This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/78d774f4-2300-4e69-a6ca-7cf48002e2fb/0/45422D0C59556C680872F58CC42068EF3ED1BA2E.mft File: 45422D0C59556C680872F58CC42068EF3ED1BA2E.mft (raw, json) Hash identifier: XER9CtDcahvVer4/P3wHSIKCYjQ7Z8xzNslxZofZ56w= Subject key identifier: EA:D2:1D:FD:D4:38:D5:8D:23:D8:CA:52:AD:1B:25:9A:A1:7C:59:13 Authority key identifier: 45:42:2D:0C:59:55:6C:68:08:72:F5:8C:C4:20:68:EF:3E:D1:BA:2E Certificate issuer: /CN=45422D0C59556C680872F58CC42068EF3ED1BA2E Certificate serial: 1A1FE1E5C5644FCA46086838FB501242450A65F1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45422D0C59556C680872F58CC42068EF3ED1BA2E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/78d774f4-2300-4e69-a6ca-7cf48002e2fb/0/45422D0C59556C680872F58CC42068EF3ED1BA2E.mft Manifest number: 025A Signing time: Sat 06 Dec 2025 10:41:07 +0000 Manifest this update: Sat 06 Dec 2025 10:36:07 +0000 Manifest next update: Tue 09 Dec 2025 13:52:07 +0000 Files and hashes: 1: 3130332e3137322e3132302e302f32332d3234203d3e20313432333938.roa (hash: pXYOCZxRABB//TtVnh1gM8sswwbpc2HW8vVv8Mpvxgk=) 2: 45422D0C59556C680872F58CC42068EF3ED1BA2E.crl (hash: K0sE9NZvGQ//6AOfVjGGW4tB1O2jvpC+RNjXf1oJEgw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/78d774f4-2300-4e69-a6ca-7cf48002e2fb/0/45422D0C59556C680872F58CC42068EF3ED1BA2E.crl rsync://repo-rpki.idnic.net/repo/78d774f4-2300-4e69-a6ca-7cf48002e2fb/0/45422D0C59556C680872F58CC42068EF3ED1BA2E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45422D0C59556C680872F58CC42068EF3ED1BA2E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 13:52:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:1f:e1:e5:c5:64:4f:ca:46:08:68:38:fb:50:12:42:45:0a:65:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45422D0C59556C680872F58CC42068EF3ED1BA2E Validity Not Before: Dec 6 10:36:07 2025 GMT Not After : Dec 9 13:52:07 2025 GMT Subject: CN=EAD21DFDD438D58D23D8CA52AD1B259AA17C5913 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:4a:ff:0a:28:d4:2d:a2:a5:15:8f:b6:14:86: 7c:81:79:a9:60:11:ab:db:e8:a9:52:be:ed:18:8e: db:2d:96:7d:04:fe:38:60:48:2f:17:0e:6d:79:46: 8b:ce:00:e7:c7:d3:15:c4:07:88:da:28:53:d1:d8: e7:cc:5d:64:15:5f:ba:0c:09:1e:f6:aa:1d:9c:23: 5b:31:ec:d6:e0:b7:14:df:1c:ea:25:24:6d:0c:5c: bc:e5:cc:8c:86:f4:27:6e:8a:0a:d1:6c:30:07:7f: 22:9d:e7:c2:1b:4f:37:78:49:21:6a:dd:8c:19:79: 0f:ee:b4:ad:eb:09:d5:f7:18:5f:3f:6f:16:82:ba: 37:b8:a6:39:53:53:dd:a0:a8:01:d1:7e:f3:c6:66: 04:0f:08:62:25:0b:e4:d6:55:30:a6:0f:bf:00:04: 65:82:fb:ce:d2:b5:6c:c6:87:61:ee:bb:6e:71:41: 12:68:ae:b9:1a:e3:8f:7c:c9:27:56:10:8a:5e:bd: 4e:08:d7:b9:03:fc:05:a4:c4:f0:92:7c:a7:e8:ff: e4:89:fb:55:47:56:8a:de:5b:0c:90:89:57:e7:f3: e1:61:1a:c8:f0:b7:f7:a7:b0:3b:b8:fc:fe:4d:72: f0:c9:ad:8b:57:fe:4d:fc:f2:53:6a:93:8b:15:b3: 05:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:D2:1D:FD:D4:38:D5:8D:23:D8:CA:52:AD:1B:25:9A:A1:7C:59:13 X509v3 Authority Key Identifier: keyid:45:42:2D:0C:59:55:6C:68:08:72:F5:8C:C4:20:68:EF:3E:D1:BA:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/78d774f4-2300-4e69-a6ca-7cf48002e2fb/0/45422D0C59556C680872F58CC42068EF3ED1BA2E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45422D0C59556C680872F58CC42068EF3ED1BA2E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/78d774f4-2300-4e69-a6ca-7cf48002e2fb/0/45422D0C59556C680872F58CC42068EF3ED1BA2E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:92:c7:20:f8:d7:5b:f0:5b:de:86:4d:79:a7:92:2c:5e:26: 72:7c:15:54:d2:2d:b0:cc:97:44:e7:1a:c1:c5:87:1f:49:80: d8:97:cf:51:5e:ca:99:ba:24:2a:c9:01:28:01:72:4f:e5:61: f8:a4:9b:7d:bb:4f:ed:6b:66:f7:d8:bc:69:12:51:17:3a:e0: e3:37:8b:36:16:d4:f3:76:cd:db:d7:56:0d:9e:d9:67:e5:72: e6:35:bd:ef:0c:15:86:dc:72:c5:21:5a:bd:2f:fe:e1:17:cf: 4d:4e:cf:6f:0c:1e:14:d1:63:9e:ee:d0:4c:d5:07:08:1e:80: aa:b9:61:3d:22:18:a6:d3:81:17:d3:1d:d7:1d:a3:dd:cc:fd: 0b:b8:ad:dd:9f:2e:79:a6:3c:bf:de:d1:60:85:e4:9d:d1:81: d5:07:b9:c5:00:2f:81:7c:e8:70:46:d8:ac:f3:18:56:37:ae: e1:27:dd:47:18:f8:7f:02:5b:22:40:f2:4f:e0:6e:78:97:db: c1:97:bb:cc:f2:cb:de:61:14:ad:3e:65:51:e6:4d:99:6c:a6: 2a:0d:29:b4:1b:4f:dd:d2:5b:ea:f7:ba:16:02:13:2b:d4:fc: 2c:28:5e:c5:5c:05:08:45:bc:45:50:9c:59:7b:18:69:3b:1d: e7:1e:2f:6a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGh/h5cVkT8pGCGg4+1ASQkUKZfEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDU0MjJEMEM1OTU1NkM2ODA4NzJGNThDQzQyMDY4RUYz RUQxQkEyRTAeFw0yNTEyMDYxMDM2MDdaFw0yNTEyMDkxMzUyMDdaMDMxMTAvBgNV BAMTKEVBRDIxREZERDQzOEQ1OEQyM0Q4Q0E1MkFEMUIyNTlBQTE3QzU5MTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD1Sv8KKNQtoqUVj7YUhnyBealg Eavb6KlSvu0Yjtstln0E/jhgSC8XDm15RovOAOfH0xXEB4jaKFPR2OfMXWQVX7oM CR72qh2cI1sx7NbgtxTfHOolJG0MXLzlzIyG9CduigrRbDAHfyKd58IbTzd4SSFq 3YwZeQ/utK3rCdX3GF8/bxaCuje4pjlTU92gqAHRfvPGZgQPCGIlC+TWVTCmD78A BGWC+87StWzGh2Huu25xQRJorrka4498ySdWEIpevU4I17kD/AWkxPCSfKfo/+SJ +1VHVoreWwyQiVfn8+FhGsjwt/ensDu4/P5NcvDJrYtX/k388lNqk4sVswXPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6tId/dQ41Y0j2MpSrRslmqF8WRMwHwYDVR0j BBgwFoAURUItDFlVbGgIcvWMxCBo7z7Rui4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 OGQ3NzRmNC0yMzAwLTRlNjktYTZjYS03Y2Y0ODAwMmUyZmIvMC80NTQyMkQwQzU5 NTU2QzY4MDg3MkY1OENDNDIwNjhFRjNFRDFCQTJFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDU0MjJEMEM1OTU1NkM2ODA4NzJGNThDQzQyMDY4RUYzRUQx QkEyRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzhkNzc0ZjQtMjMwMC00ZTY5LWE2 Y2EtN2NmNDgwMDJlMmZiLzAvNDU0MjJEMEM1OTU1NkM2ODA4NzJGNThDQzQyMDY4 RUYzRUQxQkEyRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHmSxyD411vwW96GTXmnkixeJnJ8FVTSLbDM l0TnGsHFhx9JgNiXz1Feypm6JCrJASgBck/lYfikm327T+1rZvfYvGkSURc64OM3 izYW1PN2zdvXVg2e2WflcuY1ve8MFYbccsUhWr0v/uEXz01Oz28MHhTRY57u0EzV BwgegKq5YT0iGKbTgRfTHdcdo93M/Qu4rd2fLnmmPL/e0WCF5J3RgdUHucUAL4F8 6HBG2KzzGFY3ruEn3UcY+H8CWyJA8k/gbniX28GXu8zyy95hFK0+ZVHmTZlspioN KbQbT93SW+r3uhYCEyvU/CwoXsVcBQhFvEVQnFl7GGk7HeceL2o= -----END CERTIFICATE-----Generated at Sun Dec 7 04:56:02 2025 by rpki-client