This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a6358dda-0ff1-4f6a-bb66-60f4ca04c490/0/754AE571E3432B20E78045BE7B2C99E39E0F1873.mft File: 754AE571E3432B20E78045BE7B2C99E39E0F1873.mft (raw, json) Hash identifier: 11oa83URnZ+C8jW2SApV6OATini9OJfEDuS+I6OYQGk= Subject key identifier: 21:37:88:7D:FA:BA:37:17:C4:06:18:7C:01:D0:5B:25:96:1C:15:48 Authority key identifier: 75:4A:E5:71:E3:43:2B:20:E7:80:45:BE:7B:2C:99:E3:9E:0F:18:73 Certificate issuer: /CN=754AE571E3432B20E78045BE7B2C99E39E0F1873 Certificate serial: 3F956F7AC45F44F0E6F071DBC3B5AB2DDF6711C5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/754AE571E3432B20E78045BE7B2C99E39E0F1873.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a6358dda-0ff1-4f6a-bb66-60f4ca04c490/0/754AE571E3432B20E78045BE7B2C99E39E0F1873.mft Manifest number: 024B Signing time: Tue 30 Dec 2025 16:22:12 +0000 Manifest this update: Tue 30 Dec 2025 16:17:12 +0000 Manifest next update: Fri 02 Jan 2026 18:31:12 +0000 Files and hashes: 1: 3130332e372e3232362e302f32332d3233203d3e203539313335.roa (hash: /qz+/FrTyvqN+lKfQMLM9vGRBCrWv6ZRIa9kSi7cy5M=) 2: 754AE571E3432B20E78045BE7B2C99E39E0F1873.crl (hash: 7AbvBmV19NObipB2KdzUAYrzdWb06dZ8wOe3CZHn6wo=) 3: 3130332e372e3232372e302f32342d3234203d3e203539313335.roa (hash: Fle5qLzNk23ZNkYRzf8mlYQ/OLfLBGZjvUjXRT80jgM=) 4: 3130332e372e3232362e302f32342d3234203d3e203539313335.roa (hash: d1VqPlCHSAGRA/UEI5pUZ6WXcTK62ba2i6gugZCVB1Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a6358dda-0ff1-4f6a-bb66-60f4ca04c490/0/754AE571E3432B20E78045BE7B2C99E39E0F1873.crl rsync://repo-rpki.idnic.net/repo/a6358dda-0ff1-4f6a-bb66-60f4ca04c490/0/754AE571E3432B20E78045BE7B2C99E39E0F1873.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/754AE571E3432B20E78045BE7B2C99E39E0F1873.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Jan 2026 15:22:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:95:6f:7a:c4:5f:44:f0:e6:f0:71:db:c3:b5:ab:2d:df:67:11:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=754AE571E3432B20E78045BE7B2C99E39E0F1873 Validity Not Before: Dec 30 16:17:12 2025 GMT Not After : Jan 2 18:31:12 2026 GMT Subject: CN=2137887DFABA3717C406187C01D05B25961C1548 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:19:43:26:ca:f6:50:8f:20:b1:73:c5:4f:9a: 60:e1:78:f0:ca:a3:64:e5:45:86:61:03:8c:c1:c7: 94:ef:20:42:d6:70:87:3c:11:b6:24:78:9a:9a:2f: 61:29:f3:6b:71:65:01:88:2f:4f:13:e5:a3:f2:18: 52:72:26:a0:ea:2b:43:a3:41:89:82:33:4b:42:8e: 81:e2:10:9f:4f:c5:6d:7e:f2:1f:8a:0a:2c:6a:08: ca:ba:0f:e4:c9:df:f7:42:d9:e7:16:94:54:c1:02: 1b:73:3a:ff:89:a0:16:8b:09:b7:d2:d4:17:37:72: 80:e3:c0:c9:b3:f1:81:47:fc:94:73:e4:3b:33:a9: ad:a1:81:da:64:13:25:63:a8:a9:5c:62:07:71:c6: ba:43:5a:92:2c:53:8d:21:b1:5b:31:ae:c4:d5:fd: b8:06:12:a3:f4:af:91:b3:ea:42:8b:1e:30:80:55: 8f:7b:5c:bd:d8:61:83:8a:ec:4b:08:11:04:6f:60: 02:18:62:40:26:84:fe:29:70:02:90:eb:32:52:08: cd:65:88:f3:c7:f8:9f:f3:ff:6d:9b:5c:20:86:d8: 38:37:9e:4d:02:f6:09:e8:5f:73:00:d5:a7:aa:b3: 6a:64:08:64:22:e0:a1:38:f0:1d:a7:5a:1e:a1:c9: c0:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:37:88:7D:FA:BA:37:17:C4:06:18:7C:01:D0:5B:25:96:1C:15:48 X509v3 Authority Key Identifier: keyid:75:4A:E5:71:E3:43:2B:20:E7:80:45:BE:7B:2C:99:E3:9E:0F:18:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a6358dda-0ff1-4f6a-bb66-60f4ca04c490/0/754AE571E3432B20E78045BE7B2C99E39E0F1873.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/754AE571E3432B20E78045BE7B2C99E39E0F1873.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a6358dda-0ff1-4f6a-bb66-60f4ca04c490/0/754AE571E3432B20E78045BE7B2C99E39E0F1873.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:f0:cd:99:cb:18:ed:24:74:5f:74:0d:20:30:5e:d9:17:c9: 23:ec:14:cc:6a:1d:cc:91:e0:5d:a1:6a:19:5b:c2:ba:63:f6: 81:ac:4c:b4:64:a9:d5:a0:6a:da:dc:88:27:d9:97:31:bb:a0: 28:5a:9c:89:50:ad:d8:a4:0f:af:4a:36:eb:a3:bd:c9:6e:4d: 0c:cc:9d:d9:a8:25:e8:f1:5e:38:7a:a2:76:88:dd:f2:56:a1: a6:07:ba:67:55:c3:f3:5a:d3:5b:51:81:e5:1b:4d:ab:85:50: d4:c1:00:1c:24:66:ac:95:7b:39:ca:7c:9f:dd:3c:7d:dd:81: 84:b2:e8:9b:05:7f:82:8a:68:16:12:95:0a:5d:eb:df:b1:92: 94:d9:72:2d:8e:f3:27:9c:0b:1f:06:74:ab:19:dd:f7:06:bd: 2d:a2:9b:8e:42:bd:9e:ea:36:56:d3:c8:41:0e:78:7c:80:2f: 31:3f:b7:5c:69:48:49:67:7a:0b:68:1b:bf:79:85:fe:ad:4d: c3:51:de:61:a3:59:50:5f:d7:e7:5c:02:4c:c4:fe:73:28:48: c6:95:62:03:0e:b8:f3:8e:22:c5:9f:37:e5:c5:b9:d7:47:97: ed:5a:30:a5:f6:14:af:05:d9:84:90:9c:60:b1:0d:09:4a:ba: 5c:3e:d6:9b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP5VvesRfRPDm8HHbw7WrLd9nEcUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzU0QUU1NzFFMzQzMkIyMEU3ODA0NUJFN0IyQzk5RTM5 RTBGMTg3MzAeFw0yNTEyMzAxNjE3MTJaFw0yNjAxMDIxODMxMTJaMDMxMTAvBgNV BAMTKDIxMzc4ODdERkFCQTM3MTdDNDA2MTg3QzAxRDA1QjI1OTYxQzE1NDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRGUMmyvZQjyCxc8VPmmDhePDK o2TlRYZhA4zBx5TvIELWcIc8EbYkeJqaL2Ep82txZQGIL08T5aPyGFJyJqDqK0Oj QYmCM0tCjoHiEJ9PxW1+8h+KCixqCMq6D+TJ3/dC2ecWlFTBAhtzOv+JoBaLCbfS 1Bc3coDjwMmz8YFH/JRz5Dszqa2hgdpkEyVjqKlcYgdxxrpDWpIsU40hsVsxrsTV /bgGEqP0r5Gz6kKLHjCAVY97XL3YYYOK7EsIEQRvYAIYYkAmhP4pcAKQ6zJSCM1l iPPH+J/z/22bXCCG2Dg3nk0C9gnoX3MA1aeqs2pkCGQi4KE48B2nWh6hycA3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUITeIffq6NxfEBhh8AdBbJZYcFUgwHwYDVR0j BBgwFoAUdUrlceNDKyDngEW+eyyZ454PGHMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NjM1OGRkYS0wZmYxLTRmNmEtYmI2Ni02MGY0Y2EwNGM0OTAvMC83NTRBRTU3MUUz NDMyQjIwRTc4MDQ1QkU3QjJDOTlFMzlFMEYxODczLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzU0QUU1NzFFMzQzMkIyMEU3ODA0NUJFN0IyQzk5RTM5RTBG MTg3My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTYzNThkZGEtMGZmMS00ZjZhLWJi NjYtNjBmNGNhMDRjNDkwLzAvNzU0QUU1NzFFMzQzMkIyMEU3ODA0NUJFN0IyQzk5 RTM5RTBGMTg3My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAvwzZnLGO0kdF90DSAwXtkXySPsFMxqHcyR 4F2hahlbwrpj9oGsTLRkqdWgatrciCfZlzG7oChanIlQrdikD69KNuujvcluTQzM ndmoJejxXjh6onaI3fJWoaYHumdVw/Na01tRgeUbTauFUNTBABwkZqyVeznKfJ/d PH3dgYSy6JsFf4KKaBYSlQpd69+xkpTZci2O8yecCx8GdKsZ3fcGvS2im45CvZ7q NlbTyEEOeHyALzE/t1xpSElnegtoG795hf6tTcNR3mGjWVBf1+dcAkzE/nMoSMaV YgMOuPOOIsWfN+XFuddHl+1aMKX2FK8F2YSQnGCxDQlKulw+1ps= -----END CERTIFICATE-----Generated at Tue Dec 30 20:23:17 2025 by rpki-client