This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/9be9f8d8-6ef9-472f-84f0-bb97f1f50ce7/0/45C573917C39C2CCF38654E237AB8B4CF23929FD.mft File: 45C573917C39C2CCF38654E237AB8B4CF23929FD.mft (raw, json) Hash identifier: ZJBOIEy2xZcylql7vyw1IsntZQgKPQXMNTHZthlJeSo= Subject key identifier: C4:4B:BD:3E:35:58:48:C7:31:69:90:01:A4:F9:E9:1D:98:06:FD:39 Authority key identifier: 45:C5:73:91:7C:39:C2:CC:F3:86:54:E2:37:AB:8B:4C:F2:39:29:FD Certificate issuer: /CN=45C573917C39C2CCF38654E237AB8B4CF23929FD Certificate serial: 16B9848A4D31424BD956DD56DE0DC621DF85824C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45C573917C39C2CCF38654E237AB8B4CF23929FD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9be9f8d8-6ef9-472f-84f0-bb97f1f50ce7/0/45C573917C39C2CCF38654E237AB8B4CF23929FD.mft Manifest number: 0257 Signing time: Tue 02 Dec 2025 14:22:29 +0000 Manifest this update: Tue 02 Dec 2025 14:17:29 +0000 Manifest next update: Fri 05 Dec 2025 21:26:29 +0000 Files and hashes: 1: 45C573917C39C2CCF38654E237AB8B4CF23929FD.crl (hash: FP35s3PAKGIZXEmndWFcMc2QJztc/5he8q/Hr/mP6dM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9be9f8d8-6ef9-472f-84f0-bb97f1f50ce7/0/45C573917C39C2CCF38654E237AB8B4CF23929FD.crl rsync://repo-rpki.idnic.net/repo/9be9f8d8-6ef9-472f-84f0-bb97f1f50ce7/0/45C573917C39C2CCF38654E237AB8B4CF23929FD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45C573917C39C2CCF38654E237AB8B4CF23929FD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 21:26:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:b9:84:8a:4d:31:42:4b:d9:56:dd:56:de:0d:c6:21:df:85:82:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45C573917C39C2CCF38654E237AB8B4CF23929FD Validity Not Before: Dec 2 14:17:29 2025 GMT Not After : Dec 5 21:26:29 2025 GMT Subject: CN=C44BBD3E355848C731699001A4F9E91D9806FD39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:a7:ca:7d:ab:75:4f:a9:b9:64:fa:84:09:2e: 9f:76:86:0a:d3:ea:17:fd:be:3c:8e:c7:0a:a3:cd: 98:4f:68:d8:a5:a6:ff:bd:19:5c:a3:82:b2:57:b1: 83:6e:ff:81:99:26:df:b8:58:ee:93:8a:89:06:53: d0:92:0f:b1:32:78:07:44:be:87:21:cf:07:02:53: 44:ed:cb:c6:f6:2d:e3:01:1c:b1:77:43:91:01:d8: 3b:71:4c:a7:35:c1:f5:53:26:62:d8:59:cb:a8:9f: 4d:24:72:d1:03:4b:68:62:cc:dd:72:83:59:77:fe: 1c:5b:f3:8d:86:d3:10:19:61:1c:ce:90:6a:c8:88: b2:8e:32:55:54:76:e7:a3:fe:7e:08:8c:79:ef:31: 99:2d:5e:3b:f2:6a:42:9f:2c:25:ad:cd:ce:54:bc: 54:fc:84:02:84:f0:fe:fa:c2:93:04:12:27:cb:84: c0:9b:b6:24:10:d9:9e:94:52:ff:06:42:36:95:f3: 5e:df:2a:03:52:dc:b3:d2:a9:42:94:c6:76:2e:ed: ab:d1:2d:52:12:60:70:78:cd:83:84:c9:83:b9:94: 0f:78:0b:d4:7b:af:6f:f6:4d:f4:2f:ab:52:c3:50: ae:c0:73:df:f8:2f:a1:10:eb:24:a3:9b:cb:5a:17: d2:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:4B:BD:3E:35:58:48:C7:31:69:90:01:A4:F9:E9:1D:98:06:FD:39 X509v3 Authority Key Identifier: keyid:45:C5:73:91:7C:39:C2:CC:F3:86:54:E2:37:AB:8B:4C:F2:39:29:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9be9f8d8-6ef9-472f-84f0-bb97f1f50ce7/0/45C573917C39C2CCF38654E237AB8B4CF23929FD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45C573917C39C2CCF38654E237AB8B4CF23929FD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9be9f8d8-6ef9-472f-84f0-bb97f1f50ce7/0/45C573917C39C2CCF38654E237AB8B4CF23929FD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:75:01:24:ea:13:f7:b2:3f:76:32:b1:bb:aa:c4:6e:4d:09: c4:a3:78:6d:6f:19:3b:91:6f:26:3c:44:3a:de:bf:1e:fe:9b: 39:81:19:8b:dc:12:a7:51:1f:d5:78:87:2d:7a:cd:a3:0f:b2: fb:15:d6:ee:21:af:36:76:67:b4:bb:0b:0a:0c:2c:8c:4e:d4: a8:18:03:dc:1a:46:e2:05:78:33:5b:72:64:a4:70:fc:a0:e6: 90:f7:f3:22:42:ab:54:a6:3b:92:cb:33:6a:3d:79:79:13:16: 30:fe:9a:13:b0:74:f4:5e:3c:15:98:86:5a:fd:16:7f:00:54: 72:11:f9:e8:a6:d7:be:27:94:9e:38:44:c6:ba:bc:fa:7b:0c: 85:05:51:a1:35:cc:0e:74:17:df:1a:cb:10:d5:73:b2:00:d2: c9:4d:2b:48:01:cd:52:35:76:01:a7:bc:2e:0f:f5:b2:1a:74: cd:c2:46:e8:54:0c:17:9b:b5:13:4f:88:3b:7b:14:a8:c2:5e: 1e:c4:b9:51:0a:c6:44:69:f5:c9:15:95:ac:65:48:35:5f:7a: 91:86:56:cc:04:51:fb:66:9c:a2:d8:d6:65:37:26:58:76:16: 69:20:2d:3b:58:a8:5d:af:95:fb:fb:38:d0:ad:e9:54:e2:4c: b2:54:d1:88 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFrmEik0xQkvZVt1W3g3GId+FgkwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDVDNTczOTE3QzM5QzJDQ0YzODY1NEUyMzdBQjhCNENG MjM5MjlGRDAeFw0yNTEyMDIxNDE3MjlaFw0yNTEyMDUyMTI2MjlaMDMxMTAvBgNV BAMTKEM0NEJCRDNFMzU1ODQ4QzczMTY5OTAwMUE0RjlFOTFEOTgwNkZEMzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRp8p9q3VPqblk+oQJLp92hgrT 6hf9vjyOxwqjzZhPaNilpv+9GVyjgrJXsYNu/4GZJt+4WO6TiokGU9CSD7EyeAdE vochzwcCU0Tty8b2LeMBHLF3Q5EB2DtxTKc1wfVTJmLYWcuon00kctEDS2hizN1y g1l3/hxb842G0xAZYRzOkGrIiLKOMlVUduej/n4IjHnvMZktXjvyakKfLCWtzc5U vFT8hAKE8P76wpMEEifLhMCbtiQQ2Z6UUv8GQjaV817fKgNS3LPSqUKUxnYu7avR LVISYHB4zYOEyYO5lA94C9R7r2/2TfQvq1LDUK7Ac9/4L6EQ6ySjm8taF9J/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxEu9PjVYSMcxaZABpPnpHZgG/TkwHwYDVR0j BBgwFoAURcVzkXw5wszzhlTiN6uLTPI5Kf0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YmU5ZjhkOC02ZWY5LTQ3MmYtODRmMC1iYjk3ZjFmNTBjZTcvMC80NUM1NzM5MTdD MzlDMkNDRjM4NjU0RTIzN0FCOEI0Q0YyMzkyOUZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDVDNTczOTE3QzM5QzJDQ0YzODY1NEUyMzdBQjhCNENGMjM5 MjlGRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWJlOWY4ZDgtNmVmOS00NzJmLTg0 ZjAtYmI5N2YxZjUwY2U3LzAvNDVDNTczOTE3QzM5QzJDQ0YzODY1NEUyMzdBQjhC NENGMjM5MjlGRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACJ1ASTqE/eyP3YysbuqxG5NCcSjeG1vGTuR byY8RDrevx7+mzmBGYvcEqdRH9V4hy16zaMPsvsV1u4hrzZ2Z7S7CwoMLIxO1KgY A9waRuIFeDNbcmSkcPyg5pD38yJCq1SmO5LLM2o9eXkTFjD+mhOwdPRePBWYhlr9 Fn8AVHIR+eim174nlJ44RMa6vPp7DIUFUaE1zA50F98ayxDVc7IA0slNK0gBzVI1 dgGnvC4P9bIadM3CRuhUDBebtRNPiDt7FKjCXh7EuVEKxkRp9ckVlaxlSDVfepGG VswEUftmnKLY1mU3Jlh2FmkgLTtYqF2vlfv7ONCt6VTiTLJU0Yg= -----END CERTIFICATE-----Generated at Wed Dec 3 13:56:25 2025 by rpki-client