This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/2f13a6ef-3434-4401-b3e1-65153066fb3e/0/245A17CADB2BB2FDC5786C27E5BE959636E7F409.mft File: 245A17CADB2BB2FDC5786C27E5BE959636E7F409.mft (raw, json) Hash identifier: zCqBLTtTDrWwhyMPHv+XdPe+IHCqXs47u7vxuwXC+Bo= Subject key identifier: 8D:11:2F:30:B3:4E:C6:65:AA:F2:F9:6A:CE:47:DF:FA:75:E5:B5:73 Authority key identifier: 24:5A:17:CA:DB:2B:B2:FD:C5:78:6C:27:E5:BE:95:96:36:E7:F4:09 Certificate issuer: /CN=245A17CADB2BB2FDC5786C27E5BE959636E7F409 Certificate serial: 303E2753627874927BD41067695E2E93C08A990F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/245A17CADB2BB2FDC5786C27E5BE959636E7F409.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2f13a6ef-3434-4401-b3e1-65153066fb3e/0/245A17CADB2BB2FDC5786C27E5BE959636E7F409.mft Manifest number: 0139 Signing time: Tue 02 Dec 2025 18:21:27 +0000 Manifest this update: Tue 02 Dec 2025 18:16:27 +0000 Manifest next update: Fri 05 Dec 2025 19:45:27 +0000 Files and hashes: 1: 3130332e35312e39392e302f32342d3234203d3e20313530343639.roa (hash: K8NaZjX156AzJZCxAFCtUR2kv1eIuI1LvcL4WWNgNxE=) 2: 3130332e35312e39382e302f32332d3233203d3e20313530343639.roa (hash: k08Sq9y+e0JBLFkahJuKjCY8UDmOXzCXbCJPnDfG/eg=) 3: 245A17CADB2BB2FDC5786C27E5BE959636E7F409.crl (hash: uupN+D8ilwSUa5O4tCrvVMH+UQjVmGSMDAAjv0zgEPA=) 4: 3130332e35312e39382e302f32342d3234203d3e20313530343639.roa (hash: 4B7irySfovCa+fs5OrOidwnp7dP+n6xSYZr+/3ur6bs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2f13a6ef-3434-4401-b3e1-65153066fb3e/0/245A17CADB2BB2FDC5786C27E5BE959636E7F409.crl rsync://repo-rpki.idnic.net/repo/2f13a6ef-3434-4401-b3e1-65153066fb3e/0/245A17CADB2BB2FDC5786C27E5BE959636E7F409.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/245A17CADB2BB2FDC5786C27E5BE959636E7F409.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 19:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:3e:27:53:62:78:74:92:7b:d4:10:67:69:5e:2e:93:c0:8a:99:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=245A17CADB2BB2FDC5786C27E5BE959636E7F409 Validity Not Before: Dec 2 18:16:27 2025 GMT Not After : Dec 5 19:45:27 2025 GMT Subject: CN=8D112F30B34EC665AAF2F96ACE47DFFA75E5B573 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:b4:df:c9:dc:06:f1:40:fc:04:aa:b0:a4:18: 1d:2c:cf:b1:fa:5b:ef:2a:3d:a0:50:df:34:28:9e: 47:4c:27:82:99:a5:92:0d:d7:cd:76:80:a4:35:83: 8b:3c:b9:21:8d:bc:23:95:66:2a:e3:f1:5b:3b:f5: 11:e6:20:0e:85:c6:36:6a:3d:56:63:e4:4d:b7:33: aa:e7:0f:8a:29:6e:92:e1:18:07:8d:22:bc:bf:17: 5f:eb:b5:97:d0:e8:11:5f:88:e4:f7:5c:33:a0:6f: f8:39:b4:4c:40:ce:5e:80:58:26:41:7d:0c:72:42: fb:68:ef:a0:c2:7a:95:89:e2:eb:d1:28:d4:f6:b2: aa:0a:c6:94:ac:8e:cb:e6:f6:b7:01:c8:de:03:68: 57:7f:fb:fd:ac:7c:c1:56:eb:16:64:26:85:2d:d7: 86:66:da:94:fb:23:ab:f4:79:f7:fe:ee:cc:21:b1: da:ad:b9:7a:dc:16:1d:8a:20:55:a4:42:e0:98:a6: a1:a8:91:61:0b:98:92:3e:03:78:14:7b:e3:28:98: 36:bd:2b:d2:08:ab:d8:fd:34:23:b6:f0:50:1d:56: 64:d7:a6:18:f4:47:45:05:3b:fb:35:a8:fd:2f:02: 86:9d:db:73:cc:f6:08:4d:7d:bc:54:8d:a9:26:73: e8:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:11:2F:30:B3:4E:C6:65:AA:F2:F9:6A:CE:47:DF:FA:75:E5:B5:73 X509v3 Authority Key Identifier: keyid:24:5A:17:CA:DB:2B:B2:FD:C5:78:6C:27:E5:BE:95:96:36:E7:F4:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2f13a6ef-3434-4401-b3e1-65153066fb3e/0/245A17CADB2BB2FDC5786C27E5BE959636E7F409.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/245A17CADB2BB2FDC5786C27E5BE959636E7F409.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2f13a6ef-3434-4401-b3e1-65153066fb3e/0/245A17CADB2BB2FDC5786C27E5BE959636E7F409.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:fa:40:49:bf:1b:f0:9c:f5:f4:d0:c6:ce:47:d7:dd:36:15: c3:4a:a9:bf:0c:d4:c0:5f:5f:23:de:5b:50:0b:21:90:dd:9b: bd:8d:64:24:61:eb:0b:26:8e:a7:7e:5f:63:2f:64:fa:68:9a: b6:f7:3d:ca:af:34:38:2f:53:77:d1:3d:92:39:91:b8:7a:8a: 15:d5:37:d0:12:a7:bf:ad:3a:85:8b:26:1e:8f:c4:6b:fd:ac: 7c:3c:79:49:95:2d:ac:92:d0:a7:ad:e3:0c:dd:f4:50:a8:1d: b6:cf:c3:d9:83:0a:e5:6d:81:d3:a3:6a:c8:d6:78:8b:33:23: 0a:54:e0:64:a3:d6:24:5c:7d:55:69:dd:e8:7e:2e:9a:b5:0b: 37:c4:5a:2c:11:0e:03:cf:84:9a:6e:69:59:7d:18:d1:15:19: 41:4f:c0:bb:0f:d7:e5:45:84:f8:de:bb:64:13:57:be:1e:d3: 77:7b:39:68:35:bb:36:b0:1f:02:52:7a:fd:18:4f:0f:27:e3: 67:4d:f0:19:8c:94:16:30:a2:f8:9c:1f:05:ed:ff:42:62:c8: ab:ff:04:5f:6d:04:fb:b0:d8:58:53:62:a0:ac:18:78:96:52: bb:41:01:fc:e6:a5:a8:77:ca:2d:97:d9:84:e4:a5:35:e2:dc: 55:ce:76:1e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMD4nU2J4dJJ71BBnaV4uk8CKmQ8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjQ1QTE3Q0FEQjJCQjJGREM1Nzg2QzI3RTVCRTk1OTYz NkU3RjQwOTAeFw0yNTEyMDIxODE2MjdaFw0yNTEyMDUxOTQ1MjdaMDMxMTAvBgNV BAMTKDhEMTEyRjMwQjM0RUM2NjVBQUYyRjk2QUNFNDdERkZBNzVFNUI1NzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD6tN/J3AbxQPwEqrCkGB0sz7H6 W+8qPaBQ3zQonkdMJ4KZpZIN1812gKQ1g4s8uSGNvCOVZirj8Vs79RHmIA6FxjZq PVZj5E23M6rnD4opbpLhGAeNIry/F1/rtZfQ6BFfiOT3XDOgb/g5tExAzl6AWCZB fQxyQvto76DCepWJ4uvRKNT2sqoKxpSsjsvm9rcByN4DaFd/+/2sfMFW6xZkJoUt 14Zm2pT7I6v0eff+7swhsdqtuXrcFh2KIFWkQuCYpqGokWELmJI+A3gUe+MomDa9 K9IIq9j9NCO28FAdVmTXphj0R0UFO/s1qP0vAoad23PM9ghNfbxUjakmc+i1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjREvMLNOxmWq8vlqzkff+nXltXMwHwYDVR0j BBgwFoAUJFoXytsrsv3FeGwn5b6Vljbn9AkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZjEzYTZlZi0zNDM0LTQ0MDEtYjNlMS02NTE1MzA2NmZiM2UvMC8yNDVBMTdDQURC MkJCMkZEQzU3ODZDMjdFNUJFOTU5NjM2RTdGNDA5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjQ1QTE3Q0FEQjJCQjJGREM1Nzg2QzI3RTVCRTk1OTYzNkU3 RjQwOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmYxM2E2ZWYtMzQzNC00NDAxLWIz ZTEtNjUxNTMwNjZmYjNlLzAvMjQ1QTE3Q0FEQjJCQjJGREM1Nzg2QzI3RTVCRTk1 OTYzNkU3RjQwOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHr6QEm/G/Cc9fTQxs5H1902FcNKqb8M1MBf XyPeW1ALIZDdm72NZCRh6wsmjqd+X2MvZPpomrb3PcqvNDgvU3fRPZI5kbh6ihXV N9ASp7+tOoWLJh6PxGv9rHw8eUmVLayS0Ket4wzd9FCoHbbPw9mDCuVtgdOjasjW eIszIwpU4GSj1iRcfVVp3eh+Lpq1CzfEWiwRDgPPhJpuaVl9GNEVGUFPwLsP1+VF hPjeu2QTV74e03d7OWg1uzawHwJSev0YTw8n42dN8BmMlBYwovicHwXt/0JiyKv/ BF9tBPuw2FhTYqCsGHiWUrtBAfzmpah3yi2X2YTkpTXi3FXOdh4= -----END CERTIFICATE-----Generated at Wed Dec 3 14:48:39 2025 by rpki-client