This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/994bef37-745b-4fff-bb1f-aff1f33f5e5a/0/45E8125013BA38DADC26B1346024A7493BEC69FE.mft File: 45E8125013BA38DADC26B1346024A7493BEC69FE.mft (raw, json) Hash identifier: s91FaERBoHKuMleUnzhY4GQySjVI51PO5k+dDVD5yFc= Subject key identifier: 65:23:E7:7F:F0:83:7B:30:40:9D:06:57:C7:43:A3:15:3C:43:A9:E3 Authority key identifier: 45:E8:12:50:13:BA:38:DA:DC:26:B1:34:60:24:A7:49:3B:EC:69:FE Certificate issuer: /CN=45E8125013BA38DADC26B1346024A7493BEC69FE Certificate serial: 74DE3F6D543F3AFC7D0550D0A4034A33986A89F2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45E8125013BA38DADC26B1346024A7493BEC69FE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/994bef37-745b-4fff-bb1f-aff1f33f5e5a/0/45E8125013BA38DADC26B1346024A7493BEC69FE.mft Manifest number: 0222 Signing time: Wed 03 Dec 2025 01:31:37 +0000 Manifest this update: Wed 03 Dec 2025 01:26:37 +0000 Manifest next update: Sat 06 Dec 2025 12:04:37 +0000 Files and hashes: 1: 45E8125013BA38DADC26B1346024A7493BEC69FE.crl (hash: qHa7B7xF+AbONZ61ef416IHstdN8vSc4X2LDRQDBX1w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/994bef37-745b-4fff-bb1f-aff1f33f5e5a/0/45E8125013BA38DADC26B1346024A7493BEC69FE.crl rsync://repo-rpki.idnic.net/repo/994bef37-745b-4fff-bb1f-aff1f33f5e5a/0/45E8125013BA38DADC26B1346024A7493BEC69FE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45E8125013BA38DADC26B1346024A7493BEC69FE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:04:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:de:3f:6d:54:3f:3a:fc:7d:05:50:d0:a4:03:4a:33:98:6a:89:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45E8125013BA38DADC26B1346024A7493BEC69FE Validity Not Before: Dec 3 01:26:37 2025 GMT Not After : Dec 6 12:04:37 2025 GMT Subject: CN=6523E77FF0837B30409D0657C743A3153C43A9E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:77:27:8d:90:bb:9c:51:91:e9:d8:b3:ab:54: b0:72:36:43:b1:8f:ca:00:3c:55:0c:2f:10:4a:8b: 19:c5:9e:98:2a:46:0c:40:c8:68:29:0e:00:19:4a: c1:ad:19:45:cb:42:c6:b9:aa:c1:85:84:d1:77:dc: 79:9e:c2:a8:8b:04:af:55:28:26:4e:71:27:55:86: 79:3b:06:34:b9:18:95:e9:0b:4c:31:9e:a5:95:43: 00:ed:b5:2b:15:e5:d9:34:34:e0:1c:14:de:38:22: 02:ae:49:64:a8:88:e9:2d:d5:f3:c1:7d:9f:7b:c2: 9b:e2:a3:63:27:11:f8:b3:c1:04:c2:33:10:ed:0c: fe:a2:0a:c9:c7:e5:7a:e6:0b:43:a6:9e:ff:e8:f7: 86:1e:d9:42:c9:73:d1:cd:c0:de:d4:c2:ab:ba:df: 67:b3:db:2b:fd:e9:12:21:6b:1d:6e:91:dc:94:8b: 7a:5e:6b:d4:7f:14:e6:1e:15:f7:93:c0:e0:b2:01: 27:5e:98:7a:83:47:04:e9:df:45:0f:c5:75:fc:1a: de:35:d7:4c:0e:33:96:e8:0a:f6:bb:97:c0:28:d2: c4:32:93:96:9d:67:1a:b7:03:cb:a1:8e:7c:13:cb: 54:65:75:05:c6:26:e3:0b:d7:45:0b:3c:00:b1:5d: 34:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:23:E7:7F:F0:83:7B:30:40:9D:06:57:C7:43:A3:15:3C:43:A9:E3 X509v3 Authority Key Identifier: keyid:45:E8:12:50:13:BA:38:DA:DC:26:B1:34:60:24:A7:49:3B:EC:69:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/994bef37-745b-4fff-bb1f-aff1f33f5e5a/0/45E8125013BA38DADC26B1346024A7493BEC69FE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45E8125013BA38DADC26B1346024A7493BEC69FE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/994bef37-745b-4fff-bb1f-aff1f33f5e5a/0/45E8125013BA38DADC26B1346024A7493BEC69FE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:3f:90:84:37:8d:13:f3:5d:27:47:e2:16:49:6a:b3:db:cd: 09:a0:e8:35:10:4b:8b:ef:12:c7:b6:49:34:1b:ba:79:56:c3: f9:af:72:59:a7:1c:1c:e5:e8:c0:65:11:f2:39:93:c8:47:23: fa:93:8f:64:28:d9:29:c9:75:07:6c:1b:d4:4f:5d:49:ca:57: c7:60:69:c7:29:5e:6e:34:1b:a3:e4:40:6b:3f:a8:71:e1:c3: 1c:25:9f:ea:3e:5d:4f:32:29:ea:50:78:fd:51:3c:be:b5:00: cc:78:c9:42:7d:53:73:e2:c0:df:e0:19:ce:59:41:b1:a5:6a: eb:c8:8b:24:07:10:be:68:21:ad:a2:8f:72:b6:b6:6a:cb:68: 93:5d:4f:69:e0:a1:44:a1:cc:d6:36:e0:fe:78:38:2f:cc:7f: 46:03:fc:2e:c8:6e:58:46:b6:d8:10:db:61:7e:ba:6a:f0:6e: 93:b6:92:90:ce:92:42:f7:09:c4:fd:47:77:39:18:fd:c7:54: 47:96:4c:4a:e4:8a:0d:ce:88:e0:eb:2e:b9:24:3f:71:e8:9d: b0:9b:1d:55:79:b7:97:72:ce:72:21:26:bf:17:64:ea:03:5a: ee:e5:19:4b:42:2d:c9:93:73:31:4c:c7:b3:59:74:d9:29:54: ef:a4:7e:7e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdN4/bVQ/Ovx9BVDQpANKM5hqifIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDVFODEyNTAxM0JBMzhEQURDMjZCMTM0NjAyNEE3NDkz QkVDNjlGRTAeFw0yNTEyMDMwMTI2MzdaFw0yNTEyMDYxMjA0MzdaMDMxMTAvBgNV BAMTKDY1MjNFNzdGRjA4MzdCMzA0MDlEMDY1N0M3NDNBMzE1M0M0M0E5RTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMdyeNkLucUZHp2LOrVLByNkOx j8oAPFUMLxBKixnFnpgqRgxAyGgpDgAZSsGtGUXLQsa5qsGFhNF33HmewqiLBK9V KCZOcSdVhnk7BjS5GJXpC0wxnqWVQwDttSsV5dk0NOAcFN44IgKuSWSoiOkt1fPB fZ97wpvio2MnEfizwQTCMxDtDP6iCsnH5XrmC0Omnv/o94Ye2ULJc9HNwN7Uwqu6 32ez2yv96RIhax1ukdyUi3pea9R/FOYeFfeTwOCyASdemHqDRwTp30UPxXX8Gt41 10wOM5boCva7l8Ao0sQyk5adZxq3A8uhjnwTy1RldQXGJuML10ULPACxXTSFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZSPnf/CDezBAnQZXx0OjFTxDqeMwHwYDVR0j BBgwFoAURegSUBO6ONrcJrE0YCSnSTvsaf4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 OTRiZWYzNy03NDViLTRmZmYtYmIxZi1hZmYxZjMzZjVlNWEvMC80NUU4MTI1MDEz QkEzOERBREMyNkIxMzQ2MDI0QTc0OTNCRUM2OUZFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDVFODEyNTAxM0JBMzhEQURDMjZCMTM0NjAyNEE3NDkzQkVD NjlGRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTk0YmVmMzctNzQ1Yi00ZmZmLWJi MWYtYWZmMWYzM2Y1ZTVhLzAvNDVFODEyNTAxM0JBMzhEQURDMjZCMTM0NjAyNEE3 NDkzQkVDNjlGRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAI/kIQ3jRPzXSdH4hZJarPbzQmg6DUQS4vv Ese2STQbunlWw/mvclmnHBzl6MBlEfI5k8hHI/qTj2Qo2SnJdQdsG9RPXUnKV8dg accpXm40G6PkQGs/qHHhwxwln+o+XU8yKepQeP1RPL61AMx4yUJ9U3PiwN/gGc5Z QbGlauvIiyQHEL5oIa2ij3K2tmrLaJNdT2ngoUShzNY24P54OC/Mf0YD/C7IblhG ttgQ22F+umrwbpO2kpDOkkL3CcT9R3c5GP3HVEeWTErkig3OiODrLrkkP3HonbCb HVV5t5dyznIhJr8XZOoDWu7lGUtCLcmTczFMx7NZdNkpVO+kfn4= -----END CERTIFICATE-----Generated at Wed Dec 3 14:47:42 2025 by rpki-client