This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/1dfd4234-1323-4f0e-b686-1d72acb88029/0/743D7544160232918AB5AB2CD90221B4C4E978E5.mft File: 743D7544160232918AB5AB2CD90221B4C4E978E5.mft (raw, json) Hash identifier: alUaiZg7HiwrqWgRifc41LB6Oe+mmfiSTZIS3RgzlNQ= Subject key identifier: 59:12:A0:C6:06:EB:71:E9:39:CE:E6:14:33:03:2B:10:72:A5:7F:1F Authority key identifier: 74:3D:75:44:16:02:32:91:8A:B5:AB:2C:D9:02:21:B4:C4:E9:78:E5 Certificate issuer: /CN=743D7544160232918AB5AB2CD90221B4C4E978E5 Certificate serial: 2CA3CDAF9D21F9839CD9CD15CCA6B9B1DE9932E0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/743D7544160232918AB5AB2CD90221B4C4E978E5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1dfd4234-1323-4f0e-b686-1d72acb88029/0/743D7544160232918AB5AB2CD90221B4C4E978E5.mft Manifest number: 01C2 Signing time: Wed 24 Dec 2025 14:31:06 +0000 Manifest this update: Wed 24 Dec 2025 14:26:06 +0000 Manifest next update: Sat 27 Dec 2025 15:54:06 +0000 Files and hashes: 1: 743D7544160232918AB5AB2CD90221B4C4E978E5.crl (hash: sH5ukjPCm7sdO1nMe4nnUDbYdclhnJO936zMH1yoZwE=) 2: 3130332e38312e3235342e302f32342d3234203d3e20313530353533.roa (hash: O6AiiOFEwGMgZxev69IgPIlcJDgXQoSXIvEt086XR7k=) 3: 3130332e38312e3235352e302f32342d3234203d3e20313530353533.roa (hash: 6WBleXSX0c07tXo+dC+vbRCMKLXoYLwo1rSzqObcWfU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1dfd4234-1323-4f0e-b686-1d72acb88029/0/743D7544160232918AB5AB2CD90221B4C4E978E5.crl rsync://repo-rpki.idnic.net/repo/1dfd4234-1323-4f0e-b686-1d72acb88029/0/743D7544160232918AB5AB2CD90221B4C4E978E5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/743D7544160232918AB5AB2CD90221B4C4E978E5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 15:54:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:a3:cd:af:9d:21:f9:83:9c:d9:cd:15:cc:a6:b9:b1:de:99:32:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=743D7544160232918AB5AB2CD90221B4C4E978E5 Validity Not Before: Dec 24 14:26:06 2025 GMT Not After : Dec 27 15:54:06 2025 GMT Subject: CN=5912A0C606EB71E939CEE61433032B1072A57F1F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:74:a7:b4:eb:29:ec:a6:1c:0a:c6:b8:37:79: 17:6c:ac:06:0c:32:5b:34:e9:06:0e:ff:41:df:53: 26:97:c7:6a:41:e7:af:e0:0e:0c:b3:b9:79:1c:ff: 33:09:c4:f2:1f:d6:7b:3e:e1:19:d8:78:f6:a9:8b: ed:37:00:24:55:46:27:fc:92:e7:c6:5a:90:8f:0f: 21:08:33:8a:d2:e0:ab:f9:e3:4c:bf:6a:57:bb:f8: 9e:11:2c:59:91:e5:32:22:7b:df:e5:09:92:92:63: 27:a4:67:81:71:b2:1a:ff:ed:ea:1f:32:16:2c:8b: 8e:45:ce:ff:43:18:69:1a:cd:b0:bb:fa:f4:0f:12: a0:29:d4:69:38:c6:f8:bb:40:35:f9:b0:1c:2d:17: c0:8f:60:80:6b:0a:fe:a5:69:ee:31:2a:57:97:7c: 30:6b:3d:82:46:e2:f8:75:a9:10:9a:12:a1:75:ac: 74:9d:17:04:9d:d5:34:3a:11:7e:8e:1c:24:5a:b1: fa:19:b9:5f:a1:e7:97:80:37:55:10:de:3d:54:dd: 25:b3:3a:ba:e0:1b:bc:53:d9:09:fd:0f:1c:90:44: d3:af:b7:c0:33:9d:ab:29:bb:97:d4:4c:46:4c:48: 9f:a2:ed:94:ed:30:5d:18:1d:cd:9e:4a:f1:be:f5: 1e:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:12:A0:C6:06:EB:71:E9:39:CE:E6:14:33:03:2B:10:72:A5:7F:1F X509v3 Authority Key Identifier: keyid:74:3D:75:44:16:02:32:91:8A:B5:AB:2C:D9:02:21:B4:C4:E9:78:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1dfd4234-1323-4f0e-b686-1d72acb88029/0/743D7544160232918AB5AB2CD90221B4C4E978E5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/743D7544160232918AB5AB2CD90221B4C4E978E5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1dfd4234-1323-4f0e-b686-1d72acb88029/0/743D7544160232918AB5AB2CD90221B4C4E978E5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:34:d4:e6:31:99:28:a3:38:a2:db:fe:89:04:7d:f7:27:80: 73:8b:9a:f5:02:95:8c:51:e8:0d:20:7a:77:6a:96:09:d1:64: 7a:05:f0:9e:1b:92:60:fa:90:d8:f4:17:c7:0f:05:02:dd:1a: a8:3c:f8:bb:96:28:f6:d5:44:a3:0c:7d:b1:70:5c:46:31:a2: 87:b2:3f:35:af:38:93:44:a7:b4:5c:98:2a:56:0f:d7:8b:b2: 60:48:ec:ce:7d:35:25:3e:b6:10:eb:40:74:f8:86:5d:06:0e: 03:57:61:b8:3f:70:66:25:08:e4:01:f0:79:54:44:09:8c:8c: 7d:1c:94:68:92:26:69:ef:7f:4b:1d:95:cd:fb:6a:eb:59:75: a1:29:14:ea:04:aa:50:b3:35:a3:87:d9:57:9d:27:b2:6b:bb: 04:10:d2:5f:1b:22:08:e9:8b:47:f5:31:c4:6e:bf:f3:f9:f3: 08:46:5c:05:2e:27:0b:d3:53:ec:39:b8:ad:f1:65:b2:24:48: c9:1f:ac:6a:33:3e:62:9f:27:05:ae:f1:6b:75:1f:e7:49:57: 03:cb:ef:6f:90:7f:ba:53:78:52:1e:9a:9b:ff:1b:30:ba:b5: 14:e2:b5:13:15:78:13:ee:b3:e4:d6:0c:d1:de:bd:ba:a2:0b: d5:6a:f5:56 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULKPNr50h+YOc2c0VzKa5sd6ZMuAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzQzRDc1NDQxNjAyMzI5MThBQjVBQjJDRDkwMjIxQjRD NEU5NzhFNTAeFw0yNTEyMjQxNDI2MDZaFw0yNTEyMjcxNTU0MDZaMDMxMTAvBgNV BAMTKDU5MTJBMEM2MDZFQjcxRTkzOUNFRTYxNDMzMDMyQjEwNzJBNTdGMUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCdKe06ynsphwKxrg3eRdsrAYM Mls06QYO/0HfUyaXx2pB56/gDgyzuXkc/zMJxPIf1ns+4RnYePapi+03ACRVRif8 kufGWpCPDyEIM4rS4Kv540y/ale7+J4RLFmR5TIie9/lCZKSYyekZ4Fxshr/7eof MhYsi45Fzv9DGGkazbC7+vQPEqAp1Gk4xvi7QDX5sBwtF8CPYIBrCv6lae4xKleX fDBrPYJG4vh1qRCaEqF1rHSdFwSd1TQ6EX6OHCRasfoZuV+h55eAN1UQ3j1U3SWz OrrgG7xT2Qn9DxyQRNOvt8Aznaspu5fUTEZMSJ+i7ZTtMF0YHc2eSvG+9R5jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWRKgxgbrcek5zuYUMwMrEHKlfx8wHwYDVR0j BBgwFoAUdD11RBYCMpGKtass2QIhtMTpeOUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZGZkNDIzNC0xMzIzLTRmMGUtYjY4Ni0xZDcyYWNiODgwMjkvMC83NDNENzU0NDE2 MDIzMjkxOEFCNUFCMkNEOTAyMjFCNEM0RTk3OEU1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzQzRDc1NDQxNjAyMzI5MThBQjVBQjJDRDkwMjIxQjRDNEU5 NzhFNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWRmZDQyMzQtMTMyMy00ZjBlLWI2 ODYtMWQ3MmFjYjg4MDI5LzAvNzQzRDc1NDQxNjAyMzI5MThBQjVBQjJDRDkwMjIx QjRDNEU5NzhFNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHI01OYxmSijOKLb/okEffcngHOLmvUClYxR 6A0gendqlgnRZHoF8J4bkmD6kNj0F8cPBQLdGqg8+LuWKPbVRKMMfbFwXEYxooey PzWvOJNEp7RcmCpWD9eLsmBI7M59NSU+thDrQHT4hl0GDgNXYbg/cGYlCOQB8HlU RAmMjH0clGiSJmnvf0sdlc37autZdaEpFOoEqlCzNaOH2VedJ7JruwQQ0l8bIgjp i0f1McRuv/P58whGXAUuJwvTU+w5uK3xZbIkSMkfrGozPmKfJwWu8Wt1H+dJVwPL 72+Qf7pTeFIempv/GzC6tRTitRMVeBPus+TWDNHevbqiC9Vq9VY= -----END CERTIFICATE-----Generated at Wed Dec 24 23:52:19 2025 by rpki-client