This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/153b067c-ecc9-4dca-987d-b9576815f855/0/45FD71C7EFF830D20E960225B4A971A14B081364.mft File: 45FD71C7EFF830D20E960225B4A971A14B081364.mft (raw, json) Hash identifier: sWBjcIPFAL2Aqjc2BIGiIjFQV9AfQnWCaB7YecRztv0= Subject key identifier: 97:42:38:E2:6A:57:14:AD:C4:3F:4B:A0:8A:9D:98:3D:A2:84:8D:F3 Authority key identifier: 45:FD:71:C7:EF:F8:30:D2:0E:96:02:25:B4:A9:71:A1:4B:08:13:64 Certificate issuer: /CN=45FD71C7EFF830D20E960225B4A971A14B081364 Certificate serial: 55988AC421EC4D276818489566446FCB2B444CD5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45FD71C7EFF830D20E960225B4A971A14B081364.cer Subject info access: rsync://repo-rpki.idnic.net/repo/153b067c-ecc9-4dca-987d-b9576815f855/0/45FD71C7EFF830D20E960225B4A971A14B081364.mft Manifest number: 0540 Signing time: Sun 11 Jan 2026 17:00:58 +0000 Manifest this update: Sun 11 Jan 2026 16:55:58 +0000 Manifest next update: Thu 15 Jan 2026 02:54:58 +0000 Files and hashes: 1: 3131372e3132312e3230302e302f32342d3234203d3e2030.roa (hash: L0AVu48seGOzT+OjNs4+vHM51Bl8/YcZdTcHUeJSvtI=) 2: 3131372e3132312e3230362e302f32342d3234203d3e203436303239.roa (hash: kVr4SbJNPOjRvwiHc+hgo6K4HzE1wOJqmCs09GwhV5A=) 3: 45FD71C7EFF830D20E960225B4A971A14B081364.crl (hash: ZKXTtaaKEfFyCnumfo/dHbV0w6sxxspvXNpQeTkdFqQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/153b067c-ecc9-4dca-987d-b9576815f855/0/45FD71C7EFF830D20E960225B4A971A14B081364.crl rsync://repo-rpki.idnic.net/repo/153b067c-ecc9-4dca-987d-b9576815f855/0/45FD71C7EFF830D20E960225B4A971A14B081364.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45FD71C7EFF830D20E960225B4A971A14B081364.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Jan 2026 02:54:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:98:8a:c4:21:ec:4d:27:68:18:48:95:66:44:6f:cb:2b:44:4c:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45FD71C7EFF830D20E960225B4A971A14B081364 Validity Not Before: Jan 11 16:55:58 2026 GMT Not After : Jan 15 02:54:58 2026 GMT Subject: CN=974238E26A5714ADC43F4BA08A9D983DA2848DF3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:26:83:1e:18:13:aa:28:17:36:b4:c5:4b:f4: e1:25:5e:09:ce:8d:53:da:01:08:1c:32:28:3d:a3: f8:f1:77:d5:b4:3c:8c:6f:44:ec:a6:ad:e3:cf:a1: fc:85:20:16:57:db:dc:fb:74:6e:02:f9:14:01:f8: 93:6b:aa:4b:cb:4e:4c:cd:c8:74:c2:2b:b9:78:de: a9:7d:01:52:90:23:3b:24:92:32:78:4b:cb:98:30: da:60:7a:e4:a4:6c:a6:3a:6a:96:5b:0c:8d:b0:3f: c3:d4:f1:b1:76:01:bb:f9:93:e4:48:e5:69:ff:1d: fc:a3:23:b3:2f:14:98:37:3e:c3:bb:f2:1f:66:7c: 63:a4:09:82:36:ce:ac:9d:92:74:ea:4a:c3:29:4c: 05:c6:ec:07:22:ef:01:fe:83:e0:03:36:34:7b:a1: 3f:81:ce:11:a1:2f:75:8f:0d:9c:e4:a4:a0:f3:18: 3d:0d:f9:cd:90:58:63:72:de:ca:00:64:fb:85:67: 34:b8:fd:13:82:fd:d7:64:83:1b:b2:0b:f2:5a:17: ba:18:fe:6d:e5:22:58:bf:e9:38:39:a0:8f:ea:20: e8:17:98:b1:90:70:6c:7c:32:4b:cc:b3:00:0e:91: 86:3f:d8:2f:b3:39:90:9f:ff:3e:29:8f:27:fc:84: e2:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:42:38:E2:6A:57:14:AD:C4:3F:4B:A0:8A:9D:98:3D:A2:84:8D:F3 X509v3 Authority Key Identifier: keyid:45:FD:71:C7:EF:F8:30:D2:0E:96:02:25:B4:A9:71:A1:4B:08:13:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/153b067c-ecc9-4dca-987d-b9576815f855/0/45FD71C7EFF830D20E960225B4A971A14B081364.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45FD71C7EFF830D20E960225B4A971A14B081364.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/153b067c-ecc9-4dca-987d-b9576815f855/0/45FD71C7EFF830D20E960225B4A971A14B081364.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:cc:a2:73:3c:06:76:14:1c:2c:7a:a1:2e:32:a5:65:30:d9: 67:59:4e:bf:0f:2c:ac:6e:53:01:ea:f6:74:73:f6:83:00:ea: c5:41:23:dc:1c:38:a0:1f:9d:0b:13:9e:62:64:a7:ca:fc:d8: 61:a1:71:41:e6:9c:e0:e1:0b:12:b6:16:b9:fe:e2:cf:72:51: fa:2c:93:71:5f:d7:a0:74:2a:c1:e2:5e:78:c5:d8:b8:cc:c1: 90:18:71:92:fe:73:bd:0f:67:29:ec:7d:d4:6f:2e:65:bb:11: a3:a4:1c:9d:57:73:4f:93:de:a1:6a:2f:4a:7c:60:a1:10:e3: e6:ff:74:5e:f0:2d:b0:45:cc:76:3d:d8:07:71:75:98:e9:7c: 83:88:71:37:6f:ad:70:4e:24:a8:35:db:d0:04:d0:55:a0:ec: d2:66:2d:99:30:df:03:4d:bf:db:86:94:97:83:17:da:5c:06: 9f:47:ca:e0:df:b8:f8:da:8d:7e:33:4c:e7:4f:a9:b2:f3:28: 4f:09:60:28:45:7d:df:9e:06:c5:eb:b7:b1:17:c7:01:03:2d: 30:c7:25:ba:8f:7a:f3:85:f2:7d:47:56:4a:3c:16:df:d9:23: dd:2c:a4:65:2d:5a:18:e9:9b:dd:38:f2:63:07:e9:36:4a:e7: b9:c6:56:ef -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVZiKxCHsTSdoGEiVZkRvyytETNUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDVGRDcxQzdFRkY4MzBEMjBFOTYwMjI1QjRBOTcxQTE0 QjA4MTM2NDAeFw0yNjAxMTExNjU1NThaFw0yNjAxMTUwMjU0NThaMDMxMTAvBgNV BAMTKDk3NDIzOEUyNkE1NzE0QURDNDNGNEJBMDhBOUQ5ODNEQTI4NDhERjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPJoMeGBOqKBc2tMVL9OElXgnO jVPaAQgcMig9o/jxd9W0PIxvROymrePPofyFIBZX29z7dG4C+RQB+JNrqkvLTkzN yHTCK7l43ql9AVKQIzskkjJ4S8uYMNpgeuSkbKY6apZbDI2wP8PU8bF2Abv5k+RI 5Wn/HfyjI7MvFJg3PsO78h9mfGOkCYI2zqydknTqSsMpTAXG7Aci7wH+g+ADNjR7 oT+BzhGhL3WPDZzkpKDzGD0N+c2QWGNy3soAZPuFZzS4/ROC/ddkgxuyC/JaF7oY /m3lIli/6Tg5oI/qIOgXmLGQcGx8MkvMswAOkYY/2C+zOZCf/z4pjyf8hOIpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUl0I44mpXFK3EP0ugip2YPaKEjfMwHwYDVR0j BBgwFoAURf1xx+/4MNIOlgIltKlxoUsIE2QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NTNiMDY3Yy1lY2M5LTRkY2EtOTg3ZC1iOTU3NjgxNWY4NTUvMC80NUZENzFDN0VG RjgzMEQyMEU5NjAyMjVCNEE5NzFBMTRCMDgxMzY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDVGRDcxQzdFRkY4MzBEMjBFOTYwMjI1QjRBOTcxQTE0QjA4 MTM2NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTUzYjA2N2MtZWNjOS00ZGNhLTk4 N2QtYjk1NzY4MTVmODU1LzAvNDVGRDcxQzdFRkY4MzBEMjBFOTYwMjI1QjRBOTcx QTE0QjA4MTM2NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEDMonM8BnYUHCx6oS4ypWUw2WdZTr8PLKxu UwHq9nRz9oMA6sVBI9wcOKAfnQsTnmJkp8r82GGhcUHmnODhCxK2Frn+4s9yUfos k3Ff16B0KsHiXnjF2LjMwZAYcZL+c70PZynsfdRvLmW7EaOkHJ1Xc0+T3qFqL0p8 YKEQ4+b/dF7wLbBFzHY92AdxdZjpfIOIcTdvrXBOJKg129AE0FWg7NJmLZkw3wNN v9uGlJeDF9pcBp9HyuDfuPjajX4zTOdPqbLzKE8JYChFfd+eBsXrt7EXxwEDLTDH JbqPevOF8n1HVko8Ft/ZI90spGUtWhjpm9048mMH6TZK57nGVu8= -----END CERTIFICATE-----Generated at Tue Jan 13 12:25:31 2026 by rpki-client