This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/994bef37-745b-4fff-bb1f-aff1f33f5e5a/0/45E8125013BA38DADC26B1346024A7493BEC69FE.mft
File: 45E8125013BA38DADC26B1346024A7493BEC69FE.mft (raw, json)
Hash identifier: cfAF5jxAFo/fcfDOxidNcsVWkzXW+EzC2gB45wpUG4g=
Subject key identifier: A1:86:F1:40:52:4C:25:45:1C:3F:68:E5:86:70:69:B4:58:85:91:96
Authority key identifier: 45:E8:12:50:13:BA:38:DA:DC:26:B1:34:60:24:A7:49:3B:EC:69:FE
Certificate issuer: /CN=45E8125013BA38DADC26B1346024A7493BEC69FE
Certificate serial: 719192923C893A64B96CAD5D790DC68396CECF8E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45E8125013BA38DADC26B1346024A7493BEC69FE.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/994bef37-745b-4fff-bb1f-aff1f33f5e5a/0/45E8125013BA38DADC26B1346024A7493BEC69FE.mft
Manifest number: 0239
Signing time: Sat 24 Jan 2026 14:01:38 +0000
Manifest this update: Sat 24 Jan 2026 13:56:38 +0000
Manifest next update: Tue 27 Jan 2026 16:48:38 +0000
Files and hashes: 1: 45E8125013BA38DADC26B1346024A7493BEC69FE.crl (hash: dhUp1k13vzNrtbocJrnd6k9Y3E4Lz7QW3ZntiO2uYoY=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/994bef37-745b-4fff-bb1f-aff1f33f5e5a/0/45E8125013BA38DADC26B1346024A7493BEC69FE.crl
rsync://repo-rpki.idnic.net/repo/994bef37-745b-4fff-bb1f-aff1f33f5e5a/0/45E8125013BA38DADC26B1346024A7493BEC69FE.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45E8125013BA38DADC26B1346024A7493BEC69FE.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 27 Jan 2026 16:48:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:91:92:92:3c:89:3a:64:b9:6c:ad:5d:79:0d:c6:83:96:ce:cf:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45E8125013BA38DADC26B1346024A7493BEC69FE
Validity
Not Before: Jan 24 13:56:38 2026 GMT
Not After : Jan 27 16:48:38 2026 GMT
Subject: CN=A186F140524C25451C3F68E5867069B458859196
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:bf:5a:b6:a3:82:ef:cf:4c:42:4f:5b:c6:b7:
cc:f2:82:af:2a:6e:54:a4:cc:08:53:02:80:1a:17:
44:fc:d7:9b:ba:b1:74:5c:9a:0b:33:3a:c7:c8:9b:
31:a4:b7:99:72:a8:5c:0c:85:26:50:3d:19:11:f7:
f8:b6:f3:78:33:a9:26:83:4a:21:1e:2c:fa:75:a3:
ca:14:fa:6e:17:b3:1f:fb:b5:23:0e:18:5c:2b:62:
99:58:19:9f:18:c7:6b:7c:9e:5c:c5:ca:ed:0b:94:
07:fe:fb:f8:24:a7:ef:0e:3c:6b:ea:c0:e0:62:57:
3f:0b:79:0c:1c:1e:93:42:3d:69:00:4d:96:07:96:
6c:a2:7a:c7:ea:63:68:6e:8d:fb:c2:cc:3e:f6:ce:
1b:4e:fa:d6:f3:93:58:6a:18:0e:49:25:e5:a8:a2:
68:46:3f:94:c2:80:74:79:9a:8a:fc:88:ca:ea:5d:
6a:2e:c8:72:64:11:7f:3f:01:40:ff:3d:30:f9:05:
c1:7b:7e:2f:2a:e9:96:87:e1:77:93:21:0f:a1:f3:
6d:cf:98:66:61:51:41:ec:ec:94:df:fe:95:43:26:
d5:4a:93:5d:7e:7b:a5:c1:71:ea:48:df:8f:ac:d5:
82:0a:e5:08:0d:04:bd:c1:57:a2:40:49:a6:55:ad:
f1:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:86:F1:40:52:4C:25:45:1C:3F:68:E5:86:70:69:B4:58:85:91:96
X509v3 Authority Key Identifier:
keyid:45:E8:12:50:13:BA:38:DA:DC:26:B1:34:60:24:A7:49:3B:EC:69:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/994bef37-745b-4fff-bb1f-aff1f33f5e5a/0/45E8125013BA38DADC26B1346024A7493BEC69FE.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45E8125013BA38DADC26B1346024A7493BEC69FE.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/994bef37-745b-4fff-bb1f-aff1f33f5e5a/0/45E8125013BA38DADC26B1346024A7493BEC69FE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:a9:01:56:2c:45:b5:9f:68:de:bb:90:a8:b8:3b:f4:2a:07:
ce:10:52:dc:e0:e0:d0:55:a2:d9:11:26:61:e6:5d:c2:0b:25:
2d:12:d6:82:90:48:0d:2f:85:45:2f:0a:cd:2d:71:53:29:3e:
9d:b5:6c:53:67:19:f6:f6:d7:99:31:3a:63:14:e5:3c:75:45:
77:16:88:f0:ce:f6:e6:26:db:92:a5:db:45:c8:bc:9d:1e:0c:
1d:16:1e:72:8b:d2:af:89:aa:bb:8d:36:25:8a:8f:7d:33:ac:
d3:62:17:3e:b0:39:c0:ed:1b:92:70:4b:8a:f8:df:da:55:5f:
a4:75:81:e9:f0:65:d4:6e:e2:3d:40:eb:63:bf:0a:e0:c9:15:
17:eb:40:93:0c:97:56:25:97:e1:ea:7e:7b:d9:06:67:16:90:
99:52:41:ce:88:27:4c:f3:28:64:42:8f:63:b9:1a:dc:e6:55:
f8:9b:c1:d1:88:d8:41:38:29:c8:8f:a3:fb:3f:b7:d4:9d:0a:
f0:6e:06:f0:7f:fa:d0:75:5e:25:83:39:63:56:97:aa:34:62:
ba:58:1f:f5:db:8f:8e:e0:ef:f8:da:52:65:70:7d:b6:98:ad:
84:15:f1:52:0f:eb:5e:a5:64:11:14:b0:e6:82:85:15:ed:be:
33:03:15:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:46:50 2026 by rpki-client