This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/f1ae12fa-98fd-4e51-980e-ad5f5b90d7a6/0/45164C20EAF7FAB583FB12C81727150895FCEC70.mft File: 45164C20EAF7FAB583FB12C81727150895FCEC70.mft (raw, json) Hash identifier: aOYChbXCqpBJMRObE8HViQfuGVTEwGZyg+eh8xYG4Lc= Subject key identifier: 40:1B:88:69:AB:2C:3F:0D:FA:AF:BF:08:38:53:FD:DA:23:AA:F6:26 Authority key identifier: 45:16:4C:20:EA:F7:FA:B5:83:FB:12:C8:17:27:15:08:95:FC:EC:70 Certificate issuer: /CN=45164C20EAF7FAB583FB12C81727150895FCEC70 Certificate serial: 4C99CB0CBB69E40924D999CCD563ABB7DB3D0E03 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45164C20EAF7FAB583FB12C81727150895FCEC70.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f1ae12fa-98fd-4e51-980e-ad5f5b90d7a6/0/45164C20EAF7FAB583FB12C81727150895FCEC70.mft Manifest number: 014B Signing time: Thu 04 Dec 2025 20:22:25 +0000 Manifest this update: Thu 04 Dec 2025 20:17:25 +0000 Manifest next update: Mon 08 Dec 2025 02:09:25 +0000 Files and hashes: 1: 45164C20EAF7FAB583FB12C81727150895FCEC70.crl (hash: RHJRRGJ+p2P185YJVZHMW9E7G31HnfJDY+jxrATH1iE=) 2: 3130332e3135332e34302e302f32332d3234203d3e20313430343534.roa (hash: TTBU1STvQaNI1wpqoaj9bG2m/T27T+WPjYQLtuioWoo=) 3: 3130332e3130382e3135362e302f32322d3234203d3e20313430343534.roa (hash: cLToJ49OKqVQRgjYGYNvWnWnJYTEY5LWx4h5YZdNEfg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f1ae12fa-98fd-4e51-980e-ad5f5b90d7a6/0/45164C20EAF7FAB583FB12C81727150895FCEC70.crl rsync://repo-rpki.idnic.net/repo/f1ae12fa-98fd-4e51-980e-ad5f5b90d7a6/0/45164C20EAF7FAB583FB12C81727150895FCEC70.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45164C20EAF7FAB583FB12C81727150895FCEC70.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 02:09:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:99:cb:0c:bb:69:e4:09:24:d9:99:cc:d5:63:ab:b7:db:3d:0e:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45164C20EAF7FAB583FB12C81727150895FCEC70 Validity Not Before: Dec 4 20:17:25 2025 GMT Not After : Dec 8 02:09:25 2025 GMT Subject: CN=401B8869AB2C3F0DFAAFBF083853FDDA23AAF626 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:44:63:85:cc:33:dc:89:d2:fc:ab:54:31:54: 91:06:3c:81:e3:86:37:b2:c1:7e:27:76:12:2f:ee: 95:2f:4e:a3:7f:08:83:aa:0a:33:b9:91:bc:32:b3: c7:40:43:cb:8c:fa:de:a0:40:bc:a9:60:ba:3d:75: dc:73:67:c7:98:c7:b4:13:42:66:bf:07:8d:a5:38: b9:71:cd:de:3e:e7:48:0d:73:73:53:c8:6a:2e:6c: ca:23:1d:26:33:b1:18:d3:a6:22:2d:14:48:5a:8e: 5f:7f:f8:06:72:44:c5:9f:61:c8:27:35:1f:3f:17: fc:c0:4c:08:13:ea:86:61:93:d0:ca:cc:1b:63:8f: fd:fc:b7:f4:2a:c2:55:68:43:a0:09:82:05:62:49: ba:b4:39:28:a2:9a:c3:15:86:b6:d9:13:d8:da:e6: 20:85:f9:e8:12:52:31:10:13:0c:57:82:2d:fb:6e: 2c:9b:36:25:ea:91:6c:e2:27:40:e8:ac:d1:d4:0f: 76:44:08:4c:a5:54:8c:cd:85:b6:8e:db:a6:bd:50: 29:be:03:0c:54:2a:eb:00:d7:af:ee:f7:a8:65:24: a4:67:f2:cd:69:37:d9:d8:2a:30:33:4d:3b:95:3a: 9d:7f:6a:b3:44:77:24:1f:4c:b4:1b:02:89:6a:da: d8:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:1B:88:69:AB:2C:3F:0D:FA:AF:BF:08:38:53:FD:DA:23:AA:F6:26 X509v3 Authority Key Identifier: keyid:45:16:4C:20:EA:F7:FA:B5:83:FB:12:C8:17:27:15:08:95:FC:EC:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f1ae12fa-98fd-4e51-980e-ad5f5b90d7a6/0/45164C20EAF7FAB583FB12C81727150895FCEC70.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45164C20EAF7FAB583FB12C81727150895FCEC70.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f1ae12fa-98fd-4e51-980e-ad5f5b90d7a6/0/45164C20EAF7FAB583FB12C81727150895FCEC70.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:70:54:de:00:6e:bf:a9:2d:89:4b:84:99:91:61:f9:73:55: 05:01:47:2b:c6:4c:3e:d0:e6:64:81:5a:dc:09:63:51:63:e9: 48:a5:4e:9c:24:37:88:62:e4:1d:b8:3d:b7:82:2c:42:e6:cb: 88:51:77:3c:22:00:2a:43:e8:92:d1:1a:28:e1:0e:57:84:2a: a5:b6:db:64:df:98:d2:9c:a9:72:7c:f5:8f:0c:14:07:96:be: 4f:ac:9d:01:d8:17:09:d2:d9:0d:82:02:81:7d:17:72:15:f0: da:f5:35:a6:7c:86:a0:d8:e8:3f:1c:aa:09:7a:14:78:ea:73: da:a9:c7:00:8b:46:a1:a0:f4:fc:de:b9:0e:fc:57:18:0e:c0: a0:d6:75:45:45:f0:82:fa:84:60:03:19:4e:56:db:13:75:da: 18:35:62:66:85:73:16:80:d6:33:e4:00:72:2c:7d:99:cd:89: ed:a4:26:ae:84:61:36:3b:4c:84:2e:70:2c:c6:2d:36:97:d4: db:a8:5f:1e:a6:c7:fe:76:8b:e6:88:3d:e5:d1:b8:c1:e5:e5: dc:08:8b:f0:f2:56:1a:58:a1:f8:4a:09:88:07:d0:a7:60:d4: 3c:3d:db:25:c4:bb:28:2c:7e:6f:70:a1:b9:81:5c:b7:c2:ee: a8:8e:71:26 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTJnLDLtp5Akk2ZnM1WOrt9s9DgMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUxNjRDMjBFQUY3RkFCNTgzRkIxMkM4MTcyNzE1MDg5 NUZDRUM3MDAeFw0yNTEyMDQyMDE3MjVaFw0yNTEyMDgwMjA5MjVaMDMxMTAvBgNV BAMTKDQwMUI4ODY5QUIyQzNGMERGQUFGQkYwODM4NTNGRERBMjNBQUY2MjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/RGOFzDPcidL8q1QxVJEGPIHj hjeywX4ndhIv7pUvTqN/CIOqCjO5kbwys8dAQ8uM+t6gQLypYLo9ddxzZ8eYx7QT Qma/B42lOLlxzd4+50gNc3NTyGoubMojHSYzsRjTpiItFEhajl9/+AZyRMWfYcgn NR8/F/zATAgT6oZhk9DKzBtjj/38t/QqwlVoQ6AJggViSbq0OSiimsMVhrbZE9ja 5iCF+egSUjEQEwxXgi37biybNiXqkWziJ0DorNHUD3ZECEylVIzNhbaO26a9UCm+ AwxUKusA16/u96hlJKRn8s1pN9nYKjAzTTuVOp1/arNEdyQfTLQbAolq2tjnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQBuIaassPw36r78IOFP92iOq9iYwHwYDVR0j BBgwFoAURRZMIOr3+rWD+xLIFycVCJX87HAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MWFlMTJmYS05OGZkLTRlNTEtOTgwZS1hZDVmNWI5MGQ3YTYvMC80NTE2NEMyMEVB RjdGQUI1ODNGQjEyQzgxNzI3MTUwODk1RkNFQzcwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDUxNjRDMjBFQUY3RkFCNTgzRkIxMkM4MTcyNzE1MDg5NUZD RUM3MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjFhZTEyZmEtOThmZC00ZTUxLTk4 MGUtYWQ1ZjViOTBkN2E2LzAvNDUxNjRDMjBFQUY3RkFCNTgzRkIxMkM4MTcyNzE1 MDg5NUZDRUM3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEVwVN4Abr+pLYlLhJmRYflzVQUBRyvGTD7Q 5mSBWtwJY1Fj6UilTpwkN4hi5B24PbeCLELmy4hRdzwiACpD6JLRGijhDleEKqW2 22TfmNKcqXJ89Y8MFAeWvk+snQHYFwnS2Q2CAoF9F3IV8Nr1NaZ8hqDY6D8cqgl6 FHjqc9qpxwCLRqGg9PzeuQ78VxgOwKDWdUVF8IL6hGADGU5W2xN12hg1YmaFcxaA 1jPkAHIsfZnNie2kJq6EYTY7TIQucCzGLTaX1NuoXx6mx/52i+aIPeXRuMHl5dwI i/DyVhpYofhKCYgH0Kdg1Dw92yXEuygsfm9wobmBXLfC7qiOcSY= -----END CERTIFICATE-----Generated at Sat Dec 6 23:52:00 2025 by rpki-client