This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/c4f9f9a1-4ad8-49ce-9fa9-d476573af50f/0/1645B491C350BF8AB4A8F88CC4DCF3F60073D15D.mft File: 1645B491C350BF8AB4A8F88CC4DCF3F60073D15D.mft (raw, json) Hash identifier: HuDvjHprAtAMaYR/a75WFZocB/Vyd2TCA4gOI3ky5og= Subject key identifier: FE:32:76:16:79:47:AE:CC:48:20:62:43:DB:5E:87:89:B5:19:12:6B Authority key identifier: 16:45:B4:91:C3:50:BF:8A:B4:A8:F8:8C:C4:DC:F3:F6:00:73:D1:5D Certificate issuer: /CN=1645B491C350BF8AB4A8F88CC4DCF3F60073D15D Certificate serial: 7455A6CAD4514BF8BD301AEA2BE8F475DB6B94DF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1645B491C350BF8AB4A8F88CC4DCF3F60073D15D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c4f9f9a1-4ad8-49ce-9fa9-d476573af50f/0/1645B491C350BF8AB4A8F88CC4DCF3F60073D15D.mft Manifest number: 23 Signing time: Wed 17 Dec 2025 04:42:30 +0000 Manifest this update: Wed 17 Dec 2025 04:37:30 +0000 Manifest next update: Sat 20 Dec 2025 05:21:30 +0000 Files and hashes: 1: 1645B491C350BF8AB4A8F88CC4DCF3F60073D15D.crl (hash: Ly3K7ZUsd1Xd9ijmNGmX8TXilrXstiTUvBh1yiVXRBk=) 2: 3132322e3132392e3230302e302f32312d3234203d3e203338373633.roa (hash: psHda3coDjbtJQORQnibdpRgwKCWDI4qgmb+5QVTY6I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c4f9f9a1-4ad8-49ce-9fa9-d476573af50f/0/1645B491C350BF8AB4A8F88CC4DCF3F60073D15D.crl rsync://repo-rpki.idnic.net/repo/c4f9f9a1-4ad8-49ce-9fa9-d476573af50f/0/1645B491C350BF8AB4A8F88CC4DCF3F60073D15D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1645B491C350BF8AB4A8F88CC4DCF3F60073D15D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 05:21:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:55:a6:ca:d4:51:4b:f8:bd:30:1a:ea:2b:e8:f4:75:db:6b:94:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1645B491C350BF8AB4A8F88CC4DCF3F60073D15D Validity Not Before: Dec 17 04:37:30 2025 GMT Not After : Dec 20 05:21:30 2025 GMT Subject: CN=FE3276167947AECC48206243DB5E8789B519126B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:42:a5:b3:ff:43:14:cf:2d:98:04:92:c5:ec: 51:5b:53:47:e2:85:a0:6f:2f:14:85:f3:fe:15:77: e5:d3:ba:19:48:0d:5c:9b:99:85:8c:c2:8e:d3:dd: 86:c8:94:4b:fd:8e:e6:64:34:2e:98:b7:ac:2b:5d: f2:ff:57:bd:8f:03:72:bf:3f:15:93:90:ce:1c:d6: 74:01:4e:10:75:47:73:52:9c:19:37:f9:fc:42:ea: 0f:7d:f9:1a:11:8a:a9:aa:e1:ed:24:d1:dd:36:ff: d9:4e:22:27:b3:ce:19:1e:68:17:4c:cd:c2:c3:7a: 35:be:22:9b:01:e4:81:43:0b:48:95:85:94:2c:c4: b6:16:96:eb:ad:93:3d:52:14:0b:bd:d2:32:5e:a1: 6b:b4:3b:a4:64:85:12:9c:12:36:16:1a:3a:b5:28: 12:ec:76:9d:ef:f7:e2:1d:6c:d0:5d:30:24:29:e2: 57:35:0e:a6:c5:28:a0:dc:b6:78:da:98:9c:f7:23: 66:ab:e9:b3:d5:85:9b:54:99:a5:cb:d6:ed:fa:c9: 19:9c:97:02:66:2d:fa:bb:03:d8:e5:3c:d6:09:d2: 1c:46:b4:be:44:99:ed:4d:ef:08:12:0e:b0:04:05: 43:71:2e:c3:23:fd:37:e6:0d:7c:ad:1e:d7:66:14: 44:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:32:76:16:79:47:AE:CC:48:20:62:43:DB:5E:87:89:B5:19:12:6B X509v3 Authority Key Identifier: keyid:16:45:B4:91:C3:50:BF:8A:B4:A8:F8:8C:C4:DC:F3:F6:00:73:D1:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c4f9f9a1-4ad8-49ce-9fa9-d476573af50f/0/1645B491C350BF8AB4A8F88CC4DCF3F60073D15D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1645B491C350BF8AB4A8F88CC4DCF3F60073D15D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c4f9f9a1-4ad8-49ce-9fa9-d476573af50f/0/1645B491C350BF8AB4A8F88CC4DCF3F60073D15D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:41:02:ca:23:42:2a:cd:9d:48:bc:59:b1:eb:dc:28:fd:cc: 15:2d:7e:3b:39:05:d2:18:17:91:b5:d5:8e:53:61:55:cb:45: 90:5e:c2:fb:1c:e2:09:cb:90:f3:b4:82:96:33:26:be:34:fc: 14:1e:aa:cd:21:a3:96:50:84:f1:63:7e:19:f1:dd:aa:1e:7a: 54:b5:79:2c:eb:a1:ed:03:60:8c:8a:52:ca:50:ab:83:66:a5: 3f:67:db:6b:f5:b0:ea:2a:9c:b8:fb:17:ec:54:c4:9b:b0:77: fd:42:4c:f0:d3:79:8f:f4:b6:74:f2:f8:d9:a6:6a:41:71:db: 0d:8e:7c:2f:51:1c:98:41:5c:cf:5a:2f:eb:ec:50:47:c7:32: cf:e2:69:78:e4:c0:ae:49:60:d6:a0:4b:f8:1c:6b:ea:64:6c: 7b:1f:1c:0d:3b:54:ef:af:6c:4f:eb:2b:36:50:57:7d:82:73: 83:27:60:e5:c5:2b:32:05:fe:04:f4:57:3b:ae:6f:1b:b2:35: 75:47:1b:b7:49:36:ae:28:b1:9f:40:95:a8:e6:e8:30:fb:fb: 3f:3a:6f:cc:a8:1f:83:f0:e3:44:66:f9:63:04:17:3a:4e:87: cf:48:57:0f:9f:97:2c:e7:dd:fc:81:00:a4:30:3d:1d:65:35: 0f:9c:f6:ba -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdFWmytRRS/i9MBrqK+j0ddtrlN8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTY0NUI0OTFDMzUwQkY4QUI0QThGODhDQzREQ0YzRjYw MDczRDE1RDAeFw0yNTEyMTcwNDM3MzBaFw0yNTEyMjAwNTIxMzBaMDMxMTAvBgNV BAMTKEZFMzI3NjE2Nzk0N0FFQ0M0ODIwNjI0M0RCNUU4Nzg5QjUxOTEyNkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgQqWz/0MUzy2YBJLF7FFbU0fi haBvLxSF8/4Vd+XTuhlIDVybmYWMwo7T3YbIlEv9juZkNC6Yt6wrXfL/V72PA3K/ PxWTkM4c1nQBThB1R3NSnBk3+fxC6g99+RoRiqmq4e0k0d02/9lOIiezzhkeaBdM zcLDejW+IpsB5IFDC0iVhZQsxLYWluutkz1SFAu90jJeoWu0O6RkhRKcEjYWGjq1 KBLsdp3v9+IdbNBdMCQp4lc1DqbFKKDctnjamJz3I2ar6bPVhZtUmaXL1u36yRmc lwJmLfq7A9jlPNYJ0hxGtL5Eme1N7wgSDrAEBUNxLsMj/TfmDXytHtdmFEQLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/jJ2FnlHrsxIIGJD216HibUZEmswHwYDVR0j BBgwFoAUFkW0kcNQv4q0qPiMxNzz9gBz0V0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NGY5ZjlhMS00YWQ4LTQ5Y2UtOWZhOS1kNDc2NTczYWY1MGYvMC8xNjQ1QjQ5MUMz NTBCRjhBQjRBOEY4OENDNERDRjNGNjAwNzNEMTVELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTY0NUI0OTFDMzUwQkY4QUI0QThGODhDQzREQ0YzRjYwMDcz RDE1RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzRmOWY5YTEtNGFkOC00OWNlLTlm YTktZDQ3NjU3M2FmNTBmLzAvMTY0NUI0OTFDMzUwQkY4QUI0QThGODhDQzREQ0Yz RjYwMDczRDE1RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC1BAsojQirNnUi8WbHr3Cj9zBUtfjs5BdIY F5G11Y5TYVXLRZBewvsc4gnLkPO0gpYzJr40/BQeqs0ho5ZQhPFjfhnx3aoeelS1 eSzroe0DYIyKUspQq4NmpT9n22v1sOoqnLj7F+xUxJuwd/1CTPDTeY/0tnTy+Nmm akFx2w2OfC9RHJhBXM9aL+vsUEfHMs/iaXjkwK5JYNagS/gca+pkbHsfHA07VO+v bE/rKzZQV32Cc4MnYOXFKzIF/gT0VzuubxuyNXVHG7dJNq4osZ9Alajm6DD7+z86 b8yoH4Pw40Rm+WMEFzpOh89IVw+flyzn3fyBAKQwPR1lNQ+c9ro= -----END CERTIFICATE-----Generated at Fri Dec 19 10:53:12 2025 by rpki-client