This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/9be9f8d8-6ef9-472f-84f0-bb97f1f50ce7/0/45C573917C39C2CCF38654E237AB8B4CF23929FD.mft File: 45C573917C39C2CCF38654E237AB8B4CF23929FD.mft (raw, json) Hash identifier: q0uaIxFhcsZYs8ch7XvFuQaGwYjd0I24L09C7USKyNs= Subject key identifier: 2B:43:25:0A:1A:4D:4F:F0:8C:60:52:34:F0:3C:D5:4D:F0:37:E8:7E Authority key identifier: 45:C5:73:91:7C:39:C2:CC:F3:86:54:E2:37:AB:8B:4C:F2:39:29:FD Certificate issuer: /CN=45C573917C39C2CCF38654E237AB8B4CF23929FD Certificate serial: 33027F5BB14669637A9CD5616C714D381A665027 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45C573917C39C2CCF38654E237AB8B4CF23929FD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9be9f8d8-6ef9-472f-84f0-bb97f1f50ce7/0/45C573917C39C2CCF38654E237AB8B4CF23929FD.mft Manifest number: 025D Signing time: Tue 16 Dec 2025 12:42:31 +0000 Manifest this update: Tue 16 Dec 2025 12:37:31 +0000 Manifest next update: Fri 19 Dec 2025 21:08:31 +0000 Files and hashes: 1: 45C573917C39C2CCF38654E237AB8B4CF23929FD.crl (hash: 9eQ9JrHih9KVqtJVMC/++eV7pXgnhZ38cSfegg5XfYc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9be9f8d8-6ef9-472f-84f0-bb97f1f50ce7/0/45C573917C39C2CCF38654E237AB8B4CF23929FD.crl rsync://repo-rpki.idnic.net/repo/9be9f8d8-6ef9-472f-84f0-bb97f1f50ce7/0/45C573917C39C2CCF38654E237AB8B4CF23929FD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45C573917C39C2CCF38654E237AB8B4CF23929FD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Dec 2025 21:08:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:02:7f:5b:b1:46:69:63:7a:9c:d5:61:6c:71:4d:38:1a:66:50:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45C573917C39C2CCF38654E237AB8B4CF23929FD Validity Not Before: Dec 16 12:37:31 2025 GMT Not After : Dec 19 21:08:31 2025 GMT Subject: CN=2B43250A1A4D4FF08C605234F03CD54DF037E87E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:91:fd:a1:c3:1a:e2:90:db:1e:e4:82:15:8c: 8d:2c:00:2e:f0:77:c8:24:53:f2:21:6a:42:56:ef: 3d:f7:d6:db:b1:88:5b:f9:ea:39:94:49:71:af:09: 58:bd:69:4e:c3:1e:60:3c:a1:3c:13:f6:e1:b3:dc: 25:68:fc:56:11:d8:af:22:ee:4a:0f:01:58:88:d0: a2:90:0f:8f:5a:a3:73:ec:ee:37:a3:75:e8:64:5d: 01:39:44:46:6d:cf:ea:60:19:d0:fd:0c:0c:11:19: 12:d3:d3:ba:d4:da:f9:4b:bb:b0:a9:1a:53:15:dd: df:89:c1:a3:d2:e5:85:e6:e4:26:4a:a6:ad:5c:92: 72:76:74:79:fd:5b:30:1f:c5:e2:7d:ce:1d:ac:f2: 7e:1d:ac:99:40:1f:97:16:f5:4c:aa:a2:95:a5:a0: 69:4e:2c:95:aa:c5:90:2c:bd:25:00:2c:87:4c:a8: 18:3c:73:f9:97:b5:13:7c:3d:7b:0e:d9:8b:c3:9a: 29:06:d9:64:10:40:07:f0:ba:5b:23:fb:0f:a2:3b: 13:dd:2d:f9:fe:38:cb:22:35:0e:d1:f2:ba:09:2f: ed:6e:48:10:6d:e6:ff:0a:a9:54:75:4f:1e:df:3f: 90:44:69:00:d8:45:98:e0:21:06:50:9f:45:dd:48: ef:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:43:25:0A:1A:4D:4F:F0:8C:60:52:34:F0:3C:D5:4D:F0:37:E8:7E X509v3 Authority Key Identifier: keyid:45:C5:73:91:7C:39:C2:CC:F3:86:54:E2:37:AB:8B:4C:F2:39:29:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9be9f8d8-6ef9-472f-84f0-bb97f1f50ce7/0/45C573917C39C2CCF38654E237AB8B4CF23929FD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45C573917C39C2CCF38654E237AB8B4CF23929FD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9be9f8d8-6ef9-472f-84f0-bb97f1f50ce7/0/45C573917C39C2CCF38654E237AB8B4CF23929FD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:2f:e3:1c:5d:a3:3f:1b:6b:57:cd:dc:7d:24:91:8c:97:e9: 09:5f:9b:3a:04:f6:92:a7:59:92:15:78:29:bb:b1:14:90:4c: 14:51:dd:0b:26:39:cc:3a:dc:95:48:66:90:e3:ae:b2:6c:dc: f2:15:33:2d:7f:9c:83:2d:ce:b4:6d:15:31:dc:a4:ea:f4:57: d1:63:df:a2:a6:4c:3d:43:b7:32:95:ee:ba:4e:dd:54:45:c0: 53:df:fe:45:d8:05:75:bd:8e:98:f0:3e:e8:a0:5d:f4:2a:34: 80:b1:95:5a:3a:d6:f2:d1:b4:93:14:16:62:9e:b5:9b:c6:21: 33:46:14:aa:e7:95:f0:d3:10:a8:6c:93:43:6c:1b:fd:a5:f7: 39:e2:f2:35:7a:27:b5:fc:c4:ec:56:47:ec:5c:db:c9:08:54: 58:5d:9f:8e:45:75:14:10:df:e1:93:5b:e4:98:5b:38:ef:2d: 3f:ef:a7:dc:0a:97:5e:d2:e6:ea:e3:f6:d4:f3:33:44:dc:21: 71:c0:c2:80:28:8f:52:ae:66:5f:0f:6c:8e:e7:57:dd:6c:45: 43:ef:19:3d:94:6b:2a:ac:ed:bf:68:1d:9f:cc:48:0b:4f:a5: af:f7:18:d1:71:12:0e:8b:d6:8f:af:05:82:1e:7c:3d:c6:d6: 63:52:cc:2b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMwJ/W7FGaWN6nNVhbHFNOBpmUCcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDVDNTczOTE3QzM5QzJDQ0YzODY1NEUyMzdBQjhCNENG MjM5MjlGRDAeFw0yNTEyMTYxMjM3MzFaFw0yNTEyMTkyMTA4MzFaMDMxMTAvBgNV BAMTKDJCNDMyNTBBMUE0RDRGRjA4QzYwNTIzNEYwM0NENTRERjAzN0U4N0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVkf2hwxrikNse5IIVjI0sAC7w d8gkU/IhakJW7z331tuxiFv56jmUSXGvCVi9aU7DHmA8oTwT9uGz3CVo/FYR2K8i 7koPAViI0KKQD49ao3Ps7jejdehkXQE5REZtz+pgGdD9DAwRGRLT07rU2vlLu7Cp GlMV3d+JwaPS5YXm5CZKpq1cknJ2dHn9WzAfxeJ9zh2s8n4drJlAH5cW9UyqopWl oGlOLJWqxZAsvSUALIdMqBg8c/mXtRN8PXsO2YvDmikG2WQQQAfwulsj+w+iOxPd Lfn+OMsiNQ7R8roJL+1uSBBt5v8KqVR1Tx7fP5BEaQDYRZjgIQZQn0XdSO9vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUK0MlChpNT/CMYFI08DzVTfA36H4wHwYDVR0j BBgwFoAURcVzkXw5wszzhlTiN6uLTPI5Kf0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YmU5ZjhkOC02ZWY5LTQ3MmYtODRmMC1iYjk3ZjFmNTBjZTcvMC80NUM1NzM5MTdD MzlDMkNDRjM4NjU0RTIzN0FCOEI0Q0YyMzkyOUZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDVDNTczOTE3QzM5QzJDQ0YzODY1NEUyMzdBQjhCNENGMjM5 MjlGRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWJlOWY4ZDgtNmVmOS00NzJmLTg0 ZjAtYmI5N2YxZjUwY2U3LzAvNDVDNTczOTE3QzM5QzJDQ0YzODY1NEUyMzdBQjhC NENGMjM5MjlGRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACYv4xxdoz8ba1fN3H0kkYyX6QlfmzoE9pKn WZIVeCm7sRSQTBRR3QsmOcw63JVIZpDjrrJs3PIVMy1/nIMtzrRtFTHcpOr0V9Fj 36KmTD1DtzKV7rpO3VRFwFPf/kXYBXW9jpjwPuigXfQqNICxlVo61vLRtJMUFmKe tZvGITNGFKrnlfDTEKhsk0NsG/2l9zni8jV6J7X8xOxWR+xc28kIVFhdn45FdRQQ 3+GTW+SYWzjvLT/vp9wKl17S5urj9tTzM0TcIXHAwoAoj1KuZl8PbI7nV91sRUPv GT2Uayqs7b9oHZ/MSAtPpa/3GNFxEg6L1o+vBYIefD3G1mNSzCs= -----END CERTIFICATE-----Generated at Thu Dec 18 09:24:18 2025 by rpki-client