This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/994bef37-745b-4fff-bb1f-aff1f33f5e5a/0/45E8125013BA38DADC26B1346024A7493BEC69FE.mft File: 45E8125013BA38DADC26B1346024A7493BEC69FE.mft (raw, json) Hash identifier: 4c1Yn5aTB6wb973VbpHepn4hJLh5xC6n8sRY+2ovLiM= Subject key identifier: 39:CC:A8:EE:DD:C0:6F:6C:A3:8A:DA:77:B3:BD:22:24:7E:3D:58:9C Authority key identifier: 45:E8:12:50:13:BA:38:DA:DC:26:B1:34:60:24:A7:49:3B:EC:69:FE Certificate issuer: /CN=45E8125013BA38DADC26B1346024A7493BEC69FE Certificate serial: 2C15BA0C91D8A0B97468EC53E9B223F5CB462DB6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45E8125013BA38DADC26B1346024A7493BEC69FE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/994bef37-745b-4fff-bb1f-aff1f33f5e5a/0/45E8125013BA38DADC26B1346024A7493BEC69FE.mft Manifest number: 0223 Signing time: Fri 05 Dec 2025 12:11:37 +0000 Manifest this update: Fri 05 Dec 2025 12:06:37 +0000 Manifest next update: Mon 08 Dec 2025 20:47:37 +0000 Files and hashes: 1: 45E8125013BA38DADC26B1346024A7493BEC69FE.crl (hash: 5eY+nYZKnqGshZeLQyAtbMRWoluWC8j2Azkb2+b6dHE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/994bef37-745b-4fff-bb1f-aff1f33f5e5a/0/45E8125013BA38DADC26B1346024A7493BEC69FE.crl rsync://repo-rpki.idnic.net/repo/994bef37-745b-4fff-bb1f-aff1f33f5e5a/0/45E8125013BA38DADC26B1346024A7493BEC69FE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45E8125013BA38DADC26B1346024A7493BEC69FE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 20:47:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:15:ba:0c:91:d8:a0:b9:74:68:ec:53:e9:b2:23:f5:cb:46:2d:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45E8125013BA38DADC26B1346024A7493BEC69FE Validity Not Before: Dec 5 12:06:37 2025 GMT Not After : Dec 8 20:47:37 2025 GMT Subject: CN=39CCA8EEDDC06F6CA38ADA77B3BD22247E3D589C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:5b:32:6c:e1:ae:52:52:af:37:0f:a8:1e:a3: 34:7d:15:64:04:aa:e0:35:94:f8:d6:3e:38:31:69: 79:b1:b5:ce:b7:62:74:cf:6b:8b:ec:30:8e:ab:98: 69:d3:a5:d3:7a:1e:1a:f8:a9:fc:ea:94:dc:7a:16: 47:17:28:e0:20:dc:6d:fa:d1:cc:43:f2:c7:2d:1f: 36:c6:d8:30:ee:2b:35:54:83:da:18:9b:5b:6f:06: bf:16:b1:01:fc:2e:6d:fd:7e:f7:fc:26:d4:fb:cc: 57:0d:f4:bf:65:1a:74:17:c9:81:47:49:93:f2:6b: 66:5e:87:5a:9d:f7:b5:93:68:15:d7:dc:17:02:cb: 68:e6:34:23:50:74:10:b3:eb:c9:e3:e3:51:98:90: ac:ac:7b:84:d7:91:84:cd:c8:13:2d:e0:76:df:6d: 1e:22:83:9c:dd:10:a2:6a:6f:b3:4c:0b:67:b3:39: 6f:95:2d:38:81:e6:ba:82:52:df:55:3e:7b:f5:f9: 88:d2:d9:e3:6a:be:4f:e5:2c:ee:9b:f4:ef:08:db: 08:ce:2b:8b:4e:fc:be:f0:9f:8d:3e:04:88:f5:5e: 40:f2:91:44:ec:2e:57:67:98:b3:48:b3:e5:3a:da: 47:eb:db:b2:7d:38:2e:07:e9:41:c2:57:dc:d9:40: 50:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:CC:A8:EE:DD:C0:6F:6C:A3:8A:DA:77:B3:BD:22:24:7E:3D:58:9C X509v3 Authority Key Identifier: keyid:45:E8:12:50:13:BA:38:DA:DC:26:B1:34:60:24:A7:49:3B:EC:69:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/994bef37-745b-4fff-bb1f-aff1f33f5e5a/0/45E8125013BA38DADC26B1346024A7493BEC69FE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45E8125013BA38DADC26B1346024A7493BEC69FE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/994bef37-745b-4fff-bb1f-aff1f33f5e5a/0/45E8125013BA38DADC26B1346024A7493BEC69FE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:a0:67:f6:57:74:36:df:88:1c:aa:71:83:8f:34:f3:f4:83: b7:09:de:ff:0f:a5:8c:6c:2d:c5:40:41:50:32:dd:16:24:e4: 7b:5c:1c:89:f7:94:5b:b2:ab:fd:ea:bd:9a:47:3d:44:c7:92: 91:04:b0:4b:7a:7d:df:49:58:81:6a:84:01:35:20:94:1b:29: de:28:ad:5c:48:83:2a:ad:dd:4f:4e:33:65:4d:ac:b0:ba:e0: 29:e2:74:8f:0a:29:33:37:06:6e:f3:98:9d:e6:78:3b:c4:82: cd:4b:69:e3:55:52:9f:10:fe:e9:e7:05:05:32:d8:4b:f2:c4: bf:aa:0d:bb:6f:b3:17:40:65:9e:23:db:1f:44:9a:45:00:ac: b4:62:ec:d7:3b:d8:e5:3e:2b:9b:9f:ea:9d:c6:d0:94:a6:aa: 12:ca:6b:0f:97:53:a8:af:95:4d:fe:e4:0b:98:8c:84:71:26: 55:c0:a1:33:32:6d:a4:20:fb:40:96:5d:e0:f4:eb:f7:e8:01: d8:cf:7b:a9:cc:b8:84:88:f0:4e:e6:98:44:1d:74:3f:2e:d5: d0:3f:50:6e:ba:a1:82:5d:15:02:9a:d7:72:28:2c:ab:ec:5a: a0:19:75:74:49:f6:7d:92:88:b8:92:d1:98:d2:2a:f2:44:2e: 2f:44:94:ad -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULBW6DJHYoLl0aOxT6bIj9ctGLbYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDVFODEyNTAxM0JBMzhEQURDMjZCMTM0NjAyNEE3NDkz QkVDNjlGRTAeFw0yNTEyMDUxMjA2MzdaFw0yNTEyMDgyMDQ3MzdaMDMxMTAvBgNV BAMTKDM5Q0NBOEVFRERDMDZGNkNBMzhBREE3N0IzQkQyMjI0N0UzRDU4OUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgWzJs4a5SUq83D6geozR9FWQE quA1lPjWPjgxaXmxtc63YnTPa4vsMI6rmGnTpdN6Hhr4qfzqlNx6FkcXKOAg3G36 0cxD8sctHzbG2DDuKzVUg9oYm1tvBr8WsQH8Lm39fvf8JtT7zFcN9L9lGnQXyYFH SZPya2Zeh1qd97WTaBXX3BcCy2jmNCNQdBCz68nj41GYkKyse4TXkYTNyBMt4Hbf bR4ig5zdEKJqb7NMC2ezOW+VLTiB5rqCUt9VPnv1+YjS2eNqvk/lLO6b9O8I2wjO K4tO/L7wn40+BIj1XkDykUTsLldnmLNIs+U62kfr27J9OC4H6UHCV9zZQFDpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOcyo7t3Ab2yjitp3s70iJH49WJwwHwYDVR0j BBgwFoAURegSUBO6ONrcJrE0YCSnSTvsaf4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 OTRiZWYzNy03NDViLTRmZmYtYmIxZi1hZmYxZjMzZjVlNWEvMC80NUU4MTI1MDEz QkEzOERBREMyNkIxMzQ2MDI0QTc0OTNCRUM2OUZFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDVFODEyNTAxM0JBMzhEQURDMjZCMTM0NjAyNEE3NDkzQkVD NjlGRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTk0YmVmMzctNzQ1Yi00ZmZmLWJi MWYtYWZmMWYzM2Y1ZTVhLzAvNDVFODEyNTAxM0JBMzhEQURDMjZCMTM0NjAyNEE3 NDkzQkVDNjlGRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI+gZ/ZXdDbfiByqcYOPNPP0g7cJ3v8PpYxs LcVAQVAy3RYk5HtcHIn3lFuyq/3qvZpHPUTHkpEEsEt6fd9JWIFqhAE1IJQbKd4o rVxIgyqt3U9OM2VNrLC64CnidI8KKTM3Bm7zmJ3meDvEgs1LaeNVUp8Q/unnBQUy 2EvyxL+qDbtvsxdAZZ4j2x9EmkUArLRi7Nc72OU+K5uf6p3G0JSmqhLKaw+XU6iv lU3+5AuYjIRxJlXAoTMybaQg+0CWXeD06/foAdjPe6nMuISI8E7mmEQddD8u1dA/ UG66oYJdFQKa13IoLKvsWqAZdXRJ9n2SiLiS0ZjSKvJELi9ElK0= -----END CERTIFICATE-----Generated at Sun Dec 7 04:57:18 2025 by rpki-client