This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/c80dde94-e5be-4d29-bb12-45fb5c1d2c79/0/744F97E1DF1BD6D37E6C2EA8F02C088498F43323.mft File: 744F97E1DF1BD6D37E6C2EA8F02C088498F43323.mft (raw, json) Hash identifier: /j1GVMjHtslH5Hk4vtxSAUruqu2xay1AgcD7p099PtM= Subject key identifier: 7C:BE:64:C6:60:00:17:82:A7:9A:63:6A:55:44:32:59:31:24:D9:6F Authority key identifier: 74:4F:97:E1:DF:1B:D6:D3:7E:6C:2E:A8:F0:2C:08:84:98:F4:33:23 Certificate issuer: /CN=744F97E1DF1BD6D37E6C2EA8F02C088498F43323 Certificate serial: 69D81C651FD177DA819CBA68EBAC22AFF117EA67 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/744F97E1DF1BD6D37E6C2EA8F02C088498F43323.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c80dde94-e5be-4d29-bb12-45fb5c1d2c79/0/744F97E1DF1BD6D37E6C2EA8F02C088498F43323.mft Manifest number: 0138 Signing time: Thu 04 Dec 2025 18:31:02 +0000 Manifest this update: Thu 04 Dec 2025 18:26:02 +0000 Manifest next update: Mon 08 Dec 2025 05:59:02 +0000 Files and hashes: 1: 3130332e3235302e3130332e302f32342d3234203d3e20313531303131.roa (hash: 0RiS+RR5AkQk/dYZxan36BDxuGPtCqd2prjnjXfUECQ=) 2: 3130332e3232322e3235342e302f32342d3234203d3e20313531303131.roa (hash: Nyxgg8pBzc0S11WPRtK59UFRSivtWFPC71vDqqqNcpI=) 3: 744F97E1DF1BD6D37E6C2EA8F02C088498F43323.crl (hash: r0FC3xUnjjqsWksGiEG7ImcakOgIiC9iK113OSvCCgw=) 4: 323030313a6466323a653463303a3a2f34382d3438203d3e20313531303131.roa (hash: f6CLm//dO0n6OthDYmsvLFicH09gzcmnHxf/Flc+xDQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c80dde94-e5be-4d29-bb12-45fb5c1d2c79/0/744F97E1DF1BD6D37E6C2EA8F02C088498F43323.crl rsync://repo-rpki.idnic.net/repo/c80dde94-e5be-4d29-bb12-45fb5c1d2c79/0/744F97E1DF1BD6D37E6C2EA8F02C088498F43323.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/744F97E1DF1BD6D37E6C2EA8F02C088498F43323.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 05:59:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:d8:1c:65:1f:d1:77:da:81:9c:ba:68:eb:ac:22:af:f1:17:ea:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=744F97E1DF1BD6D37E6C2EA8F02C088498F43323 Validity Not Before: Dec 4 18:26:02 2025 GMT Not After : Dec 8 05:59:02 2025 GMT Subject: CN=7CBE64C660001782A79A636A554432593124D96F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:a7:e3:fb:48:01:f4:77:87:5c:cd:ae:8b:b5: 05:ba:7d:87:fa:f6:1c:4c:54:43:44:d2:45:7e:91: 8c:96:51:13:ac:a5:26:c0:a8:20:27:c5:fd:6e:d0: b6:43:79:36:0c:0c:b5:64:42:e3:16:25:ce:1e:2b: e3:1f:af:fd:54:e0:4c:25:3a:e2:4c:e9:fc:f3:c4: 2e:7d:c4:dc:ad:ed:4a:63:af:e0:59:88:02:47:ad: ac:26:ef:ba:28:27:35:b8:04:7d:ff:48:59:90:18: 67:88:ba:50:d0:68:f2:4a:d7:3c:a0:e6:e1:ea:93: 97:56:6a:fb:bd:64:b8:e4:8a:47:6b:ed:c6:de:46: b9:ef:a7:e9:8e:77:6b:95:8b:08:cc:e3:39:58:c1: 2c:ad:60:53:57:47:dd:3c:90:cc:9e:7c:50:7a:5d: db:56:1f:65:19:7f:e3:4e:84:94:9d:14:64:54:2e: 5a:2f:e5:76:67:93:c3:21:53:5a:e7:40:cb:31:72: 3c:cd:01:fb:12:66:f7:21:69:56:f6:eb:8c:d7:fa: 3c:fc:dd:db:a1:d1:4c:65:10:e6:45:0a:79:66:0f: 84:99:0f:7c:77:3b:0c:a2:2a:62:eb:da:32:71:cc: 24:b8:42:5f:ab:95:fb:03:5d:42:3d:8f:d0:11:c0: fa:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:BE:64:C6:60:00:17:82:A7:9A:63:6A:55:44:32:59:31:24:D9:6F X509v3 Authority Key Identifier: keyid:74:4F:97:E1:DF:1B:D6:D3:7E:6C:2E:A8:F0:2C:08:84:98:F4:33:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c80dde94-e5be-4d29-bb12-45fb5c1d2c79/0/744F97E1DF1BD6D37E6C2EA8F02C088498F43323.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/744F97E1DF1BD6D37E6C2EA8F02C088498F43323.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c80dde94-e5be-4d29-bb12-45fb5c1d2c79/0/744F97E1DF1BD6D37E6C2EA8F02C088498F43323.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:24:47:f4:49:46:27:dd:0e:11:b7:63:ea:32:71:f9:76:a3: 75:72:48:57:3f:49:a0:22:4a:4b:d9:98:e5:a0:13:aa:fe:af: 4f:c0:91:d5:7a:b0:aa:f5:62:75:b6:e6:da:10:37:e7:26:f2: 8a:2b:e1:f3:e0:cf:1e:93:38:18:5a:9a:62:97:df:f1:df:9a: 0c:47:3d:1f:f4:b0:bf:fa:f0:66:21:85:98:45:93:7b:09:e5: 43:b5:46:b4:0e:c2:ab:8d:74:7f:13:81:8f:3c:ea:42:12:bb: 91:b5:3b:2a:e7:ad:cd:45:a2:e5:e2:9a:21:ed:4e:c8:e8:a6: 7a:1e:04:3c:d0:70:25:b4:10:71:93:91:68:a5:73:33:5c:b1: a5:5b:bf:da:10:f7:80:05:cd:08:d7:23:84:b3:6c:b4:65:69: 40:96:c4:0c:07:2c:60:8a:75:79:c1:28:9a:3f:4a:7d:7e:81: 5a:75:74:29:39:ff:89:d0:aa:d2:7a:a3:49:85:7d:86:3b:bf: 1f:c4:56:0e:5f:70:68:7f:12:24:99:e4:0d:73:11:e6:44:cf: a9:b7:10:4f:fc:d9:6c:ed:75:9b:5a:74:dc:21:c8:c6:16:54: ad:cd:76:1e:ae:20:5d:2b:d1:5d:6e:2f:8a:a3:c3:1b:63:81: c3:a8:0c:81 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUadgcZR/Rd9qBnLpo66wir/EX6mcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzQ0Rjk3RTFERjFCRDZEMzdFNkMyRUE4RjAyQzA4ODQ5 OEY0MzMyMzAeFw0yNTEyMDQxODI2MDJaFw0yNTEyMDgwNTU5MDJaMDMxMTAvBgNV BAMTKDdDQkU2NEM2NjAwMDE3ODJBNzlBNjM2QTU1NDQzMjU5MzEyNEQ5NkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyp+P7SAH0d4dcza6LtQW6fYf6 9hxMVENE0kV+kYyWUROspSbAqCAnxf1u0LZDeTYMDLVkQuMWJc4eK+Mfr/1U4Ewl OuJM6fzzxC59xNyt7Upjr+BZiAJHrawm77ooJzW4BH3/SFmQGGeIulDQaPJK1zyg 5uHqk5dWavu9ZLjkikdr7cbeRrnvp+mOd2uViwjM4zlYwSytYFNXR908kMyefFB6 XdtWH2UZf+NOhJSdFGRULlov5XZnk8MhU1rnQMsxcjzNAfsSZvchaVb264zX+jz8 3duh0UxlEOZFCnlmD4SZD3x3OwyiKmLr2jJxzCS4Ql+rlfsDXUI9j9ARwPpvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfL5kxmAAF4KnmmNqVUQyWTEk2W8wHwYDVR0j BBgwFoAUdE+X4d8b1tN+bC6o8CwIhJj0MyMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ODBkZGU5NC1lNWJlLTRkMjktYmIxMi00NWZiNWMxZDJjNzkvMC83NDRGOTdFMURG MUJENkQzN0U2QzJFQThGMDJDMDg4NDk4RjQzMzIzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzQ0Rjk3RTFERjFCRDZEMzdFNkMyRUE4RjAyQzA4ODQ5OEY0 MzMyMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzgwZGRlOTQtZTViZS00ZDI5LWJi MTItNDVmYjVjMWQyYzc5LzAvNzQ0Rjk3RTFERjFCRDZEMzdFNkMyRUE4RjAyQzA4 ODQ5OEY0MzMyMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABokR/RJRifdDhG3Y+oycfl2o3VySFc/SaAi SkvZmOWgE6r+r0/AkdV6sKr1YnW25toQN+cm8oor4fPgzx6TOBhammKX3/HfmgxH PR/0sL/68GYhhZhFk3sJ5UO1RrQOwquNdH8TgY886kISu5G1Oyrnrc1FouXimiHt TsjopnoeBDzQcCW0EHGTkWilczNcsaVbv9oQ94AFzQjXI4SzbLRlaUCWxAwHLGCK dXnBKJo/Sn1+gVp1dCk5/4nQqtJ6o0mFfYY7vx/EVg5fcGh/EiSZ5A1zEeZEz6m3 EE/82WztdZtadNwhyMYWVK3Ndh6uIF0r0V1uL4qjwxtjgcOoDIE= -----END CERTIFICATE-----Generated at Sat Dec 6 23:52:08 2025 by rpki-client