This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/46b05f36-e174-4dad-bc2a-08926c5dd046/0/145856688D58EEB673E59CC02D21114CF78E87E5.mft File: 145856688D58EEB673E59CC02D21114CF78E87E5.mft (raw, json) Hash identifier: 2mpGQKIvJrgdUV/6HxgmNWo7MTHKxOgHUwFCkRaLIzo= Subject key identifier: BD:61:6B:DB:C1:F4:39:B1:B7:8A:F8:1B:03:73:FB:1B:C2:6D:21:41 Authority key identifier: 14:58:56:68:8D:58:EE:B6:73:E5:9C:C0:2D:21:11:4C:F7:8E:87:E5 Certificate issuer: /CN=145856688D58EEB673E59CC02D21114CF78E87E5 Certificate serial: 75726269A8D9EAE8C0C0220F83C48F7B0D043B5B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/145856688D58EEB673E59CC02D21114CF78E87E5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/46b05f36-e174-4dad-bc2a-08926c5dd046/0/145856688D58EEB673E59CC02D21114CF78E87E5.mft Manifest number: D4 Signing time: Mon 22 Dec 2025 19:40:58 +0000 Manifest this update: Mon 22 Dec 2025 19:35:58 +0000 Manifest next update: Thu 25 Dec 2025 22:35:58 +0000 Files and hashes: 1: 3135372e36362e35382e302f32332d3233203d3e203633383633.roa (hash: 9tXtFpTSK8/Gv6WVGpyrNnATNqrkJEwmK6WzmGqcUmQ=) 2: 3135372e36362e35382e302f32342d3234203d3e203633383633.roa (hash: NiBjkneS23NjWIZK7/S3rCptTDYB7bSoabsYG4VVavg=) 3: 3135372e36362e35392e302f32342d3234203d3e203633383633.roa (hash: 9RQvrG19d/kbbr9j04wj/AolcfFkLEsHEjyLp9uYWCo=) 4: 145856688D58EEB673E59CC02D21114CF78E87E5.crl (hash: qTYfMf65dueqAj9XnDrpuFFf1TZ9w9TZecj4brbYve0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/46b05f36-e174-4dad-bc2a-08926c5dd046/0/145856688D58EEB673E59CC02D21114CF78E87E5.crl rsync://repo-rpki.idnic.net/repo/46b05f36-e174-4dad-bc2a-08926c5dd046/0/145856688D58EEB673E59CC02D21114CF78E87E5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/145856688D58EEB673E59CC02D21114CF78E87E5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 22:35:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:72:62:69:a8:d9:ea:e8:c0:c0:22:0f:83:c4:8f:7b:0d:04:3b:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=145856688D58EEB673E59CC02D21114CF78E87E5 Validity Not Before: Dec 22 19:35:58 2025 GMT Not After : Dec 25 22:35:58 2025 GMT Subject: CN=BD616BDBC1F439B1B78AF81B0373FB1BC26D2141 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:9d:27:96:c1:4b:d7:47:9e:a9:54:d5:0f:b6: 3d:15:d8:12:9d:5c:a9:7c:91:75:56:32:09:e3:38: d1:48:1e:0e:8e:cb:4e:b5:c6:00:6c:a2:7a:ea:ce: 9b:cc:9f:fa:e7:c9:4c:22:77:b6:1e:ef:c5:96:00: 32:91:f5:5b:f6:b0:84:3c:86:8e:e8:b2:22:12:74: c2:45:35:f1:e5:4c:f5:08:6d:fb:ae:ea:37:7e:e7: 82:14:c0:da:34:a4:b2:fa:9b:6a:f6:aa:aa:67:8f: 1f:39:c9:91:52:f1:26:fc:98:54:b5:7a:df:98:71: 23:b6:d9:3f:63:a1:b4:11:27:d9:a6:83:61:94:ae: c4:6d:94:eb:75:ce:2a:5d:01:bc:6b:8f:c5:72:c1: d7:9c:a8:f2:26:d4:d3:3f:c5:6f:83:73:aa:c4:99: 5f:01:3b:d2:c1:65:1e:e0:91:59:23:99:d9:de:cf: 17:12:4b:27:9b:9b:df:91:0e:2b:66:86:f1:23:18: 24:f3:d8:36:dc:23:02:fe:89:40:60:90:90:bf:4f: f1:a7:bb:e0:fb:d6:10:5d:08:5f:08:de:1e:83:7f: 97:2d:00:d8:49:d4:69:f8:4a:86:1a:26:4f:07:09: 94:77:d5:35:98:11:0e:9b:bd:b5:f4:f9:25:9c:98: ca:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:61:6B:DB:C1:F4:39:B1:B7:8A:F8:1B:03:73:FB:1B:C2:6D:21:41 X509v3 Authority Key Identifier: keyid:14:58:56:68:8D:58:EE:B6:73:E5:9C:C0:2D:21:11:4C:F7:8E:87:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/46b05f36-e174-4dad-bc2a-08926c5dd046/0/145856688D58EEB673E59CC02D21114CF78E87E5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/145856688D58EEB673E59CC02D21114CF78E87E5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/46b05f36-e174-4dad-bc2a-08926c5dd046/0/145856688D58EEB673E59CC02D21114CF78E87E5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:35:f4:73:91:23:9a:43:ba:69:23:85:da:cd:eb:d9:4b:17: 8c:25:e8:c8:3b:06:cf:8b:9e:f7:b0:ac:72:42:96:2f:6f:6b: 1e:55:f8:e7:e6:9e:a4:35:f3:fc:14:be:dc:54:1f:35:eb:bb: 08:58:85:4d:55:e4:27:4f:19:9e:bf:fb:ef:dc:a7:e7:47:b5: 46:e2:29:9f:25:95:c0:49:b6:b4:1e:77:b4:10:3b:6a:d2:d4: 58:d5:ba:cb:13:cd:b9:c3:1f:c3:4c:61:00:e7:e8:53:cf:e4: f5:5b:a1:e7:cb:5a:e3:9a:1e:dc:d4:17:2c:5a:ed:5a:67:70: 56:08:18:b2:a4:71:ca:c5:73:e9:fa:8f:c6:1b:3a:a7:75:f1: 1d:af:b4:af:20:af:a3:d6:cd:02:d0:58:bd:48:b1:07:38:c8: b5:1b:fe:bb:6c:ea:5b:40:0f:7a:2b:e8:37:9d:9b:fc:82:1e: be:8c:30:9e:ab:c1:ad:85:4d:2b:2b:62:38:c2:59:20:81:6e: c2:1d:ac:a9:ae:1c:80:d8:44:57:91:ff:5d:66:dd:6d:11:88: 97:23:d1:3c:fb:49:6a:2e:97:2e:1a:9f:1c:0e:d9:fd:ce:7f: ef:f2:7e:72:da:ba:ec:b6:41:61:ca:6d:87:97:0e:ca:b7:58: eb:da:50:42 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdXJiaajZ6ujAwCIPg8SPew0EO1swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTQ1ODU2Njg4RDU4RUVCNjczRTU5Q0MwMkQyMTExNENG NzhFODdFNTAeFw0yNTEyMjIxOTM1NThaFw0yNTEyMjUyMjM1NThaMDMxMTAvBgNV BAMTKEJENjE2QkRCQzFGNDM5QjFCNzhBRjgxQjAzNzNGQjFCQzI2RDIxNDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDInSeWwUvXR56pVNUPtj0V2BKd XKl8kXVWMgnjONFIHg6Oy061xgBsonrqzpvMn/rnyUwid7Ye78WWADKR9Vv2sIQ8 ho7osiISdMJFNfHlTPUIbfuu6jd+54IUwNo0pLL6m2r2qqpnjx85yZFS8Sb8mFS1 et+YcSO22T9jobQRJ9mmg2GUrsRtlOt1zipdAbxrj8VywdecqPIm1NM/xW+Dc6rE mV8BO9LBZR7gkVkjmdnezxcSSyebm9+RDitmhvEjGCTz2DbcIwL+iUBgkJC/T/Gn u+D71hBdCF8I3h6Df5ctANhJ1Gn4SoYaJk8HCZR31TWYEQ6bvbX0+SWcmMpDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvWFr28H0ObG3ivgbA3P7G8JtIUEwHwYDVR0j BBgwFoAUFFhWaI1Y7rZz5ZzALSERTPeOh+UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NmIwNWYzNi1lMTc0LTRkYWQtYmMyYS0wODkyNmM1ZGQwNDYvMC8xNDU4NTY2ODhE NThFRUI2NzNFNTlDQzAyRDIxMTE0Q0Y3OEU4N0U1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMTQ1ODU2Njg4RDU4RUVCNjczRTU5Q0MwMkQyMTExNENGNzhF ODdFNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDZiMDVmMzYtZTE3NC00ZGFkLWJj MmEtMDg5MjZjNWRkMDQ2LzAvMTQ1ODU2Njg4RDU4RUVCNjczRTU5Q0MwMkQyMTEx NENGNzhFODdFNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFU19HORI5pDumkjhdrN69lLF4wl6Mg7Bs+L nvewrHJCli9vax5V+OfmnqQ18/wUvtxUHzXruwhYhU1V5CdPGZ6/++/cp+dHtUbi KZ8llcBJtrQed7QQO2rS1FjVussTzbnDH8NMYQDn6FPP5PVboefLWuOaHtzUFyxa 7VpncFYIGLKkccrFc+n6j8YbOqd18R2vtK8gr6PWzQLQWL1IsQc4yLUb/rts6ltA D3or6Dedm/yCHr6MMJ6rwa2FTSsrYjjCWSCBbsIdrKmuHIDYRFeR/11m3W0RiJcj 0Tz7SWouly4anxwO2f3Of+/yfnLauuy2QWHKbYeXDsq3WOvaUEI= -----END CERTIFICATE-----Generated at Wed Dec 24 08:49:41 2025 by rpki-client