This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/994bef37-745b-4fff-bb1f-aff1f33f5e5a/0/45E8125013BA38DADC26B1346024A7493BEC69FE.mft
File: 45E8125013BA38DADC26B1346024A7493BEC69FE.mft (raw, json)
Hash identifier: tUNqB2DQS582C/paMWzouDXHSZbI/PqHAVTEKr67lPE=
Subject key identifier: 02:BB:E2:E0:F4:49:DA:67:BA:BB:86:61:4C:03:C8:E7:1D:EF:E2:43
Authority key identifier: 45:E8:12:50:13:BA:38:DA:DC:26:B1:34:60:24:A7:49:3B:EC:69:FE
Certificate issuer: /CN=45E8125013BA38DADC26B1346024A7493BEC69FE
Certificate serial: 16B1A144A59F558A7439A04FA036C324CF168E1E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45E8125013BA38DADC26B1346024A7493BEC69FE.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/994bef37-745b-4fff-bb1f-aff1f33f5e5a/0/45E8125013BA38DADC26B1346024A7493BEC69FE.mft
Manifest number: 023C
Signing time: Sat 31 Jan 2026 11:41:38 +0000
Manifest this update: Sat 31 Jan 2026 11:36:38 +0000
Manifest next update: Tue 03 Feb 2026 12:09:38 +0000
Files and hashes: 1: 45E8125013BA38DADC26B1346024A7493BEC69FE.crl (hash: Sdf29D3iv25MVrqP4YKO6b/3e4ZDdmjIfGy9YI5dWvc=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/994bef37-745b-4fff-bb1f-aff1f33f5e5a/0/45E8125013BA38DADC26B1346024A7493BEC69FE.crl
rsync://repo-rpki.idnic.net/repo/994bef37-745b-4fff-bb1f-aff1f33f5e5a/0/45E8125013BA38DADC26B1346024A7493BEC69FE.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45E8125013BA38DADC26B1346024A7493BEC69FE.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Feb 2026 12:09:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:b1:a1:44:a5:9f:55:8a:74:39:a0:4f:a0:36:c3:24:cf:16:8e:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45E8125013BA38DADC26B1346024A7493BEC69FE
Validity
Not Before: Jan 31 11:36:38 2026 GMT
Not After : Feb 3 12:09:38 2026 GMT
Subject: CN=02BBE2E0F449DA67BABB86614C03C8E71DEFE243
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:9e:6e:71:67:2f:a5:46:10:5a:1e:27:bb:1b:
69:d7:08:a6:5d:30:f1:c1:fa:4f:7b:b0:c8:44:95:
52:61:b3:4b:fd:5d:ea:df:d7:07:85:cb:83:7f:b4:
7c:65:46:1f:9f:46:ce:b2:1b:50:ed:fa:e8:63:39:
f8:cb:1b:b0:6c:5f:01:c7:7b:31:3b:2d:1e:37:2a:
08:ec:c6:07:64:97:08:c4:74:16:a6:12:8c:78:b9:
92:41:9a:be:ab:cc:44:d0:cf:93:66:3c:a9:31:f6:
71:8f:d5:82:3d:bc:6a:bd:fd:f8:a8:b4:dd:2e:7d:
dd:18:aa:0f:07:ba:2b:c2:ed:fd:27:01:be:f2:38:
1b:a7:d2:41:41:6f:df:46:c9:64:98:3d:a7:14:53:
29:a6:51:9a:fe:94:36:c2:9a:7e:f5:14:35:33:db:
3c:a9:2e:72:a3:37:eb:63:d7:de:eb:b9:3d:bb:0f:
75:94:fa:24:56:9a:e0:e9:ef:01:36:73:41:0b:cf:
5a:92:6b:6f:d5:7c:c9:cd:8b:d8:58:cb:cf:25:c0:
c3:89:21:96:b5:64:0f:3a:64:dc:63:a0:d6:bf:c8:
6e:71:7b:3d:ab:ea:5a:ef:52:c9:c3:83:c8:b3:8e:
e6:89:aa:7d:21:3e:7f:a1:46:1d:c1:18:21:67:dd:
82:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:BB:E2:E0:F4:49:DA:67:BA:BB:86:61:4C:03:C8:E7:1D:EF:E2:43
X509v3 Authority Key Identifier:
keyid:45:E8:12:50:13:BA:38:DA:DC:26:B1:34:60:24:A7:49:3B:EC:69:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/994bef37-745b-4fff-bb1f-aff1f33f5e5a/0/45E8125013BA38DADC26B1346024A7493BEC69FE.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45E8125013BA38DADC26B1346024A7493BEC69FE.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/994bef37-745b-4fff-bb1f-aff1f33f5e5a/0/45E8125013BA38DADC26B1346024A7493BEC69FE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:36:59:9f:33:ed:f0:cc:3c:a4:61:f6:c6:dc:68:5a:53:33:
08:68:db:1b:4d:f9:2f:b7:36:ee:f5:45:90:80:ca:fe:87:5d:
66:2d:69:8f:06:72:44:78:7f:2d:dc:36:71:ab:65:fd:73:15:
33:c2:0a:c7:03:81:31:57:af:3c:ed:d1:6b:0d:cc:e5:4c:8e:
2d:be:c6:cc:68:a7:84:7e:4d:a1:a0:98:4a:31:e2:f4:92:d7:
b4:58:42:9d:88:aa:ce:0f:8f:93:3d:f9:d5:13:51:68:87:4a:
fe:a1:39:69:28:4c:43:a3:e8:6f:5b:97:f1:ac:8a:cb:30:66:
ab:43:a6:f9:28:7a:eb:06:da:49:b2:98:63:a7:7b:32:2f:6f:
39:37:c5:b7:61:b8:d3:32:9d:6c:7b:7a:b2:e3:9b:f0:48:a3:
36:69:15:dd:8d:6c:14:0e:41:f2:b4:cc:e2:d3:bb:1f:a0:5e:
32:2b:25:17:66:6f:72:fe:67:e5:99:80:aa:2d:12:6f:cb:25:
8d:40:a0:13:ba:92:4a:1d:d3:c9:9a:99:0e:95:4e:6d:c9:68:
08:2e:97:42:25:d0:d7:94:36:f0:6b:10:37:7e:80:6c:e9:dc:
6f:8e:a8:e8:4b:ce:5d:0c:6f:e6:22:1d:3d:12:14:68:cf:b3:
0c:f1:22:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:43:48 2026 by rpki-client