This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/2226be7b-2e28-4950-aa4c-2185e647db3f/0/75890247E178C40DD3F9A5968202F684AEB89D9A.mft File: 75890247E178C40DD3F9A5968202F684AEB89D9A.mft (raw, json) Hash identifier: iKMkBzHcvSthxG5HlmhC+t5PnWmlwyF1EBTyAn30zGU= Subject key identifier: 38:9F:B0:88:08:5F:CF:B1:48:A9:8B:EF:D6:CC:E4:C2:C5:83:2A:05 Authority key identifier: 75:89:02:47:E1:78:C4:0D:D3:F9:A5:96:82:02:F6:84:AE:B8:9D:9A Certificate issuer: /CN=75890247E178C40DD3F9A5968202F684AEB89D9A Certificate serial: 068DC70B09174844C306D2F2718AC597BB4E64C4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/75890247E178C40DD3F9A5968202F684AEB89D9A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2226be7b-2e28-4950-aa4c-2185e647db3f/0/75890247E178C40DD3F9A5968202F684AEB89D9A.mft Manifest number: 01FC Signing time: Thu 18 Dec 2025 15:01:04 +0000 Manifest this update: Thu 18 Dec 2025 14:56:04 +0000 Manifest next update: Mon 22 Dec 2025 01:54:04 +0000 Files and hashes: 1: 3130332e33392e36382e302f32332d3233203d3e20313530323730.roa (hash: fXiiGXJRCPKNViYWqCFLLjVfmQD8H4I+YjRRxMPnTUk=) 2: 75890247E178C40DD3F9A5968202F684AEB89D9A.crl (hash: hPKtqY2ZR3un/uOnYluNYQ4j9pbe5DEiQi728vakKmU=) 3: 3130332e33392e36382e302f32342d3234203d3e20313530323730.roa (hash: g6PqLS5mE+1W2ojOPy8XOSM+C1KCNHjLUWlTp/BiYKA=) 4: 3130332e33392e36392e302f32342d3234203d3e20313530323730.roa (hash: ABOgyOC/6WBI7TsB52quJVoJIzB223bKwujKqyNGano=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2226be7b-2e28-4950-aa4c-2185e647db3f/0/75890247E178C40DD3F9A5968202F684AEB89D9A.crl rsync://repo-rpki.idnic.net/repo/2226be7b-2e28-4950-aa4c-2185e647db3f/0/75890247E178C40DD3F9A5968202F684AEB89D9A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/75890247E178C40DD3F9A5968202F684AEB89D9A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 01:54:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:8d:c7:0b:09:17:48:44:c3:06:d2:f2:71:8a:c5:97:bb:4e:64:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75890247E178C40DD3F9A5968202F684AEB89D9A Validity Not Before: Dec 18 14:56:04 2025 GMT Not After : Dec 22 01:54:04 2025 GMT Subject: CN=389FB088085FCFB148A98BEFD6CCE4C2C5832A05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:6b:29:1f:d6:86:34:16:3b:ab:09:6b:48:b7: 70:b9:30:6f:ba:51:fb:32:a8:c1:f4:b9:e6:0d:bb: c3:8e:d6:e5:24:7d:51:aa:21:bd:b9:d1:8b:74:25: 08:c3:6e:a3:0d:f1:89:ef:19:81:24:fc:51:02:23: 3c:05:4a:56:6b:69:40:7a:4b:70:64:be:b9:c8:7d: 9e:68:d1:44:3f:19:c6:df:a2:b3:b3:85:cf:a5:fa: 02:59:3e:ae:b2:fe:41:86:ae:5d:83:87:0d:e2:38: e9:77:88:73:7f:81:d9:7e:d5:fe:f0:13:74:d3:4a: 16:44:65:65:ad:66:22:d8:5c:de:e1:32:a9:5f:57: a0:a9:1a:9c:b3:94:c1:04:a3:a5:22:63:d9:00:dc: 1c:e8:57:b5:ee:ab:a6:ae:b6:0f:34:2c:a2:d3:33: d1:69:ed:70:26:4b:ed:83:ce:3c:85:81:f8:4c:22: b9:1c:9c:48:a1:b8:41:d1:b2:1b:30:37:75:0a:43: be:8a:df:f4:da:d9:d9:db:cd:e7:80:23:5b:d5:af: 93:ba:d0:9d:64:1b:e5:cb:03:d5:75:a2:03:3b:a6: 25:b7:b3:99:69:3b:60:9a:fc:d2:ca:09:5d:f5:0e: 10:d5:8c:79:90:3f:98:63:5e:ef:b7:f6:b7:99:2a: c0:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:9F:B0:88:08:5F:CF:B1:48:A9:8B:EF:D6:CC:E4:C2:C5:83:2A:05 X509v3 Authority Key Identifier: keyid:75:89:02:47:E1:78:C4:0D:D3:F9:A5:96:82:02:F6:84:AE:B8:9D:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2226be7b-2e28-4950-aa4c-2185e647db3f/0/75890247E178C40DD3F9A5968202F684AEB89D9A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/75890247E178C40DD3F9A5968202F684AEB89D9A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2226be7b-2e28-4950-aa4c-2185e647db3f/0/75890247E178C40DD3F9A5968202F684AEB89D9A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:1f:1f:b6:00:5e:4d:0d:e4:6b:30:5b:42:08:e4:9a:b3:95: df:3d:5c:51:53:3a:e2:5c:b3:65:e8:4c:36:fe:27:bc:f5:4f: fb:4f:fa:52:05:1e:93:4b:e0:01:cd:be:64:d9:b6:3a:33:fe: 1f:23:dd:9b:38:f0:21:c5:80:8e:01:e1:93:b0:5e:7b:be:7c: d4:59:a7:e8:8d:24:66:9a:2b:bc:95:b1:b9:63:17:c6:f4:b8: 60:8e:d2:bd:3c:38:2c:36:e7:07:50:47:a3:a9:fb:24:1a:e1: dc:16:a0:4e:7e:90:76:22:41:15:5c:da:c9:c0:b9:e6:94:c7: 39:b3:3b:ec:d1:37:48:cd:3d:20:1c:07:d8:d8:46:8d:41:a4: 1d:75:53:9a:70:e4:64:ee:f7:59:68:02:d0:4e:e5:ed:fe:8a: a4:bd:2b:e0:90:cb:bf:62:91:63:40:bb:52:24:2f:40:d2:30: 05:da:df:cb:23:de:76:55:d7:99:02:69:32:80:ce:a0:57:6c: a0:6b:39:8c:97:0c:19:7c:81:ea:03:a0:12:08:43:07:d5:a5: 87:28:40:b7:a1:48:50:ab:dc:45:92:a8:07:f6:e6:03:67:a1: 41:57:56:cd:5a:cc:2d:a1:58:69:1e:3e:20:c0:b2:60:a5:5b: 7a:d6:87:e0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBo3HCwkXSETDBtLycYrFl7tOZMQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzU4OTAyNDdFMTc4QzQwREQzRjlBNTk2ODIwMkY2ODRB RUI4OUQ5QTAeFw0yNTEyMTgxNDU2MDRaFw0yNTEyMjIwMTU0MDRaMDMxMTAvBgNV BAMTKDM4OUZCMDg4MDg1RkNGQjE0OEE5OEJFRkQ2Q0NFNEMyQzU4MzJBMDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzaykf1oY0FjurCWtIt3C5MG+6 UfsyqMH0ueYNu8OO1uUkfVGqIb250Yt0JQjDbqMN8YnvGYEk/FECIzwFSlZraUB6 S3BkvrnIfZ5o0UQ/GcbforOzhc+l+gJZPq6y/kGGrl2Dhw3iOOl3iHN/gdl+1f7w E3TTShZEZWWtZiLYXN7hMqlfV6CpGpyzlMEEo6UiY9kA3BzoV7Xuq6autg80LKLT M9Fp7XAmS+2DzjyFgfhMIrkcnEihuEHRshswN3UKQ76K3/Ta2dnbzeeAI1vVr5O6 0J1kG+XLA9V1ogM7piW3s5lpO2Ca/NLKCV31DhDVjHmQP5hjXu+39reZKsBHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOJ+wiAhfz7FIqYvv1szkwsWDKgUwHwYDVR0j BBgwFoAUdYkCR+F4xA3T+aWWggL2hK64nZowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MjI2YmU3Yi0yZTI4LTQ5NTAtYWE0Yy0yMTg1ZTY0N2RiM2YvMC83NTg5MDI0N0Ux NzhDNDBERDNGOUE1OTY4MjAyRjY4NEFFQjg5RDlBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzU4OTAyNDdFMTc4QzQwREQzRjlBNTk2ODIwMkY2ODRBRUI4 OUQ5QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjIyNmJlN2ItMmUyOC00OTUwLWFh NGMtMjE4NWU2NDdkYjNmLzAvNzU4OTAyNDdFMTc4QzQwREQzRjlBNTk2ODIwMkY2 ODRBRUI4OUQ5QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC8fH7YAXk0N5GswW0II5Jqzld89XFFTOuJc s2XoTDb+J7z1T/tP+lIFHpNL4AHNvmTZtjoz/h8j3Zs48CHFgI4B4ZOwXnu+fNRZ p+iNJGaaK7yVsbljF8b0uGCO0r08OCw25wdQR6Op+yQa4dwWoE5+kHYiQRVc2snA ueaUxzmzO+zRN0jNPSAcB9jYRo1BpB11U5pw5GTu91loAtBO5e3+iqS9K+CQy79i kWNAu1IkL0DSMAXa38sj3nZV15kCaTKAzqBXbKBrOYyXDBl8geoDoBIIQwfVpYco QLehSFCr3EWSqAf25gNnoUFXVs1azC2hWGkePiDAsmClW3rWh+A= -----END CERTIFICATE-----Generated at Fri Dec 19 11:17:32 2025 by rpki-client