This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/217795b6-0df5-471b-b788-725f9ef7c08d/0/454DBC52C30315358534B20532037D549238F4C9.mft File: 454DBC52C30315358534B20532037D549238F4C9.mft (raw, json) Hash identifier: sPUqWGQt0o+bNmIjnsAntfMy+WZti7n5pO1Pq5OC//A= Subject key identifier: 0E:86:BD:79:1A:5D:48:80:E7:B7:5C:D6:A1:B5:A7:F2:5A:9B:36:09 Authority key identifier: 45:4D:BC:52:C3:03:15:35:85:34:B2:05:32:03:7D:54:92:38:F4:C9 Certificate issuer: /CN=454DBC52C30315358534B20532037D549238F4C9 Certificate serial: 151A63903C7036D6398D3C9B0C5C74F0D531472D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/454DBC52C30315358534B20532037D549238F4C9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/217795b6-0df5-471b-b788-725f9ef7c08d/0/454DBC52C30315358534B20532037D549238F4C9.mft Manifest number: 89 Signing time: Wed 24 Dec 2025 12:13:47 +0000 Manifest this update: Wed 24 Dec 2025 12:08:47 +0000 Manifest next update: Sat 27 Dec 2025 14:46:47 +0000 Files and hashes: 1: 454DBC52C30315358534B20532037D549238F4C9.crl (hash: TKgPL6PB0/vmGWIBMjScZ+1uDXuJUwt8LYr88bWOb/0=) 2: 3130332e3137372e3134342e302f32332d3234203d3e20313437313535.roa (hash: HMKdgPohDB0xWBN1Oc1VU1UzcfxKyNuGEiE2CnpRGEY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/217795b6-0df5-471b-b788-725f9ef7c08d/0/454DBC52C30315358534B20532037D549238F4C9.crl rsync://repo-rpki.idnic.net/repo/217795b6-0df5-471b-b788-725f9ef7c08d/0/454DBC52C30315358534B20532037D549238F4C9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/454DBC52C30315358534B20532037D549238F4C9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 14:46:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:1a:63:90:3c:70:36:d6:39:8d:3c:9b:0c:5c:74:f0:d5:31:47:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=454DBC52C30315358534B20532037D549238F4C9 Validity Not Before: Dec 24 12:08:47 2025 GMT Not After : Dec 27 14:46:47 2025 GMT Subject: CN=0E86BD791A5D4880E7B75CD6A1B5A7F25A9B3609 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:7d:31:ee:9f:87:12:57:85:4b:9e:72:86:41: 54:80:7f:e6:00:3e:ef:73:ce:4b:c8:f8:93:63:14: c6:4e:b0:5b:88:64:11:7b:87:b3:ce:26:06:3b:09: 70:91:5f:9e:a2:f8:5c:85:a9:d3:18:45:d3:4c:86: 9a:cd:09:43:8b:55:ff:e1:86:a1:15:f8:ea:c8:33: 48:a7:66:3b:67:45:6f:95:bf:fc:33:ee:ea:7c:96: 3f:66:42:ad:a6:81:4b:23:a3:6e:d9:e7:19:f4:2e: 95:b4:3d:d7:7b:20:fb:1f:30:ff:e2:b2:92:f3:96: 7c:a8:68:86:49:a9:ba:65:ed:9f:84:2d:79:e3:ea: de:9b:9f:69:60:6f:56:20:72:37:9d:2d:ba:b2:e6: 0c:7f:eb:5f:b8:52:38:d3:12:38:7d:f6:08:74:f9: d8:d3:c9:4a:15:25:d5:56:cd:75:66:b0:7c:06:d4: 4d:60:eb:69:e1:09:fb:5a:b7:e6:00:5d:f7:75:df: 99:4c:8b:06:ac:02:3c:7d:fa:05:2b:ed:ac:7b:ec: 81:7a:1a:a6:cb:5e:93:48:fd:b8:03:68:8d:0f:35: c6:5b:05:b5:d7:e1:0d:9e:f9:fb:24:b0:a6:f8:c5: be:c4:d7:01:8a:23:e3:f8:b9:f1:50:c7:f3:15:de: 17:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:86:BD:79:1A:5D:48:80:E7:B7:5C:D6:A1:B5:A7:F2:5A:9B:36:09 X509v3 Authority Key Identifier: keyid:45:4D:BC:52:C3:03:15:35:85:34:B2:05:32:03:7D:54:92:38:F4:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/217795b6-0df5-471b-b788-725f9ef7c08d/0/454DBC52C30315358534B20532037D549238F4C9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/454DBC52C30315358534B20532037D549238F4C9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/217795b6-0df5-471b-b788-725f9ef7c08d/0/454DBC52C30315358534B20532037D549238F4C9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:24:f9:3b:4d:fb:70:42:02:fa:87:ee:4c:4e:43:3a:18:a8: 98:d8:29:14:cd:d3:2c:f5:43:14:87:aa:ca:b0:f2:e9:f7:4c: 45:3d:4b:3d:84:f3:3d:29:24:5f:fa:59:ca:7a:c1:61:cc:08: b2:d4:5c:54:2e:98:40:9e:cc:78:b6:3e:5b:54:43:3b:b9:6e: ea:bb:e3:b5:9d:f9:a5:8d:51:50:63:e2:9c:e6:32:21:1b:31: f5:2c:9a:bc:be:ef:5f:d0:b8:85:e2:64:10:60:e5:5a:87:e0: 5e:79:e7:a9:27:34:d9:25:b8:55:59:20:47:75:59:0e:af:0a: 6f:77:b8:2e:d8:7b:b5:cd:e7:99:cf:33:eb:20:ee:59:16:d5: 7d:cb:e9:ed:76:29:fe:70:26:c4:2e:51:46:c5:e4:5f:7e:af: ad:dd:6e:dc:26:a8:86:da:bf:be:62:cc:b3:43:b3:a6:bb:d3: b0:5c:52:a4:3d:35:d7:96:d5:be:7d:24:a0:0e:d8:5a:c4:d6: 75:72:9c:65:38:36:38:7c:4f:d8:d4:f4:80:b1:f1:6e:8e:f8: 2f:8a:b9:64:45:0e:1e:f1:03:a9:d3:cd:d5:6d:38:4c:bf:4f: 85:7f:c0:79:d3:b7:1f:cb:c9:27:02:5c:1e:9b:05:cd:10:bf: 92:6c:98:ec -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFRpjkDxwNtY5jTybDFx08NUxRy0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDU0REJDNTJDMzAzMTUzNTg1MzRCMjA1MzIwMzdENTQ5 MjM4RjRDOTAeFw0yNTEyMjQxMjA4NDdaFw0yNTEyMjcxNDQ2NDdaMDMxMTAvBgNV BAMTKDBFODZCRDc5MUE1RDQ4ODBFN0I3NUNENkExQjVBN0YyNUE5QjM2MDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDifTHun4cSV4VLnnKGQVSAf+YA Pu9zzkvI+JNjFMZOsFuIZBF7h7POJgY7CXCRX56i+FyFqdMYRdNMhprNCUOLVf/h hqEV+OrIM0inZjtnRW+Vv/wz7up8lj9mQq2mgUsjo27Z5xn0LpW0Pdd7IPsfMP/i spLzlnyoaIZJqbpl7Z+ELXnj6t6bn2lgb1YgcjedLbqy5gx/61+4UjjTEjh99gh0 +djTyUoVJdVWzXVmsHwG1E1g62nhCftat+YAXfd135lMiwasAjx9+gUr7ax77IF6 GqbLXpNI/bgDaI0PNcZbBbXX4Q2e+fsksKb4xb7E1wGKI+P4ufFQx/MV3hd7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDoa9eRpdSIDnt1zWobWn8lqbNgkwHwYDVR0j BBgwFoAURU28UsMDFTWFNLIFMgN9VJI49MkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MTc3OTViNi0wZGY1LTQ3MWItYjc4OC03MjVmOWVmN2MwOGQvMC80NTREQkM1MkMz MDMxNTM1ODUzNEIyMDUzMjAzN0Q1NDkyMzhGNEM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDU0REJDNTJDMzAzMTUzNTg1MzRCMjA1MzIwMzdENTQ5MjM4 RjRDOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjE3Nzk1YjYtMGRmNS00NzFiLWI3 ODgtNzI1ZjllZjdjMDhkLzAvNDU0REJDNTJDMzAzMTUzNTg1MzRCMjA1MzIwMzdE NTQ5MjM4RjRDOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGok+TtN+3BCAvqH7kxOQzoYqJjYKRTN0yz1 QxSHqsqw8un3TEU9Sz2E8z0pJF/6Wcp6wWHMCLLUXFQumECezHi2PltUQzu5buq7 47Wd+aWNUVBj4pzmMiEbMfUsmry+71/QuIXiZBBg5VqH4F5556knNNkluFVZIEd1 WQ6vCm93uC7Ye7XN55nPM+sg7lkW1X3L6e12Kf5wJsQuUUbF5F9+r63dbtwmqIba v75izLNDs6a707BcUqQ9NdeW1b59JKAO2FrE1nVynGU4Njh8T9jU9ICx8W6O+C+K uWRFDh7xA6nTzdVtOEy/T4V/wHnTtx/LyScCXB6bBc0Qv5JsmOw= -----END CERTIFICATE-----Generated at Wed Dec 24 20:25:14 2025 by rpki-client