This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/2f13a6ef-3434-4401-b3e1-65153066fb3e/0/245A17CADB2BB2FDC5786C27E5BE959636E7F409.mft File: 245A17CADB2BB2FDC5786C27E5BE959636E7F409.mft (raw, json) Hash identifier: r1clJaX4x8ObOVTfUOffdAhU/mHuS03nNIUh0bhAi+s= Subject key identifier: 8B:A9:3E:15:B9:E9:10:A8:87:14:F3:D4:C1:1D:F0:61:38:E2:22:0F Authority key identifier: 24:5A:17:CA:DB:2B:B2:FD:C5:78:6C:27:E5:BE:95:96:36:E7:F4:09 Certificate issuer: /CN=245A17CADB2BB2FDC5786C27E5BE959636E7F409 Certificate serial: 363CB7D7FA8211F244E225F4172F8CB34D628F78 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/245A17CADB2BB2FDC5786C27E5BE959636E7F409.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2f13a6ef-3434-4401-b3e1-65153066fb3e/0/245A17CADB2BB2FDC5786C27E5BE959636E7F409.mft Manifest number: 0143 Signing time: Thu 25 Dec 2025 11:11:27 +0000 Manifest this update: Thu 25 Dec 2025 11:06:27 +0000 Manifest next update: Sun 28 Dec 2025 17:11:27 +0000 Files and hashes: 1: 3130332e35312e39382e302f32342d3234203d3e20313530343639.roa (hash: 4B7irySfovCa+fs5OrOidwnp7dP+n6xSYZr+/3ur6bs=) 2: 245A17CADB2BB2FDC5786C27E5BE959636E7F409.crl (hash: 9UdZAgcXp44S3FLTQv22bOqxSH2EnAK8LUcRukNxIy4=) 3: 3130332e35312e39392e302f32342d3234203d3e20313530343639.roa (hash: K8NaZjX156AzJZCxAFCtUR2kv1eIuI1LvcL4WWNgNxE=) 4: 3130332e35312e39382e302f32332d3233203d3e20313530343639.roa (hash: k08Sq9y+e0JBLFkahJuKjCY8UDmOXzCXbCJPnDfG/eg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2f13a6ef-3434-4401-b3e1-65153066fb3e/0/245A17CADB2BB2FDC5786C27E5BE959636E7F409.crl rsync://repo-rpki.idnic.net/repo/2f13a6ef-3434-4401-b3e1-65153066fb3e/0/245A17CADB2BB2FDC5786C27E5BE959636E7F409.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/245A17CADB2BB2FDC5786C27E5BE959636E7F409.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 17:11:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:3c:b7:d7:fa:82:11:f2:44:e2:25:f4:17:2f:8c:b3:4d:62:8f:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=245A17CADB2BB2FDC5786C27E5BE959636E7F409 Validity Not Before: Dec 25 11:06:27 2025 GMT Not After : Dec 28 17:11:27 2025 GMT Subject: CN=8BA93E15B9E910A88714F3D4C11DF06138E2220F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:e1:2e:97:80:90:77:db:86:19:dd:87:d5:c6: d4:07:ef:6e:9f:5c:33:70:03:54:7d:9a:1e:2e:76: 2f:4f:a9:d3:f3:28:73:9e:f0:25:39:f7:9b:d5:6b: 3b:9b:01:8c:ad:d9:ff:d6:4e:cf:e5:bf:3b:0d:bd: 49:03:07:23:7a:b7:e2:2f:23:15:cf:40:05:12:ae: d0:d8:fe:db:2c:7c:7e:58:6e:8e:be:02:04:d9:d9: d2:71:b5:f2:5a:f7:f5:79:16:9e:a2:53:3c:2c:4c: 58:e4:8e:ad:49:39:18:e4:39:ca:88:84:ed:95:65: b4:1a:9d:69:f0:5a:64:53:4c:77:c6:f6:37:f3:8c: b5:1f:65:0d:d4:3c:1d:61:21:31:10:3d:fd:27:a5: 4b:f6:5d:30:79:73:2d:1b:6a:68:8f:a5:62:23:d5: a8:2b:35:ca:c2:b4:c9:c5:31:6a:bc:74:c8:b0:a2: 12:93:2e:f6:c6:10:68:ac:c2:0b:d6:e5:e1:76:23: fa:a9:e2:dd:55:2a:16:92:1f:64:99:f0:94:d6:01: 77:0c:d5:1a:d1:3f:12:c9:70:63:dd:66:9e:ce:78: fc:c0:04:5b:e9:d6:eb:49:55:7e:8b:2f:99:de:ce: a8:ff:f6:ed:61:01:4f:65:b9:f5:b6:53:71:30:c7: 4f:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:A9:3E:15:B9:E9:10:A8:87:14:F3:D4:C1:1D:F0:61:38:E2:22:0F X509v3 Authority Key Identifier: keyid:24:5A:17:CA:DB:2B:B2:FD:C5:78:6C:27:E5:BE:95:96:36:E7:F4:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2f13a6ef-3434-4401-b3e1-65153066fb3e/0/245A17CADB2BB2FDC5786C27E5BE959636E7F409.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/245A17CADB2BB2FDC5786C27E5BE959636E7F409.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2f13a6ef-3434-4401-b3e1-65153066fb3e/0/245A17CADB2BB2FDC5786C27E5BE959636E7F409.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:5c:71:1b:57:f0:a8:a9:c9:4b:d4:88:53:79:35:17:3c:5c: c4:cb:1b:5f:e0:61:02:f4:f4:1e:ad:a8:37:e9:7e:6b:77:87: b7:4b:37:6d:eb:be:d6:1c:b3:2b:80:37:e5:42:0b:ef:2a:65: 4a:58:32:a5:86:8a:0d:08:e5:e7:3a:5e:56:99:a0:d0:ab:7d: c9:77:b3:61:4e:7d:1f:3a:96:e0:0b:6d:58:79:d2:9a:d0:db: 4f:13:82:23:49:49:82:8c:d2:fd:f0:84:5c:8c:de:50:0e:07: 07:06:7f:a2:0e:31:29:ce:df:b4:dc:e0:4f:e2:30:ce:a3:0f: 51:c8:43:93:45:ba:d0:75:0c:de:22:a8:76:72:03:8c:d8:5b: ab:a6:90:99:6e:97:b5:32:22:55:94:39:0e:ed:cc:0f:b0:32: 05:42:56:8b:95:0e:ad:27:44:e0:f3:50:bb:86:74:bf:47:da: 7c:99:50:a9:b8:47:56:24:ea:f2:b2:06:3f:82:55:25:e1:b4: c0:b5:9a:33:b2:8e:b0:fc:fe:46:0e:63:1e:b0:11:d1:f0:a7: 3f:d3:d4:8a:f9:41:3f:8f:af:7d:32:18:70:dd:1c:a2:3b:06: 16:8b:18:52:74:e8:72:50:07:07:f0:7f:92:55:44:b3:55:d0: 35:d8:a9:00 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNjy31/qCEfJE4iX0Fy+Ms01ij3gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjQ1QTE3Q0FEQjJCQjJGREM1Nzg2QzI3RTVCRTk1OTYz NkU3RjQwOTAeFw0yNTEyMjUxMTA2MjdaFw0yNTEyMjgxNzExMjdaMDMxMTAvBgNV BAMTKDhCQTkzRTE1QjlFOTEwQTg4NzE0RjNENEMxMURGMDYxMzhFMjIyMEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDV4S6XgJB324YZ3YfVxtQH726f XDNwA1R9mh4udi9PqdPzKHOe8CU595vVazubAYyt2f/WTs/lvzsNvUkDByN6t+Iv IxXPQAUSrtDY/tssfH5Ybo6+AgTZ2dJxtfJa9/V5Fp6iUzwsTFjkjq1JORjkOcqI hO2VZbQanWnwWmRTTHfG9jfzjLUfZQ3UPB1hITEQPf0npUv2XTB5cy0bamiPpWIj 1agrNcrCtMnFMWq8dMiwohKTLvbGEGiswgvW5eF2I/qp4t1VKhaSH2SZ8JTWAXcM 1RrRPxLJcGPdZp7OePzABFvp1utJVX6LL5nezqj/9u1hAU9lufW2U3Ewx09TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUi6k+FbnpEKiHFPPUwR3wYTjiIg8wHwYDVR0j BBgwFoAUJFoXytsrsv3FeGwn5b6Vljbn9AkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZjEzYTZlZi0zNDM0LTQ0MDEtYjNlMS02NTE1MzA2NmZiM2UvMC8yNDVBMTdDQURC MkJCMkZEQzU3ODZDMjdFNUJFOTU5NjM2RTdGNDA5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjQ1QTE3Q0FEQjJCQjJGREM1Nzg2QzI3RTVCRTk1OTYzNkU3 RjQwOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmYxM2E2ZWYtMzQzNC00NDAxLWIz ZTEtNjUxNTMwNjZmYjNlLzAvMjQ1QTE3Q0FEQjJCQjJGREM1Nzg2QzI3RTVCRTk1 OTYzNkU3RjQwOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFhccRtX8KipyUvUiFN5NRc8XMTLG1/gYQL0 9B6tqDfpfmt3h7dLN23rvtYcsyuAN+VCC+8qZUpYMqWGig0I5ec6XlaZoNCrfcl3 s2FOfR86luALbVh50prQ208TgiNJSYKM0v3whFyM3lAOBwcGf6IOMSnO37Tc4E/i MM6jD1HIQ5NFutB1DN4iqHZyA4zYW6umkJlul7UyIlWUOQ7tzA+wMgVCVouVDq0n RODzULuGdL9H2nyZUKm4R1Yk6vKyBj+CVSXhtMC1mjOyjrD8/kYOYx6wEdHwpz/T 1Ir5QT+Pr30yGHDdHKI7BhaLGFJ06HJQBwfwf5JVRLNV0DXYqQA= -----END CERTIFICATE-----Generated at Sat Dec 27 05:43:11 2025 by rpki-client