This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/153b067c-ecc9-4dca-987d-b9576815f855/0/45FD71C7EFF830D20E960225B4A971A14B081364.mft File: 45FD71C7EFF830D20E960225B4A971A14B081364.mft (raw, json) Hash identifier: 3I8nbjCaLJitDpo4qAf8JUxP9QQZQSoyGKKPUvg6k3Y= Subject key identifier: 30:2D:F3:31:82:F4:D0:B2:59:BA:8F:99:53:AF:B9:98:D9:34:0F:07 Authority key identifier: 45:FD:71:C7:EF:F8:30:D2:0E:96:02:25:B4:A9:71:A1:4B:08:13:64 Certificate issuer: /CN=45FD71C7EFF830D20E960225B4A971A14B081364 Certificate serial: 60903CBB0BFBFE134B73CEE2E622C93F386286F4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45FD71C7EFF830D20E960225B4A971A14B081364.cer Subject info access: rsync://repo-rpki.idnic.net/repo/153b067c-ecc9-4dca-987d-b9576815f855/0/45FD71C7EFF830D20E960225B4A971A14B081364.mft Manifest number: 0530 Signing time: Sat 06 Dec 2025 09:00:57 +0000 Manifest this update: Sat 06 Dec 2025 08:55:57 +0000 Manifest next update: Tue 09 Dec 2025 20:05:57 +0000 Files and hashes: 1: 45FD71C7EFF830D20E960225B4A971A14B081364.crl (hash: skPiSTDqkPAC5g0GWh10b+a7cIihwqrYpYx3VIWqXgs=) 2: 3131372e3132312e3230302e302f32342d3234203d3e2030.roa (hash: L0AVu48seGOzT+OjNs4+vHM51Bl8/YcZdTcHUeJSvtI=) 3: 3131372e3132312e3230362e302f32342d3234203d3e203436303239.roa (hash: kVr4SbJNPOjRvwiHc+hgo6K4HzE1wOJqmCs09GwhV5A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/153b067c-ecc9-4dca-987d-b9576815f855/0/45FD71C7EFF830D20E960225B4A971A14B081364.crl rsync://repo-rpki.idnic.net/repo/153b067c-ecc9-4dca-987d-b9576815f855/0/45FD71C7EFF830D20E960225B4A971A14B081364.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45FD71C7EFF830D20E960225B4A971A14B081364.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:90:3c:bb:0b:fb:fe:13:4b:73:ce:e2:e6:22:c9:3f:38:62:86:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45FD71C7EFF830D20E960225B4A971A14B081364 Validity Not Before: Dec 6 08:55:57 2025 GMT Not After : Dec 9 20:05:57 2025 GMT Subject: CN=302DF33182F4D0B259BA8F9953AFB998D9340F07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:c0:b0:23:49:8a:f7:26:53:86:f8:40:e7:45: a7:1d:ed:42:6f:9f:a8:12:11:86:18:b3:1d:c9:1e: b5:11:6e:50:8f:d4:6d:8a:fe:1a:07:75:86:c7:ea: 69:dc:86:72:a8:59:88:8c:30:2b:db:0e:74:45:c5: ce:fb:75:55:47:c2:73:a9:4a:84:6c:03:44:2d:2b: ff:55:ff:29:c4:ce:da:9b:e0:8d:60:3a:e9:88:02: 75:a0:73:52:31:1d:1a:cf:22:fa:b2:9b:f4:dd:c6: f1:94:85:24:db:27:94:e7:05:0e:98:8d:13:41:09: d6:37:1f:6d:6c:f1:2d:bd:48:33:e9:fe:32:e8:e7: 03:16:b5:27:db:96:ab:87:73:e6:a5:3b:5e:a3:44: 41:2a:43:6a:cd:8d:c3:29:72:97:9e:3d:88:82:a9: 96:1c:28:c5:1b:55:a2:0d:85:f0:37:d2:ef:68:3a: 78:50:7f:d8:55:04:c7:93:5c:59:45:fe:4e:a8:4f: da:91:80:e9:08:63:40:51:8e:96:ee:cc:04:db:42: 6e:f9:e9:e3:48:8f:5c:06:99:47:82:f4:34:3f:19: cc:b3:1b:9e:31:d1:21:3a:6e:a3:c0:9d:38:b0:ed: 47:f3:ff:ee:59:c8:d4:0b:aa:d7:16:00:b2:7c:ac: 3e:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:2D:F3:31:82:F4:D0:B2:59:BA:8F:99:53:AF:B9:98:D9:34:0F:07 X509v3 Authority Key Identifier: keyid:45:FD:71:C7:EF:F8:30:D2:0E:96:02:25:B4:A9:71:A1:4B:08:13:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/153b067c-ecc9-4dca-987d-b9576815f855/0/45FD71C7EFF830D20E960225B4A971A14B081364.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45FD71C7EFF830D20E960225B4A971A14B081364.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/153b067c-ecc9-4dca-987d-b9576815f855/0/45FD71C7EFF830D20E960225B4A971A14B081364.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:e5:82:51:a0:26:e1:5e:2a:60:22:2e:36:b1:ed:53:b1:f5: 47:59:de:fc:5e:22:df:c0:5f:d1:d3:b3:86:fc:d0:d1:0a:0b: a3:ce:61:0c:53:b8:4f:6b:df:f5:2f:4b:3b:f2:67:60:97:02: db:f7:a4:09:31:41:ca:58:72:49:79:73:3e:e7:b9:eb:ed:44: d5:02:04:b4:3b:50:20:c4:e0:d4:ad:c6:0a:43:cb:55:17:06: 6c:20:b6:7f:b7:60:9f:a6:9b:23:73:1a:e4:77:ac:ac:b8:93: cf:07:5f:f6:01:f6:2e:86:6f:9c:a6:fa:ce:64:ea:6c:12:ee: a6:b2:c1:37:0a:4f:df:29:d6:d9:d2:1c:a6:72:6d:69:5a:2e: 58:5d:9f:ea:88:d5:5d:46:53:e6:63:a3:c1:7d:0d:98:83:5a: c0:10:fc:eb:36:10:28:95:76:57:65:73:24:cf:64:7e:ee:6f: b2:85:b8:ab:49:e3:c2:a8:8b:5e:23:a9:55:b0:a8:6f:4d:9f: 6d:b3:27:d8:44:d5:25:98:3f:41:17:d5:31:6e:8f:91:9c:0d: 51:ec:76:07:a8:97:3e:a1:90:5f:62:fe:86:47:76:b5:4b:71: 93:75:10:c9:58:7e:d1:66:96:b4:f8:19:86:59:63:22:ff:e8: 7a:73:f6:46 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYJA8uwv7/hNLc87i5iLJPzhihvQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDVGRDcxQzdFRkY4MzBEMjBFOTYwMjI1QjRBOTcxQTE0 QjA4MTM2NDAeFw0yNTEyMDYwODU1NTdaFw0yNTEyMDkyMDA1NTdaMDMxMTAvBgNV BAMTKDMwMkRGMzMxODJGNEQwQjI1OUJBOEY5OTUzQUZCOTk4RDkzNDBGMDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0wLAjSYr3JlOG+EDnRacd7UJv n6gSEYYYsx3JHrURblCP1G2K/hoHdYbH6mnchnKoWYiMMCvbDnRFxc77dVVHwnOp SoRsA0QtK/9V/ynEztqb4I1gOumIAnWgc1IxHRrPIvqym/TdxvGUhSTbJ5TnBQ6Y jRNBCdY3H21s8S29SDPp/jLo5wMWtSfblquHc+alO16jREEqQ2rNjcMpcpeePYiC qZYcKMUbVaINhfA30u9oOnhQf9hVBMeTXFlF/k6oT9qRgOkIY0BRjpbuzATbQm75 6eNIj1wGmUeC9DQ/GcyzG54x0SE6bqPAnTiw7Ufz/+5ZyNQLqtcWALJ8rD7fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMC3zMYL00LJZuo+ZU6+5mNk0DwcwHwYDVR0j BBgwFoAURf1xx+/4MNIOlgIltKlxoUsIE2QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NTNiMDY3Yy1lY2M5LTRkY2EtOTg3ZC1iOTU3NjgxNWY4NTUvMC80NUZENzFDN0VG RjgzMEQyMEU5NjAyMjVCNEE5NzFBMTRCMDgxMzY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDVGRDcxQzdFRkY4MzBEMjBFOTYwMjI1QjRBOTcxQTE0QjA4 MTM2NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTUzYjA2N2MtZWNjOS00ZGNhLTk4 N2QtYjk1NzY4MTVmODU1LzAvNDVGRDcxQzdFRkY4MzBEMjBFOTYwMjI1QjRBOTcx QTE0QjA4MTM2NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADblglGgJuFeKmAiLjax7VOx9UdZ3vxeIt/A X9HTs4b80NEKC6POYQxTuE9r3/UvSzvyZ2CXAtv3pAkxQcpYckl5cz7nuevtRNUC BLQ7UCDE4NStxgpDy1UXBmwgtn+3YJ+mmyNzGuR3rKy4k88HX/YB9i6Gb5ym+s5k 6mwS7qaywTcKT98p1tnSHKZybWlaLlhdn+qI1V1GU+Zjo8F9DZiDWsAQ/Os2ECiV dldlcyTPZH7ub7KFuKtJ48Koi14jqVWwqG9Nn22zJ9hE1SWYP0EX1TFuj5GcDVHs dgeolz6hkF9i/oZHdrVLcZN1EMlYftFmlrT4GYZZYyL/6Hpz9kY= -----END CERTIFICATE-----Generated at Sat Dec 6 16:26:09 2025 by rpki-client