This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/20d2bde4-056b-45c6-80bf-f5d4d277336b/0/754BC04892430632A8C965AF4C5B71C59B2A3CCB.mft File: 754BC04892430632A8C965AF4C5B71C59B2A3CCB.mft (raw, json) Hash identifier: b8voQ69TDplY5GwQe8ftH4Aqu/fzuicWZwmkPEgPPmQ= Subject key identifier: 49:B4:C3:71:DF:FF:16:6F:A6:78:BD:01:0B:AA:27:69:94:8C:6B:0C Authority key identifier: 75:4B:C0:48:92:43:06:32:A8:C9:65:AF:4C:5B:71:C5:9B:2A:3C:CB Certificate issuer: /CN=754BC04892430632A8C965AF4C5B71C59B2A3CCB Certificate serial: 76E308D769CE85A1EA870ECFD69CD3AE9F60ADF1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/754BC04892430632A8C965AF4C5B71C59B2A3CCB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/20d2bde4-056b-45c6-80bf-f5d4d277336b/0/754BC04892430632A8C965AF4C5B71C59B2A3CCB.mft Manifest number: 025F Signing time: Fri 05 Dec 2025 00:21:43 +0000 Manifest this update: Fri 05 Dec 2025 00:16:43 +0000 Manifest next update: Mon 08 Dec 2025 04:51:43 +0000 Files and hashes: 1: 754BC04892430632A8C965AF4C5B71C59B2A3CCB.crl (hash: aVgcJUDuvbPEngN6tLADkv6Di/xuwUxIOQk/dX8tAqs=) 2: 3130332e382e35362e302f32322d3234203d3e203435373037.roa (hash: C5Tq331HOxIpoDyCifcP3xL7Rqpg2//FSSaLWr+UtUo=) 3: 3131302e39332e31322e302f32322d3234203d3e203435373037.roa (hash: 87R1PuyhfrxdjwQzRqLTxL2d+b662e1JTgNI5Ta3odE=) 4: 3230322e34332e3131362e302f32332d3234203d3e203435373037.roa (hash: HCZA2Dkaf0AYhdHhm+/ujp4EakaURfA1i4HAbOdk6Co=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/20d2bde4-056b-45c6-80bf-f5d4d277336b/0/754BC04892430632A8C965AF4C5B71C59B2A3CCB.crl rsync://repo-rpki.idnic.net/repo/20d2bde4-056b-45c6-80bf-f5d4d277336b/0/754BC04892430632A8C965AF4C5B71C59B2A3CCB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/754BC04892430632A8C965AF4C5B71C59B2A3CCB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 04:51:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:e3:08:d7:69:ce:85:a1:ea:87:0e:cf:d6:9c:d3:ae:9f:60:ad:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=754BC04892430632A8C965AF4C5B71C59B2A3CCB Validity Not Before: Dec 5 00:16:43 2025 GMT Not After : Dec 8 04:51:43 2025 GMT Subject: CN=49B4C371DFFF166FA678BD010BAA2769948C6B0C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:63:29:15:42:25:d3:4a:a4:4a:63:17:60:55: 05:93:85:ca:11:9e:e0:b4:78:05:3b:a7:21:82:01: 84:50:ef:52:45:06:73:2b:42:a7:69:15:ab:a4:8c: 2d:44:5d:ac:fa:05:eb:73:27:c0:ce:0d:49:d0:7c: 31:76:c3:b0:29:ef:ce:27:59:93:9f:b0:24:94:00: cf:a3:c9:c5:b6:15:fb:8c:2f:52:41:b4:f7:ef:30: ca:c7:f4:9a:08:74:a0:3f:92:31:b0:98:7f:c6:02: 00:72:9f:38:b9:bd:23:4c:86:2b:15:6b:ec:e9:ba: fd:1d:d7:be:96:72:5e:8d:e7:72:88:05:bf:c3:02: 2f:f7:a2:4c:c7:9c:cd:f5:c0:f1:7a:42:5d:cd:a4: 18:5f:b7:16:5e:2f:70:e1:76:a9:07:27:8b:29:b8: 42:d4:ac:73:fe:5f:68:21:6e:76:65:e7:4a:9c:bc: cb:f8:c4:4e:b9:37:c3:a9:25:67:4d:c5:71:36:65: fd:99:65:18:e4:ae:8f:03:56:a1:3f:04:31:5b:52: da:c1:9f:ac:56:ab:5b:a0:d1:2f:bf:4c:2f:06:bf: 6b:75:72:8d:ef:f8:cc:0d:2a:4a:a2:22:59:85:f2: f9:75:59:3c:d2:3f:d6:2f:dc:0a:f2:96:f4:ce:2e: da:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:B4:C3:71:DF:FF:16:6F:A6:78:BD:01:0B:AA:27:69:94:8C:6B:0C X509v3 Authority Key Identifier: keyid:75:4B:C0:48:92:43:06:32:A8:C9:65:AF:4C:5B:71:C5:9B:2A:3C:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/20d2bde4-056b-45c6-80bf-f5d4d277336b/0/754BC04892430632A8C965AF4C5B71C59B2A3CCB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/754BC04892430632A8C965AF4C5B71C59B2A3CCB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/20d2bde4-056b-45c6-80bf-f5d4d277336b/0/754BC04892430632A8C965AF4C5B71C59B2A3CCB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:b1:8d:af:55:91:b0:72:66:28:9e:46:72:c9:2d:13:52:b1: 77:e8:9d:46:79:59:39:c5:a7:9b:41:88:2a:74:1b:07:2c:10: a2:a9:69:60:d6:8b:9a:0c:89:a8:ed:8c:89:aa:83:84:63:d2: 4c:5c:5c:1b:d6:0e:e3:d1:3a:83:25:e5:a6:ef:79:f7:d4:01: c3:1b:bb:72:48:5a:d8:8e:16:9e:bd:47:b0:8b:4b:11:98:6c: c5:36:95:6c:2a:73:f0:f1:66:91:93:45:7e:d7:e4:46:ba:fd: 44:8e:77:d9:ed:c2:ba:77:6d:b8:d4:f6:e7:44:20:2a:9d:ed: 09:e8:d0:35:9f:db:72:5b:5a:75:5c:f5:e9:a0:c3:73:f3:48: 8d:12:ed:1a:99:58:31:fe:05:6f:13:e9:cb:09:5c:6f:8a:ad: 52:e4:69:83:c3:cf:0e:08:b5:04:f1:2d:9f:74:4c:0d:74:a9: 2c:39:da:5a:e0:dc:24:8e:a3:91:90:51:2b:67:9d:9e:99:97: a3:b4:59:2f:72:b6:d5:07:ca:4e:b1:ce:d8:f6:5b:9e:03:6d: 15:44:33:bc:96:ef:7f:62:84:ec:f9:51:16:c0:ea:88:26:39: e1:f1:8b:3a:de:1d:43:34:85:b2:bf:92:8e:95:5b:86:73:13: 48:a1:4f:ff -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUduMI12nOhaHqhw7P1pzTrp9grfEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzU0QkMwNDg5MjQzMDYzMkE4Qzk2NUFGNEM1QjcxQzU5 QjJBM0NDQjAeFw0yNTEyMDUwMDE2NDNaFw0yNTEyMDgwNDUxNDNaMDMxMTAvBgNV BAMTKDQ5QjRDMzcxREZGRjE2NkZBNjc4QkQwMTBCQUEyNzY5OTQ4QzZCMEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNYykVQiXTSqRKYxdgVQWThcoR nuC0eAU7pyGCAYRQ71JFBnMrQqdpFaukjC1EXaz6BetzJ8DODUnQfDF2w7Ap784n WZOfsCSUAM+jycW2FfuML1JBtPfvMMrH9JoIdKA/kjGwmH/GAgBynzi5vSNMhisV a+zpuv0d176Wcl6N53KIBb/DAi/3okzHnM31wPF6Ql3NpBhftxZeL3DhdqkHJ4sp uELUrHP+X2ghbnZl50qcvMv4xE65N8OpJWdNxXE2Zf2ZZRjkro8DVqE/BDFbUtrB n6xWq1ug0S+/TC8Gv2t1co3v+MwNKkqiIlmF8vl1WTzSP9Yv3ArylvTOLtqxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSbTDcd//Fm+meL0BC6onaZSMawwwHwYDVR0j BBgwFoAUdUvASJJDBjKoyWWvTFtxxZsqPMswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MGQyYmRlNC0wNTZiLTQ1YzYtODBiZi1mNWQ0ZDI3NzMzNmIvMC83NTRCQzA0ODky NDMwNjMyQThDOTY1QUY0QzVCNzFDNTlCMkEzQ0NCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzU0QkMwNDg5MjQzMDYzMkE4Qzk2NUFGNEM1QjcxQzU5QjJB M0NDQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjBkMmJkZTQtMDU2Yi00NWM2LTgw YmYtZjVkNGQyNzczMzZiLzAvNzU0QkMwNDg5MjQzMDYzMkE4Qzk2NUFGNEM1Qjcx QzU5QjJBM0NDQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFuxja9VkbByZiieRnLJLRNSsXfonUZ5WTnF p5tBiCp0GwcsEKKpaWDWi5oMiajtjImqg4Rj0kxcXBvWDuPROoMl5abveffUAcMb u3JIWtiOFp69R7CLSxGYbMU2lWwqc/DxZpGTRX7X5Ea6/USOd9ntwrp3bbjU9udE ICqd7Qno0DWf23JbWnVc9emgw3PzSI0S7RqZWDH+BW8T6csJXG+KrVLkaYPDzw4I tQTxLZ90TA10qSw52lrg3CSOo5GQUStnnZ6Zl6O0WS9yttUHyk6xztj2W54DbRVE M7yW739ihOz5URbA6ogmOeHxizreHUM0hbK/ko6VW4ZzE0ihT/8= -----END CERTIFICATE-----Generated at Sat Dec 6 22:54:56 2025 by rpki-client