This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/386d6ba1-1f73-4776-8a6a-4f45120792b1/0/458D9A2B4C22FF5016AE2E24729D23E2BE0DFD33.mft File: 458D9A2B4C22FF5016AE2E24729D23E2BE0DFD33.mft (raw, json) Hash identifier: xIU7osBrdXMRpqQmmpadlyE3agCQ1YDbhAqv+WRmkII= Subject key identifier: 28:A2:53:88:A2:78:2D:C6:CF:1B:B1:C7:3D:85:5A:7D:01:2D:BF:90 Authority key identifier: 45:8D:9A:2B:4C:22:FF:50:16:AE:2E:24:72:9D:23:E2:BE:0D:FD:33 Certificate issuer: /CN=458D9A2B4C22FF5016AE2E24729D23E2BE0DFD33 Certificate serial: 0122725341831340AB7A79725B1F43A4372D8317 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/458D9A2B4C22FF5016AE2E24729D23E2BE0DFD33.cer Subject info access: rsync://repo-rpki.idnic.net/repo/386d6ba1-1f73-4776-8a6a-4f45120792b1/0/458D9A2B4C22FF5016AE2E24729D23E2BE0DFD33.mft Manifest number: 020F Signing time: Tue 02 Dec 2025 03:03:48 +0000 Manifest this update: Tue 02 Dec 2025 02:58:48 +0000 Manifest next update: Fri 05 Dec 2025 14:36:48 +0000 Files and hashes: 1: 458D9A2B4C22FF5016AE2E24729D23E2BE0DFD33.crl (hash: lJ1tp1yiYD/WzVgb3uim6BkM+9nLZUVF8DH17FTZUZU=) 2: 3130332e3139312e35352e302f32342d3234203d3e20313439393133.roa (hash: MzEupSrXlebebmZ66Gd92DusEJ4mRAdQ/8taDo8z+bk=) 3: 323030313a6466303a666534303a3a2f34382d3438203d3e20313439393133.roa (hash: a5a2FZuaU8+YwWyJiNpJaq/a07NXsjnc5SwcHCXziC4=) 4: 3130332e3139312e35342e302f32342d3234203d3e20313439393133.roa (hash: CllgKLcIRd3lX7KQsM2tAZpeFF8Rj9z8kpx3sCEVEDA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/386d6ba1-1f73-4776-8a6a-4f45120792b1/0/458D9A2B4C22FF5016AE2E24729D23E2BE0DFD33.crl rsync://repo-rpki.idnic.net/repo/386d6ba1-1f73-4776-8a6a-4f45120792b1/0/458D9A2B4C22FF5016AE2E24729D23E2BE0DFD33.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/458D9A2B4C22FF5016AE2E24729D23E2BE0DFD33.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 14:36:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:22:72:53:41:83:13:40:ab:7a:79:72:5b:1f:43:a4:37:2d:83:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=458D9A2B4C22FF5016AE2E24729D23E2BE0DFD33 Validity Not Before: Dec 2 02:58:48 2025 GMT Not After : Dec 5 14:36:48 2025 GMT Subject: CN=28A25388A2782DC6CF1BB1C73D855A7D012DBF90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:72:91:37:b9:f0:31:d7:92:41:10:0b:13:a2: cc:a9:86:f6:2e:02:bb:e4:9b:e9:46:15:7d:dc:9f: 8e:60:04:20:7f:96:df:75:63:27:12:13:76:0f:94: c6:04:01:01:8e:9e:bd:ae:9f:56:66:7c:c5:21:92: ab:7a:b3:ab:40:36:a0:32:bf:ec:57:05:e5:ba:1d: 1a:fb:c3:5e:af:28:70:89:da:13:e8:cc:78:f7:fa: 72:31:46:5f:1e:19:ff:3d:20:84:eb:b0:69:ea:8c: 30:c4:77:a7:14:0b:79:d1:75:51:b8:9e:45:16:61: 22:c8:1d:2e:d3:f7:b4:57:a7:14:31:94:dd:e5:47: 14:31:dd:85:45:95:fb:e0:f4:40:dc:9b:85:93:87: 96:5c:5c:c3:18:e3:f2:51:19:eb:f7:ad:ec:0b:55: cd:8e:7f:1e:f4:f4:52:3b:e6:64:0d:ea:ea:1e:bd: dd:40:42:df:ad:f4:1b:24:f3:05:e1:0a:0c:3c:34: 9d:e1:fb:0c:5c:9d:5e:65:f7:aa:96:7a:69:47:e7: 36:8e:c5:15:4b:ed:04:9b:d2:7e:e6:bf:72:8c:0c: 97:ed:d1:ac:67:e8:e5:15:8e:68:2c:cb:9b:7b:22: 23:04:f2:67:c1:9c:42:76:50:ac:7c:85:a9:21:5f: f2:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:A2:53:88:A2:78:2D:C6:CF:1B:B1:C7:3D:85:5A:7D:01:2D:BF:90 X509v3 Authority Key Identifier: keyid:45:8D:9A:2B:4C:22:FF:50:16:AE:2E:24:72:9D:23:E2:BE:0D:FD:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/386d6ba1-1f73-4776-8a6a-4f45120792b1/0/458D9A2B4C22FF5016AE2E24729D23E2BE0DFD33.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/458D9A2B4C22FF5016AE2E24729D23E2BE0DFD33.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/386d6ba1-1f73-4776-8a6a-4f45120792b1/0/458D9A2B4C22FF5016AE2E24729D23E2BE0DFD33.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:4c:63:e6:7e:b9:0c:13:72:74:e0:8b:b0:d1:f0:80:bc:57: a6:93:6d:fe:04:0c:e1:39:23:72:dd:1e:80:5b:ce:3a:7f:19: c6:0e:bb:8b:2f:9b:20:8f:2a:f4:01:8e:fc:f2:a3:8b:f4:11: 02:08:3c:8e:26:29:67:eb:4c:42:dd:07:02:fa:86:61:56:62: 0e:e4:43:ba:74:08:04:15:b9:71:5a:b9:2e:36:33:b4:6f:43: 22:1f:0f:44:cc:68:94:02:f2:33:f2:b8:0e:72:07:3e:c4:40: 0d:69:a3:8d:e3:02:71:8b:88:13:c5:36:ca:e4:48:cb:a4:d1: 24:71:84:1a:e6:b4:ad:69:85:28:08:26:65:54:a6:02:82:0f: 92:dd:aa:11:99:29:9e:09:17:2a:87:62:42:6a:2e:fb:86:bb: b7:85:b3:7d:e7:25:a4:74:13:d5:65:fc:fe:98:c1:85:99:54: 15:2a:d3:3b:6a:bf:ed:96:8a:dc:47:c7:0b:e2:8e:0b:10:a1: cc:15:44:3c:cf:53:2a:dc:64:5d:c0:bd:6d:8a:13:18:86:6a: e2:96:b8:01:67:2f:54:90:94:be:db:54:bc:c4:5d:ce:8b:9b: 32:26:37:c4:7b:2f:50:29:a3:89:6a:73:d1:49:94:2b:39:e1: 47:89:d0:0b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUASJyU0GDE0CrenlyWx9DpDctgxcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDU4RDlBMkI0QzIyRkY1MDE2QUUyRTI0NzI5RDIzRTJC RTBERkQzMzAeFw0yNTEyMDIwMjU4NDhaFw0yNTEyMDUxNDM2NDhaMDMxMTAvBgNV BAMTKDI4QTI1Mzg4QTI3ODJEQzZDRjFCQjFDNzNEODU1QTdEMDEyREJGOTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOcpE3ufAx15JBEAsTosyphvYu Arvkm+lGFX3cn45gBCB/lt91YycSE3YPlMYEAQGOnr2un1ZmfMUhkqt6s6tANqAy v+xXBeW6HRr7w16vKHCJ2hPozHj3+nIxRl8eGf89IITrsGnqjDDEd6cUC3nRdVG4 nkUWYSLIHS7T97RXpxQxlN3lRxQx3YVFlfvg9EDcm4WTh5ZcXMMY4/JRGev3rewL Vc2Ofx709FI75mQN6uoevd1AQt+t9Bsk8wXhCgw8NJ3h+wxcnV5l96qWemlH5zaO xRVL7QSb0n7mv3KMDJft0axn6OUVjmgsy5t7IiME8mfBnEJ2UKx8hakhX/KFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKKJTiKJ4LcbPG7HHPYVafQEtv5AwHwYDVR0j BBgwFoAURY2aK0wi/1AWri4kcp0j4r4N/TMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ODZkNmJhMS0xZjczLTQ3NzYtOGE2YS00ZjQ1MTIwNzkyYjEvMC80NThEOUEyQjRD MjJGRjUwMTZBRTJFMjQ3MjlEMjNFMkJFMERGRDMzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDU4RDlBMkI0QzIyRkY1MDE2QUUyRTI0NzI5RDIzRTJCRTBE RkQzMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzg2ZDZiYTEtMWY3My00Nzc2LThh NmEtNGY0NTEyMDc5MmIxLzAvNDU4RDlBMkI0QzIyRkY1MDE2QUUyRTI0NzI5RDIz RTJCRTBERkQzMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALxMY+Z+uQwTcnTgi7DR8IC8V6aTbf4EDOE5 I3LdHoBbzjp/GcYOu4svmyCPKvQBjvzyo4v0EQIIPI4mKWfrTELdBwL6hmFWYg7k Q7p0CAQVuXFauS42M7RvQyIfD0TMaJQC8jPyuA5yBz7EQA1po43jAnGLiBPFNsrk SMuk0SRxhBrmtK1phSgIJmVUpgKCD5LdqhGZKZ4JFyqHYkJqLvuGu7eFs33nJaR0 E9Vl/P6YwYWZVBUq0ztqv+2WitxHxwvijgsQocwVRDzPUyrcZF3AvW2KExiGauKW uAFnL1SQlL7bVLzEXc6LmzImN8R7L1Apo4lqc9FJlCs54UeJ0As= -----END CERTIFICATE-----Generated at Wed Dec 3 14:43:58 2025 by rpki-client