This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/1dfd4234-1323-4f0e-b686-1d72acb88029/0/743D7544160232918AB5AB2CD90221B4C4E978E5.mft File: 743D7544160232918AB5AB2CD90221B4C4E978E5.mft (raw, json) Hash identifier: rIU3hZE0wk9ZCU+3KCv9cBVCvrWkIT1Dbl0mxfDXRG0= Subject key identifier: 50:4E:08:CE:16:4C:19:56:33:4B:5D:5F:93:76:0C:DA:81:3D:B4:F4 Authority key identifier: 74:3D:75:44:16:02:32:91:8A:B5:AB:2C:D9:02:21:B4:C4:E9:78:E5 Certificate issuer: /CN=743D7544160232918AB5AB2CD90221B4C4E978E5 Certificate serial: 144F3CB9FF5A635F4C2C969E6D3C9881E5621D86 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/743D7544160232918AB5AB2CD90221B4C4E978E5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1dfd4234-1323-4f0e-b686-1d72acb88029/0/743D7544160232918AB5AB2CD90221B4C4E978E5.mft Manifest number: 01BA Signing time: Sat 06 Dec 2025 22:21:06 +0000 Manifest this update: Sat 06 Dec 2025 22:16:06 +0000 Manifest next update: Wed 10 Dec 2025 08:27:06 +0000 Files and hashes: 1: 743D7544160232918AB5AB2CD90221B4C4E978E5.crl (hash: 2qFrA/6pSCfavGVK8GNcAZ2H8aPyM2nsFWxpbDZcnKU=) 2: 3130332e38312e3235342e302f32342d3234203d3e20313530353533.roa (hash: E2z3KSns6iTpnPXpRNJQCkLuXAdqTPQfcSqYdPzsxRI=) 3: 3130332e38312e3235352e302f32342d3234203d3e20313530353533.roa (hash: Z7Z02l6lwQScJffXxbcOwRM3DR/Zcud+xbv6JirEUW0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1dfd4234-1323-4f0e-b686-1d72acb88029/0/743D7544160232918AB5AB2CD90221B4C4E978E5.crl rsync://repo-rpki.idnic.net/repo/1dfd4234-1323-4f0e-b686-1d72acb88029/0/743D7544160232918AB5AB2CD90221B4C4E978E5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/743D7544160232918AB5AB2CD90221B4C4E978E5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:4f:3c:b9:ff:5a:63:5f:4c:2c:96:9e:6d:3c:98:81:e5:62:1d:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=743D7544160232918AB5AB2CD90221B4C4E978E5 Validity Not Before: Dec 6 22:16:06 2025 GMT Not After : Dec 10 08:27:06 2025 GMT Subject: CN=504E08CE164C1956334B5D5F93760CDA813DB4F4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:31:05:c9:9b:33:b9:84:35:13:55:69:69:8f: cf:c5:b2:ea:cb:3f:a0:82:28:ca:d1:18:b1:5e:ae: 2b:83:fc:42:ef:d4:2c:8d:2f:c0:0f:16:19:a8:1b: bf:7e:15:02:86:48:4a:01:de:84:3f:d8:33:7d:26: 3a:f6:52:0c:50:6a:0c:82:24:37:95:04:6f:ca:9c: 63:f7:e0:16:71:21:37:36:95:b6:ab:eb:1f:ef:6f: e4:8b:53:9b:b3:59:f1:a6:e9:88:5b:86:e1:1e:7e: e6:65:7b:49:ee:23:10:d0:02:89:7d:23:58:08:74: 9a:b9:1a:f5:ad:09:08:9e:4d:2e:35:b1:67:5f:77: 55:c4:5b:85:82:e1:07:fb:ec:1d:f3:f8:00:1c:56: 11:35:23:fc:32:13:6c:78:f1:a8:86:cd:6a:a2:29: 5f:5a:b0:15:ed:e4:99:d2:c6:95:20:87:e5:4f:c3: 5a:f8:c7:f0:aa:01:a3:0c:5f:ea:28:b8:cb:b5:7b: 1d:ee:cd:ff:f5:61:e8:ac:53:94:df:ac:49:96:da: cc:17:f6:06:54:70:72:44:89:1e:73:f8:f8:74:88: ae:e3:f4:5c:72:fa:b4:2d:60:6f:a7:e5:c8:35:5a: 0a:dd:05:5c:af:70:7c:2d:b0:97:7a:ea:97:ed:83: 60:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:4E:08:CE:16:4C:19:56:33:4B:5D:5F:93:76:0C:DA:81:3D:B4:F4 X509v3 Authority Key Identifier: keyid:74:3D:75:44:16:02:32:91:8A:B5:AB:2C:D9:02:21:B4:C4:E9:78:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1dfd4234-1323-4f0e-b686-1d72acb88029/0/743D7544160232918AB5AB2CD90221B4C4E978E5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/743D7544160232918AB5AB2CD90221B4C4E978E5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1dfd4234-1323-4f0e-b686-1d72acb88029/0/743D7544160232918AB5AB2CD90221B4C4E978E5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:c2:61:79:58:4c:2f:12:b7:3d:9c:b8:b5:c4:32:55:cd:b5: 28:e4:da:64:06:9b:04:07:af:21:36:80:98:12:2d:ab:39:65: 5e:10:07:18:57:ff:45:c9:3e:ff:a6:40:e5:5b:3d:81:6c:dd: 3e:9e:19:37:7f:8b:31:51:7c:34:69:f1:04:32:2b:67:75:48: 30:73:f3:7a:6d:eb:c9:cf:74:20:88:48:31:c9:99:ef:4b:48: 7a:f3:2e:67:6b:ea:1e:d0:d8:e4:40:6c:06:af:96:2f:0e:53: 6d:ad:7f:85:9e:a3:1d:53:a1:79:10:e4:28:97:3f:46:e4:20: d5:2d:4a:0a:b5:64:43:c5:b2:3e:46:4c:74:66:b9:9b:3e:e7: 16:b0:46:61:fe:11:db:d3:d0:ad:b1:aa:3a:86:31:d1:39:7d: 7b:44:8c:d2:82:13:63:07:46:7c:a5:97:ef:b0:f0:2a:4a:bd: a9:f8:d3:62:bd:af:94:83:7b:47:3e:a1:96:a5:f0:3d:22:c6: 2b:ac:a6:e7:42:c9:95:2a:a4:94:9b:c6:b2:bc:bb:c5:17:ca: 3e:b1:7e:50:50:78:36:78:47:5d:5f:a0:b8:62:ce:62:6a:03: 37:8e:79:df:ad:d9:86:bf:1a:ff:3d:50:41:93:ac:b7:c7:82: 35:de:3f:3a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFE88uf9aY19MLJaebTyYgeViHYYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzQzRDc1NDQxNjAyMzI5MThBQjVBQjJDRDkwMjIxQjRD NEU5NzhFNTAeFw0yNTEyMDYyMjE2MDZaFw0yNTEyMTAwODI3MDZaMDMxMTAvBgNV BAMTKDUwNEUwOENFMTY0QzE5NTYzMzRCNUQ1RjkzNzYwQ0RBODEzREI0RjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtMQXJmzO5hDUTVWlpj8/FsurL P6CCKMrRGLFeriuD/ELv1CyNL8APFhmoG79+FQKGSEoB3oQ/2DN9Jjr2UgxQagyC JDeVBG/KnGP34BZxITc2lbar6x/vb+SLU5uzWfGm6YhbhuEefuZle0nuIxDQAol9 I1gIdJq5GvWtCQieTS41sWdfd1XEW4WC4Qf77B3z+AAcVhE1I/wyE2x48aiGzWqi KV9asBXt5JnSxpUgh+VPw1r4x/CqAaMMX+oouMu1ex3uzf/1YeisU5TfrEmW2swX 9gZUcHJEiR5z+Ph0iK7j9Fxy+rQtYG+n5cg1WgrdBVyvcHwtsJd66pftg2D5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUE4IzhZMGVYzS11fk3YM2oE9tPQwHwYDVR0j BBgwFoAUdD11RBYCMpGKtass2QIhtMTpeOUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZGZkNDIzNC0xMzIzLTRmMGUtYjY4Ni0xZDcyYWNiODgwMjkvMC83NDNENzU0NDE2 MDIzMjkxOEFCNUFCMkNEOTAyMjFCNEM0RTk3OEU1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzQzRDc1NDQxNjAyMzI5MThBQjVBQjJDRDkwMjIxQjRDNEU5 NzhFNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWRmZDQyMzQtMTMyMy00ZjBlLWI2 ODYtMWQ3MmFjYjg4MDI5LzAvNzQzRDc1NDQxNjAyMzI5MThBQjVBQjJDRDkwMjIx QjRDNEU5NzhFNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIbCYXlYTC8Stz2cuLXEMlXNtSjk2mQGmwQH ryE2gJgSLas5ZV4QBxhX/0XJPv+mQOVbPYFs3T6eGTd/izFRfDRp8QQyK2d1SDBz 83pt68nPdCCISDHJme9LSHrzLmdr6h7Q2ORAbAavli8OU22tf4Weox1ToXkQ5CiX P0bkINUtSgq1ZEPFsj5GTHRmuZs+5xawRmH+EdvT0K2xqjqGMdE5fXtEjNKCE2MH Rnyll++w8CpKvan402K9r5SDe0c+oZal8D0ixiuspudCyZUqpJSbxrK8u8UXyj6x flBQeDZ4R11foLhizmJqAzeOed+t2Ya/Gv89UEGTrLfHgjXePzo= -----END CERTIFICATE-----Generated at Sun Dec 7 02:13:53 2025 by rpki-client