f-8102957b65e6/0/C43D9C91D389ADDD2039882757F731CAFAAC740F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:dd:ac:26:17:99:d2:1f:9a:c3:96:77:94:27:2a:82:b0:3e: 9f:0c:4f:0f:26:9b:71:25:4a:33:84:1e:12:c5:49:3b:b0:de: 53:15:4d:f9:7c:d3:bd:cf:db:ce:b0:5b:cf:51:b2:e7:9d:1c: 77:96:07:cb:6c:08:11:62:0a:79:0b:16:1f:f3:59:60:3c:d0: 6a:ce:0b:19:af:35:ae:af:4b:2c:e2:e6:a6:7f:05:24:ea:07: eb:68:cf:c2:f0:ea:9a:11:0d:52:9d:fa:dc:aa:d7:51:b3:9f: 62:48:ae:c9:f3:08:d5:93:cd:9d:6f:b3:52:0a:ab:63:99:9b: 45:84:a5:5d:9c:aa:f0:43:1a:ea:72:e2:b0:fd:b8:5e:de:39: 65:4f:e0:b7:a0:34:6e:64:17:fe:6e:5f:45:93:df:39:6e:ec: ea:ab:c5:b9:10:ff:bb:ef:08:f6:d6:12:bf:63:d4:d8:6d:af: 41:13:ac:04:68:f6:4d:ea:60:af:52:43:7d:36:48:09:fb:0c: 68:55:11:60:55:57:7c:c6:96:8a:4a:85:6f:45:44:dc:21:ba: 31:6e:9f:59:42:26:9f:05:11:6e:81:2f:e0:1c:5f:18:4b:73: e2:f6:9c:05:44:e5:7b:47:d9:ee:07:ca:81:47:d6:bb:4e:4b: 42:2f:87:06 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO9VE5t9fqTpY4sgHNkOIsnGuoDUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzQzRDlDOTFEMzg5QURERDIwMzk4ODI3NTdGNzMxQ0FG QUFDNzQwRjAeFw0yNTEyMDYwNjM1NTJaFw0yNTEyMDkxNjIwNTJaMDMxMTAvBgNV BAMTKEIxRTEyNEE2MjMyNEE3N0U3RTMxNDY5RkMwRjkwOERGNDE4NDQzOEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXQdfMets1fBopS1EFBX3nxeDg 1c40Z/250J63MMQJzEWUtCIbyfn0CQQ2KdDSwkeKtg2xrp0yjNITU+ZPPcHk+F/f pIcXLMSMHs7pT46O/pUO1sYjOThZHfJyBdoZHDSxXLvza/6T/V1nNTjLn0Dd7hoc zZKUlqczd4TsoF+H5/7ZrEGF6GtOzu+pDknlwLCG1GGBF3z36cX65MgTTU2fjikR t1+WXNV0sgkcIqEOq8LH6efxGHUqVmHrJZUq3O4yWz2DZ1H5UiMf/VuJRkS0lYbY zwPpa4QRspiFBXifNr2i+psLMHKWXpdwNTb9FmNsI4vxBtUFDtjGSGAW7OcTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUseEkpiMkp35+MUafwPkI30GEQ4wwHwYDVR0j BBgwFoAUxD2ckdOJrd0gOYgnV/cxyvqsdA8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MmFhMmQxMC0zZmFhLTQyNzItYmUxZi04MTAyOTU3YjY1ZTYvMC9DNDNEOUM5MUQz ODlBREREMjAzOTg4Mjc1N0Y3MzFDQUZBQUM3NDBGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzQzRDlDOTFEMzg5QURERDIwMzk4ODI3NTdGNzMxQ0FGQUFD NzQwRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjJhYTJkMTAtM2ZhYS00MjcyLWJl MWYtODEwMjk1N2I2NWU2LzAvQzQzRDlDOTFEMzg5QURERDIwMzk4ODI3NTdGNzMx Q0FGQUFDNzQwRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKndrCYXmdIfmsOWd5QnKoKwPp8MTw8mm3El SjOEHhLFSTuw3lMVTfl8073P286wW89RsuedHHeWB8tsCBFiCnkLFh/zWWA80GrO CxmvNa6vSyzi5qZ/BSTqB+toz8Lw6poRDVKd+tyq11Gzn2JIrsnzCNWTzZ1vs1IK q2OZm0WEpV2cqvBDGupy4rD9uF7eOWVP4LegNG5kF/5uX0WT3zlu7OqrxbkQ/7vv CPbWEr9j1Nhtr0ETrARo9k3qYK9SQ302SAn7DGhVEWBVV3zGlopKhW9FRNwhujFu n1lCJp8FEW6BL+AcXxhLc+L2nAVE5XtH2e4HyoFH1rtOS0IvhwY= -----END CERTIFICATE-----Generated at Sun Dec 7 01:46:31 2025 by rpki-client