This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/8ae8db38-63a8-413c-a9f6-cc223afa4a75/0/749E8F6C5F22D18A70B682F86C65ECD3EA27635C.mft File: 749E8F6C5F22D18A70B682F86C65ECD3EA27635C.mft (raw, json) Hash identifier: GCy59Ba0WQo71mMf0y/YC0PkMPtCtCESvd/XfZxDmzs= Subject key identifier: 4F:A4:E3:1E:82:77:78:5B:F1:78:26:EB:17:1A:EF:93:ED:73:E6:A3 Authority key identifier: 74:9E:8F:6C:5F:22:D1:8A:70:B6:82:F8:6C:65:EC:D3:EA:27:63:5C Certificate issuer: /CN=749E8F6C5F22D18A70B682F86C65ECD3EA27635C Certificate serial: 116E9B6F3FEE55CD5CC0DF64D87D400FDA1FD6BB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/749E8F6C5F22D18A70B682F86C65ECD3EA27635C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8ae8db38-63a8-413c-a9f6-cc223afa4a75/0/749E8F6C5F22D18A70B682F86C65ECD3EA27635C.mft Manifest number: 022D Signing time: Sat 06 Dec 2025 01:42:01 +0000 Manifest this update: Sat 06 Dec 2025 01:37:01 +0000 Manifest next update: Tue 09 Dec 2025 08:52:01 +0000 Files and hashes: 1: 3130332e3134392e3137362e302f32332d3233203d3e20313430343433.roa (hash: D6ZQ1Nszopc+tjvvlk9LxeInARJoQa1nF2ZqxR2uBQM=) 2: 749E8F6C5F22D18A70B682F86C65ECD3EA27635C.crl (hash: rL2hYKpmM0wUrJ6nCqkE4WmIKngkzdxpAAHKk2p3LUU=) 3: 3130332e3134392e3137362e302f32342d3234203d3e20313430343433.roa (hash: u/HGXTKlzUVzN3BHvIbNac6O5D491LLOLOhh0HKRChM=) 4: 3130332e3134392e3137372e302f32342d3234203d3e20313430343433.roa (hash: q3nnfuFQ9fllwu5vaDMWKT58tFIU7r2iWutM+FFs7uM=) 5: 323030313a6466333a333438303a3a2f34382d3438203d3e20313430343433.roa (hash: VaGZ2rtQiVhlvvEqhey8VuIsjUW/H1CymqkYlv2nCyM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8ae8db38-63a8-413c-a9f6-cc223afa4a75/0/749E8F6C5F22D18A70B682F86C65ECD3EA27635C.crl rsync://repo-rpki.idnic.net/repo/8ae8db38-63a8-413c-a9f6-cc223afa4a75/0/749E8F6C5F22D18A70B682F86C65ECD3EA27635C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/749E8F6C5F22D18A70B682F86C65ECD3EA27635C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 08:52:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:6e:9b:6f:3f:ee:55:cd:5c:c0:df:64:d8:7d:40:0f:da:1f:d6:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=749E8F6C5F22D18A70B682F86C65ECD3EA27635C Validity Not Before: Dec 6 01:37:01 2025 GMT Not After : Dec 9 08:52:01 2025 GMT Subject: CN=4FA4E31E8277785BF17826EB171AEF93ED73E6A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:86:ca:ec:59:6b:4f:9e:69:6c:23:f3:7c:4d: f6:9a:3b:7e:4b:5e:a6:26:e9:d1:a2:78:58:53:27: fe:ed:99:98:2a:fc:9e:bd:71:61:f5:b1:c7:98:49: c3:85:a0:34:67:a2:a6:37:06:9f:16:29:32:d5:ec: 7d:d6:04:76:25:68:49:3e:e8:60:40:2c:67:52:f8: d1:e0:4a:5d:b5:b7:8d:80:59:2a:c0:cf:d0:c5:0d: f2:cc:1d:f9:9a:07:71:38:55:5c:59:43:8e:de:7b: 40:90:f5:6c:9e:b7:80:5b:c3:6d:30:e5:07:34:d8: a5:a6:ca:32:68:c1:71:24:a2:5f:2c:bd:15:16:77: e5:ee:71:74:23:6c:4b:f0:89:0d:30:3f:45:52:00: 4c:19:f9:f0:34:4f:a2:d7:e5:9c:03:7a:95:ea:11: 4b:06:33:2b:ed:71:a0:98:d5:ac:54:58:ed:70:18: 20:72:d9:df:53:b7:d4:e0:b6:2c:9e:6f:e8:a2:e3: ad:e1:91:2d:10:ad:a6:a0:00:8e:c6:df:b8:e1:de: 17:0c:73:98:03:83:ca:a7:ea:b6:78:b4:b7:e2:13: 45:0d:d2:29:a1:5d:4f:bf:05:c1:45:df:9c:4a:34: 5d:ff:0e:4d:00:ff:d2:cb:b9:51:3d:c8:38:79:45: 60:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:A4:E3:1E:82:77:78:5B:F1:78:26:EB:17:1A:EF:93:ED:73:E6:A3 X509v3 Authority Key Identifier: keyid:74:9E:8F:6C:5F:22:D1:8A:70:B6:82:F8:6C:65:EC:D3:EA:27:63:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8ae8db38-63a8-413c-a9f6-cc223afa4a75/0/749E8F6C5F22D18A70B682F86C65ECD3EA27635C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/749E8F6C5F22D18A70B682F86C65ECD3EA27635C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8ae8db38-63a8-413c-a9f6-cc223afa4a75/0/749E8F6C5F22D18A70B682F86C65ECD3EA27635C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:d8:dc:2d:61:ab:db:f5:9d:df:7b:82:20:ac:35:81:34:f8: ca:d4:5f:6a:a0:b7:bf:9f:98:60:51:b5:22:eb:6d:1d:a9:8c: 5f:70:9d:62:d2:c5:a8:43:46:ca:7d:c4:7a:fd:c9:4d:c6:91: b3:8f:39:4f:8b:92:c6:77:bd:4b:3e:05:1d:b6:bb:2c:7d:4b: b3:c8:2a:62:3f:cd:fa:26:8e:3d:d7:f9:df:f7:ea:80:87:ed: 9a:be:16:59:33:28:4f:5a:c9:2f:03:3a:5a:58:d6:c2:b6:43: 3d:3e:3d:7e:6d:94:32:6c:31:70:f4:b7:46:40:a8:18:1c:34: 7e:23:90:34:aa:3a:b5:9f:29:94:97:f3:00:c3:26:5a:41:85: 79:5f:2c:6f:41:06:03:10:91:4a:58:3a:37:d6:79:27:79:58: 10:71:0c:4a:ce:21:45:83:c6:b1:76:62:f3:07:9f:5f:4d:04: dd:f5:0f:99:07:7b:65:a1:54:fd:1f:be:40:4e:92:4a:3e:2c: d2:95:83:a2:3f:66:f2:13:91:2e:48:f8:fc:a6:62:b1:7d:3d: 5d:90:13:9f:63:0b:0a:36:0b:e1:fe:7f:df:b9:74:a5:44:e4: 26:7d:5b:9d:20:d9:f6:4a:83:b8:74:fb:78:ba:97:08:7a:4c: e4:d0:ea:45 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEW6bbz/uVc1cwN9k2H1AD9of1rswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzQ5RThGNkM1RjIyRDE4QTcwQjY4MkY4NkM2NUVDRDNF QTI3NjM1QzAeFw0yNTEyMDYwMTM3MDFaFw0yNTEyMDkwODUyMDFaMDMxMTAvBgNV BAMTKDRGQTRFMzFFODI3Nzc4NUJGMTc4MjZFQjE3MUFFRjkzRUQ3M0U2QTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVhsrsWWtPnmlsI/N8TfaaO35L XqYm6dGieFhTJ/7tmZgq/J69cWH1sceYScOFoDRnoqY3Bp8WKTLV7H3WBHYlaEk+ 6GBALGdS+NHgSl21t42AWSrAz9DFDfLMHfmaB3E4VVxZQ47ee0CQ9Wyet4Bbw20w 5Qc02KWmyjJowXEkol8svRUWd+XucXQjbEvwiQ0wP0VSAEwZ+fA0T6LX5ZwDepXq EUsGMyvtcaCY1axUWO1wGCBy2d9Tt9Tgtiyeb+ii463hkS0QraagAI7G37jh3hcM c5gDg8qn6rZ4tLfiE0UN0imhXU+/BcFF35xKNF3/Dk0A/9LLuVE9yDh5RWAjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUT6TjHoJ3eFvxeCbrFxrvk+1z5qMwHwYDVR0j BBgwFoAUdJ6PbF8i0YpwtoL4bGXs0+onY1wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 YWU4ZGIzOC02M2E4LTQxM2MtYTlmNi1jYzIyM2FmYTRhNzUvMC83NDlFOEY2QzVG MjJEMThBNzBCNjgyRjg2QzY1RUNEM0VBMjc2MzVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzQ5RThGNkM1RjIyRDE4QTcwQjY4MkY4NkM2NUVDRDNFQTI3 NjM1Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGFlOGRiMzgtNjNhOC00MTNjLWE5 ZjYtY2MyMjNhZmE0YTc1LzAvNzQ5RThGNkM1RjIyRDE4QTcwQjY4MkY4NkM2NUVD RDNFQTI3NjM1Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABPY3C1hq9v1nd97giCsNYE0+MrUX2qgt7+f mGBRtSLrbR2pjF9wnWLSxahDRsp9xHr9yU3GkbOPOU+LksZ3vUs+BR22uyx9S7PI KmI/zfomjj3X+d/36oCH7Zq+FlkzKE9ayS8DOlpY1sK2Qz0+PX5tlDJsMXD0t0ZA qBgcNH4jkDSqOrWfKZSX8wDDJlpBhXlfLG9BBgMQkUpYOjfWeSd5WBBxDErOIUWD xrF2YvMHn19NBN31D5kHe2WhVP0fvkBOkko+LNKVg6I/ZvITkS5I+PymYrF9PV2Q E59jCwo2C+H+f9+5dKVE5CZ9W50g2fZKg7h0+3i6lwh6TOTQ6kU= -----END CERTIFICATE-----Generated at Sun Dec 7 02:08:56 2025 by rpki-client