This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/91dc71cd-acca-415c-b283-b9372c0d4ce8/0/456E5E4F039DBA0492D11A1873B7ECBBAC67A940.mft File: 456E5E4F039DBA0492D11A1873B7ECBBAC67A940.mft (raw, json) Hash identifier: ORw60TzGNmJQckMM5rI64SlInWHAD0Uvm5hVMZAwznQ= Subject key identifier: 73:B5:98:09:BA:EE:61:B7:A3:2D:48:1A:34:29:A8:05:15:D6:6D:57 Authority key identifier: 45:6E:5E:4F:03:9D:BA:04:92:D1:1A:18:73:B7:EC:BB:AC:67:A9:40 Certificate issuer: /CN=456E5E4F039DBA0492D11A1873B7ECBBAC67A940 Certificate serial: 22CDD290946AC7AB526540FFAEB02C7570B22154 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/456E5E4F039DBA0492D11A1873B7ECBBAC67A940.cer Subject info access: rsync://repo-rpki.idnic.net/repo/91dc71cd-acca-415c-b283-b9372c0d4ce8/0/456E5E4F039DBA0492D11A1873B7ECBBAC67A940.mft Manifest number: 01C4 Signing time: Wed 17 Dec 2025 05:41:59 +0000 Manifest this update: Wed 17 Dec 2025 05:36:59 +0000 Manifest next update: Sat 20 Dec 2025 15:32:59 +0000 Files and hashes: 1: 456E5E4F039DBA0492D11A1873B7ECBBAC67A940.crl (hash: +aghnUDfuOagtzTBZKLyE92k12c/il8XHx+/ltJBLKg=) 2: 3130332e3130312e3134322e302f32342d3234203d3e20313530393330.roa (hash: KMcz9HndxaUeKt8rn5FI6Dp+4OSaacNz41TOKfq1iXs=) 3: 3130332e3130312e3134332e302f32342d3234203d3e20313339393637.roa (hash: 0veKivESqTIR22CLe0BQKZVbkyyZLitqVchvnzV7aBw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/91dc71cd-acca-415c-b283-b9372c0d4ce8/0/456E5E4F039DBA0492D11A1873B7ECBBAC67A940.crl rsync://repo-rpki.idnic.net/repo/91dc71cd-acca-415c-b283-b9372c0d4ce8/0/456E5E4F039DBA0492D11A1873B7ECBBAC67A940.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/456E5E4F039DBA0492D11A1873B7ECBBAC67A940.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 15:32:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:cd:d2:90:94:6a:c7:ab:52:65:40:ff:ae:b0:2c:75:70:b2:21:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=456E5E4F039DBA0492D11A1873B7ECBBAC67A940 Validity Not Before: Dec 17 05:36:59 2025 GMT Not After : Dec 20 15:32:59 2025 GMT Subject: CN=73B59809BAEE61B7A32D481A3429A80515D66D57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:a8:d9:fa:96:4b:c9:e3:f2:15:1b:2c:a8:19: b3:4d:b1:1b:23:cb:63:fd:9f:64:c5:10:ed:d4:e1: 45:57:34:a3:cd:55:92:10:a7:ef:aa:6d:f1:f8:58: 8c:ef:05:f8:11:44:27:d0:38:96:e8:b9:f2:3e:bd: ea:b4:36:40:84:37:e5:61:31:a8:20:dc:06:60:85: 2a:27:76:b0:a5:ea:e3:07:45:5a:46:46:48:d3:3d: c8:78:37:19:d6:81:5d:fd:89:da:5c:49:85:30:bc: ac:b0:38:58:cb:ea:a6:2f:80:4d:f8:f5:26:5e:a5: 2b:0b:40:21:41:e1:0c:81:3b:e8:0c:0f:68:79:aa: 72:ed:12:89:e7:c6:10:ed:ee:bc:2a:19:15:dc:b8: 8d:5b:55:af:69:5f:f4:f9:5c:03:ce:d9:c3:61:7c: 25:fb:27:7f:dc:e6:cf:a5:11:86:89:5d:73:bb:3e: 7d:44:bb:b3:c3:21:63:9a:26:6a:97:1e:9a:91:87: 37:f9:43:3e:9d:38:c5:25:87:9b:d2:b9:6f:9a:e4: 33:16:2e:35:db:c3:b7:be:5a:36:84:7c:97:46:c7: 58:d5:85:2f:f9:c5:f4:1e:b7:d7:82:fe:2b:1b:92: 61:b7:3c:a2:14:19:91:ca:6a:d9:61:8a:18:0d:f3: 7f:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:B5:98:09:BA:EE:61:B7:A3:2D:48:1A:34:29:A8:05:15:D6:6D:57 X509v3 Authority Key Identifier: keyid:45:6E:5E:4F:03:9D:BA:04:92:D1:1A:18:73:B7:EC:BB:AC:67:A9:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/91dc71cd-acca-415c-b283-b9372c0d4ce8/0/456E5E4F039DBA0492D11A1873B7ECBBAC67A940.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/456E5E4F039DBA0492D11A1873B7ECBBAC67A940.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/91dc71cd-acca-415c-b283-b9372c0d4ce8/0/456E5E4F039DBA0492D11A1873B7ECBBAC67A940.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:72:af:ef:9b:a5:70:2e:9d:58:02:8b:dc:09:0d:a6:da:27: c9:9b:a6:4e:dc:a4:4f:10:80:7e:29:ae:26:c9:dd:65:58:7c: c2:f4:54:57:8b:41:d4:af:c1:7f:9c:48:33:fc:2e:52:3a:31: 72:43:0c:94:7f:65:46:01:bb:5e:94:00:4c:7e:01:20:94:c2: ef:45:43:5e:59:1a:ef:51:5c:bd:76:d6:09:4b:f3:96:f6:f0: be:bf:84:4b:ff:4c:5f:80:86:ac:de:8f:d9:91:53:c7:c4:6f: f2:61:89:26:a6:07:7c:26:90:74:e3:07:15:55:61:94:f7:b6: dd:1f:f9:78:43:f4:af:e6:a6:aa:e3:62:3e:a5:ce:98:a4:1b: f6:86:a3:a8:60:5a:f3:e1:91:bc:1e:58:36:57:de:ed:71:b6: 29:ea:22:ac:c3:87:92:55:a4:4d:44:83:b3:4e:1e:40:4e:19: 10:39:10:dd:06:c8:0b:cd:e9:c7:7c:66:2a:5e:a8:7c:58:52: fe:b2:90:79:62:ac:3d:04:25:c0:7e:d2:12:69:6e:59:5b:c1: 9d:8a:c2:89:93:a0:bf:de:ea:88:e1:60:e0:a2:a5:a7:72:ac: 4b:6c:79:eb:c2:2a:e6:79:ca:7f:60:f3:a1:04:ad:f6:59:99: 2f:9f:32:c5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIs3SkJRqx6tSZUD/rrAsdXCyIVQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDU2RTVFNEYwMzlEQkEwNDkyRDExQTE4NzNCN0VDQkJB QzY3QTk0MDAeFw0yNTEyMTcwNTM2NTlaFw0yNTEyMjAxNTMyNTlaMDMxMTAvBgNV BAMTKDczQjU5ODA5QkFFRTYxQjdBMzJENDgxQTM0MjlBODA1MTVENjZENTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdqNn6lkvJ4/IVGyyoGbNNsRsj y2P9n2TFEO3U4UVXNKPNVZIQp++qbfH4WIzvBfgRRCfQOJboufI+veq0NkCEN+Vh Magg3AZghSondrCl6uMHRVpGRkjTPch4NxnWgV39idpcSYUwvKywOFjL6qYvgE34 9SZepSsLQCFB4QyBO+gMD2h5qnLtEonnxhDt7rwqGRXcuI1bVa9pX/T5XAPO2cNh fCX7J3/c5s+lEYaJXXO7Pn1Eu7PDIWOaJmqXHpqRhzf5Qz6dOMUlh5vSuW+a5DMW LjXbw7e+WjaEfJdGx1jVhS/5xfQet9eC/isbkmG3PKIUGZHKatlhihgN8381AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUc7WYCbruYbejLUgaNCmoBRXWbVcwHwYDVR0j BBgwFoAURW5eTwOdugSS0RoYc7fsu6xnqUAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MWRjNzFjZC1hY2NhLTQxNWMtYjI4My1iOTM3MmMwZDRjZTgvMC80NTZFNUU0RjAz OURCQTA0OTJEMTFBMTg3M0I3RUNCQkFDNjdBOTQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDU2RTVFNEYwMzlEQkEwNDkyRDExQTE4NzNCN0VDQkJBQzY3 QTk0MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTFkYzcxY2QtYWNjYS00MTVjLWIy ODMtYjkzNzJjMGQ0Y2U4LzAvNDU2RTVFNEYwMzlEQkEwNDkyRDExQTE4NzNCN0VD QkJBQzY3QTk0MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABNyr++bpXAunVgCi9wJDabaJ8mbpk7cpE8Q gH4pribJ3WVYfML0VFeLQdSvwX+cSDP8LlI6MXJDDJR/ZUYBu16UAEx+ASCUwu9F Q15ZGu9RXL121glL85b28L6/hEv/TF+Ahqzej9mRU8fEb/JhiSamB3wmkHTjBxVV YZT3tt0f+XhD9K/mpqrjYj6lzpikG/aGo6hgWvPhkbweWDZX3u1xtinqIqzDh5JV pE1Eg7NOHkBOGRA5EN0GyAvN6cd8ZipeqHxYUv6ykHlirD0EJcB+0hJpbllbwZ2K womToL/e6ojhYOCipadyrEtseevCKuZ5yn9g86EErfZZmS+fMsU= -----END CERTIFICATE-----Generated at Fri Dec 19 10:53:31 2025 by rpki-client