This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a6a9ddf7-576a-4a58-89bb-7e8928902270/0/456957B6E32ABD1576136BF4B39EC4CCAD972FCD.mft File: 456957B6E32ABD1576136BF4B39EC4CCAD972FCD.mft (raw, json) Hash identifier: JAfV2IcdeHsov5+OpEBpVyH83dOEgYUYvcS5USsyd5o= Subject key identifier: 32:97:3E:DB:8F:95:CA:29:B7:04:8C:10:8D:F6:EA:AA:E7:FD:2C:4C Authority key identifier: 45:69:57:B6:E3:2A:BD:15:76:13:6B:F4:B3:9E:C4:CC:AD:97:2F:CD Certificate issuer: /CN=456957B6E32ABD1576136BF4B39EC4CCAD972FCD Certificate serial: 592355A896CD8A7A7ECEAD236AD010E314E32F67 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/456957B6E32ABD1576136BF4B39EC4CCAD972FCD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a6a9ddf7-576a-4a58-89bb-7e8928902270/0/456957B6E32ABD1576136BF4B39EC4CCAD972FCD.mft Manifest number: 01D4 Signing time: Wed 17 Dec 2025 06:31:22 +0000 Manifest this update: Wed 17 Dec 2025 06:26:22 +0000 Manifest next update: Sat 20 Dec 2025 18:15:22 +0000 Files and hashes: 1: 323030313a6466303a623538303a3a2f34382d3438203d3e20313338383736.roa (hash: a0pLp5FVIOKCyynC3nqEg0f7XooNhe6lSNrvEp9yAtY=) 2: 456957B6E32ABD1576136BF4B39EC4CCAD972FCD.crl (hash: Iqdjkxvr+JXlEAoLrCH01CiyaiHVggf+BCaeGGcZttI=) 3: 3130332e3134302e39302e302f32342d3234203d3e20313338383736.roa (hash: TgFFHo7ru8wPRV9QoxZjMRgufeQSRNupm9ex/WNdqlE=) 4: 3130332e3134302e39302e302f32332d3234203d3e20313338383736.roa (hash: nNtuDch1T6loQOI43k4Pa/PnmvoP73GfE/Ea1GsFAQw=) 5: 3130332e3134302e39312e302f32342d3234203d3e20313338383736.roa (hash: 99LHlaqlJvFBEChHJUY+/SooMeB1+Go2teO3Iar+WnU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a6a9ddf7-576a-4a58-89bb-7e8928902270/0/456957B6E32ABD1576136BF4B39EC4CCAD972FCD.crl rsync://repo-rpki.idnic.net/repo/a6a9ddf7-576a-4a58-89bb-7e8928902270/0/456957B6E32ABD1576136BF4B39EC4CCAD972FCD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/456957B6E32ABD1576136BF4B39EC4CCAD972FCD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 18:15:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:23:55:a8:96:cd:8a:7a:7e:ce:ad:23:6a:d0:10:e3:14:e3:2f:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=456957B6E32ABD1576136BF4B39EC4CCAD972FCD Validity Not Before: Dec 17 06:26:22 2025 GMT Not After : Dec 20 18:15:22 2025 GMT Subject: CN=32973EDB8F95CA29B7048C108DF6EAAAE7FD2C4C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:b8:78:7e:0a:d2:0e:68:57:0e:cd:62:ae:33: da:ca:37:dc:a3:71:40:ed:05:d2:7f:09:cb:20:c2: b7:03:09:4c:9d:77:1f:4b:ae:8e:d1:2b:ba:66:82: b1:2b:15:75:c1:f9:04:21:3e:e2:1b:f5:4d:bc:94: d1:fb:8e:16:06:a1:15:48:32:98:6f:53:27:fc:9e: bf:d9:d9:d7:5e:1e:ef:cf:5b:a1:72:f4:7e:4a:54: ca:88:8a:1c:cd:44:07:ef:2d:60:55:dc:65:ab:c7: 32:d5:96:37:5a:5b:cb:b1:12:62:b3:4f:52:31:79: 89:5c:fb:86:82:a3:6b:f3:05:66:fe:8c:a5:38:9e: 81:2f:ca:5a:26:b9:5b:b3:a6:9f:46:7b:26:49:97: d8:64:f2:6a:75:c1:40:d3:6c:35:dd:ed:62:86:7e: 23:71:53:5c:a5:21:e0:b6:fe:bf:5e:6f:3f:b6:c9: 1c:63:9d:ae:d0:95:c5:3e:a6:14:9b:de:d7:7c:fa: 87:3d:7c:6b:b2:f4:cc:c4:3f:1a:5c:e6:e4:55:44: b9:47:20:8b:ea:4b:06:49:8e:0e:59:79:b3:e1:db: 07:9d:97:b3:01:89:69:6a:80:89:f2:5f:41:50:27: 39:7f:c0:b5:91:c2:e3:6c:93:24:25:fc:31:e1:6f: b5:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:97:3E:DB:8F:95:CA:29:B7:04:8C:10:8D:F6:EA:AA:E7:FD:2C:4C X509v3 Authority Key Identifier: keyid:45:69:57:B6:E3:2A:BD:15:76:13:6B:F4:B3:9E:C4:CC:AD:97:2F:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a6a9ddf7-576a-4a58-89bb-7e8928902270/0/456957B6E32ABD1576136BF4B39EC4CCAD972FCD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/456957B6E32ABD1576136BF4B39EC4CCAD972FCD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a6a9ddf7-576a-4a58-89bb-7e8928902270/0/456957B6E32ABD1576136BF4B39EC4CCAD972FCD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:5e:dc:4c:89:55:db:05:3d:d3:de:b6:35:e9:74:b9:0f:63: 36:43:23:d1:97:aa:8c:29:a3:4b:37:53:1d:8f:7a:25:b4:18: fc:ca:44:7e:6e:b1:7a:75:c6:7b:4a:5a:a6:b6:11:da:cb:f4: aa:35:a8:42:9c:c6:70:b4:34:30:d9:17:e5:75:1a:00:9e:87: ab:6c:40:06:56:6d:e5:90:ee:7b:0e:1b:56:76:a1:28:6e:a3: c8:52:1e:1a:6f:0b:15:cf:e4:5e:f0:9d:e7:a5:62:34:45:95: 52:10:13:f5:ab:2e:e7:f7:fe:3b:b8:0e:d8:d0:91:6f:d1:4f: b8:0c:7b:66:e9:54:82:f9:bb:51:d6:3c:d0:a3:da:6a:74:e2: 5d:de:0f:80:3b:3c:e1:b7:61:38:be:ec:87:13:0e:cc:e5:3d: 1c:6b:21:c9:95:94:d8:f9:c9:2a:6e:ed:3c:24:67:28:b8:3c: d5:d1:40:be:c4:61:b0:f7:4f:49:91:39:a1:fd:6b:a4:08:75: a0:4b:6e:69:64:48:1e:cd:5f:4c:00:15:14:eb:9e:e9:c6:38: 0d:6c:e8:4d:5b:f7:2c:72:e7:97:75:7b:bb:c7:35:2a:1f:f1: 08:28:d8:bc:e0:61:b6:f4:50:9b:77:56:a5:31:97:07:c7:85: a0:94:b9:f8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWSNVqJbNinp+zq0jatAQ4xTjL2cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDU2OTU3QjZFMzJBQkQxNTc2MTM2QkY0QjM5RUM0Q0NB RDk3MkZDRDAeFw0yNTEyMTcwNjI2MjJaFw0yNTEyMjAxODE1MjJaMDMxMTAvBgNV BAMTKDMyOTczRURCOEY5NUNBMjlCNzA0OEMxMDhERjZFQUFBRTdGRDJDNEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCluHh+CtIOaFcOzWKuM9rKN9yj cUDtBdJ/CcsgwrcDCUyddx9Lro7RK7pmgrErFXXB+QQhPuIb9U28lNH7jhYGoRVI MphvUyf8nr/Z2ddeHu/PW6Fy9H5KVMqIihzNRAfvLWBV3GWrxzLVljdaW8uxEmKz T1IxeYlc+4aCo2vzBWb+jKU4noEvylomuVuzpp9GeyZJl9hk8mp1wUDTbDXd7WKG fiNxU1ylIeC2/r9ebz+2yRxjna7QlcU+phSb3td8+oc9fGuy9MzEPxpc5uRVRLlH IIvqSwZJjg5ZebPh2wedl7MBiWlqgInyX0FQJzl/wLWRwuNskyQl/DHhb7UxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMpc+24+Vyim3BIwQjfbqquf9LEwwHwYDVR0j BBgwFoAURWlXtuMqvRV2E2v0s57EzK2XL80wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NmE5ZGRmNy01NzZhLTRhNTgtODliYi03ZTg5Mjg5MDIyNzAvMC80NTY5NTdCNkUz MkFCRDE1NzYxMzZCRjRCMzlFQzRDQ0FEOTcyRkNELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDU2OTU3QjZFMzJBQkQxNTc2MTM2QkY0QjM5RUM0Q0NBRDk3 MkZDRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTZhOWRkZjctNTc2YS00YTU4LTg5 YmItN2U4OTI4OTAyMjcwLzAvNDU2OTU3QjZFMzJBQkQxNTc2MTM2QkY0QjM5RUM0 Q0NBRDk3MkZDRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKpe3EyJVdsFPdPetjXpdLkPYzZDI9GXqowp o0s3Ux2PeiW0GPzKRH5usXp1xntKWqa2EdrL9Ko1qEKcxnC0NDDZF+V1GgCeh6ts QAZWbeWQ7nsOG1Z2oShuo8hSHhpvCxXP5F7wneelYjRFlVIQE/WrLuf3/ju4DtjQ kW/RT7gMe2bpVIL5u1HWPNCj2mp04l3eD4A7POG3YTi+7IcTDszlPRxrIcmVlNj5 ySpu7TwkZyi4PNXRQL7EYbD3T0mROaH9a6QIdaBLbmlkSB7NX0wAFRTrnunGOA1s 6E1b9yxy55d1e7vHNSof8Qgo2LzgYbb0UJt3VqUxlwfHhaCUufg= -----END CERTIFICATE-----Generated at Fri Dec 19 03:06:57 2025 by rpki-client