This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/3248d27b-ccb0-4fc7-abca-9fc0a3e15754/0/FF45D0F44B7B63B976B41EEE18CC92393CF8184F.mft File: FF45D0F44B7B63B976B41EEE18CC92393CF8184F.mft (raw, json) Hash identifier: YRFQBhBXrw2UhB4WMHaltd56g19nAPhvnATZROaL9z4= Subject key identifier: 5C:7E:BE:A5:A8:9F:99:07:7B:E5:42:5A:61:8A:C9:20:43:CC:23:81 Authority key identifier: FF:45:D0:F4:4B:7B:63:B9:76:B4:1E:EE:18:CC:92:39:3C:F8:18:4F Certificate issuer: /CN=FF45D0F44B7B63B976B41EEE18CC92393CF8184F Certificate serial: 080AA3F5AF5A3C225568190A42D1C0E5857DB790 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF45D0F44B7B63B976B41EEE18CC92393CF8184F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3248d27b-ccb0-4fc7-abca-9fc0a3e15754/0/FF45D0F44B7B63B976B41EEE18CC92393CF8184F.mft Manifest number: 0210 Signing time: Tue 23 Dec 2025 04:50:03 +0000 Manifest this update: Tue 23 Dec 2025 04:45:03 +0000 Manifest next update: Fri 26 Dec 2025 05:43:03 +0000 Files and hashes: 1: 3130332e3136392e33382e302f32332d3234203d3e20313432333331.roa (hash: XR+TpGg6coEePHmhn8BPw57A0ogwMebLb1ve/vRAoWA=) 2: FF45D0F44B7B63B976B41EEE18CC92393CF8184F.crl (hash: djjvdfCnDQvKOUrgEiTN2bxmg8V6MOw7k0nm84hXBtA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3248d27b-ccb0-4fc7-abca-9fc0a3e15754/0/FF45D0F44B7B63B976B41EEE18CC92393CF8184F.crl rsync://repo-rpki.idnic.net/repo/3248d27b-ccb0-4fc7-abca-9fc0a3e15754/0/FF45D0F44B7B63B976B41EEE18CC92393CF8184F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF45D0F44B7B63B976B41EEE18CC92393CF8184F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 05:43:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:0a:a3:f5:af:5a:3c:22:55:68:19:0a:42:d1:c0:e5:85:7d:b7:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF45D0F44B7B63B976B41EEE18CC92393CF8184F Validity Not Before: Dec 23 04:45:03 2025 GMT Not After : Dec 26 05:43:03 2025 GMT Subject: CN=5C7EBEA5A89F99077BE5425A618AC92043CC2381 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:68:46:45:5c:81:9a:26:bd:99:a5:f2:6b:a9: 63:8a:e4:75:4d:51:75:cd:a6:bf:ce:d5:75:9d:bd: 33:74:ca:d1:ad:c3:e6:42:c8:fb:e5:ef:05:42:5c: 49:ff:73:9b:b5:ee:c3:9a:c0:5d:db:65:14:ee:9b: 44:4b:57:e8:90:9d:51:51:73:71:8a:12:69:a8:31: f9:a7:32:1c:dd:26:05:5b:bb:33:d7:92:8b:d5:1a: 1d:54:65:e0:05:66:5a:33:b1:a4:27:de:51:00:50: 10:4e:c4:ed:8b:b7:38:71:46:29:1d:35:5b:55:9f: de:ec:70:32:e8:47:6d:11:94:1a:6b:59:94:ac:10: 6c:92:15:e2:73:a6:bf:73:1d:b2:0a:84:83:93:58: 61:11:4d:1c:7e:14:59:ca:ef:4a:65:01:7e:f2:2f: 25:b9:95:f9:60:f1:56:75:7c:8a:d5:0e:e1:f5:91: b3:2d:1e:08:29:73:2a:30:6f:50:87:a1:f2:5f:4c: c5:db:96:a9:41:53:91:1c:86:8b:a3:0f:ae:60:ad: 37:c3:e9:5c:dc:b8:8e:28:bb:81:7d:36:42:69:a5: 29:2c:0c:f6:80:ff:26:40:34:91:d7:f6:30:bd:a6: 47:d4:64:d7:5a:32:a0:67:e2:9b:da:34:ba:02:0b: e8:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:7E:BE:A5:A8:9F:99:07:7B:E5:42:5A:61:8A:C9:20:43:CC:23:81 X509v3 Authority Key Identifier: keyid:FF:45:D0:F4:4B:7B:63:B9:76:B4:1E:EE:18:CC:92:39:3C:F8:18:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3248d27b-ccb0-4fc7-abca-9fc0a3e15754/0/FF45D0F44B7B63B976B41EEE18CC92393CF8184F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF45D0F44B7B63B976B41EEE18CC92393CF8184F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3248d27b-ccb0-4fc7-abca-9fc0a3e15754/0/FF45D0F44B7B63B976B41EEE18CC92393CF8184F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:fa:74:92:37:b2:85:77:76:da:95:81:da:c1:90:05:73:10: 84:d9:08:e0:d3:c3:d6:53:c5:a3:5c:7d:8b:02:04:9b:3c:92: 5e:1a:76:ee:54:0a:52:86:e5:a0:f4:36:8d:1f:64:3a:90:b3: 07:b3:4b:a1:c7:61:33:fc:aa:23:3b:b2:d3:ea:fa:d9:ef:b0: 39:af:b7:33:ff:6e:16:4d:c9:df:88:e1:a5:0b:f1:2b:8f:4d: b3:46:29:a9:60:4a:12:c6:ac:f5:05:95:6f:5b:28:ba:2e:ac: 3e:af:35:d6:1c:30:a4:59:6a:43:dd:57:16:cb:36:e2:16:4b: 3c:a7:99:55:19:a3:40:0d:66:62:a5:e5:ce:9c:9d:4f:b4:ae: 28:bd:9c:49:0b:81:0b:cd:99:22:e3:d1:71:eb:91:68:d5:3f: ab:29:81:b7:04:7a:62:ff:c0:0c:c1:ae:ee:64:61:af:5d:ff: b2:d1:ae:68:2a:e4:4a:b8:f5:43:b3:a0:52:cc:aa:39:b7:b0: 51:29:ed:20:ff:1e:ba:c5:d4:8d:46:27:69:3f:b0:e6:09:36: 30:be:fa:03:ed:b5:40:0e:7d:01:4f:d6:a9:71:e4:31:6d:12: 5d:61:f1:84:23:3f:d6:6b:77:08:81:05:a5:98:fd:51:bd:29: bb:e4:3e:6d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCAqj9a9aPCJVaBkKQtHA5YV9t5AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkY0NUQwRjQ0QjdCNjNCOTc2QjQxRUVFMThDQzkyMzkz Q0Y4MTg0RjAeFw0yNTEyMjMwNDQ1MDNaFw0yNTEyMjYwNTQzMDNaMDMxMTAvBgNV BAMTKDVDN0VCRUE1QTg5Rjk5MDc3QkU1NDI1QTYxOEFDOTIwNDNDQzIzODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPaEZFXIGaJr2ZpfJrqWOK5HVN UXXNpr/O1XWdvTN0ytGtw+ZCyPvl7wVCXEn/c5u17sOawF3bZRTum0RLV+iQnVFR c3GKEmmoMfmnMhzdJgVbuzPXkovVGh1UZeAFZlozsaQn3lEAUBBOxO2LtzhxRikd NVtVn97scDLoR20RlBprWZSsEGySFeJzpr9zHbIKhIOTWGERTRx+FFnK70plAX7y LyW5lflg8VZ1fIrVDuH1kbMtHggpcyowb1CHofJfTMXblqlBU5EchoujD65grTfD 6VzcuI4ou4F9NkJppSksDPaA/yZANJHX9jC9pkfUZNdaMqBn4pvaNLoCC+jvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXH6+paifmQd75UJaYYrJIEPMI4EwHwYDVR0j BBgwFoAU/0XQ9Et7Y7l2tB7uGMySOTz4GE8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MjQ4ZDI3Yi1jY2IwLTRmYzctYWJjYS05ZmMwYTNlMTU3NTQvMC9GRjQ1RDBGNDRC N0I2M0I5NzZCNDFFRUUxOENDOTIzOTNDRjgxODRGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkY0NUQwRjQ0QjdCNjNCOTc2QjQxRUVFMThDQzkyMzkzQ0Y4 MTg0Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzI0OGQyN2ItY2NiMC00ZmM3LWFi Y2EtOWZjMGEzZTE1NzU0LzAvRkY0NUQwRjQ0QjdCNjNCOTc2QjQxRUVFMThDQzky MzkzQ0Y4MTg0Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKf6dJI3soV3dtqVgdrBkAVzEITZCODTw9ZT xaNcfYsCBJs8kl4adu5UClKG5aD0No0fZDqQswezS6HHYTP8qiM7stPq+tnvsDmv tzP/bhZNyd+I4aUL8SuPTbNGKalgShLGrPUFlW9bKLourD6vNdYcMKRZakPdVxbL NuIWSzynmVUZo0ANZmKl5c6cnU+0rii9nEkLgQvNmSLj0XHrkWjVP6spgbcEemL/ wAzBru5kYa9d/7LRrmgq5Eq49UOzoFLMqjm3sFEp7SD/HrrF1I1GJ2k/sOYJNjC+ +gPttUAOfQFP1qlx5DFtEl1h8YQjP9ZrdwiBBaWY/VG9KbvkPm0= -----END CERTIFICATE-----Generated at Wed Dec 24 22:05:06 2025 by rpki-client