This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a6358dda-0ff1-4f6a-bb66-60f4ca04c490/0/754AE571E3432B20E78045BE7B2C99E39E0F1873.mft File: 754AE571E3432B20E78045BE7B2C99E39E0F1873.mft (raw, json) Hash identifier: gHDnPV1ELwcjgx/JPtazGOsJaTY1u5uV6JYUTArN17w= Subject key identifier: 91:0D:0D:B9:AD:F3:C7:BE:AB:E7:3C:B9:F8:CA:27:5B:01:9A:77:7A Authority key identifier: 75:4A:E5:71:E3:43:2B:20:E7:80:45:BE:7B:2C:99:E3:9E:0F:18:73 Certificate issuer: /CN=754AE571E3432B20E78045BE7B2C99E39E0F1873 Certificate serial: 7B8C328D1026781E510E73CA26446E87D42F9C6B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/754AE571E3432B20E78045BE7B2C99E39E0F1873.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a6358dda-0ff1-4f6a-bb66-60f4ca04c490/0/754AE571E3432B20E78045BE7B2C99E39E0F1873.mft Manifest number: 0240 Signing time: Sat 06 Dec 2025 18:52:11 +0000 Manifest this update: Sat 06 Dec 2025 18:47:11 +0000 Manifest next update: Tue 09 Dec 2025 23:52:11 +0000 Files and hashes: 1: 3130332e372e3232362e302f32332d3233203d3e203539313335.roa (hash: /qz+/FrTyvqN+lKfQMLM9vGRBCrWv6ZRIa9kSi7cy5M=) 2: 754AE571E3432B20E78045BE7B2C99E39E0F1873.crl (hash: 4/+f+iMQ7L8hpneVE1MaZ2ymQ+78hIpr1Ri4cbW1T/s=) 3: 3130332e372e3232362e302f32342d3234203d3e203539313335.roa (hash: d1VqPlCHSAGRA/UEI5pUZ6WXcTK62ba2i6gugZCVB1Y=) 4: 3130332e372e3232372e302f32342d3234203d3e203539313335.roa (hash: Fle5qLzNk23ZNkYRzf8mlYQ/OLfLBGZjvUjXRT80jgM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a6358dda-0ff1-4f6a-bb66-60f4ca04c490/0/754AE571E3432B20E78045BE7B2C99E39E0F1873.crl rsync://repo-rpki.idnic.net/repo/a6358dda-0ff1-4f6a-bb66-60f4ca04c490/0/754AE571E3432B20E78045BE7B2C99E39E0F1873.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/754AE571E3432B20E78045BE7B2C99E39E0F1873.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:8c:32:8d:10:26:78:1e:51:0e:73:ca:26:44:6e:87:d4:2f:9c:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=754AE571E3432B20E78045BE7B2C99E39E0F1873 Validity Not Before: Dec 6 18:47:11 2025 GMT Not After : Dec 9 23:52:11 2025 GMT Subject: CN=910D0DB9ADF3C7BEABE73CB9F8CA275B019A777A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:33:4b:e6:b3:a2:85:d7:e5:e4:70:47:c8:c0: 45:dd:3a:d7:09:d9:4a:d8:37:71:8d:46:ad:af:70: 73:8a:c1:52:61:3c:cc:94:53:2f:37:3f:b7:e3:c2: 64:39:52:f5:78:a1:a3:25:c1:da:08:54:33:f5:0f: ff:36:59:8f:12:3f:f9:7c:b5:60:96:63:d6:e5:b6: e8:25:b3:d5:99:42:0c:1c:3b:ae:0e:3a:5c:ce:cc: 8a:59:07:a1:92:04:fe:05:85:0d:95:0b:91:bc:7f: ce:93:a4:ae:23:da:8d:0b:3e:68:88:d9:ab:84:22: de:9e:ab:ca:2c:90:6a:30:b4:53:e7:cd:4d:9d:e6: c8:3d:da:fb:09:c4:34:de:45:77:11:80:28:01:f1: 9c:e4:2d:f0:af:c8:f1:90:cf:b3:bd:08:1b:3b:d3: 7e:32:42:be:c7:2a:69:f8:2b:a5:0e:66:4f:3a:a3: 5b:e5:4f:71:72:37:de:20:a6:b2:65:27:e8:94:5d: bf:4e:cb:a6:7f:fa:af:5e:59:64:f0:67:b0:ed:fc: a4:20:03:88:7f:c3:52:34:a4:6e:da:83:3d:69:f3: c6:97:9b:7d:d3:2c:85:00:35:90:a0:74:68:9a:b0: 06:5d:52:d8:fd:43:9e:a0:43:33:35:3f:57:c2:52: ce:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:0D:0D:B9:AD:F3:C7:BE:AB:E7:3C:B9:F8:CA:27:5B:01:9A:77:7A X509v3 Authority Key Identifier: keyid:75:4A:E5:71:E3:43:2B:20:E7:80:45:BE:7B:2C:99:E3:9E:0F:18:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a6358dda-0ff1-4f6a-bb66-60f4ca04c490/0/754AE571E3432B20E78045BE7B2C99E39E0F1873.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/754AE571E3432B20E78045BE7B2C99E39E0F1873.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a6358dda-0ff1-4f6a-bb66-60f4ca04c490/0/754AE571E3432B20E78045BE7B2C99E39E0F1873.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:ec:75:8e:6f:42:14:1d:88:ed:5a:50:8e:26:7c:be:02:1a: 5a:da:25:6c:5b:d1:fd:4d:6b:2b:c4:b8:85:55:a5:4d:40:4e: ef:9d:45:cc:15:5a:10:f7:22:94:15:d5:cb:66:c7:8f:42:d9: a5:2a:ec:5a:61:73:be:75:c4:26:0c:b8:d8:fd:76:81:20:1e: c4:20:28:93:fc:15:22:fc:38:13:9c:9e:50:98:be:8a:8d:ca: 9a:7a:44:f7:26:37:db:56:8a:86:05:04:b9:9e:3f:e9:8d:bc: 9b:52:62:ca:4b:a6:c9:ef:5e:49:0b:31:6f:ad:17:83:f0:ab: db:21:07:ef:b4:cd:c6:1a:d6:f5:47:42:b5:49:47:1d:eb:46: 73:a1:41:c3:5b:0d:ef:a5:40:73:c4:c8:52:73:ce:11:76:4a: 2c:b3:e3:33:dd:94:11:8d:04:39:0d:ae:fb:41:53:0c:c6:f8: a7:d8:cd:5c:c6:79:6f:27:00:3a:9d:1e:21:e5:d3:42:d2:e3: 22:a6:a4:cb:3d:a3:63:4c:f9:a0:98:c3:8b:8b:66:f8:a5:27: 65:8e:07:f1:e5:b2:05:06:58:f6:29:db:76:b5:e2:81:ce:02: 93:0d:59:24:d3:a2:d9:e0:e3:35:7e:02:11:43:83:a6:ec:02: 72:3c:f8:a5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUe4wyjRAmeB5RDnPKJkRuh9QvnGswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzU0QUU1NzFFMzQzMkIyMEU3ODA0NUJFN0IyQzk5RTM5 RTBGMTg3MzAeFw0yNTEyMDYxODQ3MTFaFw0yNTEyMDkyMzUyMTFaMDMxMTAvBgNV BAMTKDkxMEQwREI5QURGM0M3QkVBQkU3M0NCOUY4Q0EyNzVCMDE5QTc3N0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9M0vms6KF1+XkcEfIwEXdOtcJ 2UrYN3GNRq2vcHOKwVJhPMyUUy83P7fjwmQ5UvV4oaMlwdoIVDP1D/82WY8SP/l8 tWCWY9bltugls9WZQgwcO64OOlzOzIpZB6GSBP4FhQ2VC5G8f86TpK4j2o0LPmiI 2auEIt6eq8oskGowtFPnzU2d5sg92vsJxDTeRXcRgCgB8ZzkLfCvyPGQz7O9CBs7 034yQr7HKmn4K6UOZk86o1vlT3FyN94gprJlJ+iUXb9Oy6Z/+q9eWWTwZ7Dt/KQg A4h/w1I0pG7agz1p88aXm33TLIUANZCgdGiasAZdUtj9Q56gQzM1P1fCUs5zAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkQ0Nua3zx76r5zy5+MonWwGad3owHwYDVR0j BBgwFoAUdUrlceNDKyDngEW+eyyZ454PGHMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NjM1OGRkYS0wZmYxLTRmNmEtYmI2Ni02MGY0Y2EwNGM0OTAvMC83NTRBRTU3MUUz NDMyQjIwRTc4MDQ1QkU3QjJDOTlFMzlFMEYxODczLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzU0QUU1NzFFMzQzMkIyMEU3ODA0NUJFN0IyQzk5RTM5RTBG MTg3My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTYzNThkZGEtMGZmMS00ZjZhLWJi NjYtNjBmNGNhMDRjNDkwLzAvNzU0QUU1NzFFMzQzMkIyMEU3ODA0NUJFN0IyQzk5 RTM5RTBGMTg3My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGbsdY5vQhQdiO1aUI4mfL4CGlraJWxb0f1N ayvEuIVVpU1ATu+dRcwVWhD3IpQV1ctmx49C2aUq7Fphc751xCYMuNj9doEgHsQg KJP8FSL8OBOcnlCYvoqNypp6RPcmN9tWioYFBLmeP+mNvJtSYspLpsnvXkkLMW+t F4Pwq9shB++0zcYa1vVHQrVJRx3rRnOhQcNbDe+lQHPEyFJzzhF2Siyz4zPdlBGN BDkNrvtBUwzG+KfYzVzGeW8nADqdHiHl00LS4yKmpMs9o2NM+aCYw4uLZvilJ2WO B/HlsgUGWPYp23a14oHOApMNWSTTotng4zV+AhFDg6bsAnI8+KU= -----END CERTIFICATE-----Generated at Sun Dec 7 04:44:59 2025 by rpki-client