This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/9be9f8d8-6ef9-472f-84f0-bb97f1f50ce7/0/45C573917C39C2CCF38654E237AB8B4CF23929FD.mft
File: 45C573917C39C2CCF38654E237AB8B4CF23929FD.mft (raw, json)
Hash identifier: 5xXwf/WYQonuYlVUO8YOI9F7PMLYuzby3quRapseGW8=
Subject key identifier: 34:3C:88:30:56:4D:0C:DA:8F:E6:21:3A:70:10:30:7B:A4:3D:ED:7E
Authority key identifier: 45:C5:73:91:7C:39:C2:CC:F3:86:54:E2:37:AB:8B:4C:F2:39:29:FD
Certificate issuer: /CN=45C573917C39C2CCF38654E237AB8B4CF23929FD
Certificate serial: 762A2E8B5608F60F75D0D3EE1C1AEC8FEB099750
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45C573917C39C2CCF38654E237AB8B4CF23929FD.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/9be9f8d8-6ef9-472f-84f0-bb97f1f50ce7/0/45C573917C39C2CCF38654E237AB8B4CF23929FD.mft
Manifest number: 025E
Signing time: Thu 18 Dec 2025 21:13:08 +0000
Manifest this update: Thu 18 Dec 2025 21:08:08 +0000
Manifest next update: Sun 21 Dec 2025 23:09:08 +0000
Files and hashes: 1: 45C573917C39C2CCF38654E237AB8B4CF23929FD.crl (hash: sjvt4/uOZ1lQv9TX88h4rw1sFlqFivPgMJMSCz3BfxY=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/9be9f8d8-6ef9-472f-84f0-bb97f1f50ce7/0/45C573917C39C2CCF38654E237AB8B4CF23929FD.crl
rsync://repo-rpki.idnic.net/repo/9be9f8d8-6ef9-472f-84f0-bb97f1f50ce7/0/45C573917C39C2CCF38654E237AB8B4CF23929FD.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45C573917C39C2CCF38654E237AB8B4CF23929FD.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 21 Dec 2025 23:09:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:2a:2e:8b:56:08:f6:0f:75:d0:d3:ee:1c:1a:ec:8f:eb:09:97:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45C573917C39C2CCF38654E237AB8B4CF23929FD
Validity
Not Before: Dec 18 21:08:08 2025 GMT
Not After : Dec 21 23:09:08 2025 GMT
Subject: CN=343C8830564D0CDA8FE6213A7010307BA43DED7E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:6f:8a:26:9f:22:a2:f4:55:25:84:b7:f1:c4:
20:ae:16:90:18:8a:0d:72:da:09:8b:51:36:bf:f6:
f0:b8:47:08:e4:1b:50:92:fd:f9:99:ad:12:0a:5c:
00:47:f4:1b:66:bb:de:10:8b:96:37:6c:3d:89:dc:
28:9f:5c:28:a9:83:ab:ef:8d:84:41:53:f5:90:58:
45:70:ef:39:f2:f4:27:79:0d:0f:7f:76:69:f2:df:
89:cf:81:95:37:25:e1:87:27:5b:fb:10:73:d3:89:
a6:81:ca:2e:17:8d:ff:df:40:23:0a:7d:50:3d:30:
92:cb:41:42:f1:95:2a:0d:87:37:e5:e7:15:01:8f:
1f:a0:82:05:99:1e:91:9a:59:d9:2a:04:da:a1:b2:
30:76:ad:a0:f6:fe:88:a4:67:69:df:5c:7a:c5:3f:
6c:61:06:ca:8e:66:15:bb:e8:9b:07:94:8d:97:51:
93:e6:77:7d:1e:86:6e:e1:ad:d2:e8:fc:8c:1f:4a:
7b:66:37:7a:b2:31:a9:cc:2f:50:b9:2c:ae:aa:a0:
36:e6:94:0c:a2:8d:34:4a:14:41:79:6d:6d:a0:bf:
74:8c:0d:61:8f:4e:10:2f:62:2c:9d:0e:33:35:81:
16:eb:92:60:0c:43:79:17:4f:5a:19:04:d0:f2:b0:
8b:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:3C:88:30:56:4D:0C:DA:8F:E6:21:3A:70:10:30:7B:A4:3D:ED:7E
X509v3 Authority Key Identifier:
keyid:45:C5:73:91:7C:39:C2:CC:F3:86:54:E2:37:AB:8B:4C:F2:39:29:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/9be9f8d8-6ef9-472f-84f0-bb97f1f50ce7/0/45C573917C39C2CCF38654E237AB8B4CF23929FD.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45C573917C39C2CCF38654E237AB8B4CF23929FD.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9be9f8d8-6ef9-472f-84f0-bb97f1f50ce7/0/45C573917C39C2CCF38654E237AB8B4CF23929FD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:3a:49:d1:4c:50:f3:57:04:c0:ed:7b:29:b6:c7:a0:cc:6b:
19:b6:c3:7e:d8:83:c7:f8:af:da:ff:df:b6:12:48:3e:a6:b9:
a6:4c:5f:33:01:0e:44:db:79:b1:a9:4a:cf:b2:9e:43:84:94:
9d:40:eb:97:0b:91:ad:83:13:21:ce:5b:5e:76:23:b0:80:0f:
e0:e9:01:28:d4:e1:79:01:12:2d:7d:17:cc:b4:06:87:f6:b3:
dd:bf:e1:2a:2b:ed:64:b8:0f:4f:d8:ee:cd:52:4c:57:5c:9b:
4b:25:2a:80:60:81:0e:7d:8a:de:02:f2:79:3e:a9:64:25:2b:
1b:eb:3e:54:24:da:9d:19:9e:54:af:6d:bf:46:2b:0e:ea:9a:
81:f9:38:74:81:b3:e1:69:f2:2c:01:ee:8a:44:24:36:5a:25:
b0:fe:92:d7:0b:96:cb:12:f4:f9:fd:16:89:9c:ba:47:fe:b0:
8d:4b:25:3c:19:6d:94:b0:f7:76:50:09:d2:43:80:0c:b5:a7:
2e:92:f9:be:c4:07:aa:f8:21:c0:36:8f:82:76:bc:42:6a:db:
cc:82:2c:f1:78:75:49:1b:09:d4:13:c6:53:f1:6a:b5:74:bb:
bc:72:7a:28:aa:6f:0a:e2:30:29:4d:cc:2a:22:eb:3f:4d:92:
41:52:e8:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 11:17:30 2025 by rpki-client