This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/386d6ba1-1f73-4776-8a6a-4f45120792b1/0/458D9A2B4C22FF5016AE2E24729D23E2BE0DFD33.mft File: 458D9A2B4C22FF5016AE2E24729D23E2BE0DFD33.mft (raw, json) Hash identifier: 7l/x1al43T2isZrQ76b+qXRq2uMv5BBys6x75YPhFSs= Subject key identifier: B2:73:7A:CE:52:47:3D:59:05:58:A1:5D:56:35:AE:6D:26:A5:7F:28 Authority key identifier: 45:8D:9A:2B:4C:22:FF:50:16:AE:2E:24:72:9D:23:E2:BE:0D:FD:33 Certificate issuer: /CN=458D9A2B4C22FF5016AE2E24729D23E2BE0DFD33 Certificate serial: 39EB5B221AB92810A9563BD30FD13FC91EEC4BAC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/458D9A2B4C22FF5016AE2E24729D23E2BE0DFD33.cer Subject info access: rsync://repo-rpki.idnic.net/repo/386d6ba1-1f73-4776-8a6a-4f45120792b1/0/458D9A2B4C22FF5016AE2E24729D23E2BE0DFD33.mft Manifest number: 0210 Signing time: Thu 04 Dec 2025 14:41:39 +0000 Manifest this update: Thu 04 Dec 2025 14:36:39 +0000 Manifest next update: Mon 08 Dec 2025 02:27:39 +0000 Files and hashes: 1: 458D9A2B4C22FF5016AE2E24729D23E2BE0DFD33.crl (hash: /mPb+N1smwDZRv8pENYJUYIdRXsrFYhC/oBwvbxoRPU=) 2: 3130332e3139312e35352e302f32342d3234203d3e20313439393133.roa (hash: MzEupSrXlebebmZ66Gd92DusEJ4mRAdQ/8taDo8z+bk=) 3: 3130332e3139312e35342e302f32342d3234203d3e20313439393133.roa (hash: CllgKLcIRd3lX7KQsM2tAZpeFF8Rj9z8kpx3sCEVEDA=) 4: 323030313a6466303a666534303a3a2f34382d3438203d3e20313439393133.roa (hash: a5a2FZuaU8+YwWyJiNpJaq/a07NXsjnc5SwcHCXziC4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/386d6ba1-1f73-4776-8a6a-4f45120792b1/0/458D9A2B4C22FF5016AE2E24729D23E2BE0DFD33.crl rsync://repo-rpki.idnic.net/repo/386d6ba1-1f73-4776-8a6a-4f45120792b1/0/458D9A2B4C22FF5016AE2E24729D23E2BE0DFD33.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/458D9A2B4C22FF5016AE2E24729D23E2BE0DFD33.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 02:27:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:eb:5b:22:1a:b9:28:10:a9:56:3b:d3:0f:d1:3f:c9:1e:ec:4b:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=458D9A2B4C22FF5016AE2E24729D23E2BE0DFD33 Validity Not Before: Dec 4 14:36:39 2025 GMT Not After : Dec 8 02:27:39 2025 GMT Subject: CN=B2737ACE52473D590558A15D5635AE6D26A57F28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:0f:b9:a3:bc:ce:ac:96:85:54:2d:6e:82:b6: 6c:a5:e8:db:9d:1a:94:89:7c:c3:8d:0a:8e:8f:59: 56:09:f9:b5:3e:46:26:97:f1:20:62:08:71:dd:7c: ed:a3:e5:4a:3e:3e:22:2c:1c:cf:82:a1:93:9a:af: 5a:15:ca:7f:fe:fc:91:a5:96:ad:e5:fc:c7:1c:45: 80:39:d2:fd:99:d4:55:06:c3:14:3e:31:e0:a6:b8: a2:21:7f:16:eb:9b:d7:f7:77:db:e1:e2:ba:21:94: ac:66:82:bf:f7:5f:7d:a3:a5:b2:e0:82:8a:1d:1f: 9a:70:f0:d5:ab:c2:d6:91:11:74:c7:e2:f0:92:86: 07:08:4d:a9:97:e1:3c:9c:ea:0d:cc:84:c5:d8:a1: 61:d7:74:82:b9:d2:b9:02:c9:51:c7:6a:85:6c:00: c6:15:bc:83:8a:53:b2:a9:55:67:58:46:33:ee:c1: 44:7f:db:a5:32:bb:27:d9:96:a4:74:97:24:31:8f: f0:7f:3c:38:64:e1:8c:22:2e:c4:7d:6e:17:02:bf: 98:23:df:82:fa:8b:cc:7f:1f:eb:eb:e5:d9:9b:ea: e1:32:c7:a1:31:31:45:a3:96:5d:4e:4b:7e:31:27: d3:43:08:5e:03:db:f6:3e:6d:1c:a4:9b:1e:76:67: 08:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:73:7A:CE:52:47:3D:59:05:58:A1:5D:56:35:AE:6D:26:A5:7F:28 X509v3 Authority Key Identifier: keyid:45:8D:9A:2B:4C:22:FF:50:16:AE:2E:24:72:9D:23:E2:BE:0D:FD:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/386d6ba1-1f73-4776-8a6a-4f45120792b1/0/458D9A2B4C22FF5016AE2E24729D23E2BE0DFD33.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/458D9A2B4C22FF5016AE2E24729D23E2BE0DFD33.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/386d6ba1-1f73-4776-8a6a-4f45120792b1/0/458D9A2B4C22FF5016AE2E24729D23E2BE0DFD33.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:cb:4e:cf:5c:db:22:59:a8:ae:f5:2f:ba:84:42:95:a5:ca: 08:ea:e4:93:48:57:69:03:50:b8:13:2e:b0:39:51:b7:ac:94: 48:21:a7:a8:66:55:d5:7d:5b:60:33:72:9f:c0:d3:4b:bf:b5: 0d:ab:cb:d3:09:ae:74:41:00:02:97:b3:ba:6d:b2:f7:f1:2b: b8:d7:be:f9:15:e0:86:fa:69:1e:9f:41:21:35:85:6d:5b:da: ed:6a:51:2e:7d:40:f9:38:cd:e7:27:49:0c:86:0d:3a:c2:de: 88:7b:64:5d:fe:00:09:80:10:63:28:31:6b:46:3f:9d:e1:2e: cc:4a:25:83:2b:ce:90:8c:d8:ce:de:8e:1f:38:a1:1a:85:40: 3a:8b:9e:f8:4b:2d:1c:a9:78:eb:f6:58:a7:d3:fb:dc:60:43: 34:e0:83:35:b1:18:ac:fa:a7:bc:4a:62:e1:1a:df:07:55:dd: b8:f0:21:9c:44:ff:64:db:86:a9:1f:46:7b:e7:aa:43:01:c9: 9f:ef:db:aa:4d:49:cc:5e:6f:51:69:62:1d:95:d3:07:ed:59: 66:82:4e:15:c8:54:d2:72:f4:ab:5c:5b:4a:c9:07:ce:0e:40: 20:eb:f9:d6:5d:8a:52:e6:10:ea:a8:87:c2:84:09:d8:34:83: 8e:3c:39:51 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOetbIhq5KBCpVjvTD9E/yR7sS6wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDU4RDlBMkI0QzIyRkY1MDE2QUUyRTI0NzI5RDIzRTJC RTBERkQzMzAeFw0yNTEyMDQxNDM2MzlaFw0yNTEyMDgwMjI3MzlaMDMxMTAvBgNV BAMTKEIyNzM3QUNFNTI0NzNENTkwNTU4QTE1RDU2MzVBRTZEMjZBNTdGMjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnD7mjvM6sloVULW6Ctmyl6Nud GpSJfMONCo6PWVYJ+bU+RiaX8SBiCHHdfO2j5Uo+PiIsHM+CoZOar1oVyn/+/JGl lq3l/MccRYA50v2Z1FUGwxQ+MeCmuKIhfxbrm9f3d9vh4rohlKxmgr/3X32jpbLg goodH5pw8NWrwtaREXTH4vCShgcITamX4Tyc6g3MhMXYoWHXdIK50rkCyVHHaoVs AMYVvIOKU7KpVWdYRjPuwUR/26UyuyfZlqR0lyQxj/B/PDhk4YwiLsR9bhcCv5gj 34L6i8x/H+vr5dmb6uEyx6ExMUWjll1OS34xJ9NDCF4D2/Y+bRykmx52ZwgtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsnN6zlJHPVkFWKFdVjWubSalfygwHwYDVR0j BBgwFoAURY2aK0wi/1AWri4kcp0j4r4N/TMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ODZkNmJhMS0xZjczLTQ3NzYtOGE2YS00ZjQ1MTIwNzkyYjEvMC80NThEOUEyQjRD MjJGRjUwMTZBRTJFMjQ3MjlEMjNFMkJFMERGRDMzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDU4RDlBMkI0QzIyRkY1MDE2QUUyRTI0NzI5RDIzRTJCRTBE RkQzMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzg2ZDZiYTEtMWY3My00Nzc2LThh NmEtNGY0NTEyMDc5MmIxLzAvNDU4RDlBMkI0QzIyRkY1MDE2QUUyRTI0NzI5RDIz RTJCRTBERkQzMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD3LTs9c2yJZqK71L7qEQpWlygjq5JNIV2kD ULgTLrA5UbeslEghp6hmVdV9W2Azcp/A00u/tQ2ry9MJrnRBAAKXs7ptsvfxK7jX vvkV4Ib6aR6fQSE1hW1b2u1qUS59QPk4zecnSQyGDTrC3oh7ZF3+AAmAEGMoMWtG P53hLsxKJYMrzpCM2M7ejh84oRqFQDqLnvhLLRypeOv2WKfT+9xgQzTggzWxGKz6 p7xKYuEa3wdV3bjwIZxE/2TbhqkfRnvnqkMByZ/v26pNScxeb1FpYh2V0wftWWaC ThXIVNJy9KtcW0rJB84OQCDr+dZdilLmEOqoh8KECdg0g448OVE= -----END CERTIFICATE-----Generated at Sun Dec 7 00:48:42 2025 by rpki-client