This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a6358dda-0ff1-4f6a-bb66-60f4ca04c490/0/754AE571E3432B20E78045BE7B2C99E39E0F1873.mft File: 754AE571E3432B20E78045BE7B2C99E39E0F1873.mft (raw, json) Hash identifier: zGDlWthjyTpGShScwU+Iz61slkUU+BMmU1b3zeE4tTI= Subject key identifier: FA:99:BB:EE:7F:56:7D:B1:2B:E6:E9:41:27:A5:F3:D2:99:B1:CD:B1 Authority key identifier: 75:4A:E5:71:E3:43:2B:20:E7:80:45:BE:7B:2C:99:E3:9E:0F:18:73 Certificate issuer: /CN=754AE571E3432B20E78045BE7B2C99E39E0F1873 Certificate serial: 19551E89D4DD93995D8F457DDEC45A899D00BBD9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/754AE571E3432B20E78045BE7B2C99E39E0F1873.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a6358dda-0ff1-4f6a-bb66-60f4ca04c490/0/754AE571E3432B20E78045BE7B2C99E39E0F1873.mft Manifest number: 0248 Signing time: Wed 24 Dec 2025 02:53:52 +0000 Manifest this update: Wed 24 Dec 2025 02:48:52 +0000 Manifest next update: Sat 27 Dec 2025 09:57:52 +0000 Files and hashes: 1: 754AE571E3432B20E78045BE7B2C99E39E0F1873.crl (hash: Nivwlw1AvoRaB18LYU+OQVS1HcOEaowG6gUC/u6HL9E=) 2: 3130332e372e3232362e302f32342d3234203d3e203539313335.roa (hash: d1VqPlCHSAGRA/UEI5pUZ6WXcTK62ba2i6gugZCVB1Y=) 3: 3130332e372e3232372e302f32342d3234203d3e203539313335.roa (hash: Fle5qLzNk23ZNkYRzf8mlYQ/OLfLBGZjvUjXRT80jgM=) 4: 3130332e372e3232362e302f32332d3233203d3e203539313335.roa (hash: /qz+/FrTyvqN+lKfQMLM9vGRBCrWv6ZRIa9kSi7cy5M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a6358dda-0ff1-4f6a-bb66-60f4ca04c490/0/754AE571E3432B20E78045BE7B2C99E39E0F1873.crl rsync://repo-rpki.idnic.net/repo/a6358dda-0ff1-4f6a-bb66-60f4ca04c490/0/754AE571E3432B20E78045BE7B2C99E39E0F1873.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/754AE571E3432B20E78045BE7B2C99E39E0F1873.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 09:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:55:1e:89:d4:dd:93:99:5d:8f:45:7d:de:c4:5a:89:9d:00:bb:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=754AE571E3432B20E78045BE7B2C99E39E0F1873 Validity Not Before: Dec 24 02:48:52 2025 GMT Not After : Dec 27 09:57:52 2025 GMT Subject: CN=FA99BBEE7F567DB12BE6E94127A5F3D299B1CDB1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:25:d9:c2:86:5b:7a:95:ce:40:91:23:09:e9: a7:af:f8:a4:15:a0:c9:83:68:41:2a:4d:2c:5e:6e: b6:a9:ad:65:54:f5:be:fc:e3:2e:f9:8d:38:1a:df: ef:c3:40:0a:22:05:9c:a7:71:cf:3e:dd:63:c3:e3: 7f:4b:b7:a5:76:d3:a8:ea:50:5d:89:22:25:39:8a: 3b:df:82:c8:67:0c:26:de:75:bb:21:0f:fc:88:67: 00:34:de:a4:7b:fe:d3:99:f7:67:aa:91:95:76:72: 4f:8d:81:9b:d1:ff:c0:80:6b:1a:6b:05:d1:1e:18: 2c:69:a4:93:a6:91:cb:07:92:3e:60:1f:9c:03:a0: a8:13:cf:99:37:fe:4e:83:ff:45:7c:7b:e3:bb:ef: 9f:00:a3:e2:36:e2:5b:19:9e:d7:43:55:86:bb:46: b2:01:37:a3:ef:47:62:d2:28:08:ab:9f:50:49:a3: 00:61:ce:de:7f:81:7d:af:8d:46:41:d2:47:f1:da: ce:cb:43:1c:26:a2:5a:dd:f3:11:dd:79:38:96:3f: 56:d3:c4:ef:df:2f:d5:e0:e1:aa:dd:24:ff:df:ed: 12:c5:ee:15:82:0a:a3:68:6e:ae:2a:69:43:ae:5b: fa:88:69:28:18:6d:b4:91:d8:05:e4:6b:e6:95:25: 15:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:99:BB:EE:7F:56:7D:B1:2B:E6:E9:41:27:A5:F3:D2:99:B1:CD:B1 X509v3 Authority Key Identifier: keyid:75:4A:E5:71:E3:43:2B:20:E7:80:45:BE:7B:2C:99:E3:9E:0F:18:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a6358dda-0ff1-4f6a-bb66-60f4ca04c490/0/754AE571E3432B20E78045BE7B2C99E39E0F1873.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/754AE571E3432B20E78045BE7B2C99E39E0F1873.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a6358dda-0ff1-4f6a-bb66-60f4ca04c490/0/754AE571E3432B20E78045BE7B2C99E39E0F1873.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:22:8b:c0:8b:cd:e8:91:c0:c7:96:9d:f2:f1:2f:21:b0:01: d5:ef:f3:75:64:08:2c:38:f3:14:58:61:2e:7b:ee:c5:4e:2f: 45:e3:75:a2:d7:51:b9:a8:2c:fe:66:e2:c1:80:b8:cc:8b:14: 25:8e:74:79:cd:42:c1:dd:13:e7:f6:ac:03:ab:0b:16:73:c1: 91:4b:f9:d6:f5:26:b2:4e:47:6a:a8:0c:d8:93:b9:51:86:89: 7c:1e:4c:ee:2b:7a:7a:f1:4f:79:9d:c8:f1:ab:3b:0f:97:3d: b8:12:e0:9b:57:13:d5:9b:f4:0f:39:b6:c9:a9:0f:a7:f2:1d: 0f:3a:8f:01:df:48:18:31:07:ba:b2:95:d6:41:60:55:48:d3: ce:de:80:da:dc:92:25:c8:77:a2:95:a4:1f:fc:23:b3:d5:22: 03:25:25:63:44:38:19:61:1a:09:04:64:03:25:0d:02:ae:97: f6:7e:d3:b0:67:fd:48:f1:fa:18:f5:92:e9:be:e3:dc:15:61: bc:71:30:ed:5d:f9:d0:be:ed:b4:3f:fb:2f:89:c5:6a:c9:c8: 8b:2c:1a:45:fa:0a:4f:3e:bc:ca:76:bd:b0:96:25:71:42:f2: f5:da:24:f6:45:04:0a:9c:d5:74:07:3f:06:37:8f:54:20:e4: 1b:09:83:dd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGVUeidTdk5ldj0V93sRaiZ0Au9kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzU0QUU1NzFFMzQzMkIyMEU3ODA0NUJFN0IyQzk5RTM5 RTBGMTg3MzAeFw0yNTEyMjQwMjQ4NTJaFw0yNTEyMjcwOTU3NTJaMDMxMTAvBgNV BAMTKEZBOTlCQkVFN0Y1NjdEQjEyQkU2RTk0MTI3QTVGM0QyOTlCMUNEQjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaJdnChlt6lc5AkSMJ6aev+KQV oMmDaEEqTSxebraprWVU9b784y75jTga3+/DQAoiBZyncc8+3WPD439Lt6V206jq UF2JIiU5ijvfgshnDCbedbshD/yIZwA03qR7/tOZ92eqkZV2ck+NgZvR/8CAaxpr BdEeGCxppJOmkcsHkj5gH5wDoKgTz5k3/k6D/0V8e+O7758Ao+I24lsZntdDVYa7 RrIBN6PvR2LSKAirn1BJowBhzt5/gX2vjUZB0kfx2s7LQxwmolrd8xHdeTiWP1bT xO/fL9Xg4ardJP/f7RLF7hWCCqNobq4qaUOuW/qIaSgYbbSR2AXka+aVJRWxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+pm77n9WfbEr5ulBJ6Xz0pmxzbEwHwYDVR0j BBgwFoAUdUrlceNDKyDngEW+eyyZ454PGHMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NjM1OGRkYS0wZmYxLTRmNmEtYmI2Ni02MGY0Y2EwNGM0OTAvMC83NTRBRTU3MUUz NDMyQjIwRTc4MDQ1QkU3QjJDOTlFMzlFMEYxODczLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzU0QUU1NzFFMzQzMkIyMEU3ODA0NUJFN0IyQzk5RTM5RTBG MTg3My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTYzNThkZGEtMGZmMS00ZjZhLWJi NjYtNjBmNGNhMDRjNDkwLzAvNzU0QUU1NzFFMzQzMkIyMEU3ODA0NUJFN0IyQzk5 RTM5RTBGMTg3My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJgii8CLzeiRwMeWnfLxLyGwAdXv83VkCCw4 8xRYYS577sVOL0XjdaLXUbmoLP5m4sGAuMyLFCWOdHnNQsHdE+f2rAOrCxZzwZFL +db1JrJOR2qoDNiTuVGGiXweTO4renrxT3mdyPGrOw+XPbgS4JtXE9Wb9A85tsmp D6fyHQ86jwHfSBgxB7qyldZBYFVI087egNrckiXId6KVpB/8I7PVIgMlJWNEOBlh GgkEZAMlDQKul/Z+07Bn/Ujx+hj1kum+49wVYbxxMO1d+dC+7bQ/+y+JxWrJyIss GkX6Ck8+vMp2vbCWJXFC8vXaJPZFBAqc1XQHPwY3j1Qg5BsJg90= -----END CERTIFICATE-----Generated at Wed Dec 24 20:25:18 2025 by rpki-client