This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/c4f9f9a1-4ad8-49ce-9fa9-d476573af50f/0/1645B491C350BF8AB4A8F88CC4DCF3F60073D15D.mft File: 1645B491C350BF8AB4A8F88CC4DCF3F60073D15D.mft (raw, json) Hash identifier: MnfMVVPld6N9v+HO+xqV2JTLLEDU/0Q51PWg4rGYpqo= Subject key identifier: 20:D0:4F:40:09:A7:4E:14:21:CB:16:34:D3:17:05:6F:D1:4D:44:1C Authority key identifier: 16:45:B4:91:C3:50:BF:8A:B4:A8:F8:8C:C4:DC:F3:F6:00:73:D1:5D Certificate issuer: /CN=1645B491C350BF8AB4A8F88CC4DCF3F60073D15D Certificate serial: 17337FB23E69823D5B517D6A08DD29AF16016D58 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1645B491C350BF8AB4A8F88CC4DCF3F60073D15D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c4f9f9a1-4ad8-49ce-9fa9-d476573af50f/0/1645B491C350BF8AB4A8F88CC4DCF3F60073D15D.mft Manifest number: 1E Signing time: Fri 05 Dec 2025 18:22:26 +0000 Manifest this update: Fri 05 Dec 2025 18:17:26 +0000 Manifest next update: Tue 09 Dec 2025 06:05:26 +0000 Files and hashes: 1: 3132322e3132392e3230302e302f32312d3234203d3e203338373633.roa (hash: psHda3coDjbtJQORQnibdpRgwKCWDI4qgmb+5QVTY6I=) 2: 1645B491C350BF8AB4A8F88CC4DCF3F60073D15D.crl (hash: TzI3ivGiRUaoQkRqIoIqnfDvMNadrgbY+WUpEccJpY4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c4f9f9a1-4ad8-49ce-9fa9-d476573af50f/0/1645B491C350BF8AB4A8F88CC4DCF3F60073D15D.crl rsync://repo-rpki.idnic.net/repo/c4f9f9a1-4ad8-49ce-9fa9-d476573af50f/0/1645B491C350BF8AB4A8F88CC4DCF3F60073D15D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1645B491C350BF8AB4A8F88CC4DCF3F60073D15D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 06:05:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:33:7f:b2:3e:69:82:3d:5b:51:7d:6a:08:dd:29:af:16:01:6d:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1645B491C350BF8AB4A8F88CC4DCF3F60073D15D Validity Not Before: Dec 5 18:17:26 2025 GMT Not After : Dec 9 06:05:26 2025 GMT Subject: CN=20D04F4009A74E1421CB1634D317056FD14D441C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:1e:9c:3c:02:c4:f9:a8:1c:9f:37:d5:fd:33: 16:d9:41:88:18:0e:9b:da:ee:46:44:c5:20:69:f8: a4:78:22:d6:fc:10:5b:42:93:bd:83:59:d5:bd:6f: 4e:98:76:46:28:4e:19:9c:d7:bc:ee:80:83:06:e7: 60:e8:e2:ae:ce:0a:4b:39:d4:30:78:ea:ba:0c:fd: ac:0e:5f:c0:f0:43:df:5c:09:1a:51:d5:6f:13:d1: ce:a0:c9:76:54:5c:a4:05:22:48:06:e8:2c:5a:90: 0b:1a:8e:ec:6f:ec:8d:3c:fd:3e:68:9a:cd:b5:54: f5:c4:cd:0b:70:f7:82:e1:05:36:c4:77:64:86:0c: 58:a1:e1:6e:8e:ee:dc:74:05:e4:bf:e9:66:36:92: c4:be:0c:05:91:16:91:84:87:84:1b:2a:7d:8b:a5: fe:5c:da:ec:18:fa:97:01:3f:55:41:c9:e6:8e:3a: 61:83:1e:11:ae:c4:d9:82:bc:36:fe:66:ee:21:6a: f2:ae:99:f9:0b:40:c1:1f:61:cd:32:9f:7a:02:32: 82:6d:44:7a:a0:e0:19:e3:ea:ac:f6:2a:ea:24:b7: 7b:ba:ab:37:38:ec:ee:f2:5a:ae:82:99:58:f0:d2: 61:27:b9:5a:64:7b:2c:33:98:bd:7b:37:a4:de:1e: 31:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:D0:4F:40:09:A7:4E:14:21:CB:16:34:D3:17:05:6F:D1:4D:44:1C X509v3 Authority Key Identifier: keyid:16:45:B4:91:C3:50:BF:8A:B4:A8:F8:8C:C4:DC:F3:F6:00:73:D1:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c4f9f9a1-4ad8-49ce-9fa9-d476573af50f/0/1645B491C350BF8AB4A8F88CC4DCF3F60073D15D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1645B491C350BF8AB4A8F88CC4DCF3F60073D15D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c4f9f9a1-4ad8-49ce-9fa9-d476573af50f/0/1645B491C350BF8AB4A8F88CC4DCF3F60073D15D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:79:7d:89:d2:af:08:29:2e:1a:fa:61:84:39:35:3f:3b:5a: f0:4e:a0:61:67:fc:a5:d0:43:e0:e8:61:a8:b7:16:3a:a2:52: c3:e2:8e:0b:9b:d9:b1:0a:c4:df:18:cc:ef:c1:55:40:e6:47: 10:d3:ff:9b:85:8f:57:90:b9:3d:b4:44:1c:b0:17:0f:58:86: 21:c7:e7:c2:06:d6:d2:16:b0:a4:63:b0:18:07:8d:fd:69:3d: 99:f4:0d:a6:fd:b1:ca:40:5c:7c:23:00:e5:b8:28:20:92:d4: 4d:8c:9e:23:fb:18:70:e3:d9:c6:b4:ae:21:87:98:fa:76:f5: 47:62:cc:26:2d:74:73:f0:1c:78:67:07:9e:ec:2a:ae:2b:ea: 09:4c:23:f5:79:7b:7c:8b:6d:6d:25:4e:49:78:89:99:46:d9: 12:9e:2e:a8:73:9b:ab:94:b0:01:01:60:7b:44:ff:a0:8b:b5: a8:d1:ec:3f:63:0a:04:bd:a0:67:78:4e:c7:85:1a:a3:f4:67: 1b:28:a5:77:3d:24:88:6e:80:f7:36:d5:cc:e9:e3:8c:9a:e6: 80:8f:3d:1e:3e:c4:df:dd:aa:3a:f3:00:44:ad:94:8c:49:5e: a8:fe:b3:2d:fe:62:fa:fb:35:8b:a7:a5:2c:36:fd:a2:5d:fa: b1:e5:6f:1c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFzN/sj5pgj1bUX1qCN0prxYBbVgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTY0NUI0OTFDMzUwQkY4QUI0QThGODhDQzREQ0YzRjYw MDczRDE1RDAeFw0yNTEyMDUxODE3MjZaFw0yNTEyMDkwNjA1MjZaMDMxMTAvBgNV BAMTKDIwRDA0RjQwMDlBNzRFMTQyMUNCMTYzNEQzMTcwNTZGRDE0RDQ0MUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOHpw8AsT5qByfN9X9MxbZQYgY Dpva7kZExSBp+KR4Itb8EFtCk72DWdW9b06YdkYoThmc17zugIMG52Do4q7OCks5 1DB46roM/awOX8DwQ99cCRpR1W8T0c6gyXZUXKQFIkgG6CxakAsajuxv7I08/T5o ms21VPXEzQtw94LhBTbEd2SGDFih4W6O7tx0BeS/6WY2ksS+DAWRFpGEh4QbKn2L pf5c2uwY+pcBP1VByeaOOmGDHhGuxNmCvDb+Zu4havKumfkLQMEfYc0yn3oCMoJt RHqg4Bnj6qz2Kuokt3u6qzc47O7yWq6CmVjw0mEnuVpkeywzmL17N6TeHjGVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUINBPQAmnThQhyxY00xcFb9FNRBwwHwYDVR0j BBgwFoAUFkW0kcNQv4q0qPiMxNzz9gBz0V0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NGY5ZjlhMS00YWQ4LTQ5Y2UtOWZhOS1kNDc2NTczYWY1MGYvMC8xNjQ1QjQ5MUMz NTBCRjhBQjRBOEY4OENDNERDRjNGNjAwNzNEMTVELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTY0NUI0OTFDMzUwQkY4QUI0QThGODhDQzREQ0YzRjYwMDcz RDE1RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzRmOWY5YTEtNGFkOC00OWNlLTlm YTktZDQ3NjU3M2FmNTBmLzAvMTY0NUI0OTFDMzUwQkY4QUI0QThGODhDQzREQ0Yz RjYwMDczRDE1RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADt5fYnSrwgpLhr6YYQ5NT87WvBOoGFn/KXQ Q+DoYai3FjqiUsPijgub2bEKxN8YzO/BVUDmRxDT/5uFj1eQuT20RBywFw9YhiHH 58IG1tIWsKRjsBgHjf1pPZn0Dab9scpAXHwjAOW4KCCS1E2MniP7GHDj2ca0riGH mPp29UdizCYtdHPwHHhnB57sKq4r6glMI/V5e3yLbW0lTkl4iZlG2RKeLqhzm6uU sAEBYHtE/6CLtajR7D9jCgS9oGd4TseFGqP0ZxsopXc9JIhugPc21czp44ya5oCP PR4+xN/dqjrzAEStlIxJXqj+sy3+Yvr7NYunpSw2/aJd+rHlbxw= -----END CERTIFICATE-----Generated at Sat Dec 6 22:52:13 2025 by rpki-client