This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/153b067c-ecc9-4dca-987d-b9576815f855/0/45FD71C7EFF830D20E960225B4A971A14B081364.mft File: 45FD71C7EFF830D20E960225B4A971A14B081364.mft (raw, json) Hash identifier: 9m57ZSf76l/bsy9MSLZ0gS/AWBlcGUidHpebW90P1bI= Subject key identifier: CB:B8:42:4F:2B:D8:8D:F5:06:CB:3A:F5:90:C2:3D:45:67:27:38:0F Authority key identifier: 45:FD:71:C7:EF:F8:30:D2:0E:96:02:25:B4:A9:71:A1:4B:08:13:64 Certificate issuer: /CN=45FD71C7EFF830D20E960225B4A971A14B081364 Certificate serial: 30C943D2DD92A436800913346893E4C66E82D54C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45FD71C7EFF830D20E960225B4A971A14B081364.cer Subject info access: rsync://repo-rpki.idnic.net/repo/153b067c-ecc9-4dca-987d-b9576815f855/0/45FD71C7EFF830D20E960225B4A971A14B081364.mft Manifest number: 0536 Signing time: Sat 20 Dec 2025 07:00:59 +0000 Manifest this update: Sat 20 Dec 2025 06:55:59 +0000 Manifest next update: Tue 23 Dec 2025 09:20:59 +0000 Files and hashes: 1: 45FD71C7EFF830D20E960225B4A971A14B081364.crl (hash: Y+qhnU+/hucvvkcHfJAGrWRgDojDJCqgxEqC/1+JrTI=) 2: 3131372e3132312e3230302e302f32342d3234203d3e2030.roa (hash: L0AVu48seGOzT+OjNs4+vHM51Bl8/YcZdTcHUeJSvtI=) 3: 3131372e3132312e3230362e302f32342d3234203d3e203436303239.roa (hash: kVr4SbJNPOjRvwiHc+hgo6K4HzE1wOJqmCs09GwhV5A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/153b067c-ecc9-4dca-987d-b9576815f855/0/45FD71C7EFF830D20E960225B4A971A14B081364.crl rsync://repo-rpki.idnic.net/repo/153b067c-ecc9-4dca-987d-b9576815f855/0/45FD71C7EFF830D20E960225B4A971A14B081364.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45FD71C7EFF830D20E960225B4A971A14B081364.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Dec 2025 09:20:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:c9:43:d2:dd:92:a4:36:80:09:13:34:68:93:e4:c6:6e:82:d5:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45FD71C7EFF830D20E960225B4A971A14B081364 Validity Not Before: Dec 20 06:55:59 2025 GMT Not After : Dec 23 09:20:59 2025 GMT Subject: CN=CBB8424F2BD88DF506CB3AF590C23D456727380F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:ef:6e:49:b5:27:50:2a:29:50:5b:f6:7d:c6: 90:4e:44:4b:f1:9f:70:3f:a5:80:25:47:6e:57:61: c2:cb:8e:b4:df:a4:5b:56:74:71:ae:1a:33:94:eb: 6b:fe:95:78:e2:e9:49:4a:5e:07:13:09:e9:c2:24: ef:e5:da:54:3a:f5:bd:64:95:3b:b7:62:59:de:87: bd:31:70:f8:f9:9a:5f:d5:88:70:1e:fa:76:46:e8: eb:d0:76:6e:ba:c1:97:e6:b0:57:41:51:cf:d6:e3: aa:6e:a3:39:2c:7b:ed:c5:01:61:0f:e0:d1:65:6d: 6a:6e:cb:0a:65:80:f3:c4:a1:52:f1:c7:ff:e1:27: 97:1b:47:e4:b6:9c:53:62:49:4d:2f:ca:de:86:fc: ee:fd:05:09:74:0a:28:e0:00:37:b8:8b:09:92:13: 5e:ef:29:2e:7a:5b:75:49:22:af:74:ec:ee:57:88: 30:d9:dd:63:f0:e5:fd:17:0f:e2:76:03:99:a4:dc: 36:17:ac:13:79:f8:68:2f:77:c8:32:10:0d:f7:04: c4:ce:ad:b9:6f:01:66:36:53:2e:ef:66:9a:50:4d: ca:d3:11:d9:00:23:a5:b0:cf:46:a8:e6:ba:b2:5d: 06:97:6f:77:e5:6e:b7:0c:79:97:51:b6:cf:ac:54: 3b:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:B8:42:4F:2B:D8:8D:F5:06:CB:3A:F5:90:C2:3D:45:67:27:38:0F X509v3 Authority Key Identifier: keyid:45:FD:71:C7:EF:F8:30:D2:0E:96:02:25:B4:A9:71:A1:4B:08:13:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/153b067c-ecc9-4dca-987d-b9576815f855/0/45FD71C7EFF830D20E960225B4A971A14B081364.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45FD71C7EFF830D20E960225B4A971A14B081364.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/153b067c-ecc9-4dca-987d-b9576815f855/0/45FD71C7EFF830D20E960225B4A971A14B081364.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d0:66:94:67:d9:37:c2:d3:18:26:c9:fd:4a:77:21:53:77:f9: 40:3b:40:d6:f6:03:6a:94:24:e7:be:a9:23:e0:86:81:02:15: 99:12:2d:29:6b:16:36:27:88:9c:98:9f:12:9c:78:55:44:72: bd:40:1c:b5:73:99:db:e7:5a:e3:6c:13:f6:b2:9a:2c:83:6e: be:5f:0d:b4:c8:56:fb:11:22:5a:ea:97:1b:f5:38:d3:ab:20: b1:57:fb:a1:d3:79:c3:4b:32:78:29:53:91:11:0b:6d:9b:47: 64:e2:82:a9:4d:f9:e0:bb:64:eb:9b:80:ed:2a:e9:04:d0:27: 67:e8:ae:8f:34:32:dc:4f:d4:2c:b5:e6:77:23:d8:98:1a:d5: 73:fc:29:20:c0:a0:50:86:72:de:de:3c:ed:3e:f8:20:73:48: 3f:43:4f:e2:40:f1:37:a4:72:eb:40:79:25:1e:fe:4e:1b:1f: fb:5b:b7:e7:9d:51:ed:d0:16:df:fc:17:d1:db:d1:81:dd:b2: d4:d0:d4:f3:02:bf:b0:0b:73:74:6b:57:21:10:6b:e8:eb:08: 62:d9:21:5c:c8:20:96:0f:33:4b:1c:6f:43:e7:ca:25:d4:79: 90:bf:00:17:03:59:b6:40:c7:18:11:14:d7:7a:1e:32:18:d7: 97:1b:37:45 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMMlD0t2SpDaACRM0aJPkxm6C1UwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDVGRDcxQzdFRkY4MzBEMjBFOTYwMjI1QjRBOTcxQTE0 QjA4MTM2NDAeFw0yNTEyMjAwNjU1NTlaFw0yNTEyMjMwOTIwNTlaMDMxMTAvBgNV BAMTKENCQjg0MjRGMkJEODhERjUwNkNCM0FGNTkwQzIzRDQ1NjcyNzM4MEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL725JtSdQKilQW/Z9xpBOREvx n3A/pYAlR25XYcLLjrTfpFtWdHGuGjOU62v+lXji6UlKXgcTCenCJO/l2lQ69b1k lTu3Ylneh70xcPj5ml/ViHAe+nZG6OvQdm66wZfmsFdBUc/W46puozkse+3FAWEP 4NFlbWpuywplgPPEoVLxx//hJ5cbR+S2nFNiSU0vyt6G/O79BQl0CijgADe4iwmS E17vKS56W3VJIq907O5XiDDZ3WPw5f0XD+J2A5mk3DYXrBN5+Ggvd8gyEA33BMTO rblvAWY2Uy7vZppQTcrTEdkAI6Wwz0ao5rqyXQaXb3flbrcMeZdRts+sVDt9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUy7hCTyvYjfUGyzr1kMI9RWcnOA8wHwYDVR0j BBgwFoAURf1xx+/4MNIOlgIltKlxoUsIE2QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NTNiMDY3Yy1lY2M5LTRkY2EtOTg3ZC1iOTU3NjgxNWY4NTUvMC80NUZENzFDN0VG RjgzMEQyMEU5NjAyMjVCNEE5NzFBMTRCMDgxMzY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDVGRDcxQzdFRkY4MzBEMjBFOTYwMjI1QjRBOTcxQTE0QjA4 MTM2NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTUzYjA2N2MtZWNjOS00ZGNhLTk4 N2QtYjk1NzY4MTVmODU1LzAvNDVGRDcxQzdFRkY4MzBEMjBFOTYwMjI1QjRBOTcx QTE0QjA4MTM2NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANBmlGfZN8LTGCbJ/Up3IVN3+UA7QNb2A2qU JOe+qSPghoECFZkSLSlrFjYniJyYnxKceFVEcr1AHLVzmdvnWuNsE/aymiyDbr5f DbTIVvsRIlrqlxv1ONOrILFX+6HTecNLMngpU5ERC22bR2TigqlN+eC7ZOubgO0q 6QTQJ2foro80MtxP1Cy15ncj2Jga1XP8KSDAoFCGct7ePO0++CBzSD9DT+JA8Tek cutAeSUe/k4bH/tbt+edUe3QFt/8F9Hb0YHdstTQ1PMCv7ALc3RrVyEQa+jrCGLZ IVzIIJYPM0scb0PnyiXUeZC/ABcDWbZAxxgRFNd6HjIY15cbN0U= -----END CERTIFICATE-----Generated at Mon Dec 22 14:29:44 2025 by rpki-client