This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/c1bc3f29-6f9d-47d3-9e77-c289e5fee78e/0/C45A558750D6CF5BE02532DDE80326AEF5012912.mft File: C45A558750D6CF5BE02532DDE80326AEF5012912.mft (raw, json) Hash identifier: 3yVB9JPaHfSa514rN5RwZqhYV0+f0C78VhNunnxEoQk= Subject key identifier: FD:A5:7F:5E:BA:51:EE:22:B9:77:2D:7F:85:88:EE:C0:B7:B8:EC:62 Authority key identifier: C4:5A:55:87:50:D6:CF:5B:E0:25:32:DD:E8:03:26:AE:F5:01:29:12 Certificate issuer: /CN=C45A558750D6CF5BE02532DDE80326AEF5012912 Certificate serial: 21ABE2E2FE9B4E3C36FAD2B3BF24FF16825C1AC7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C45A558750D6CF5BE02532DDE80326AEF5012912.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c1bc3f29-6f9d-47d3-9e77-c289e5fee78e/0/C45A558750D6CF5BE02532DDE80326AEF5012912.mft Manifest number: 039E Signing time: Thu 04 Dec 2025 15:51:25 +0000 Manifest this update: Thu 04 Dec 2025 15:46:25 +0000 Manifest next update: Mon 08 Dec 2025 02:26:25 +0000 Files and hashes: 1: 3130332e3137302e3131352e302f32342d3234203d3e20313432333639.roa (hash: wKi20xV5IYiEYg1koyO2hLczrvapaQLTXfUibveAkFE=) 2: C45A558750D6CF5BE02532DDE80326AEF5012912.crl (hash: DNfTwJDrUvvHXeZvx8lOtpJiid9IXzGpXMGQHsN815M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c1bc3f29-6f9d-47d3-9e77-c289e5fee78e/0/C45A558750D6CF5BE02532DDE80326AEF5012912.crl rsync://repo-rpki.idnic.net/repo/c1bc3f29-6f9d-47d3-9e77-c289e5fee78e/0/C45A558750D6CF5BE02532DDE80326AEF5012912.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C45A558750D6CF5BE02532DDE80326AEF5012912.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 02:26:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:ab:e2:e2:fe:9b:4e:3c:36:fa:d2:b3:bf:24:ff:16:82:5c:1a:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C45A558750D6CF5BE02532DDE80326AEF5012912 Validity Not Before: Dec 4 15:46:25 2025 GMT Not After : Dec 8 02:26:25 2025 GMT Subject: CN=FDA57F5EBA51EE22B9772D7F8588EEC0B7B8EC62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:db:3d:b7:a5:5d:00:61:23:13:91:52:c1:fd: 43:ec:a5:1f:ec:26:bc:a0:6b:4d:4c:4f:97:f6:0d: 75:4e:04:28:71:0e:d5:14:0d:e2:e5:da:2e:2f:94: c1:bd:d3:64:3e:aa:f5:28:30:d1:1d:b8:92:e7:ff: c2:e1:22:2c:e1:9a:1b:2b:f7:41:0d:f2:07:44:6e: ca:b7:3d:72:09:33:ce:e2:71:38:44:4c:ec:53:02: 8b:ad:c3:85:d4:a4:41:a1:c6:c9:52:61:1d:46:e9: e2:81:62:06:81:71:b1:ff:0b:71:3f:5c:76:1c:2e: 8b:bc:42:a9:14:ac:2b:05:43:a9:55:32:1c:25:e7: af:20:e0:00:f5:f7:d8:15:6c:20:6a:dc:32:74:90: 41:97:46:a2:39:ea:1b:cb:7e:7e:2d:47:51:df:53: b5:02:6b:97:3e:6d:e8:37:48:55:b8:77:c0:f0:d7: 05:76:b3:0a:d8:b1:8b:90:7b:19:7c:17:c0:70:db: 71:96:06:ad:eb:4f:c7:ed:d6:23:2f:01:d3:eb:71: 2c:d0:74:0b:e9:53:c1:f7:b0:aa:43:b1:2f:92:d2: 5e:23:dd:25:a4:10:5a:34:67:94:2e:bd:79:c8:67: fc:20:ed:98:f1:35:4e:16:b5:66:d9:08:cb:ba:27: 8c:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:A5:7F:5E:BA:51:EE:22:B9:77:2D:7F:85:88:EE:C0:B7:B8:EC:62 X509v3 Authority Key Identifier: keyid:C4:5A:55:87:50:D6:CF:5B:E0:25:32:DD:E8:03:26:AE:F5:01:29:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c1bc3f29-6f9d-47d3-9e77-c289e5fee78e/0/C45A558750D6CF5BE02532DDE80326AEF5012912.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C45A558750D6CF5BE02532DDE80326AEF5012912.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c1bc3f29-6f9d-47d3-9e77-c289e5fee78e/0/C45A558750D6CF5BE02532DDE80326AEF5012912.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:e8:b3:f6:4f:0d:14:71:c4:68:b5:d1:3b:00:90:5b:86:0c: ad:42:b5:9f:e6:91:6c:d9:b1:2c:5d:ec:72:8f:ba:b0:a3:ee: 3e:ec:42:f2:5b:14:f2:a0:5f:06:dc:69:44:1c:da:a1:95:4f: 40:f7:98:53:f2:8f:64:b2:13:ea:e8:98:7e:15:eb:fa:68:d2: 01:44:de:85:4e:7b:47:99:33:d4:01:47:94:89:b3:c5:eb:64: 3a:67:39:e6:7d:f0:eb:68:fb:19:9f:db:71:54:2e:66:53:9d: 32:41:0a:5f:be:b0:10:6c:03:5e:db:72:40:59:57:d3:41:a4: 37:30:b8:ea:c7:1e:0e:62:ee:5f:4e:78:24:26:78:0c:e9:22: b5:40:fc:d3:01:29:ed:ec:ea:7f:f3:c8:4a:68:e3:1e:db:b6: 13:35:5d:59:6a:56:da:65:85:96:c1:bd:54:41:62:88:2d:74: 1a:89:c4:8f:fc:1c:68:6c:e6:23:e7:03:d0:27:c7:02:a0:c9: 4c:99:4a:ff:ee:b2:90:41:0a:52:04:ed:8f:6e:2e:f4:69:23: ac:b0:72:f7:df:26:df:63:b5:3f:c0:d2:31:12:be:cb:a2:67: 0c:bb:cb:37:eb:d3:cb:cb:93:b4:ce:a5:50:9a:5b:11:0a:c6: 81:87:bb:a0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIavi4v6bTjw2+tKzvyT/FoJcGscwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzQ1QTU1ODc1MEQ2Q0Y1QkUwMjUzMkRERTgwMzI2QUVG NTAxMjkxMjAeFw0yNTEyMDQxNTQ2MjVaFw0yNTEyMDgwMjI2MjVaMDMxMTAvBgNV BAMTKEZEQTU3RjVFQkE1MUVFMjJCOTc3MkQ3Rjg1ODhFRUMwQjdCOEVDNjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu2z23pV0AYSMTkVLB/UPspR/s Jryga01MT5f2DXVOBChxDtUUDeLl2i4vlMG902Q+qvUoMNEduJLn/8LhIizhmhsr 90EN8gdEbsq3PXIJM87icThETOxTAoutw4XUpEGhxslSYR1G6eKBYgaBcbH/C3E/ XHYcLou8QqkUrCsFQ6lVMhwl568g4AD199gVbCBq3DJ0kEGXRqI56hvLfn4tR1Hf U7UCa5c+beg3SFW4d8Dw1wV2swrYsYuQexl8F8Bw23GWBq3rT8ft1iMvAdPrcSzQ dAvpU8H3sKpDsS+S0l4j3SWkEFo0Z5QuvXnIZ/wg7ZjxNU4WtWbZCMu6J4zxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/aV/XrpR7iK5dy1/hYjuwLe47GIwHwYDVR0j BBgwFoAUxFpVh1DWz1vgJTLd6AMmrvUBKRIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MWJjM2YyOS02ZjlkLTQ3ZDMtOWU3Ny1jMjg5ZTVmZWU3OGUvMC9DNDVBNTU4NzUw RDZDRjVCRTAyNTMyRERFODAzMjZBRUY1MDEyOTEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzQ1QTU1ODc1MEQ2Q0Y1QkUwMjUzMkRERTgwMzI2QUVGNTAx MjkxMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzFiYzNmMjktNmY5ZC00N2QzLTll NzctYzI4OWU1ZmVlNzhlLzAvQzQ1QTU1ODc1MEQ2Q0Y1QkUwMjUzMkRERTgwMzI2 QUVGNTAxMjkxMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACHos/ZPDRRxxGi10TsAkFuGDK1CtZ/mkWzZ sSxd7HKPurCj7j7sQvJbFPKgXwbcaUQc2qGVT0D3mFPyj2SyE+romH4V6/po0gFE 3oVOe0eZM9QBR5SJs8XrZDpnOeZ98Oto+xmf23FULmZTnTJBCl++sBBsA17bckBZ V9NBpDcwuOrHHg5i7l9OeCQmeAzpIrVA/NMBKe3s6n/zyEpo4x7bthM1XVlqVtpl hZbBvVRBYogtdBqJxI/8HGhs5iPnA9AnxwKgyUyZSv/uspBBClIE7Y9uLvRpI6yw cvffJt9jtT/A0jESvsuiZwy7yzfr08vLk7TOpVCaWxEKxoGHu6A= -----END CERTIFICATE-----Generated at Sat Dec 6 22:51:03 2025 by rpki-client