This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/153b067c-ecc9-4dca-987d-b9576815f855/0/45FD71C7EFF830D20E960225B4A971A14B081364.mft File: 45FD71C7EFF830D20E960225B4A971A14B081364.mft (raw, json) Hash identifier: g9WrRoTxDjO6GksI+vt2m0+cQjZbFobQr7TGHm8wW4I= Subject key identifier: D6:73:78:47:66:05:29:8F:6D:9A:50:E4:F0:F9:1D:CF:18:DF:E4:69 Authority key identifier: 45:FD:71:C7:EF:F8:30:D2:0E:96:02:25:B4:A9:71:A1:4B:08:13:64 Certificate issuer: /CN=45FD71C7EFF830D20E960225B4A971A14B081364 Certificate serial: 06D2BA565D9914FFDAFDA21D35E9FC9CB296A107 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45FD71C7EFF830D20E960225B4A971A14B081364.cer Subject info access: rsync://repo-rpki.idnic.net/repo/153b067c-ecc9-4dca-987d-b9576815f855/0/45FD71C7EFF830D20E960225B4A971A14B081364.mft Manifest number: 0535 Signing time: Wed 17 Dec 2025 20:50:56 +0000 Manifest this update: Wed 17 Dec 2025 20:45:56 +0000 Manifest next update: Sun 21 Dec 2025 06:53:56 +0000 Files and hashes: 1: 3131372e3132312e3230362e302f32342d3234203d3e203436303239.roa (hash: kVr4SbJNPOjRvwiHc+hgo6K4HzE1wOJqmCs09GwhV5A=) 2: 3131372e3132312e3230302e302f32342d3234203d3e2030.roa (hash: L0AVu48seGOzT+OjNs4+vHM51Bl8/YcZdTcHUeJSvtI=) 3: 45FD71C7EFF830D20E960225B4A971A14B081364.crl (hash: OEiZ7ZuVOg5tRf0suUxC7oCgwpCsQ75EwPmSaKrb+Vg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/153b067c-ecc9-4dca-987d-b9576815f855/0/45FD71C7EFF830D20E960225B4A971A14B081364.crl rsync://repo-rpki.idnic.net/repo/153b067c-ecc9-4dca-987d-b9576815f855/0/45FD71C7EFF830D20E960225B4A971A14B081364.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45FD71C7EFF830D20E960225B4A971A14B081364.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 06:53:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:d2:ba:56:5d:99:14:ff:da:fd:a2:1d:35:e9:fc:9c:b2:96:a1:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45FD71C7EFF830D20E960225B4A971A14B081364 Validity Not Before: Dec 17 20:45:56 2025 GMT Not After : Dec 21 06:53:56 2025 GMT Subject: CN=D67378476605298F6D9A50E4F0F91DCF18DFE469 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:2a:49:86:c3:eb:02:53:00:d0:fc:40:7a:ce: 38:58:42:6d:cb:54:0f:9c:e5:4c:c6:38:77:9a:ad: d4:fa:c8:79:0a:1e:36:1a:71:78:ae:b9:71:19:f0: fa:d8:db:9c:75:64:ec:50:5f:0b:42:70:74:ae:ea: 64:52:03:f1:09:11:d9:a4:3d:84:5a:c3:c6:cf:b0: ef:09:43:27:db:96:c9:a4:c6:f6:41:bb:7d:26:53: b0:6b:c3:92:20:6b:79:46:3b:f0:6e:24:b6:9f:10: ce:5e:3e:ad:02:b1:b3:4d:9a:85:7c:7a:12:6c:db: e9:f2:3c:40:0b:68:37:3e:ac:c1:18:3f:f6:ef:ef: ff:1b:ca:c5:47:28:0b:6e:5c:4e:a2:df:e6:7f:ff: e7:12:06:77:a4:53:4f:74:b3:f2:73:98:c3:03:52: a4:39:0d:cb:25:78:0f:6e:ed:3d:e0:ae:20:26:3a: 14:79:49:06:bd:ff:c4:7e:7c:5e:ff:9a:c7:c0:be: 14:63:f1:cb:0d:23:fc:7d:d1:8b:09:f5:47:10:6e: 5e:83:bd:c2:c4:95:df:6a:41:3d:6c:88:5c:1e:ff: d5:ac:0c:d7:50:a3:b4:0c:b2:43:06:8d:ad:a7:18: 59:98:3d:90:3e:c3:a3:c7:b1:25:8f:2d:d4:4c:23: fb:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:73:78:47:66:05:29:8F:6D:9A:50:E4:F0:F9:1D:CF:18:DF:E4:69 X509v3 Authority Key Identifier: keyid:45:FD:71:C7:EF:F8:30:D2:0E:96:02:25:B4:A9:71:A1:4B:08:13:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/153b067c-ecc9-4dca-987d-b9576815f855/0/45FD71C7EFF830D20E960225B4A971A14B081364.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45FD71C7EFF830D20E960225B4A971A14B081364.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/153b067c-ecc9-4dca-987d-b9576815f855/0/45FD71C7EFF830D20E960225B4A971A14B081364.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:e1:a9:06:fe:df:7c:e5:37:3d:64:43:42:17:2e:d4:eb:98: 1e:b5:b4:1a:9d:01:1d:18:3e:13:bf:3d:5a:06:84:ab:ba:f7: 4b:13:06:4b:b7:48:8d:dd:31:d1:a4:bb:4e:58:1c:4b:82:14: 59:30:cf:84:78:7d:e9:d2:2f:12:54:dd:2c:75:32:60:1d:50: 2d:89:60:9f:e0:8d:19:c1:af:26:19:63:30:50:6c:9e:38:8b: 51:ca:82:ba:a3:3f:f6:40:77:a6:eb:4b:76:79:dc:15:32:b0: ed:bd:f8:43:36:b8:b1:05:ff:c4:1f:23:8d:21:a8:a1:23:3d: e0:63:88:65:82:5a:f3:4a:99:b9:b9:62:18:6f:b7:0e:96:05: 55:74:c4:a7:c2:f2:f6:db:00:42:00:8d:d6:0f:4a:3e:96:b7: 6a:ef:5e:f4:3d:88:25:96:ac:23:0d:e9:74:48:03:3b:4c:26: e6:84:2b:e5:b0:a8:82:b0:bf:23:59:e5:61:d7:17:57:19:6a: e5:62:4c:2d:6f:2b:20:35:0d:1a:3c:91:05:70:1d:12:4f:db: b0:ce:ab:cf:5d:53:d7:90:d0:6c:90:48:f7:a2:c0:b1:a1:b2: ef:1f:86:30:fa:d1:24:cd:83:34:73:df:bb:9d:51:99:75:0b: f8:dc:54:cb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBtK6Vl2ZFP/a/aIdNen8nLKWoQcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDVGRDcxQzdFRkY4MzBEMjBFOTYwMjI1QjRBOTcxQTE0 QjA4MTM2NDAeFw0yNTEyMTcyMDQ1NTZaFw0yNTEyMjEwNjUzNTZaMDMxMTAvBgNV BAMTKEQ2NzM3ODQ3NjYwNTI5OEY2RDlBNTBFNEYwRjkxRENGMThERkU0NjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrKkmGw+sCUwDQ/EB6zjhYQm3L VA+c5UzGOHeardT6yHkKHjYacXiuuXEZ8PrY25x1ZOxQXwtCcHSu6mRSA/EJEdmk PYRaw8bPsO8JQyfblsmkxvZBu30mU7Brw5Iga3lGO/BuJLafEM5ePq0CsbNNmoV8 ehJs2+nyPEALaDc+rMEYP/bv7/8bysVHKAtuXE6i3+Z//+cSBnekU090s/JzmMMD UqQ5DcsleA9u7T3griAmOhR5SQa9/8R+fF7/msfAvhRj8csNI/x90YsJ9UcQbl6D vcLEld9qQT1siFwe/9WsDNdQo7QMskMGja2nGFmYPZA+w6PHsSWPLdRMI/sPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1nN4R2YFKY9tmlDk8Pkdzxjf5GkwHwYDVR0j BBgwFoAURf1xx+/4MNIOlgIltKlxoUsIE2QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NTNiMDY3Yy1lY2M5LTRkY2EtOTg3ZC1iOTU3NjgxNWY4NTUvMC80NUZENzFDN0VG RjgzMEQyMEU5NjAyMjVCNEE5NzFBMTRCMDgxMzY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDVGRDcxQzdFRkY4MzBEMjBFOTYwMjI1QjRBOTcxQTE0QjA4 MTM2NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTUzYjA2N2MtZWNjOS00ZGNhLTk4 N2QtYjk1NzY4MTVmODU1LzAvNDVGRDcxQzdFRkY4MzBEMjBFOTYwMjI1QjRBOTcx QTE0QjA4MTM2NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK3hqQb+33zlNz1kQ0IXLtTrmB61tBqdAR0Y PhO/PVoGhKu690sTBku3SI3dMdGku05YHEuCFFkwz4R4fenSLxJU3Sx1MmAdUC2J YJ/gjRnBryYZYzBQbJ44i1HKgrqjP/ZAd6brS3Z53BUysO29+EM2uLEF/8QfI40h qKEjPeBjiGWCWvNKmbm5Yhhvtw6WBVV0xKfC8vbbAEIAjdYPSj6Wt2rvXvQ9iCWW rCMN6XRIAztMJuaEK+WwqIKwvyNZ5WHXF1cZauViTC1vKyA1DRo8kQVwHRJP27DO q89dU9eQ0GyQSPeiwLGhsu8fhjD60STNgzRz37udUZl1C/jcVMs= -----END CERTIFICATE-----Generated at Thu Dec 18 20:34:48 2025 by rpki-client