This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/c1bc3f29-6f9d-47d3-9e77-c289e5fee78e/0/C45A558750D6CF5BE02532DDE80326AEF5012912.mft File: C45A558750D6CF5BE02532DDE80326AEF5012912.mft (raw, json) Hash identifier: 1ww4utnY7O/GRGB2KmciOQOGOKObkrz0HJl1rqPmkro= Subject key identifier: 01:81:03:2E:7A:EF:1C:38:FD:4F:D9:A4:7F:2F:5F:BB:2F:65:29:2B Authority key identifier: C4:5A:55:87:50:D6:CF:5B:E0:25:32:DD:E8:03:26:AE:F5:01:29:12 Certificate issuer: /CN=C45A558750D6CF5BE02532DDE80326AEF5012912 Certificate serial: 127CA97C73E911CD76FBB5D00BE7D35CCA53130D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C45A558750D6CF5BE02532DDE80326AEF5012912.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c1bc3f29-6f9d-47d3-9e77-c289e5fee78e/0/C45A558750D6CF5BE02532DDE80326AEF5012912.mft Manifest number: 039D Signing time: Tue 02 Dec 2025 10:41:22 +0000 Manifest this update: Tue 02 Dec 2025 10:36:22 +0000 Manifest next update: Fri 05 Dec 2025 15:50:22 +0000 Files and hashes: 1: 3130332e3137302e3131352e302f32342d3234203d3e20313432333639.roa (hash: wKi20xV5IYiEYg1koyO2hLczrvapaQLTXfUibveAkFE=) 2: C45A558750D6CF5BE02532DDE80326AEF5012912.crl (hash: VI1eckqdEoIXy5hcYmKo86l5pNOKslomHqAZJvX/c2M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c1bc3f29-6f9d-47d3-9e77-c289e5fee78e/0/C45A558750D6CF5BE02532DDE80326AEF5012912.crl rsync://repo-rpki.idnic.net/repo/c1bc3f29-6f9d-47d3-9e77-c289e5fee78e/0/C45A558750D6CF5BE02532DDE80326AEF5012912.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C45A558750D6CF5BE02532DDE80326AEF5012912.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 15:50:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:7c:a9:7c:73:e9:11:cd:76:fb:b5:d0:0b:e7:d3:5c:ca:53:13:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C45A558750D6CF5BE02532DDE80326AEF5012912 Validity Not Before: Dec 2 10:36:22 2025 GMT Not After : Dec 5 15:50:22 2025 GMT Subject: CN=0181032E7AEF1C38FD4FD9A47F2F5FBB2F65292B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:86:1e:25:1b:20:d6:e5:18:9a:96:1c:6e:34: 9b:ae:9e:61:98:ca:bf:7a:85:10:e8:5e:56:44:41: 3d:68:ff:73:2f:b3:02:1b:11:f3:29:09:25:88:2b: a9:1a:a1:c7:30:e0:de:9d:33:8f:81:a1:ea:0e:5c: 7b:83:59:cf:e8:f3:72:46:7c:d8:da:74:a8:1b:2e: 1f:84:69:43:5d:95:c1:78:d1:fe:68:da:97:11:75: a3:39:ae:8a:cd:54:c6:c4:55:32:5c:59:c2:94:6c: d7:f0:5b:42:9b:48:bb:47:7f:1f:19:9a:34:27:05: f8:5b:aa:04:6c:b4:a1:56:67:b9:ed:ea:61:d3:36: 0c:f9:35:de:f1:68:c9:ee:40:48:53:ea:06:04:fc: fb:37:7f:92:40:6a:a5:cc:df:80:d9:04:b2:01:aa: 69:d2:3d:0e:8f:e1:ac:a2:b3:f1:68:97:7d:39:89: c0:eb:cb:c3:b7:ed:61:e6:5f:44:76:07:ae:98:a5: c3:62:b7:29:84:bc:04:19:90:50:b5:25:a1:29:3d: a5:b0:4c:b5:09:26:5b:b9:dd:1a:c1:09:5f:11:fc: cd:28:29:cb:ba:4d:32:47:10:12:14:a7:5a:d1:10: 23:fb:0f:76:01:b8:78:ca:b7:af:a4:69:12:eb:35: 83:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:81:03:2E:7A:EF:1C:38:FD:4F:D9:A4:7F:2F:5F:BB:2F:65:29:2B X509v3 Authority Key Identifier: keyid:C4:5A:55:87:50:D6:CF:5B:E0:25:32:DD:E8:03:26:AE:F5:01:29:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c1bc3f29-6f9d-47d3-9e77-c289e5fee78e/0/C45A558750D6CF5BE02532DDE80326AEF5012912.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C45A558750D6CF5BE02532DDE80326AEF5012912.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c1bc3f29-6f9d-47d3-9e77-c289e5fee78e/0/C45A558750D6CF5BE02532DDE80326AEF5012912.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:63:5d:d2:6a:ff:ca:49:4b:6f:bc:87:b7:86:73:33:6d:6d: b6:99:7d:4b:1b:f4:55:77:62:58:4d:5e:f2:54:74:7a:99:fd: 2e:6f:73:01:46:a4:d4:28:72:36:93:7c:e1:8b:a3:48:2b:b8: ca:01:8e:a2:34:99:c2:f3:3b:23:d3:1b:b5:0b:a9:91:56:ec: 35:f7:c5:bf:f8:90:6a:73:11:97:12:34:cf:10:29:01:93:d4: 83:9a:22:d6:5d:6c:c2:bf:5e:fa:54:f0:82:cb:57:c0:72:bd: c5:48:56:15:58:19:05:60:72:74:c6:0e:6a:41:de:cd:c8:6b: e6:29:ba:35:2d:9f:84:93:6b:71:88:20:3c:d9:af:37:1e:6e: e4:58:88:3d:4c:41:7c:20:ac:4d:11:4d:bd:d3:1d:5b:83:76: e8:db:ab:61:1b:73:d6:cf:9e:52:b9:b7:61:76:c9:ca:3c:d9: ea:7d:69:3f:95:21:d8:b3:5a:c2:3b:ef:d3:a3:3d:3b:0d:e1: 3e:09:5f:43:bb:8f:06:1d:62:bc:13:49:83:38:b7:9a:44:6e: 78:c0:8c:09:e3:70:74:6c:02:df:59:a8:61:0c:48:26:43:ec: 71:70:ba:43:0c:9b:b3:e2:3f:f2:9f:00:12:d3:7f:10:46:4a: 96:f1:9b:3a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEnypfHPpEc12+7XQC+fTXMpTEw0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzQ1QTU1ODc1MEQ2Q0Y1QkUwMjUzMkRERTgwMzI2QUVG NTAxMjkxMjAeFw0yNTEyMDIxMDM2MjJaFw0yNTEyMDUxNTUwMjJaMDMxMTAvBgNV BAMTKDAxODEwMzJFN0FFRjFDMzhGRDRGRDlBNDdGMkY1RkJCMkY2NTI5MkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIhh4lGyDW5RialhxuNJuunmGY yr96hRDoXlZEQT1o/3MvswIbEfMpCSWIK6kaoccw4N6dM4+BoeoOXHuDWc/o83JG fNjadKgbLh+EaUNdlcF40f5o2pcRdaM5rorNVMbEVTJcWcKUbNfwW0KbSLtHfx8Z mjQnBfhbqgRstKFWZ7nt6mHTNgz5Nd7xaMnuQEhT6gYE/Ps3f5JAaqXM34DZBLIB qmnSPQ6P4ayis/Fol305icDry8O37WHmX0R2B66YpcNitymEvAQZkFC1JaEpPaWw TLUJJlu53RrBCV8R/M0oKcu6TTJHEBIUp1rRECP7D3YBuHjKt6+kaRLrNYObAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAYEDLnrvHDj9T9mkfy9fuy9lKSswHwYDVR0j BBgwFoAUxFpVh1DWz1vgJTLd6AMmrvUBKRIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MWJjM2YyOS02ZjlkLTQ3ZDMtOWU3Ny1jMjg5ZTVmZWU3OGUvMC9DNDVBNTU4NzUw RDZDRjVCRTAyNTMyRERFODAzMjZBRUY1MDEyOTEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzQ1QTU1ODc1MEQ2Q0Y1QkUwMjUzMkRERTgwMzI2QUVGNTAx MjkxMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzFiYzNmMjktNmY5ZC00N2QzLTll NzctYzI4OWU1ZmVlNzhlLzAvQzQ1QTU1ODc1MEQ2Q0Y1QkUwMjUzMkRERTgwMzI2 QUVGNTAxMjkxMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADljXdJq/8pJS2+8h7eGczNtbbaZfUsb9FV3 YlhNXvJUdHqZ/S5vcwFGpNQocjaTfOGLo0gruMoBjqI0mcLzOyPTG7ULqZFW7DX3 xb/4kGpzEZcSNM8QKQGT1IOaItZdbMK/XvpU8ILLV8ByvcVIVhVYGQVgcnTGDmpB 3s3Ia+YpujUtn4STa3GIIDzZrzcebuRYiD1MQXwgrE0RTb3THVuDdujbq2Ebc9bP nlK5t2F2yco82ep9aT+VIdizWsI779OjPTsN4T4JX0O7jwYdYrwTSYM4t5pEbnjA jAnjcHRsAt9ZqGEMSCZD7HFwukMMm7PiP/KfABLTfxBGSpbxmzo= -----END CERTIFICATE-----Generated at Wed Dec 3 14:42:42 2025 by rpki-client