This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/78d774f4-2300-4e69-a6ca-7cf48002e2fb/0/45422D0C59556C680872F58CC42068EF3ED1BA2E.mft File: 45422D0C59556C680872F58CC42068EF3ED1BA2E.mft (raw, json) Hash identifier: nLsL4OcuQ1O7hXHFI30UnKQO7eu7cdxmDIbmCxeI/og= Subject key identifier: 6F:6D:31:16:B4:C6:5F:35:E3:AF:64:A6:39:BF:DD:30:FB:CF:39:A1 Authority key identifier: 45:42:2D:0C:59:55:6C:68:08:72:F5:8C:C4:20:68:EF:3E:D1:BA:2E Certificate issuer: /CN=45422D0C59556C680872F58CC42068EF3ED1BA2E Certificate serial: 138B6D538017FA20A2C9AB293516C37B23EB2BBF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45422D0C59556C680872F58CC42068EF3ED1BA2E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/78d774f4-2300-4e69-a6ca-7cf48002e2fb/0/45422D0C59556C680872F58CC42068EF3ED1BA2E.mft Manifest number: 0258 Signing time: Mon 01 Dec 2025 21:21:08 +0000 Manifest this update: Mon 01 Dec 2025 21:16:08 +0000 Manifest next update: Fri 05 Dec 2025 07:49:08 +0000 Files and hashes: 1: 3130332e3137322e3132302e302f32332d3234203d3e20313432333938.roa (hash: pXYOCZxRABB//TtVnh1gM8sswwbpc2HW8vVv8Mpvxgk=) 2: 45422D0C59556C680872F58CC42068EF3ED1BA2E.crl (hash: ttSrDLPIQo2ZP5ZuzhGuHrllzbWq4cK/6Z5i/wDcOmw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/78d774f4-2300-4e69-a6ca-7cf48002e2fb/0/45422D0C59556C680872F58CC42068EF3ED1BA2E.crl rsync://repo-rpki.idnic.net/repo/78d774f4-2300-4e69-a6ca-7cf48002e2fb/0/45422D0C59556C680872F58CC42068EF3ED1BA2E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45422D0C59556C680872F58CC42068EF3ED1BA2E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 07:49:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:8b:6d:53:80:17:fa:20:a2:c9:ab:29:35:16:c3:7b:23:eb:2b:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45422D0C59556C680872F58CC42068EF3ED1BA2E Validity Not Before: Dec 1 21:16:08 2025 GMT Not After : Dec 5 07:49:08 2025 GMT Subject: CN=6F6D3116B4C65F35E3AF64A639BFDD30FBCF39A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:d2:77:24:9a:65:e8:2c:81:00:b6:08:44:5c: 17:33:5e:a6:e3:ac:e8:3c:58:77:e1:86:17:0f:91: 0a:47:c1:02:8f:95:75:18:ad:22:a1:83:37:b3:1e: 62:af:74:18:3f:23:8b:84:17:ea:68:b7:13:b0:80: 63:84:51:dd:1c:d7:96:8d:b4:88:e1:ca:e4:db:4e: 04:37:0f:68:04:44:40:66:09:97:c8:6b:22:9b:bb: 23:89:67:38:52:a7:74:06:0d:ad:4a:15:76:56:89: c9:4c:b7:f7:5b:4a:2a:bd:61:ca:eb:ca:af:fc:70: c6:19:39:95:ca:c9:4e:10:ae:d1:3b:dd:49:80:6d: 3f:33:56:7d:f6:42:ab:a3:4b:05:49:75:d4:63:47: 5b:92:4c:98:c7:cb:75:31:74:a0:b5:70:47:77:11: bb:2b:78:64:5f:19:2c:12:06:07:19:79:56:e2:d9: 2b:9c:27:d3:68:73:5b:30:20:04:c2:52:aa:e2:1a: 7e:37:5f:c9:f9:10:70:ab:3d:6b:83:8c:44:9c:d7: 3c:2c:2a:d7:5d:e3:a5:e5:b6:31:79:bc:9f:dc:94: 86:d3:35:7b:65:79:3a:e2:88:cb:53:b2:f4:27:23: 4e:74:51:85:b2:fa:dd:91:c5:36:27:df:a5:56:e5: be:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:6D:31:16:B4:C6:5F:35:E3:AF:64:A6:39:BF:DD:30:FB:CF:39:A1 X509v3 Authority Key Identifier: keyid:45:42:2D:0C:59:55:6C:68:08:72:F5:8C:C4:20:68:EF:3E:D1:BA:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/78d774f4-2300-4e69-a6ca-7cf48002e2fb/0/45422D0C59556C680872F58CC42068EF3ED1BA2E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45422D0C59556C680872F58CC42068EF3ED1BA2E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/78d774f4-2300-4e69-a6ca-7cf48002e2fb/0/45422D0C59556C680872F58CC42068EF3ED1BA2E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:f7:50:93:20:94:0e:e4:aa:9f:ca:b9:68:d3:a1:5c:8f:0c: 73:90:45:d0:a3:80:b5:97:2f:2c:26:47:37:19:a8:11:e3:4f: 5d:73:80:70:56:0d:ef:2b:ce:78:a1:6d:46:11:ad:53:24:76: 76:4b:21:20:89:d7:d7:cd:e5:86:1e:b7:c1:6d:39:05:07:c2: 2e:f2:94:a7:cc:07:75:03:56:98:86:b1:58:01:07:44:76:52: f2:95:66:c4:d7:1f:17:f8:99:1e:65:b1:b0:8d:82:2b:f5:a5: 9b:91:ee:a1:0b:b3:8c:98:00:ef:e9:8d:27:2a:41:90:5a:7a: 66:e0:66:b9:b6:05:31:ad:f7:69:6e:0b:1c:33:95:e9:89:af: 6c:dc:55:7d:f1:b8:b7:b9:fd:e0:3f:4e:10:22:5f:d0:87:27: 2e:20:18:7e:13:fd:46:de:f6:bf:be:2f:0a:d6:41:2c:5f:c3: a9:0c:cd:87:3b:8e:55:8d:61:c1:85:9f:6f:df:d4:38:0c:52: f1:af:94:67:c9:28:48:01:50:76:63:c3:94:3f:0e:ed:ae:d1: 9b:4a:7e:1d:10:ca:88:4a:d4:52:6a:61:2f:00:33:17:27:85: 3a:56:43:18:b5:72:84:52:a7:9e:7f:72:97:3e:18:f7:92:f1: 97:85:c7:4d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE4ttU4AX+iCiyaspNRbDeyPrK78wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDU0MjJEMEM1OTU1NkM2ODA4NzJGNThDQzQyMDY4RUYz RUQxQkEyRTAeFw0yNTEyMDEyMTE2MDhaFw0yNTEyMDUwNzQ5MDhaMDMxMTAvBgNV BAMTKDZGNkQzMTE2QjRDNjVGMzVFM0FGNjRBNjM5QkZERDMwRkJDRjM5QTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu0nckmmXoLIEAtghEXBczXqbj rOg8WHfhhhcPkQpHwQKPlXUYrSKhgzezHmKvdBg/I4uEF+potxOwgGOEUd0c15aN tIjhyuTbTgQ3D2gEREBmCZfIayKbuyOJZzhSp3QGDa1KFXZWiclMt/dbSiq9Ycrr yq/8cMYZOZXKyU4QrtE73UmAbT8zVn32QqujSwVJddRjR1uSTJjHy3UxdKC1cEd3 EbsreGRfGSwSBgcZeVbi2SucJ9Noc1swIATCUqriGn43X8n5EHCrPWuDjESc1zws Ktdd46XltjF5vJ/clIbTNXtleTriiMtTsvQnI050UYWy+t2RxTYn36VW5b7tAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUb20xFrTGXzXjr2SmOb/dMPvPOaEwHwYDVR0j BBgwFoAURUItDFlVbGgIcvWMxCBo7z7Rui4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 OGQ3NzRmNC0yMzAwLTRlNjktYTZjYS03Y2Y0ODAwMmUyZmIvMC80NTQyMkQwQzU5 NTU2QzY4MDg3MkY1OENDNDIwNjhFRjNFRDFCQTJFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDU0MjJEMEM1OTU1NkM2ODA4NzJGNThDQzQyMDY4RUYzRUQx QkEyRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzhkNzc0ZjQtMjMwMC00ZTY5LWE2 Y2EtN2NmNDgwMDJlMmZiLzAvNDU0MjJEMEM1OTU1NkM2ODA4NzJGNThDQzQyMDY4 RUYzRUQxQkEyRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHr3UJMglA7kqp/KuWjToVyPDHOQRdCjgLWX LywmRzcZqBHjT11zgHBWDe8rznihbUYRrVMkdnZLISCJ19fN5YYet8FtOQUHwi7y lKfMB3UDVpiGsVgBB0R2UvKVZsTXHxf4mR5lsbCNgiv1pZuR7qELs4yYAO/pjScq QZBaembgZrm2BTGt92luCxwzlemJr2zcVX3xuLe5/eA/ThAiX9CHJy4gGH4T/Ube 9r++LwrWQSxfw6kMzYc7jlWNYcGFn2/f1DgMUvGvlGfJKEgBUHZjw5Q/Du2u0ZtK fh0QyohK1FJqYS8AMxcnhTpWQxi1coRSp55/cpc+GPeS8ZeFx00= -----END CERTIFICATE-----Generated at Wed Dec 3 15:49:21 2025 by rpki-client