This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/994bef37-745b-4fff-bb1f-aff1f33f5e5a/0/45E8125013BA38DADC26B1346024A7493BEC69FE.mft File: 45E8125013BA38DADC26B1346024A7493BEC69FE.mft (raw, json) Hash identifier: 7ClzbONx93jOM6biq9QxDUc944K7rVnECsXg+tSPNUo= Subject key identifier: D8:B7:A2:D6:8A:71:63:D5:5B:57:31:D2:CF:2E:DF:24:EA:15:E2:53 Authority key identifier: 45:E8:12:50:13:BA:38:DA:DC:26:B1:34:60:24:A7:49:3B:EC:69:FE Certificate issuer: /CN=45E8125013BA38DADC26B1346024A7493BEC69FE Certificate serial: 1CDF971C8864B3859C7978D32EFC4E0AF46BF80D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45E8125013BA38DADC26B1346024A7493BEC69FE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/994bef37-745b-4fff-bb1f-aff1f33f5e5a/0/45E8125013BA38DADC26B1346024A7493BEC69FE.mft Manifest number: 0229 Signing time: Thu 18 Dec 2025 23:31:45 +0000 Manifest this update: Thu 18 Dec 2025 23:26:44 +0000 Manifest next update: Mon 22 Dec 2025 07:18:44 +0000 Files and hashes: 1: 45E8125013BA38DADC26B1346024A7493BEC69FE.crl (hash: pySwZG/YWOMQHnSzvpHGaVxFjM0z6NLxYkk4ATiqJLI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/994bef37-745b-4fff-bb1f-aff1f33f5e5a/0/45E8125013BA38DADC26B1346024A7493BEC69FE.crl rsync://repo-rpki.idnic.net/repo/994bef37-745b-4fff-bb1f-aff1f33f5e5a/0/45E8125013BA38DADC26B1346024A7493BEC69FE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45E8125013BA38DADC26B1346024A7493BEC69FE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 03:43:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:df:97:1c:88:64:b3:85:9c:79:78:d3:2e:fc:4e:0a:f4:6b:f8:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45E8125013BA38DADC26B1346024A7493BEC69FE Validity Not Before: Dec 18 23:26:44 2025 GMT Not After : Dec 22 07:18:44 2025 GMT Subject: CN=D8B7A2D68A7163D55B5731D2CF2EDF24EA15E253 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:59:f2:ba:70:e6:61:ec:a4:2a:df:23:66:2f: 31:ea:eb:8c:3f:47:3f:85:1f:42:2b:d4:b0:73:16: d3:3a:b1:e7:55:10:ad:ff:84:f1:af:38:f9:69:04: a9:61:84:0d:b4:49:bd:4f:91:e6:77:9e:73:46:85: 91:e5:77:42:36:1c:fe:ca:25:0c:bb:d0:3c:1c:6d: f9:b6:e4:5d:9e:ea:7a:c7:cd:85:3e:52:de:36:64: f0:65:c7:11:91:93:ff:2d:79:24:3e:34:d4:85:19: 9a:57:20:24:a1:84:b0:b9:bb:80:f5:42:aa:10:83: e6:23:32:5b:1c:76:a0:d7:bd:fc:ae:78:3d:7d:f8: 0b:cf:17:5b:14:db:e3:5b:98:b1:3a:00:04:d1:4b: f7:56:4e:fa:b1:56:33:6c:7c:d3:5b:d0:83:a8:ad: 9c:e1:d5:d5:c2:45:ef:6d:fc:13:b2:12:da:f0:d8: d7:41:a7:0c:7e:95:56:0f:ac:f5:ac:3c:08:5e:41: b6:97:4b:d1:18:97:78:07:9c:72:81:16:72:5d:32: 1a:84:03:0b:b4:9c:4e:a2:c8:f6:08:45:f9:9e:fb: 75:d3:a9:2e:28:4a:bf:42:77:b7:c4:bc:cc:90:c3: 79:7b:0e:d8:93:9b:05:39:ff:6e:40:92:70:1d:81: 6e:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:B7:A2:D6:8A:71:63:D5:5B:57:31:D2:CF:2E:DF:24:EA:15:E2:53 X509v3 Authority Key Identifier: keyid:45:E8:12:50:13:BA:38:DA:DC:26:B1:34:60:24:A7:49:3B:EC:69:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/994bef37-745b-4fff-bb1f-aff1f33f5e5a/0/45E8125013BA38DADC26B1346024A7493BEC69FE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45E8125013BA38DADC26B1346024A7493BEC69FE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/994bef37-745b-4fff-bb1f-aff1f33f5e5a/0/45E8125013BA38DADC26B1346024A7493BEC69FE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:95:8a:af:18:c5:76:08:40:26:59:07:38:6b:d5:80:51:9c: 94:a5:bd:b1:5f:d2:0c:88:4a:d8:e6:fd:ca:f3:c4:dc:f5:d2: 35:26:ca:45:99:24:00:ba:09:16:97:b8:cc:f7:13:d6:d9:16: 4a:6d:d3:f4:bd:9b:ab:d3:7f:25:96:55:20:a1:3c:6b:0e:45: 61:0e:2b:26:37:1f:82:a6:9d:ac:2f:13:3d:26:f7:c4:c9:b2: 46:99:7d:51:ef:18:89:9b:c4:e5:9d:61:a5:e4:d7:e6:b1:ac: 0d:f1:fa:71:92:55:fd:67:a4:74:67:7f:de:1e:bf:7f:48:34: b9:a6:ca:24:67:c5:51:7f:f8:19:55:7a:3e:2d:33:54:2a:0c: cd:b0:55:0a:9c:3d:ed:54:40:dc:4f:ff:0f:3c:34:41:05:15: f3:b5:b4:e4:b6:dc:8d:31:be:2e:93:bb:7c:ff:0f:75:39:71: c3:0d:04:61:6a:9a:91:a8:81:aa:61:ee:14:fc:d8:0c:86:a9: 43:ca:3b:f4:39:37:49:54:41:26:cd:56:ef:6d:2c:19:0a:5c: 45:a7:c6:ac:c2:d8:2c:fc:2a:f4:31:1f:72:c3:f2:5a:2c:56: 42:20:77:4b:a6:f3:ff:95:a5:c9:97:36:67:2c:13:e9:3f:1f: 4c:65:dc:41 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHN+XHIhks4WceXjTLvxOCvRr+A0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDVFODEyNTAxM0JBMzhEQURDMjZCMTM0NjAyNEE3NDkz QkVDNjlGRTAeFw0yNTEyMTgyMzI2NDRaFw0yNTEyMjIwNzE4NDRaMDMxMTAvBgNV BAMTKEQ4QjdBMkQ2OEE3MTYzRDU1QjU3MzFEMkNGMkVERjI0RUExNUUyNTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoWfK6cOZh7KQq3yNmLzHq64w/ Rz+FH0Ir1LBzFtM6sedVEK3/hPGvOPlpBKlhhA20Sb1PkeZ3nnNGhZHld0I2HP7K JQy70Dwcbfm25F2e6nrHzYU+Ut42ZPBlxxGRk/8teSQ+NNSFGZpXICShhLC5u4D1 QqoQg+YjMlscdqDXvfyueD19+AvPF1sU2+NbmLE6AATRS/dWTvqxVjNsfNNb0IOo rZzh1dXCRe9t/BOyEtrw2NdBpwx+lVYPrPWsPAheQbaXS9EYl3gHnHKBFnJdMhqE Awu0nE6iyPYIRfme+3XTqS4oSr9Cd7fEvMyQw3l7DtiTmwU5/25AknAdgW5xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2Lei1opxY9VbVzHSzy7fJOoV4lMwHwYDVR0j BBgwFoAURegSUBO6ONrcJrE0YCSnSTvsaf4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 OTRiZWYzNy03NDViLTRmZmYtYmIxZi1hZmYxZjMzZjVlNWEvMC80NUU4MTI1MDEz QkEzOERBREMyNkIxMzQ2MDI0QTc0OTNCRUM2OUZFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDVFODEyNTAxM0JBMzhEQURDMjZCMTM0NjAyNEE3NDkzQkVD NjlGRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTk0YmVmMzctNzQ1Yi00ZmZmLWJi MWYtYWZmMWYzM2Y1ZTVhLzAvNDVFODEyNTAxM0JBMzhEQURDMjZCMTM0NjAyNEE3 NDkzQkVDNjlGRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAGViq8YxXYIQCZZBzhr1YBRnJSlvbFf0gyI Stjm/crzxNz10jUmykWZJAC6CRaXuMz3E9bZFkpt0/S9m6vTfyWWVSChPGsORWEO KyY3H4KmnawvEz0m98TJskaZfVHvGImbxOWdYaXk1+axrA3x+nGSVf1npHRnf94e v39INLmmyiRnxVF/+BlVej4tM1QqDM2wVQqcPe1UQNxP/w88NEEFFfO1tOS23I0x vi6Tu3z/D3U5ccMNBGFqmpGogaph7hT82AyGqUPKO/Q5N0lUQSbNVu9tLBkKXEWn xqzC2Cz8KvQxH3LD8losVkIgd0um8/+VpcmXNmcsE+k/H0xl3EE= -----END CERTIFICATE-----Generated at Fri Dec 19 18:12:17 2025 by rpki-client