This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/2f13a6ef-3434-4401-b3e1-65153066fb3e/0/245A17CADB2BB2FDC5786C27E5BE959636E7F409.mft File: 245A17CADB2BB2FDC5786C27E5BE959636E7F409.mft (raw, json) Hash identifier: XlGH0g7aGzy3eIiMCwSz4nSfNls5+zrM3eXziMKfVaI= Subject key identifier: 4C:4F:B9:7A:71:4C:D2:E8:86:BC:04:C1:7F:F8:2D:A1:09:2A:E9:C7 Authority key identifier: 24:5A:17:CA:DB:2B:B2:FD:C5:78:6C:27:E5:BE:95:96:36:E7:F4:09 Certificate issuer: /CN=245A17CADB2BB2FDC5786C27E5BE959636E7F409 Certificate serial: 0ED2EA55E7A70B304DA8D04B7499792887FF8896 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/245A17CADB2BB2FDC5786C27E5BE959636E7F409.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2f13a6ef-3434-4401-b3e1-65153066fb3e/0/245A17CADB2BB2FDC5786C27E5BE959636E7F409.mft Manifest number: 013A Signing time: Thu 04 Dec 2025 19:51:26 +0000 Manifest this update: Thu 04 Dec 2025 19:46:26 +0000 Manifest next update: Mon 08 Dec 2025 02:34:26 +0000 Files and hashes: 1: 3130332e35312e39392e302f32342d3234203d3e20313530343639.roa (hash: K8NaZjX156AzJZCxAFCtUR2kv1eIuI1LvcL4WWNgNxE=) 2: 3130332e35312e39382e302f32342d3234203d3e20313530343639.roa (hash: 4B7irySfovCa+fs5OrOidwnp7dP+n6xSYZr+/3ur6bs=) 3: 245A17CADB2BB2FDC5786C27E5BE959636E7F409.crl (hash: r460UX46qP0rUwXYpiXW+MRrfGVDnx9NZbFLyNjB3TY=) 4: 3130332e35312e39382e302f32332d3233203d3e20313530343639.roa (hash: k08Sq9y+e0JBLFkahJuKjCY8UDmOXzCXbCJPnDfG/eg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2f13a6ef-3434-4401-b3e1-65153066fb3e/0/245A17CADB2BB2FDC5786C27E5BE959636E7F409.crl rsync://repo-rpki.idnic.net/repo/2f13a6ef-3434-4401-b3e1-65153066fb3e/0/245A17CADB2BB2FDC5786C27E5BE959636E7F409.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/245A17CADB2BB2FDC5786C27E5BE959636E7F409.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 02:34:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:d2:ea:55:e7:a7:0b:30:4d:a8:d0:4b:74:99:79:28:87:ff:88:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=245A17CADB2BB2FDC5786C27E5BE959636E7F409 Validity Not Before: Dec 4 19:46:26 2025 GMT Not After : Dec 8 02:34:26 2025 GMT Subject: CN=4C4FB97A714CD2E886BC04C17FF82DA1092AE9C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:00:dc:3e:68:a5:f5:bc:68:87:e7:5c:0b:48: 60:ef:75:ed:ef:c0:d7:43:de:df:7b:e5:0d:34:99: a4:c8:59:bc:3c:fa:62:53:cc:ec:2c:59:86:94:61: 24:0f:1a:93:58:42:6f:e8:2a:65:41:a4:b5:26:43: f3:72:44:0a:bb:f7:36:7d:06:44:44:ac:49:55:7f: 03:49:34:e4:15:f4:a5:3c:a0:e0:f0:ee:e7:aa:5f: 4f:55:ca:cf:ba:ef:ce:13:28:27:db:bd:cd:3f:1f: f5:2f:02:b1:2a:42:83:88:0e:e3:75:f2:e8:00:96: 58:4b:b9:bb:d1:50:2e:85:56:67:74:0b:28:1b:97: 5f:d3:21:7f:8e:93:b8:cf:63:02:84:7f:a8:62:d0: a4:90:5c:ea:ac:59:6a:53:f7:75:8d:d3:43:87:ef: 80:3c:f1:1e:f7:e6:d0:ac:ff:b9:35:1d:73:b1:83: 84:d1:07:59:f8:77:5d:08:6c:ee:73:b5:d3:c0:04: aa:8e:8b:b3:46:6e:03:f6:92:d5:9d:a5:44:7e:ba: ad:77:34:15:b4:66:2b:eb:84:d5:db:60:56:f8:fb: eb:48:a2:36:cd:48:57:60:73:e3:5f:df:c8:8c:a4: ab:4e:51:f1:25:72:5f:85:2b:56:79:d6:40:d4:e3: 8a:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:4F:B9:7A:71:4C:D2:E8:86:BC:04:C1:7F:F8:2D:A1:09:2A:E9:C7 X509v3 Authority Key Identifier: keyid:24:5A:17:CA:DB:2B:B2:FD:C5:78:6C:27:E5:BE:95:96:36:E7:F4:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2f13a6ef-3434-4401-b3e1-65153066fb3e/0/245A17CADB2BB2FDC5786C27E5BE959636E7F409.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/245A17CADB2BB2FDC5786C27E5BE959636E7F409.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2f13a6ef-3434-4401-b3e1-65153066fb3e/0/245A17CADB2BB2FDC5786C27E5BE959636E7F409.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:c0:cf:e3:39:31:e2:28:a1:5a:16:1a:be:d1:c0:4e:92:02: 79:9d:20:da:cf:29:e4:ce:47:13:ad:ab:fa:dd:de:ef:5f:4f: c7:7e:c7:25:ff:6a:5a:12:e6:fe:3c:31:ac:00:5c:a9:fb:d9: 00:45:82:6f:30:7d:83:34:ca:90:dd:5f:3b:39:f6:13:17:44: c9:f8:8c:65:78:b3:12:ed:2e:32:d7:59:17:ab:84:fb:ae:91: 44:5a:5a:35:c7:b8:75:97:69:67:18:af:99:95:f9:f1:59:93: 24:e5:d4:06:b0:e2:5e:2b:6d:b2:fa:73:f5:d8:73:62:56:4a: c7:0f:41:89:23:df:4f:41:51:49:4d:4f:ba:88:dc:b2:84:a1: c6:4c:d0:9e:6f:5f:b3:e5:74:f4:75:c5:53:ac:14:e8:d2:15: 42:69:a1:69:06:2e:42:42:d7:37:cd:c0:0f:5f:c9:81:34:c2: 5c:30:26:ef:a3:02:ec:59:19:f0:ab:a6:69:fc:74:72:b8:d8: 16:97:c2:fa:e3:3a:74:8f:ee:80:cf:e5:eb:89:45:05:e3:c0: c1:39:71:a7:88:77:a1:2c:7a:71:03:41:09:e1:e5:0a:40:95: 38:77:7a:1d:94:2f:8b:31:22:09:67:5a:0a:c9:46:1f:30:52: 04:91:f6:cb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDtLqVeenCzBNqNBLdJl5KIf/iJYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjQ1QTE3Q0FEQjJCQjJGREM1Nzg2QzI3RTVCRTk1OTYz NkU3RjQwOTAeFw0yNTEyMDQxOTQ2MjZaFw0yNTEyMDgwMjM0MjZaMDMxMTAvBgNV BAMTKDRDNEZCOTdBNzE0Q0QyRTg4NkJDMDRDMTdGRjgyREExMDkyQUU5QzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8ANw+aKX1vGiH51wLSGDvde3v wNdD3t975Q00maTIWbw8+mJTzOwsWYaUYSQPGpNYQm/oKmVBpLUmQ/NyRAq79zZ9 BkRErElVfwNJNOQV9KU8oODw7ueqX09Vys+6784TKCfbvc0/H/UvArEqQoOIDuN1 8ugAllhLubvRUC6FVmd0Cygbl1/TIX+Ok7jPYwKEf6hi0KSQXOqsWWpT93WN00OH 74A88R735tCs/7k1HXOxg4TRB1n4d10IbO5ztdPABKqOi7NGbgP2ktWdpUR+uq13 NBW0ZivrhNXbYFb4++tIojbNSFdgc+Nf38iMpKtOUfElcl+FK1Z51kDU44rnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTE+5enFM0uiGvATBf/gtoQkq6ccwHwYDVR0j BBgwFoAUJFoXytsrsv3FeGwn5b6Vljbn9AkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZjEzYTZlZi0zNDM0LTQ0MDEtYjNlMS02NTE1MzA2NmZiM2UvMC8yNDVBMTdDQURC MkJCMkZEQzU3ODZDMjdFNUJFOTU5NjM2RTdGNDA5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjQ1QTE3Q0FEQjJCQjJGREM1Nzg2QzI3RTVCRTk1OTYzNkU3 RjQwOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmYxM2E2ZWYtMzQzNC00NDAxLWIz ZTEtNjUxNTMwNjZmYjNlLzAvMjQ1QTE3Q0FEQjJCQjJGREM1Nzg2QzI3RTVCRTk1 OTYzNkU3RjQwOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAALAz+M5MeIooVoWGr7RwE6SAnmdINrPKeTO RxOtq/rd3u9fT8d+xyX/aloS5v48MawAXKn72QBFgm8wfYM0ypDdXzs59hMXRMn4 jGV4sxLtLjLXWRerhPuukURaWjXHuHWXaWcYr5mV+fFZkyTl1Aaw4l4rbbL6c/XY c2JWSscPQYkj309BUUlNT7qI3LKEocZM0J5vX7PldPR1xVOsFOjSFUJpoWkGLkJC 1zfNwA9fyYE0wlwwJu+jAuxZGfCrpmn8dHK42BaXwvrjOnSP7oDP5euJRQXjwME5 caeId6EsenEDQQnh5QpAlTh3eh2UL4sxIglnWgrJRh8wUgSR9ss= -----END CERTIFICATE-----Generated at Sun Dec 7 01:10:05 2025 by rpki-client