This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/91dc71cd-acca-415c-b283-b9372c0d4ce8/0/456E5E4F039DBA0492D11A1873B7ECBBAC67A940.mft File: 456E5E4F039DBA0492D11A1873B7ECBBAC67A940.mft (raw, json) Hash identifier: 8zoTzGfuMuZ48oBfyvLWxbPlAOI0usYOzGguKs0nJsw= Subject key identifier: 59:7C:F2:35:9C:60:36:63:FB:93:E4:62:D0:1B:03:32:CD:CE:9D:3E Authority key identifier: 45:6E:5E:4F:03:9D:BA:04:92:D1:1A:18:73:B7:EC:BB:AC:67:A9:40 Certificate issuer: /CN=456E5E4F039DBA0492D11A1873B7ECBBAC67A940 Certificate serial: 0BFC85B1026B49646C9D40567C94D615BD07E039 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/456E5E4F039DBA0492D11A1873B7ECBBAC67A940.cer Subject info access: rsync://repo-rpki.idnic.net/repo/91dc71cd-acca-415c-b283-b9372c0d4ce8/0/456E5E4F039DBA0492D11A1873B7ECBBAC67A940.mft Manifest number: 01C2 Signing time: Sat 13 Dec 2025 00:12:01 +0000 Manifest this update: Sat 13 Dec 2025 00:07:01 +0000 Manifest next update: Tue 16 Dec 2025 04:13:01 +0000 Files and hashes: 1: 3130332e3130312e3134332e302f32342d3234203d3e20313339393637.roa (hash: 0veKivESqTIR22CLe0BQKZVbkyyZLitqVchvnzV7aBw=) 2: 456E5E4F039DBA0492D11A1873B7ECBBAC67A940.crl (hash: E+wAcCXrPS1POQffu4xy+rkFZ66wRXMk9K4ewZhQ9pE=) 3: 3130332e3130312e3134322e302f32342d3234203d3e20313530393330.roa (hash: KMcz9HndxaUeKt8rn5FI6Dp+4OSaacNz41TOKfq1iXs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/91dc71cd-acca-415c-b283-b9372c0d4ce8/0/456E5E4F039DBA0492D11A1873B7ECBBAC67A940.crl rsync://repo-rpki.idnic.net/repo/91dc71cd-acca-415c-b283-b9372c0d4ce8/0/456E5E4F039DBA0492D11A1873B7ECBBAC67A940.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/456E5E4F039DBA0492D11A1873B7ECBBAC67A940.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Dec 2025 04:13:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:fc:85:b1:02:6b:49:64:6c:9d:40:56:7c:94:d6:15:bd:07:e0:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=456E5E4F039DBA0492D11A1873B7ECBBAC67A940 Validity Not Before: Dec 13 00:07:01 2025 GMT Not After : Dec 16 04:13:01 2025 GMT Subject: CN=597CF2359C603663FB93E462D01B0332CDCE9D3E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ab:89:f1:2b:76:ab:91:96:38:16:d0:cc:c0: fb:c9:5f:2e:4d:9a:1e:83:58:63:33:a1:34:bb:4f: 8b:28:ee:f4:85:3c:d9:86:ce:83:b1:c4:5a:8a:58: 85:1d:ad:d8:6d:be:7c:1e:38:cb:cd:8e:a0:06:09: 28:47:ed:07:56:6b:03:e8:bb:9a:98:64:c1:96:b7: 64:d0:64:0d:7d:c4:95:34:c6:5e:ee:c7:41:e0:a1: 57:04:5c:79:21:73:08:7f:45:e8:a0:67:bb:bc:be: 87:e2:89:01:c0:76:b4:74:45:11:13:80:84:3a:6d: 85:7b:98:c5:a8:dd:6d:82:57:57:c2:0e:f2:0c:17: dd:74:72:6b:a3:94:30:2b:da:b9:3f:d9:a2:5b:68: 9b:87:4d:25:12:e8:9d:77:65:af:f1:8e:a2:d0:00: 9d:2a:3a:af:77:e2:43:f8:2d:4e:ba:c6:71:75:89: fe:ca:84:b2:9c:cd:01:e5:a4:fc:35:9f:a0:37:68: d0:0d:24:6c:b6:d2:18:09:15:39:a3:fc:4e:5d:5a: fd:e5:dd:65:cc:09:65:94:0e:c1:79:e4:86:94:a0: 26:4f:48:d3:7d:09:db:26:bb:b1:73:33:2e:10:25: e3:62:76:66:f7:eb:b1:ad:97:fc:77:60:dd:bb:0e: da:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:7C:F2:35:9C:60:36:63:FB:93:E4:62:D0:1B:03:32:CD:CE:9D:3E X509v3 Authority Key Identifier: keyid:45:6E:5E:4F:03:9D:BA:04:92:D1:1A:18:73:B7:EC:BB:AC:67:A9:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/91dc71cd-acca-415c-b283-b9372c0d4ce8/0/456E5E4F039DBA0492D11A1873B7ECBBAC67A940.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/456E5E4F039DBA0492D11A1873B7ECBBAC67A940.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/91dc71cd-acca-415c-b283-b9372c0d4ce8/0/456E5E4F039DBA0492D11A1873B7ECBBAC67A940.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ef:d0:46:99:07:fc:99:cb:8e:08:04:05:93:cb:24:cf:33:3a: de:f8:4f:2d:f8:c9:ce:b0:ba:5a:e3:28:28:d5:84:b0:cb:c6: 41:be:1e:69:aa:54:58:98:a8:c3:a6:2e:17:43:94:b7:ef:e4: f9:a2:03:74:b3:96:e5:75:5b:04:7c:f9:82:15:b2:e1:bc:ce: 00:1a:c5:e7:31:ed:73:42:31:1b:66:fd:89:15:bc:9a:3e:2a: 52:31:dd:01:84:ae:f5:51:11:c8:9e:e1:12:da:2a:c8:bd:d3: 6b:e3:1c:ca:b5:ac:3e:cf:97:4a:ef:af:7e:fd:d6:df:53:dd: 8b:f7:43:5f:b6:ed:7e:02:1a:db:f4:6d:57:af:58:9b:20:78: 40:8a:97:ee:7a:3b:96:33:78:c0:90:89:ab:be:cd:79:9e:dc: 6f:b3:5a:bc:4f:22:6a:80:98:6f:f9:92:36:51:bb:72:2b:bb: 9b:c9:fd:19:9b:a5:e9:5d:16:c0:da:49:b2:d0:66:c6:13:41: f2:5a:e4:c5:45:d6:6a:ef:ae:2b:21:05:01:82:5d:d8:19:d4: bb:c9:0e:b5:1b:df:c8:37:20:9e:65:9e:16:7b:6d:f8:2a:d1: d2:af:ad:38:b3:18:14:63:7a:8b:e0:04:59:e4:c6:84:6f:c6: db:0b:4c:e0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC/yFsQJrSWRsnUBWfJTWFb0H4DkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDU2RTVFNEYwMzlEQkEwNDkyRDExQTE4NzNCN0VDQkJB QzY3QTk0MDAeFw0yNTEyMTMwMDA3MDFaFw0yNTEyMTYwNDEzMDFaMDMxMTAvBgNV BAMTKDU5N0NGMjM1OUM2MDM2NjNGQjkzRTQ2MkQwMUIwMzMyQ0RDRTlEM0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBq4nxK3arkZY4FtDMwPvJXy5N mh6DWGMzoTS7T4so7vSFPNmGzoOxxFqKWIUdrdhtvnweOMvNjqAGCShH7QdWawPo u5qYZMGWt2TQZA19xJU0xl7ux0HgoVcEXHkhcwh/ReigZ7u8vofiiQHAdrR0RRET gIQ6bYV7mMWo3W2CV1fCDvIMF910cmujlDAr2rk/2aJbaJuHTSUS6J13Za/xjqLQ AJ0qOq934kP4LU66xnF1if7KhLKczQHlpPw1n6A3aNANJGy20hgJFTmj/E5dWv3l 3WXMCWWUDsF55IaUoCZPSNN9Cdsmu7FzMy4QJeNidmb367Gtl/x3YN27DtrbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWXzyNZxgNmP7k+Ri0BsDMs3OnT4wHwYDVR0j BBgwFoAURW5eTwOdugSS0RoYc7fsu6xnqUAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MWRjNzFjZC1hY2NhLTQxNWMtYjI4My1iOTM3MmMwZDRjZTgvMC80NTZFNUU0RjAz OURCQTA0OTJEMTFBMTg3M0I3RUNCQkFDNjdBOTQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDU2RTVFNEYwMzlEQkEwNDkyRDExQTE4NzNCN0VDQkJBQzY3 QTk0MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTFkYzcxY2QtYWNjYS00MTVjLWIy ODMtYjkzNzJjMGQ0Y2U4LzAvNDU2RTVFNEYwMzlEQkEwNDkyRDExQTE4NzNCN0VD QkJBQzY3QTk0MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAO/QRpkH/JnLjggEBZPLJM8zOt74Ty34yc6w ulrjKCjVhLDLxkG+HmmqVFiYqMOmLhdDlLfv5PmiA3SzluV1WwR8+YIVsuG8zgAa xecx7XNCMRtm/YkVvJo+KlIx3QGErvVREcie4RLaKsi902vjHMq1rD7Pl0rvr379 1t9T3Yv3Q1+27X4CGtv0bVevWJsgeECKl+56O5YzeMCQiau+zXme3G+zWrxPImqA mG/5kjZRu3Iru5vJ/RmbpeldFsDaSbLQZsYTQfJa5MVF1mrvrishBQGCXdgZ1LvJ DrUb38g3IJ5lnhZ7bfgq0dKvrTizGBRjeovgBFnkxoRvxtsLTOA= -----END CERTIFICATE-----Generated at Sun Dec 14 07:46:28 2025 by rpki-client