This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/f73ab79d-00d5-49cb-ac10-3bd4f2386bc6/0/45795CE411027C6961B89E9C0FBDB9B73BD61C39.mft
File: 45795CE411027C6961B89E9C0FBDB9B73BD61C39.mft (raw, json)
Hash identifier: GMh7VWJUaURh4JiVR4YzQLCoeAd7tzR9waDqkL6lKAs=
Subject key identifier: 3C:41:54:FE:78:2D:5C:FF:AC:B1:3D:A8:5E:12:A7:DB:E5:A1:47:C2
Authority key identifier: 45:79:5C:E4:11:02:7C:69:61:B8:9E:9C:0F:BD:B9:B7:3B:D6:1C:39
Certificate issuer: /CN=45795CE411027C6961B89E9C0FBDB9B73BD61C39
Certificate serial: 7F7BA6B93E541541CE34E08CC3AC64E3CF4D4D8E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45795CE411027C6961B89E9C0FBDB9B73BD61C39.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/f73ab79d-00d5-49cb-ac10-3bd4f2386bc6/0/45795CE411027C6961B89E9C0FBDB9B73BD61C39.mft
Manifest number: 052F
Signing time: Sat 06 Dec 2025 23:51:00 +0000
Manifest this update: Sat 06 Dec 2025 23:46:00 +0000
Manifest next update: Wed 10 Dec 2025 03:08:00 +0000
Files and hashes: 1: 45795CE411027C6961B89E9C0FBDB9B73BD61C39.crl (hash: fEiQeQjs0gHyBqvVj/YqSOE6wIbJuKDUoeRHoOxx5Ck=)
2: 3130332e3134302e37392e302f32342d3234203d3e203438343635.roa (hash: DkleJkN5W2PyaQBgkh3h9+A6EIKYUBI0XIE9LsGOkEE=)
3: 323030313a6466303a623238303a3a2f34382d3438203d3e20313338383733.roa (hash: Hrvwt79CsllNFcgj1XkX080ZEGTR3oJEJ5/uQyuwag4=)
4: 3130332e3134302e37382e302f32342d3234203d3e203438343635.roa (hash: rLQgAbVnt3V9mbyukLPioMNmLMKQ2mxQ9vlQUzCluhI=)
5: 3130332e3134302e37382e302f32332d3234203d3e20313338383733.roa (hash: DGGFs/nhZ+k7NUxZJLoh30LOsNcccBtIeZpWg8Hba0w=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/f73ab79d-00d5-49cb-ac10-3bd4f2386bc6/0/45795CE411027C6961B89E9C0FBDB9B73BD61C39.crl
rsync://repo-rpki.idnic.net/repo/f73ab79d-00d5-49cb-ac10-3bd4f2386bc6/0/45795CE411027C6961B89E9C0FBDB9B73BD61C39.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45795CE411027C6961B89E9C0FBDB9B73BD61C39.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 09 Dec 2025 15:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:7b:a6:b9:3e:54:15:41:ce:34:e0:8c:c3:ac:64:e3:cf:4d:4d:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45795CE411027C6961B89E9C0FBDB9B73BD61C39
Validity
Not Before: Dec 6 23:46:00 2025 GMT
Not After : Dec 10 03:08:00 2025 GMT
Subject: CN=3C4154FE782D5CFFACB13DA85E12A7DBE5A147C2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:26:68:0d:97:20:92:f5:ff:8f:50:0e:63:10:
1a:24:76:46:ca:c2:6a:3b:62:42:bb:c7:3b:38:0e:
85:ed:6a:8a:b3:ba:dd:24:3b:02:9e:e3:c5:5e:f4:
1c:57:e1:24:ee:86:1e:14:0d:20:f1:ec:f3:14:4e:
ee:53:1b:14:8a:f7:f9:1d:72:9b:4b:fa:6f:55:22:
08:5a:66:90:8f:6e:a4:c1:e2:1e:92:39:a6:36:a5:
63:4b:e5:50:b9:23:cd:c0:ce:88:34:cf:25:c0:93:
df:ad:eb:4d:b9:5b:f8:9a:e5:7b:f3:41:c5:a8:63:
f4:2f:ff:91:20:de:c8:70:03:71:e9:17:8e:54:c7:
43:98:72:eb:5c:62:89:cf:e8:b2:dc:2b:66:b1:ac:
d7:d9:20:37:b3:35:8c:df:fd:9c:cf:40:d4:03:4d:
47:56:e5:40:e4:72:68:70:e3:72:25:59:86:26:8f:
f1:75:98:8d:3f:74:f6:91:7b:47:45:9d:21:f6:3e:
19:ce:dd:f4:d3:36:0b:b3:91:9f:49:0a:3c:fe:8b:
ab:e0:93:7b:48:e2:3e:45:fd:b1:aa:9b:cb:3c:64:
4f:9f:f8:28:38:37:87:72:2a:05:bb:6d:1f:04:11:
a3:77:c8:97:f3:42:84:2f:53:9b:2a:04:91:7a:9c:
2e:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:41:54:FE:78:2D:5C:FF:AC:B1:3D:A8:5E:12:A7:DB:E5:A1:47:C2
X509v3 Authority Key Identifier:
keyid:45:79:5C:E4:11:02:7C:69:61:B8:9E:9C:0F:BD:B9:B7:3B:D6:1C:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/f73ab79d-00d5-49cb-ac10-3bd4f2386bc6/0/45795CE411027C6961B89E9C0FBDB9B73BD61C39.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45795CE411027C6961B89E9C0FBDB9B73BD61C39.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f73ab79d-00d5-49cb-ac10-3bd4f2386bc6/0/45795CE411027C6961B89E9C0FBDB9B73BD61C39.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:4f:aa:cf:e1:07:f5:b8:f6:68:03:eb:03:86:23:1c:a1:c8:
f8:f7:00:27:c2:cb:cf:be:09:40:a0:85:cd:75:69:c3:fd:21:
b1:48:0b:9f:bb:5a:b5:35:72:29:6f:fe:94:19:2a:8e:e2:9b:
e2:e3:b8:66:3d:2f:34:58:e2:5d:b6:6b:cb:2d:cd:83:58:3d:
b3:b8:09:bf:6e:21:59:89:cf:d6:ea:74:7d:54:95:b2:10:b2:
96:01:2b:fa:cd:d8:9c:98:f5:ba:8f:ca:86:2d:59:fe:c2:20:
0c:32:3b:be:14:d5:df:1d:4e:7f:a5:14:1e:e3:07:f6:eb:7a:
b8:c5:9e:e2:d2:ad:3f:b1:57:74:40:63:04:27:8e:45:ae:2b:
a1:99:0a:c6:2c:eb:6e:bc:55:84:9d:c8:fd:04:c3:a6:f2:4e:
63:d9:9a:96:87:65:fb:d7:1d:5c:9e:d5:84:c3:6d:31:f2:0f:
ad:de:e0:a2:ea:34:a8:f1:21:a8:72:d4:5c:dc:70:b0:de:a9:
5e:2d:92:63:e7:a4:8e:27:ea:71:a7:37:a9:d7:a3:0e:eb:b9:
c1:f8:46:58:61:0d:d9:b8:18:10:e4:eb:8f:91:28:8b:34:9e:
e1:41:33:8b:eb:5a:bb:86:79:c3:1a:fe:e5:f4:7a:d2:ec:ff:
d0:c6:2e:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 03:12:40 2025 by rpki-client