This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a6358dda-0ff1-4f6a-bb66-60f4ca04c490/0/754AE571E3432B20E78045BE7B2C99E39E0F1873.mft File: 754AE571E3432B20E78045BE7B2C99E39E0F1873.mft (raw, json) Hash identifier: OERfXt4pTocNfICZafnkjfXVVoEjEL0ibvoun4pzBGw= Subject key identifier: A1:66:0F:CD:E3:9C:CF:63:61:33:88:8A:B1:6F:B3:85:0B:6A:37:FE Authority key identifier: 75:4A:E5:71:E3:43:2B:20:E7:80:45:BE:7B:2C:99:E3:9E:0F:18:73 Certificate issuer: /CN=754AE571E3432B20E78045BE7B2C99E39E0F1873 Certificate serial: 1F4E5C5696751E7D7F211D34938449B0AD0B7AED Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/754AE571E3432B20E78045BE7B2C99E39E0F1873.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a6358dda-0ff1-4f6a-bb66-60f4ca04c490/0/754AE571E3432B20E78045BE7B2C99E39E0F1873.mft Manifest number: 023E Signing time: Tue 02 Dec 2025 07:42:18 +0000 Manifest this update: Tue 02 Dec 2025 07:37:18 +0000 Manifest next update: Fri 05 Dec 2025 15:36:18 +0000 Files and hashes: 1: 754AE571E3432B20E78045BE7B2C99E39E0F1873.crl (hash: KErFoUviC4b7oOPObFKMoI+oaiSRMZmEoTklsqcsRT4=) 2: 3130332e372e3232362e302f32332d3233203d3e203539313335.roa (hash: /qz+/FrTyvqN+lKfQMLM9vGRBCrWv6ZRIa9kSi7cy5M=) 3: 3130332e372e3232362e302f32342d3234203d3e203539313335.roa (hash: d1VqPlCHSAGRA/UEI5pUZ6WXcTK62ba2i6gugZCVB1Y=) 4: 3130332e372e3232372e302f32342d3234203d3e203539313335.roa (hash: Fle5qLzNk23ZNkYRzf8mlYQ/OLfLBGZjvUjXRT80jgM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a6358dda-0ff1-4f6a-bb66-60f4ca04c490/0/754AE571E3432B20E78045BE7B2C99E39E0F1873.crl rsync://repo-rpki.idnic.net/repo/a6358dda-0ff1-4f6a-bb66-60f4ca04c490/0/754AE571E3432B20E78045BE7B2C99E39E0F1873.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/754AE571E3432B20E78045BE7B2C99E39E0F1873.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 15:36:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:4e:5c:56:96:75:1e:7d:7f:21:1d:34:93:84:49:b0:ad:0b:7a:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=754AE571E3432B20E78045BE7B2C99E39E0F1873 Validity Not Before: Dec 2 07:37:18 2025 GMT Not After : Dec 5 15:36:18 2025 GMT Subject: CN=A1660FCDE39CCF636133888AB16FB3850B6A37FE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:d6:0f:b3:a0:79:48:06:1f:b8:5f:94:a6:8c: 51:cf:17:96:ac:07:d7:95:45:0c:92:f7:9d:2f:72: 3e:da:b9:41:33:da:61:d7:58:7b:7b:53:98:3d:52: 4b:3c:4b:55:48:c9:10:67:59:bf:cd:40:c8:65:8d: 72:d0:e1:ce:77:ea:0c:ca:44:35:a0:e6:ec:6b:0d: 7c:a3:4f:c5:90:15:f0:89:96:fd:de:e1:4b:2c:a6: 2b:a4:08:b5:05:07:30:0e:b7:bf:11:0e:7d:2c:9e: 99:bc:dc:1c:15:07:b4:f0:82:bf:e2:bd:5a:b0:e4: 7f:2e:ae:10:dc:d0:5f:8b:59:3b:87:04:6f:dd:0c: 84:31:2d:74:90:41:f6:8f:72:a7:f5:fd:22:26:16: 58:e1:a4:f3:13:5a:53:13:68:3d:54:67:b9:a6:b8: 45:30:73:4f:ae:e1:de:46:72:56:96:12:84:d4:9e: a6:ee:7d:2e:bc:ca:c2:12:79:be:ff:7b:98:ec:26: f3:12:54:5c:6b:da:0f:c3:92:68:95:63:43:77:21: 09:8d:ac:8a:ff:1c:0d:a6:6f:3f:e3:a5:5e:89:92: 35:d7:cb:42:02:86:19:88:a2:50:6a:d3:79:75:5d: f5:0d:0e:e8:af:86:dd:44:9e:9e:86:cc:19:5d:27: e7:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:66:0F:CD:E3:9C:CF:63:61:33:88:8A:B1:6F:B3:85:0B:6A:37:FE X509v3 Authority Key Identifier: keyid:75:4A:E5:71:E3:43:2B:20:E7:80:45:BE:7B:2C:99:E3:9E:0F:18:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a6358dda-0ff1-4f6a-bb66-60f4ca04c490/0/754AE571E3432B20E78045BE7B2C99E39E0F1873.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/754AE571E3432B20E78045BE7B2C99E39E0F1873.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a6358dda-0ff1-4f6a-bb66-60f4ca04c490/0/754AE571E3432B20E78045BE7B2C99E39E0F1873.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:27:f1:36:f7:10:5a:1a:0d:d8:1f:76:78:0f:88:12:ec:74: 4c:0d:c0:a0:0c:ab:64:29:c1:83:cb:92:cf:f0:4a:6d:62:72: c4:d7:d7:e2:82:3d:33:6c:17:ee:52:54:0d:c9:77:8d:bd:ee: c6:cf:63:d6:1e:a7:83:86:b1:c8:d0:1d:b2:28:f2:7b:71:a5: 77:e4:bc:d1:c1:4c:79:ad:8f:85:96:16:0a:d7:87:3d:f6:d2: aa:63:b8:23:1b:7a:f0:80:ea:35:98:4b:3c:32:f1:a2:86:fe: fa:3e:ea:29:ba:74:80:00:da:f2:e8:f8:7b:0e:3c:df:e4:6a: 52:41:cd:35:ba:f8:ef:27:b6:3c:34:aa:cf:de:65:6c:f3:e0: 35:5c:6b:d7:fb:8b:59:e6:a0:4e:f1:97:09:11:ef:a1:ef:1a: ff:01:39:06:b1:65:40:d5:55:03:92:ba:b8:ab:82:bb:30:43: 4c:c7:cb:26:a6:18:7b:60:ea:1a:0a:13:ae:3d:d5:7f:07:1b: 54:0d:1e:20:9e:9f:9c:7f:f5:a1:df:3c:26:f2:26:f6:6c:13: 25:97:0a:f6:b6:5a:d3:33:96:04:70:b0:38:6e:e1:e9:d1:91: 8f:f6:bc:b2:0a:83:cc:13:51:b0:74:0c:ea:0c:8d:b6:31:ec: 88:9c:d6:cf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH05cVpZ1Hn1/IR00k4RJsK0Leu0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzU0QUU1NzFFMzQzMkIyMEU3ODA0NUJFN0IyQzk5RTM5 RTBGMTg3MzAeFw0yNTEyMDIwNzM3MThaFw0yNTEyMDUxNTM2MThaMDMxMTAvBgNV BAMTKEExNjYwRkNERTM5Q0NGNjM2MTMzODg4QUIxNkZCMzg1MEI2QTM3RkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDe1g+zoHlIBh+4X5SmjFHPF5as B9eVRQyS950vcj7auUEz2mHXWHt7U5g9Uks8S1VIyRBnWb/NQMhljXLQ4c536gzK RDWg5uxrDXyjT8WQFfCJlv3e4UsspiukCLUFBzAOt78RDn0snpm83BwVB7Twgr/i vVqw5H8urhDc0F+LWTuHBG/dDIQxLXSQQfaPcqf1/SImFljhpPMTWlMTaD1UZ7mm uEUwc0+u4d5GclaWEoTUnqbufS68ysISeb7/e5jsJvMSVFxr2g/DkmiVY0N3IQmN rIr/HA2mbz/jpV6JkjXXy0IChhmIolBq03l1XfUNDuivht1Enp6GzBldJ+fbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoWYPzeOcz2NhM4iKsW+zhQtqN/4wHwYDVR0j BBgwFoAUdUrlceNDKyDngEW+eyyZ454PGHMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NjM1OGRkYS0wZmYxLTRmNmEtYmI2Ni02MGY0Y2EwNGM0OTAvMC83NTRBRTU3MUUz NDMyQjIwRTc4MDQ1QkU3QjJDOTlFMzlFMEYxODczLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzU0QUU1NzFFMzQzMkIyMEU3ODA0NUJFN0IyQzk5RTM5RTBG MTg3My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTYzNThkZGEtMGZmMS00ZjZhLWJi NjYtNjBmNGNhMDRjNDkwLzAvNzU0QUU1NzFFMzQzMkIyMEU3ODA0NUJFN0IyQzk5 RTM5RTBGMTg3My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJMn8Tb3EFoaDdgfdngPiBLsdEwNwKAMq2Qp wYPLks/wSm1icsTX1+KCPTNsF+5SVA3Jd4297sbPY9Yep4OGscjQHbIo8ntxpXfk vNHBTHmtj4WWFgrXhz320qpjuCMbevCA6jWYSzwy8aKG/vo+6im6dIAA2vLo+HsO PN/kalJBzTW6+O8ntjw0qs/eZWzz4DVca9f7i1nmoE7xlwkR76HvGv8BOQaxZUDV VQOSurirgrswQ0zHyyamGHtg6hoKE6491X8HG1QNHiCen5x/9aHfPCbyJvZsEyWX Cva2WtMzlgRwsDhu4enRkY/2vLIKg8wTUbB0DOoMjbYx7Iic1s8= -----END CERTIFICATE-----Generated at Wed Dec 3 14:48:53 2025 by rpki-client