This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/654607f0-1701-49b1-91ff-b1bed5cbded1/0/755B61748263D4DD472C69CA7F1847254B03EBBC.mft
File: 755B61748263D4DD472C69CA7F1847254B03EBBC.mft (raw, json)
Hash identifier: iVjjM9bx8a6yowK9rsSzIbRa/fakxXuzzpp8lc3HnhE=
Subject key identifier: 52:CD:56:2A:10:9A:A6:64:14:21:06:F8:F5:4F:5B:52:E7:DE:EE:57
Authority key identifier: 75:5B:61:74:82:63:D4:DD:47:2C:69:CA:7F:18:47:25:4B:03:EB:BC
Certificate issuer: /CN=755B61748263D4DD472C69CA7F1847254B03EBBC
Certificate serial: 4A99DD609595E8E7D5D8DAB1BFF6BE60925824D0
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/755B61748263D4DD472C69CA7F1847254B03EBBC.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/654607f0-1701-49b1-91ff-b1bed5cbded1/0/755B61748263D4DD472C69CA7F1847254B03EBBC.mft
Manifest number: 01FC
Signing time: Fri 19 Dec 2025 22:41:48 +0000
Manifest this update: Fri 19 Dec 2025 22:36:48 +0000
Manifest next update: Tue 23 Dec 2025 01:33:48 +0000
Files and hashes: 1: 3130332e32322e3231372e302f32342d3234203d3e20313530323631.roa (hash: 0YXLtWcrQqo3QF47I+KQwYusKJlUjyP7HqEp9u0fOCY=)
2: 3130332e32322e3231362e302f32332d3233203d3e20313530323631.roa (hash: NW99gB8qCJlT/OObHXKO0PNmXnjOgR9bEy3lZQmrUX8=)
3: 755B61748263D4DD472C69CA7F1847254B03EBBC.crl (hash: OgQ3rBy7jru5k58U4bUSx3AYqC/CJnAHJxX+S9+0gIU=)
4: 3130332e32322e3231362e302f32342d3234203d3e20313530323631.roa (hash: O/zlYAvAs7v4wgG3NM581/meU2MKG9Ug+TtqOP46WoM=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/654607f0-1701-49b1-91ff-b1bed5cbded1/0/755B61748263D4DD472C69CA7F1847254B03EBBC.crl
rsync://repo-rpki.idnic.net/repo/654607f0-1701-49b1-91ff-b1bed5cbded1/0/755B61748263D4DD472C69CA7F1847254B03EBBC.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/755B61748263D4DD472C69CA7F1847254B03EBBC.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 23 Dec 2025 00:38:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:99:dd:60:95:95:e8:e7:d5:d8:da:b1:bf:f6:be:60:92:58:24:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=755B61748263D4DD472C69CA7F1847254B03EBBC
Validity
Not Before: Dec 19 22:36:48 2025 GMT
Not After : Dec 23 01:33:48 2025 GMT
Subject: CN=52CD562A109AA664142106F8F54F5B52E7DEEE57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:3d:a5:62:f0:10:d1:c9:03:56:2d:e0:ea:7b:
15:16:21:9a:5a:c1:62:0c:22:24:a2:d7:a3:e7:1b:
d7:24:0b:50:87:56:5e:b3:05:fb:1b:19:f0:4b:63:
61:c0:02:67:11:1d:38:b6:6e:9f:7d:ee:07:b0:0e:
7a:4b:0a:4d:a1:5d:ba:62:cc:fd:2a:c2:0a:ed:69:
d0:b7:52:6b:ec:27:06:2c:a1:69:e8:af:6a:a7:39:
04:a7:69:45:09:41:c5:30:bb:6c:b3:aa:9a:ea:87:
39:d3:b7:56:8e:d0:9f:e3:49:76:32:06:8d:b5:ee:
64:5c:89:20:44:ce:cd:f4:0b:a6:f9:3d:cf:d5:a5:
09:98:66:5f:dc:ff:af:f4:09:bf:b7:73:8a:4b:c4:
63:a5:67:cb:8e:d6:4e:dd:24:70:f0:31:66:11:b6:
6d:e6:e4:d3:22:89:3c:0d:65:3d:1e:d0:c8:6d:ce:
c4:a2:f3:d8:d8:6b:8b:8f:d2:a9:59:8b:8f:c7:78:
bf:7e:2a:3c:a2:bf:c0:ae:73:d0:8f:97:1d:ac:b1:
5d:e3:85:fc:b8:b7:db:00:b2:97:43:0e:57:e7:e0:
9c:ce:45:5a:37:96:e7:81:90:52:77:bd:90:6d:eb:
a7:99:fa:84:2c:61:92:eb:05:f7:6f:ff:9a:b4:7b:
13:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:CD:56:2A:10:9A:A6:64:14:21:06:F8:F5:4F:5B:52:E7:DE:EE:57
X509v3 Authority Key Identifier:
keyid:75:5B:61:74:82:63:D4:DD:47:2C:69:CA:7F:18:47:25:4B:03:EB:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/654607f0-1701-49b1-91ff-b1bed5cbded1/0/755B61748263D4DD472C69CA7F1847254B03EBBC.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/755B61748263D4DD472C69CA7F1847254B03EBBC.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/654607f0-1701-49b1-91ff-b1bed5cbded1/0/755B61748263D4DD472C69CA7F1847254B03EBBC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:9d:5a:64:8e:0b:0c:56:24:51:a0:d7:5e:7a:4c:23:6a:c7:
e0:9b:87:c4:20:5c:9e:b0:1e:c6:35:55:08:3c:6a:fa:31:94:
1c:67:2b:9f:3e:13:33:e0:67:69:ce:3b:50:27:6b:35:ac:de:
35:1b:37:f1:e6:8f:4e:cd:16:40:aa:36:94:8f:f5:a9:6b:34:
c4:d9:6b:1e:0e:1d:be:9b:4d:05:23:bb:79:bd:9c:1c:a3:05:
b5:55:1a:95:d3:d6:19:c2:2c:1d:29:3f:2d:80:26:ab:b7:0e:
69:7d:60:07:e9:84:18:60:a1:db:14:a3:2c:09:88:4b:6b:c5:
23:ed:c1:97:f0:dd:49:e4:24:14:77:a0:dc:9c:2d:33:96:e8:
01:ff:21:b7:a5:d9:04:64:b1:58:42:75:16:bf:b6:50:6c:a6:
b0:82:0e:bd:0a:91:ff:dd:07:44:17:fa:6f:8c:fe:86:33:77:
4c:11:62:22:9f:88:53:42:08:87:37:eb:a3:55:99:f5:10:4e:
d2:a4:f1:60:0f:7b:23:ff:cc:9f:6c:71:8a:18:bf:76:45:e0:
f8:d2:5b:6e:6d:81:1a:93:1f:2e:65:0b:26:94:9c:43:52:57:
b5:d6:0a:cf:c9:ee:25:ba:c1:79:a6:33:40:9b:aa:62:03:38:
67:29:ff:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 18:09:21 2025 by rpki-client