This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/f1ae12fa-98fd-4e51-980e-ad5f5b90d7a6/0/45164C20EAF7FAB583FB12C81727150895FCEC70.mft File: 45164C20EAF7FAB583FB12C81727150895FCEC70.mft (raw, json) Hash identifier: EcwikEiG9Yfe8yo+GZRrJy3rCFCLncrAWGnioaKfblg= Subject key identifier: 89:69:CE:4E:BA:C3:00:43:6F:CB:4C:26:7A:5A:DC:BE:A2:2D:CA:3A Authority key identifier: 45:16:4C:20:EA:F7:FA:B5:83:FB:12:C8:17:27:15:08:95:FC:EC:70 Certificate issuer: /CN=45164C20EAF7FAB583FB12C81727150895FCEC70 Certificate serial: 5D9D30CD2C5A4583194347AAC30BBF4328D71D94 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45164C20EAF7FAB583FB12C81727150895FCEC70.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f1ae12fa-98fd-4e51-980e-ad5f5b90d7a6/0/45164C20EAF7FAB583FB12C81727150895FCEC70.mft Manifest number: 014A Signing time: Tue 02 Dec 2025 16:12:23 +0000 Manifest this update: Tue 02 Dec 2025 16:07:23 +0000 Manifest next update: Fri 05 Dec 2025 20:15:23 +0000 Files and hashes: 1: 45164C20EAF7FAB583FB12C81727150895FCEC70.crl (hash: PU73cK/hY29G1Y+gSdas5zjbb4t7VSwEyMKAvZkBFP8=) 2: 3130332e3135332e34302e302f32332d3234203d3e20313430343534.roa (hash: TTBU1STvQaNI1wpqoaj9bG2m/T27T+WPjYQLtuioWoo=) 3: 3130332e3130382e3135362e302f32322d3234203d3e20313430343534.roa (hash: cLToJ49OKqVQRgjYGYNvWnWnJYTEY5LWx4h5YZdNEfg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f1ae12fa-98fd-4e51-980e-ad5f5b90d7a6/0/45164C20EAF7FAB583FB12C81727150895FCEC70.crl rsync://repo-rpki.idnic.net/repo/f1ae12fa-98fd-4e51-980e-ad5f5b90d7a6/0/45164C20EAF7FAB583FB12C81727150895FCEC70.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45164C20EAF7FAB583FB12C81727150895FCEC70.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 20:15:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:9d:30:cd:2c:5a:45:83:19:43:47:aa:c3:0b:bf:43:28:d7:1d:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45164C20EAF7FAB583FB12C81727150895FCEC70 Validity Not Before: Dec 2 16:07:23 2025 GMT Not After : Dec 5 20:15:23 2025 GMT Subject: CN=8969CE4EBAC300436FCB4C267A5ADCBEA22DCA3A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:d8:1a:d3:38:c2:d1:57:9b:51:8a:20:ad:0b: 45:d8:38:0d:c6:59:d2:5f:10:74:fc:97:5a:07:e0: 22:2a:5b:e0:48:c1:1c:da:de:b2:8d:33:75:01:92: 67:ac:fc:78:6d:71:53:b7:4d:03:65:b6:03:bd:06: 1f:4d:5e:99:73:dc:22:88:5f:5e:1a:1c:25:be:c4: ee:31:27:7f:9f:f9:61:b3:ca:f0:d7:09:cc:15:14: bb:63:df:f4:8d:cc:bc:30:ec:24:57:93:f3:33:32: 35:b2:7b:26:fc:a5:05:05:b8:0e:cd:6f:fc:39:1b: 98:5f:b2:51:75:cc:45:84:d4:07:ad:11:ef:56:32: 3a:18:12:96:3f:09:02:4d:cc:62:99:79:60:1e:bd: ee:fb:e8:97:41:94:24:29:1e:fc:ad:c0:f5:c7:c4: 94:0c:eb:34:6c:7c:4a:79:f2:ac:69:2d:d4:70:56: a7:e9:a4:89:9a:e7:49:b6:11:55:c0:26:de:0f:bf: db:9f:57:b5:fd:f9:d1:a0:cc:6f:5e:fb:2f:4b:ea: b3:9c:f6:ac:16:72:00:df:f1:de:0c:50:a2:1e:ce: 5a:b7:f1:43:0f:27:75:2e:5b:13:11:a1:6f:d3:c6: ff:85:76:b5:4c:74:b3:eb:53:2d:66:50:bf:6b:16: d9:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:69:CE:4E:BA:C3:00:43:6F:CB:4C:26:7A:5A:DC:BE:A2:2D:CA:3A X509v3 Authority Key Identifier: keyid:45:16:4C:20:EA:F7:FA:B5:83:FB:12:C8:17:27:15:08:95:FC:EC:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f1ae12fa-98fd-4e51-980e-ad5f5b90d7a6/0/45164C20EAF7FAB583FB12C81727150895FCEC70.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45164C20EAF7FAB583FB12C81727150895FCEC70.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f1ae12fa-98fd-4e51-980e-ad5f5b90d7a6/0/45164C20EAF7FAB583FB12C81727150895FCEC70.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d3:ba:4d:e8:26:e6:13:95:91:d5:e3:d5:f1:94:4d:67:41:be: 3f:b8:97:64:0b:ee:33:02:35:9b:32:62:28:16:a3:d6:ec:ab: 9a:9d:6c:e2:e8:15:84:ab:3f:75:1a:ab:f7:48:f5:76:98:2c: c7:8d:7b:2b:29:28:6d:19:10:c6:68:ae:37:ba:29:d8:cf:74: c6:fb:ef:69:e2:4d:8b:6a:2a:6e:67:cc:9e:b9:5e:08:f1:a6: 08:6a:cb:bf:66:2a:d8:a1:69:5c:74:08:49:ab:4a:57:bc:8a: be:2e:86:93:16:87:29:d8:2f:2b:f4:f6:00:93:0f:ae:ce:07: ee:f7:dd:4b:5a:a9:22:f4:f2:95:41:99:17:d1:9a:f4:a7:0f: 5b:8b:c0:83:a5:8c:74:76:b3:4f:f2:70:90:ec:cb:98:59:72: ab:40:5a:7a:54:c8:cc:33:78:1d:ae:92:6c:15:f5:2c:b4:bc: 90:4c:2a:3b:77:d6:a1:2d:bd:08:84:30:39:bc:24:5d:03:2d: 14:76:b7:ba:54:cd:e1:06:24:00:3c:20:bb:16:ce:ef:4d:4a: d7:da:61:ff:2a:3f:be:1b:99:70:7d:5f:d6:2a:d1:05:76:c0: 2a:bc:25:88:90:b5:52:0b:50:c7:24:34:6e:f1:25:f0:23:3d: ca:e0:93:60 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXZ0wzSxaRYMZQ0eqwwu/QyjXHZQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUxNjRDMjBFQUY3RkFCNTgzRkIxMkM4MTcyNzE1MDg5 NUZDRUM3MDAeFw0yNTEyMDIxNjA3MjNaFw0yNTEyMDUyMDE1MjNaMDMxMTAvBgNV BAMTKDg5NjlDRTRFQkFDMzAwNDM2RkNCNEMyNjdBNUFEQ0JFQTIyRENBM0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN2BrTOMLRV5tRiiCtC0XYOA3G WdJfEHT8l1oH4CIqW+BIwRza3rKNM3UBkmes/HhtcVO3TQNltgO9Bh9NXplz3CKI X14aHCW+xO4xJ3+f+WGzyvDXCcwVFLtj3/SNzLww7CRXk/MzMjWyeyb8pQUFuA7N b/w5G5hfslF1zEWE1AetEe9WMjoYEpY/CQJNzGKZeWAeve776JdBlCQpHvytwPXH xJQM6zRsfEp58qxpLdRwVqfppIma50m2EVXAJt4Pv9ufV7X9+dGgzG9e+y9L6rOc 9qwWcgDf8d4MUKIezlq38UMPJ3UuWxMRoW/Txv+FdrVMdLPrUy1mUL9rFtkPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiWnOTrrDAENvy0wmelrcvqItyjowHwYDVR0j BBgwFoAURRZMIOr3+rWD+xLIFycVCJX87HAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MWFlMTJmYS05OGZkLTRlNTEtOTgwZS1hZDVmNWI5MGQ3YTYvMC80NTE2NEMyMEVB RjdGQUI1ODNGQjEyQzgxNzI3MTUwODk1RkNFQzcwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDUxNjRDMjBFQUY3RkFCNTgzRkIxMkM4MTcyNzE1MDg5NUZD RUM3MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjFhZTEyZmEtOThmZC00ZTUxLTk4 MGUtYWQ1ZjViOTBkN2E2LzAvNDUxNjRDMjBFQUY3RkFCNTgzRkIxMkM4MTcyNzE1 MDg5NUZDRUM3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANO6Tegm5hOVkdXj1fGUTWdBvj+4l2QL7jMC NZsyYigWo9bsq5qdbOLoFYSrP3Uaq/dI9XaYLMeNeyspKG0ZEMZorje6KdjPdMb7 72niTYtqKm5nzJ65Xgjxpghqy79mKtihaVx0CEmrSle8ir4uhpMWhynYLyv09gCT D67OB+733UtaqSL08pVBmRfRmvSnD1uLwIOljHR2s0/ycJDsy5hZcqtAWnpUyMwz eB2ukmwV9Sy0vJBMKjt31qEtvQiEMDm8JF0DLRR2t7pUzeEGJAA8ILsWzu9NStfa Yf8qP74bmXB9X9Yq0QV2wCq8JYiQtVILUMckNG7xJfAjPcrgk2A= -----END CERTIFICATE-----Generated at Wed Dec 3 14:44:32 2025 by rpki-client