This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a6a9ddf7-576a-4a58-89bb-7e8928902270/0/456957B6E32ABD1576136BF4B39EC4CCAD972FCD.mft File: 456957B6E32ABD1576136BF4B39EC4CCAD972FCD.mft (raw, json) Hash identifier: doWXyWmpcC0UWKqt511I9jNGnwRLhRwNkTsYBRsYI10= Subject key identifier: 53:85:70:93:77:53:E6:30:9C:4A:21:1A:C2:8F:D1:6C:D0:53:DE:C4 Authority key identifier: 45:69:57:B6:E3:2A:BD:15:76:13:6B:F4:B3:9E:C4:CC:AD:97:2F:CD Certificate issuer: /CN=456957B6E32ABD1576136BF4B39EC4CCAD972FCD Certificate serial: 0F8BB5050B2B2631E7A4A5C30B85B976650E3069 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/456957B6E32ABD1576136BF4B39EC4CCAD972FCD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a6a9ddf7-576a-4a58-89bb-7e8928902270/0/456957B6E32ABD1576136BF4B39EC4CCAD972FCD.mft Manifest number: 01D5 Signing time: Fri 19 Dec 2025 18:21:58 +0000 Manifest this update: Fri 19 Dec 2025 18:16:58 +0000 Manifest next update: Mon 22 Dec 2025 20:28:58 +0000 Files and hashes: 1: 3130332e3134302e39302e302f32332d3234203d3e20313338383736.roa (hash: nNtuDch1T6loQOI43k4Pa/PnmvoP73GfE/Ea1GsFAQw=) 2: 3130332e3134302e39302e302f32342d3234203d3e20313338383736.roa (hash: TgFFHo7ru8wPRV9QoxZjMRgufeQSRNupm9ex/WNdqlE=) 3: 456957B6E32ABD1576136BF4B39EC4CCAD972FCD.crl (hash: 44kay2NuTq8ir+6wT95YB3K2bT+tj1knh60GJ95RQiI=) 4: 3130332e3134302e39312e302f32342d3234203d3e20313338383736.roa (hash: 99LHlaqlJvFBEChHJUY+/SooMeB1+Go2teO3Iar+WnU=) 5: 323030313a6466303a623538303a3a2f34382d3438203d3e20313338383736.roa (hash: a0pLp5FVIOKCyynC3nqEg0f7XooNhe6lSNrvEp9yAtY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a6a9ddf7-576a-4a58-89bb-7e8928902270/0/456957B6E32ABD1576136BF4B39EC4CCAD972FCD.crl rsync://repo-rpki.idnic.net/repo/a6a9ddf7-576a-4a58-89bb-7e8928902270/0/456957B6E32ABD1576136BF4B39EC4CCAD972FCD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/456957B6E32ABD1576136BF4B39EC4CCAD972FCD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 20:28:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:8b:b5:05:0b:2b:26:31:e7:a4:a5:c3:0b:85:b9:76:65:0e:30:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=456957B6E32ABD1576136BF4B39EC4CCAD972FCD Validity Not Before: Dec 19 18:16:58 2025 GMT Not After : Dec 22 20:28:58 2025 GMT Subject: CN=538570937753E6309C4A211AC28FD16CD053DEC4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:6a:ff:a6:a0:fd:fc:4b:13:e3:0f:85:a8:ed: 31:cc:f0:a3:e6:7a:70:09:46:f3:5a:55:f4:86:35: 9e:ca:be:bc:60:0b:da:2d:14:8f:db:0b:66:e8:8a: 6c:ba:c2:39:bf:c4:cb:08:19:a4:2b:6b:37:ca:e5: e6:d1:d3:43:01:01:51:6b:72:da:47:bc:65:18:ce: a2:1e:f8:9c:f4:7b:3c:c8:0c:36:88:56:a1:df:51: db:76:78:96:43:f7:6c:24:5e:12:26:c6:4d:b4:a3: b7:48:26:a0:18:f5:e0:02:0e:d2:29:82:e8:52:33: 6b:4b:76:55:97:c4:2f:8f:99:1e:be:9f:aa:e2:4a: 71:44:25:aa:c2:05:28:12:51:3d:7e:a7:c1:7b:60: c6:0e:cb:dc:f2:26:91:89:37:82:0f:33:3f:a2:fa: 89:10:04:16:00:d0:8f:fc:4b:49:32:e4:b3:ef:44: 5f:43:56:c6:bd:3d:aa:a1:bb:8c:3e:ab:06:dd:5f: 47:7b:a4:4d:fa:06:8c:59:2a:96:bb:ce:13:a3:59: 75:1a:c7:e4:07:da:70:b4:30:c4:e9:58:a0:37:43: 04:9a:32:cc:3e:7b:9b:f5:78:5a:4b:fc:e3:b9:3f: 7b:4e:b3:87:41:09:ff:71:67:c7:df:1f:80:99:0e: 6d:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:85:70:93:77:53:E6:30:9C:4A:21:1A:C2:8F:D1:6C:D0:53:DE:C4 X509v3 Authority Key Identifier: keyid:45:69:57:B6:E3:2A:BD:15:76:13:6B:F4:B3:9E:C4:CC:AD:97:2F:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a6a9ddf7-576a-4a58-89bb-7e8928902270/0/456957B6E32ABD1576136BF4B39EC4CCAD972FCD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/456957B6E32ABD1576136BF4B39EC4CCAD972FCD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a6a9ddf7-576a-4a58-89bb-7e8928902270/0/456957B6E32ABD1576136BF4B39EC4CCAD972FCD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:f8:bd:5e:e9:a9:1f:2f:48:1e:98:e5:4a:be:2b:03:3b:34: b7:ed:ac:b7:7b:8f:91:10:52:be:24:73:93:c0:38:4b:d6:a8: d6:a3:65:da:86:b5:8b:09:af:14:45:b9:72:bb:68:28:2f:e9: 1a:31:b5:9c:37:06:27:fe:6b:9e:3b:39:fc:a6:5a:8d:6a:7c: 1d:9b:2e:72:03:76:4a:51:8c:de:0b:0a:26:c8:07:76:4a:bf: 45:bf:48:ef:d4:64:a1:46:e2:d3:48:d0:77:26:e2:90:d5:6b: 25:3a:37:f5:6a:db:45:91:1a:76:da:b4:04:e7:ee:3b:21:dd: 5a:cc:24:0d:0e:a9:71:5d:40:5d:8e:ba:5c:e2:65:1c:ec:69: cd:c9:3f:5a:0c:c2:25:3b:26:8b:ed:c2:b3:0f:72:85:36:5c: bf:3c:64:e1:65:5c:26:9f:61:f5:1c:80:f5:89:15:50:12:34: 6b:7a:3f:40:42:5e:60:8f:12:f5:a8:94:a8:e5:24:76:37:83: 71:e9:59:1e:0b:92:c5:59:04:79:ca:2f:85:63:bd:5d:41:1e: 70:b0:01:6e:b3:27:c2:8b:b5:fb:58:9c:de:e8:9d:73:f1:60: 6d:b5:c3:b9:7e:1f:b4:8b:9b:83:eb:e5:78:66:d2:ea:62:90: 9c:c3:3a:62 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD4u1BQsrJjHnpKXDC4W5dmUOMGkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDU2OTU3QjZFMzJBQkQxNTc2MTM2QkY0QjM5RUM0Q0NB RDk3MkZDRDAeFw0yNTEyMTkxODE2NThaFw0yNTEyMjIyMDI4NThaMDMxMTAvBgNV BAMTKDUzODU3MDkzNzc1M0U2MzA5QzRBMjExQUMyOEZEMTZDRDA1M0RFQzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5av+moP38SxPjD4Wo7THM8KPm enAJRvNaVfSGNZ7KvrxgC9otFI/bC2boimy6wjm/xMsIGaQrazfK5ebR00MBAVFr ctpHvGUYzqIe+Jz0ezzIDDaIVqHfUdt2eJZD92wkXhImxk20o7dIJqAY9eACDtIp guhSM2tLdlWXxC+PmR6+n6riSnFEJarCBSgSUT1+p8F7YMYOy9zyJpGJN4IPMz+i +okQBBYA0I/8S0ky5LPvRF9DVsa9Paqhu4w+qwbdX0d7pE36BoxZKpa7zhOjWXUa x+QH2nC0MMTpWKA3QwSaMsw+e5v1eFpL/OO5P3tOs4dBCf9xZ8ffH4CZDm3zAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUU4Vwk3dT5jCcSiEawo/RbNBT3sQwHwYDVR0j BBgwFoAURWlXtuMqvRV2E2v0s57EzK2XL80wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NmE5ZGRmNy01NzZhLTRhNTgtODliYi03ZTg5Mjg5MDIyNzAvMC80NTY5NTdCNkUz MkFCRDE1NzYxMzZCRjRCMzlFQzRDQ0FEOTcyRkNELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDU2OTU3QjZFMzJBQkQxNTc2MTM2QkY0QjM5RUM0Q0NBRDk3 MkZDRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTZhOWRkZjctNTc2YS00YTU4LTg5 YmItN2U4OTI4OTAyMjcwLzAvNDU2OTU3QjZFMzJBQkQxNTc2MTM2QkY0QjM5RUM0 Q0NBRDk3MkZDRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJL4vV7pqR8vSB6Y5Uq+KwM7NLftrLd7j5EQ Ur4kc5PAOEvWqNajZdqGtYsJrxRFuXK7aCgv6RoxtZw3Bif+a547OfymWo1qfB2b LnIDdkpRjN4LCibIB3ZKv0W/SO/UZKFG4tNI0Hcm4pDVayU6N/Vq20WRGnbatATn 7jsh3VrMJA0OqXFdQF2OulziZRzsac3JP1oMwiU7JovtwrMPcoU2XL88ZOFlXCaf YfUcgPWJFVASNGt6P0BCXmCPEvWolKjlJHY3g3HpWR4LksVZBHnKL4VjvV1BHnCw AW6zJ8KLtftYnN7onXPxYG21w7l+H7SLm4Pr5Xhm0upikJzDOmI= -----END CERTIFICATE-----Generated at Mon Dec 22 00:05:34 2025 by rpki-client