This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/91dc71cd-acca-415c-b283-b9372c0d4ce8/0/456E5E4F039DBA0492D11A1873B7ECBBAC67A940.mft File: 456E5E4F039DBA0492D11A1873B7ECBBAC67A940.mft (raw, json) Hash identifier: e542ZPQUpLBFyrCZ80LZ6k3BrXmIKOb3xctD8XDu2IY= Subject key identifier: 5D:2D:F8:B1:73:98:8E:66:9D:45:D4:EF:FC:68:2B:BA:0E:48:80:D7 Authority key identifier: 45:6E:5E:4F:03:9D:BA:04:92:D1:1A:18:73:B7:EC:BB:AC:67:A9:40 Certificate issuer: /CN=456E5E4F039DBA0492D11A1873B7ECBBAC67A940 Certificate serial: 6C5017FABB879E09535A34729F4299B1FFECB76D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/456E5E4F039DBA0492D11A1873B7ECBBAC67A940.cer Subject info access: rsync://repo-rpki.idnic.net/repo/91dc71cd-acca-415c-b283-b9372c0d4ce8/0/456E5E4F039DBA0492D11A1873B7ECBBAC67A940.mft Manifest number: 01BF Signing time: Sat 06 Dec 2025 04:11:58 +0000 Manifest this update: Sat 06 Dec 2025 04:06:58 +0000 Manifest next update: Tue 09 Dec 2025 15:19:58 +0000 Files and hashes: 1: 456E5E4F039DBA0492D11A1873B7ECBBAC67A940.crl (hash: b0XVx80zQsNr6kW2n7fpqZX5zafHK0cSf2tXdpXCnlc=) 2: 3130332e3130312e3134322e302f32342d3234203d3e20313530393330.roa (hash: KMcz9HndxaUeKt8rn5FI6Dp+4OSaacNz41TOKfq1iXs=) 3: 3130332e3130312e3134332e302f32342d3234203d3e20313339393637.roa (hash: 0veKivESqTIR22CLe0BQKZVbkyyZLitqVchvnzV7aBw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/91dc71cd-acca-415c-b283-b9372c0d4ce8/0/456E5E4F039DBA0492D11A1873B7ECBBAC67A940.crl rsync://repo-rpki.idnic.net/repo/91dc71cd-acca-415c-b283-b9372c0d4ce8/0/456E5E4F039DBA0492D11A1873B7ECBBAC67A940.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/456E5E4F039DBA0492D11A1873B7ECBBAC67A940.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:19:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:50:17:fa:bb:87:9e:09:53:5a:34:72:9f:42:99:b1:ff:ec:b7:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=456E5E4F039DBA0492D11A1873B7ECBBAC67A940 Validity Not Before: Dec 6 04:06:58 2025 GMT Not After : Dec 9 15:19:58 2025 GMT Subject: CN=5D2DF8B173988E669D45D4EFFC682BBA0E4880D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:a5:1a:7d:fa:5e:08:79:15:7a:5b:f6:2a:0d: 67:62:c0:77:bc:25:2d:08:71:10:9c:d7:a3:33:e7: a9:34:df:92:6d:92:ee:f0:19:96:31:39:27:fc:53: fa:3a:4b:2d:7c:a9:24:25:44:8d:d9:4e:bd:48:fa: 4a:ac:d8:78:88:db:22:73:86:87:ed:d3:03:5e:ac: 17:0a:ab:2c:7e:c1:ce:01:ce:3d:95:03:29:c6:e8: 42:fd:59:1d:78:e2:04:35:99:eb:df:33:bc:02:bf: 7f:e0:9b:7f:1e:ec:79:55:c1:46:d4:0e:ab:82:9b: 32:2d:76:e8:57:c3:2b:aa:42:e6:ef:1c:05:14:46: 38:bd:e8:ae:dc:51:2e:82:52:c3:1b:54:30:4d:f1: b3:00:49:67:ec:c0:f0:da:8d:2a:6b:e6:d0:ba:a4: 85:f2:d1:44:ad:05:e3:76:7e:db:ef:f7:03:ac:ba: 20:ea:28:50:10:8a:a8:38:ff:50:0c:86:3b:53:73: 6d:9b:70:88:8d:4a:1c:d8:11:00:b2:e3:84:a6:9d: 59:84:b4:0c:07:d7:14:2e:90:40:31:0f:b2:ac:4c: 2f:a8:68:13:5f:90:63:de:7a:c1:ec:15:b2:fc:b1: 22:73:65:3c:9d:12:8d:82:9a:0b:fd:6c:e6:08:07: 50:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:2D:F8:B1:73:98:8E:66:9D:45:D4:EF:FC:68:2B:BA:0E:48:80:D7 X509v3 Authority Key Identifier: keyid:45:6E:5E:4F:03:9D:BA:04:92:D1:1A:18:73:B7:EC:BB:AC:67:A9:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/91dc71cd-acca-415c-b283-b9372c0d4ce8/0/456E5E4F039DBA0492D11A1873B7ECBBAC67A940.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/456E5E4F039DBA0492D11A1873B7ECBBAC67A940.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/91dc71cd-acca-415c-b283-b9372c0d4ce8/0/456E5E4F039DBA0492D11A1873B7ECBBAC67A940.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:61:b7:b6:8f:94:6a:a4:df:1a:00:3d:63:0e:d3:7c:86:94: d3:7d:ea:fe:25:0c:be:81:91:eb:16:55:d8:3a:1d:6e:8b:ff: 55:57:3c:af:9c:fd:cf:96:fd:e4:32:7f:90:a4:cb:de:87:a8: 80:5a:c5:f2:39:43:68:4a:5a:27:05:a5:b3:5f:23:c1:5f:e0: 69:c6:89:22:43:ba:53:cd:f4:4e:cb:d7:29:c3:af:70:d9:a9: 7a:38:a6:04:94:4f:47:ee:57:37:fb:36:de:06:df:83:e4:33: ce:bc:fe:b2:30:f7:09:3d:0b:49:ab:0d:b3:1e:25:2d:c6:0a: 59:cb:54:89:ec:f8:53:a6:8a:d4:9e:63:9b:a9:d9:2a:c4:98: c3:95:a3:fa:52:f8:5e:0c:79:75:f1:f3:28:e1:61:84:a7:d3: d7:11:49:d3:b8:5d:f5:05:d7:00:e4:72:b9:13:de:0e:3f:e9: 9e:89:85:96:0a:ba:0e:25:22:f6:6c:a8:ad:f5:8a:bf:f6:b5: d8:37:f9:46:bd:96:2d:a2:c8:70:0f:09:83:49:5f:3e:26:7e: 1f:1f:cb:e0:98:5a:bb:d1:78:a5:e0:2c:34:10:53:34:1e:7f: 15:fb:96:08:0a:a4:53:2d:29:29:df:9b:de:b5:ef:5a:5c:95: 34:bf:3f:6e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbFAX+ruHnglTWjRyn0KZsf/st20wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDU2RTVFNEYwMzlEQkEwNDkyRDExQTE4NzNCN0VDQkJB QzY3QTk0MDAeFw0yNTEyMDYwNDA2NThaFw0yNTEyMDkxNTE5NThaMDMxMTAvBgNV BAMTKDVEMkRGOEIxNzM5ODhFNjY5RDQ1RDRFRkZDNjgyQkJBMEU0ODgwRDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDppRp9+l4IeRV6W/YqDWdiwHe8 JS0IcRCc16Mz56k035Jtku7wGZYxOSf8U/o6Sy18qSQlRI3ZTr1I+kqs2HiI2yJz hoft0wNerBcKqyx+wc4Bzj2VAynG6EL9WR144gQ1mevfM7wCv3/gm38e7HlVwUbU DquCmzItduhXwyuqQubvHAUURji96K7cUS6CUsMbVDBN8bMASWfswPDajSpr5tC6 pIXy0UStBeN2ftvv9wOsuiDqKFAQiqg4/1AMhjtTc22bcIiNShzYEQCy44SmnVmE tAwH1xQukEAxD7KsTC+oaBNfkGPeesHsFbL8sSJzZTydEo2Cmgv9bOYIB1A3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXS34sXOYjmadRdTv/Ggrug5IgNcwHwYDVR0j BBgwFoAURW5eTwOdugSS0RoYc7fsu6xnqUAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MWRjNzFjZC1hY2NhLTQxNWMtYjI4My1iOTM3MmMwZDRjZTgvMC80NTZFNUU0RjAz OURCQTA0OTJEMTFBMTg3M0I3RUNCQkFDNjdBOTQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDU2RTVFNEYwMzlEQkEwNDkyRDExQTE4NzNCN0VDQkJBQzY3 QTk0MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTFkYzcxY2QtYWNjYS00MTVjLWIy ODMtYjkzNzJjMGQ0Y2U4LzAvNDU2RTVFNEYwMzlEQkEwNDkyRDExQTE4NzNCN0VD QkJBQzY3QTk0MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACBht7aPlGqk3xoAPWMO03yGlNN96v4lDL6B kesWVdg6HW6L/1VXPK+c/c+W/eQyf5Cky96HqIBaxfI5Q2hKWicFpbNfI8Ff4GnG iSJDulPN9E7L1ynDr3DZqXo4pgSUT0fuVzf7Nt4G34PkM868/rIw9wk9C0mrDbMe JS3GClnLVIns+FOmitSeY5up2SrEmMOVo/pS+F4MeXXx8yjhYYSn09cRSdO4XfUF 1wDkcrkT3g4/6Z6JhZYKug4lIvZsqK31ir/2tdg3+Ua9li2iyHAPCYNJXz4mfh8f y+CYWrvReKXgLDQQUzQefxX7lggKpFMtKSnfm96171pclTS/P24= -----END CERTIFICATE-----Generated at Sun Dec 7 06:41:26 2025 by rpki-client