This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/f73ab79d-00d5-49cb-ac10-3bd4f2386bc6/0/45795CE411027C6961B89E9C0FBDB9B73BD61C39.mft File: 45795CE411027C6961B89E9C0FBDB9B73BD61C39.mft (raw, json) Hash identifier: B4f+yvzWpapfEp50MLwLR/lbKUy5BgAu0pWp3XavV2U= Subject key identifier: 43:B4:27:41:BB:09:BB:C0:18:63:CF:0D:B9:B9:F7:29:C0:36:13:C5 Authority key identifier: 45:79:5C:E4:11:02:7C:69:61:B8:9E:9C:0F:BD:B9:B7:3B:D6:1C:39 Certificate issuer: /CN=45795CE411027C6961B89E9C0FBDB9B73BD61C39 Certificate serial: 243E3D68C43CCDD70DD236A7CCD6F2D5AA3B546E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45795CE411027C6961B89E9C0FBDB9B73BD61C39.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f73ab79d-00d5-49cb-ac10-3bd4f2386bc6/0/45795CE411027C6961B89E9C0FBDB9B73BD61C39.mft Manifest number: 0532 Signing time: Sat 13 Dec 2025 09:41:00 +0000 Manifest this update: Sat 13 Dec 2025 09:36:00 +0000 Manifest next update: Tue 16 Dec 2025 17:43:00 +0000 Files and hashes: 1: 3130332e3134302e37392e302f32342d3234203d3e203438343635.roa (hash: DkleJkN5W2PyaQBgkh3h9+A6EIKYUBI0XIE9LsGOkEE=) 2: 45795CE411027C6961B89E9C0FBDB9B73BD61C39.crl (hash: hDay/FtlQvn1mIVcr+Si5rsDvs3thZ8lO5ku/W/F0pc=) 3: 323030313a6466303a623238303a3a2f34382d3438203d3e20313338383733.roa (hash: Hrvwt79CsllNFcgj1XkX080ZEGTR3oJEJ5/uQyuwag4=) 4: 3130332e3134302e37382e302f32342d3234203d3e203438343635.roa (hash: rLQgAbVnt3V9mbyukLPioMNmLMKQ2mxQ9vlQUzCluhI=) 5: 3130332e3134302e37382e302f32332d3234203d3e20313338383733.roa (hash: DGGFs/nhZ+k7NUxZJLoh30LOsNcccBtIeZpWg8Hba0w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f73ab79d-00d5-49cb-ac10-3bd4f2386bc6/0/45795CE411027C6961B89E9C0FBDB9B73BD61C39.crl rsync://repo-rpki.idnic.net/repo/f73ab79d-00d5-49cb-ac10-3bd4f2386bc6/0/45795CE411027C6961B89E9C0FBDB9B73BD61C39.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45795CE411027C6961B89E9C0FBDB9B73BD61C39.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Dec 2025 17:43:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:3e:3d:68:c4:3c:cd:d7:0d:d2:36:a7:cc:d6:f2:d5:aa:3b:54:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45795CE411027C6961B89E9C0FBDB9B73BD61C39 Validity Not Before: Dec 13 09:36:00 2025 GMT Not After : Dec 16 17:43:00 2025 GMT Subject: CN=43B42741BB09BBC01863CF0DB9B9F729C03613C5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:20:3e:54:d3:a9:b4:43:ac:a6:d4:92:92:50: 80:16:58:23:dc:5f:e2:1d:9c:30:bb:93:26:9e:72: 94:cc:f5:b7:14:cc:62:25:17:5f:37:83:3b:e5:36: 63:4c:4a:95:85:a1:be:9a:31:b4:77:7b:41:30:28: fa:14:af:4f:df:8d:30:3e:f2:fc:f4:49:c0:45:52: 19:cb:e9:5a:82:5d:9c:1c:1e:44:93:6b:34:d0:36: 63:2d:95:9f:ab:2e:ac:17:dd:b8:d2:49:c8:88:70: 45:d4:da:1c:16:4a:18:07:6c:4f:06:35:1a:3d:97: bc:77:02:94:e1:33:69:d1:48:cc:f7:56:a2:3a:db: c2:04:8b:45:fe:d7:42:c0:ba:0c:b6:ba:7a:d4:0b: e4:22:e3:32:39:d5:8c:b2:d9:d4:73:39:5e:87:71: 84:d7:67:b3:b0:83:47:9b:a7:f5:f8:37:48:e2:ec: fc:99:4d:0d:1a:41:c8:53:a2:82:d4:86:e0:b1:d1: 87:f6:ef:8b:d9:7e:1a:50:84:33:e8:ed:23:04:72: c2:61:f1:57:61:12:53:15:f5:b9:7f:c5:39:6b:4a: 83:79:02:04:32:e9:f0:aa:50:9b:a0:68:ee:94:ff: e0:46:d6:60:d0:4c:21:51:7c:b8:9c:34:df:66:cf: b8:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:B4:27:41:BB:09:BB:C0:18:63:CF:0D:B9:B9:F7:29:C0:36:13:C5 X509v3 Authority Key Identifier: keyid:45:79:5C:E4:11:02:7C:69:61:B8:9E:9C:0F:BD:B9:B7:3B:D6:1C:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f73ab79d-00d5-49cb-ac10-3bd4f2386bc6/0/45795CE411027C6961B89E9C0FBDB9B73BD61C39.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45795CE411027C6961B89E9C0FBDB9B73BD61C39.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f73ab79d-00d5-49cb-ac10-3bd4f2386bc6/0/45795CE411027C6961B89E9C0FBDB9B73BD61C39.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:17:c6:53:d1:57:77:e0:fb:f0:e2:7f:a0:a0:5e:bd:ca:cc: 0d:3a:fb:55:a9:fa:1f:a1:c6:44:3b:7c:71:90:8b:af:19:64: ec:d7:29:4f:04:c7:46:25:6f:75:17:f2:95:be:c7:c4:a4:4d: af:2a:df:99:57:16:d9:05:2a:1b:72:f4:4b:21:81:88:05:77: f4:d4:16:25:41:d3:39:5e:ef:4b:64:44:86:e6:6d:cc:fc:6e: 9d:66:6e:71:6a:96:d0:4a:cf:b0:a8:83:bd:02:3e:3b:c5:66: bf:2e:43:32:e5:f4:fb:fe:a9:e0:82:60:72:17:95:cc:e5:8c: 93:26:92:de:88:fd:77:b3:00:c6:9a:50:ef:8c:25:d8:e7:e1: 92:38:5f:c6:f6:b9:be:d3:0e:61:95:50:bb:63:84:78:52:3c: c2:93:3a:59:f9:23:a5:eb:95:fd:11:82:3a:c1:78:3f:0b:ac: 2c:81:c2:50:92:24:97:2f:27:82:b2:3d:c2:28:31:93:22:94: c7:12:40:3d:4c:f7:55:f6:79:5f:8c:f3:51:ac:34:9d:98:27: 9a:2b:b2:62:8b:4f:e3:28:06:26:b8:0d:07:7b:78:7a:61:2b: 60:58:a3:94:d5:ea:58:ab:b0:ed:ea:29:79:f6:9d:de:14:9d: 55:0c:2c:1a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJD49aMQ8zdcN0janzNby1ao7VG4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDU3OTVDRTQxMTAyN0M2OTYxQjg5RTlDMEZCREI5Qjcz QkQ2MUMzOTAeFw0yNTEyMTMwOTM2MDBaFw0yNTEyMTYxNzQzMDBaMDMxMTAvBgNV BAMTKDQzQjQyNzQxQkIwOUJCQzAxODYzQ0YwREI5QjlGNzI5QzAzNjEzQzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqID5U06m0Q6ym1JKSUIAWWCPc X+IdnDC7kyaecpTM9bcUzGIlF183gzvlNmNMSpWFob6aMbR3e0EwKPoUr0/fjTA+ 8vz0ScBFUhnL6VqCXZwcHkSTazTQNmMtlZ+rLqwX3bjSSciIcEXU2hwWShgHbE8G NRo9l7x3ApThM2nRSMz3VqI628IEi0X+10LAugy2unrUC+Qi4zI51Yyy2dRzOV6H cYTXZ7Owg0ebp/X4N0ji7PyZTQ0aQchTooLUhuCx0Yf274vZfhpQhDPo7SMEcsJh 8VdhElMV9bl/xTlrSoN5AgQy6fCqUJugaO6U/+BG1mDQTCFRfLicNN9mz7hlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQ7QnQbsJu8AYY88Nubn3KcA2E8UwHwYDVR0j BBgwFoAURXlc5BECfGlhuJ6cD725tzvWHDkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NzNhYjc5ZC0wMGQ1LTQ5Y2ItYWMxMC0zYmQ0ZjIzODZiYzYvMC80NTc5NUNFNDEx MDI3QzY5NjFCODlFOUMwRkJEQjlCNzNCRDYxQzM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDU3OTVDRTQxMTAyN0M2OTYxQjg5RTlDMEZCREI5QjczQkQ2 MUMzOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjczYWI3OWQtMDBkNS00OWNiLWFj MTAtM2JkNGYyMzg2YmM2LzAvNDU3OTVDRTQxMTAyN0M2OTYxQjg5RTlDMEZCREI5 QjczQkQ2MUMzOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKAXxlPRV3fg+/Dif6CgXr3KzA06+1Wp+h+h xkQ7fHGQi68ZZOzXKU8Ex0Ylb3UX8pW+x8SkTa8q35lXFtkFKhty9EshgYgFd/TU FiVB0zle70tkRIbmbcz8bp1mbnFqltBKz7Cog70CPjvFZr8uQzLl9Pv+qeCCYHIX lczljJMmkt6I/XezAMaaUO+MJdjn4ZI4X8b2ub7TDmGVULtjhHhSPMKTOln5I6Xr lf0RgjrBeD8LrCyBwlCSJJcvJ4KyPcIoMZMilMcSQD1M91X2eV+M81GsNJ2YJ5or smKLT+MoBia4DQd7eHphK2BYo5TV6lirsO3qKXn2nd4UnVUMLBo= -----END CERTIFICATE-----Generated at Sun Dec 14 07:50:16 2025 by rpki-client