This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/c711559e-d5ec-4c19-b335-ee29ddfbb9d5/0/45C9770C2C07C2696447FAA1E820E46170A3C56C.mft File: 45C9770C2C07C2696447FAA1E820E46170A3C56C.mft (raw, json) Hash identifier: K8ohDoLNI29DanAecB86fOVyhal7n41oh3N58TuUU5o= Subject key identifier: 1E:AD:48:60:85:94:82:68:63:6C:E7:BC:48:54:9F:27:8C:F2:CA:03 Authority key identifier: 45:C9:77:0C:2C:07:C2:69:64:47:FA:A1:E8:20:E4:61:70:A3:C5:6C Certificate issuer: /CN=45C9770C2C07C2696447FAA1E820E46170A3C56C Certificate serial: 3893698B0CEF3CFC935C2F41FBC30632548734E9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45C9770C2C07C2696447FAA1E820E46170A3C56C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c711559e-d5ec-4c19-b335-ee29ddfbb9d5/0/45C9770C2C07C2696447FAA1E820E46170A3C56C.mft Manifest number: 02DD Signing time: Fri 19 Dec 2025 21:10:46 +0000 Manifest this update: Fri 19 Dec 2025 21:05:46 +0000 Manifest next update: Mon 22 Dec 2025 22:43:46 +0000 Files and hashes: 1: 45C9770C2C07C2696447FAA1E820E46170A3C56C.crl (hash: U+0gpep2p+a3QCfUdGKBMjNRuEypJpZXctoSixmSahE=) 2: 323030313a6466343a326638303a3a2f34382d3438203d3e20313430343434.roa (hash: eP5B4+66lNDZRwwB0EJUDL9Pn71RI/Oa3/zagGI4Izk=) 3: 3130332e3135332e34322e302f32332d3234203d3e20313430343434.roa (hash: vm5PhQ9OCf0FV3z/CHJ+RxKQHUnZeKsqWqWQwv0pY+4=) 4: 3130332e3135332e34332e302f32342d3234203d3e20313430343434.roa (hash: cidgl2SIo3vuKAc4LvPzn48241T8Yqf3Lk4VBRTBdhc=) 5: 3130332e3135332e34322e302f32342d3234203d3e20313430343434.roa (hash: pXWaAnAiDsjhVjMrMqsJ0d+NFEE6GHbDUnVNomzIFpY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c711559e-d5ec-4c19-b335-ee29ddfbb9d5/0/45C9770C2C07C2696447FAA1E820E46170A3C56C.crl rsync://repo-rpki.idnic.net/repo/c711559e-d5ec-4c19-b335-ee29ddfbb9d5/0/45C9770C2C07C2696447FAA1E820E46170A3C56C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45C9770C2C07C2696447FAA1E820E46170A3C56C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 22:43:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:93:69:8b:0c:ef:3c:fc:93:5c:2f:41:fb:c3:06:32:54:87:34:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45C9770C2C07C2696447FAA1E820E46170A3C56C Validity Not Before: Dec 19 21:05:46 2025 GMT Not After : Dec 22 22:43:46 2025 GMT Subject: CN=1EAD486085948268636CE7BC48549F278CF2CA03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:fe:3a:13:91:c5:29:0c:97:8d:4a:04:da:47: a2:91:9e:1e:89:c1:f8:a2:d0:13:8c:95:bf:2b:c4: aa:98:90:73:cc:80:fa:11:75:e8:0d:29:96:92:31: 89:aa:db:e5:25:a2:a4:0a:d3:ea:b8:2f:61:f4:58: 03:d5:39:84:10:9b:70:51:d4:4b:e2:69:7a:fe:eb: fa:5d:c4:9a:79:83:4b:5b:2f:7a:51:79:8b:37:96: 38:f7:23:92:90:23:ff:a2:7d:3d:34:42:cc:b3:1b: 42:9e:c9:a4:51:bf:b9:c2:f5:68:8d:3a:f2:2e:30: c7:6e:dc:b6:3c:74:a0:0d:71:93:01:8c:f8:d6:6e: eb:22:ee:bf:c5:ca:db:32:c1:35:47:f9:18:c6:f2: a4:d0:be:40:5d:27:89:26:51:e2:e0:8a:ab:d2:44: f3:7f:65:69:3d:d0:2e:48:09:b1:b3:e1:38:f1:c8: f3:cf:7c:31:70:3e:b3:71:e3:8c:05:89:db:7b:29: 06:cb:07:15:66:7b:98:3e:8f:58:11:8c:f6:39:7f: 91:12:1c:95:62:cd:a6:5e:6a:d9:8d:72:6b:35:c3: 96:85:f7:f1:0a:f4:88:8f:ae:2a:7b:24:b3:aa:e2: cc:40:5e:92:44:05:c0:30:48:f6:85:87:4c:0c:f3: bf:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:AD:48:60:85:94:82:68:63:6C:E7:BC:48:54:9F:27:8C:F2:CA:03 X509v3 Authority Key Identifier: keyid:45:C9:77:0C:2C:07:C2:69:64:47:FA:A1:E8:20:E4:61:70:A3:C5:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c711559e-d5ec-4c19-b335-ee29ddfbb9d5/0/45C9770C2C07C2696447FAA1E820E46170A3C56C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45C9770C2C07C2696447FAA1E820E46170A3C56C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c711559e-d5ec-4c19-b335-ee29ddfbb9d5/0/45C9770C2C07C2696447FAA1E820E46170A3C56C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:56:cf:2d:15:43:5e:46:16:61:86:14:f7:1d:94:26:78:d4: 0f:a5:7e:cf:c3:7f:5f:dd:96:86:ae:d5:cb:f5:5f:6b:f1:75: d2:53:e8:b8:91:44:bc:5e:cc:b4:05:90:dd:12:00:27:13:c6: 5d:9a:3f:08:62:70:c1:fb:f4:3b:f9:1f:d7:a9:00:fd:a1:67: 4a:d5:c6:aa:2a:48:9f:8c:d0:bc:f4:67:16:a3:56:5e:2a:9a: 0e:1f:23:1a:94:c2:31:8c:74:94:8c:21:ad:f6:13:b4:2f:7e: 95:d4:2f:36:0c:e7:b7:82:3c:65:66:f1:af:c2:1b:e5:dd:bf: 6a:1d:1f:42:2f:45:75:3a:14:70:dc:16:ce:98:1c:66:36:92: c6:95:57:49:2d:9c:94:6c:47:b8:73:76:8c:50:88:bd:03:33: 3d:7a:04:dd:08:4d:21:22:0c:46:cb:47:f4:43:77:16:37:0c: 7f:24:f3:84:94:ab:b3:67:ed:0c:ac:4f:3e:46:58:ff:60:73: 2d:77:7d:87:7e:c6:bb:bb:06:dd:a6:28:ea:b1:36:99:95:27: 4d:18:06:a3:f6:62:23:c2:03:a4:64:44:ac:1f:37:ff:68:3d: 80:b2:18:94:a2:c7:b3:12:80:47:db:bb:db:01:99:cd:5e:0a: ed:18:a7:26 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOJNpiwzvPPyTXC9B+8MGMlSHNOkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDVDOTc3MEMyQzA3QzI2OTY0NDdGQUExRTgyMEU0NjE3 MEEzQzU2QzAeFw0yNTEyMTkyMTA1NDZaFw0yNTEyMjIyMjQzNDZaMDMxMTAvBgNV BAMTKDFFQUQ0ODYwODU5NDgyNjg2MzZDRTdCQzQ4NTQ5RjI3OENGMkNBMDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3/joTkcUpDJeNSgTaR6KRnh6J wfii0BOMlb8rxKqYkHPMgPoRdegNKZaSMYmq2+UloqQK0+q4L2H0WAPVOYQQm3BR 1EviaXr+6/pdxJp5g0tbL3pReYs3ljj3I5KQI/+ifT00QsyzG0KeyaRRv7nC9WiN OvIuMMdu3LY8dKANcZMBjPjWbusi7r/FytsywTVH+RjG8qTQvkBdJ4kmUeLgiqvS RPN/ZWk90C5ICbGz4TjxyPPPfDFwPrNx44wFidt7KQbLBxVme5g+j1gRjPY5f5ES HJVizaZeatmNcms1w5aF9/EK9IiPrip7JLOq4sxAXpJEBcAwSPaFh0wM879dAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHq1IYIWUgmhjbOe8SFSfJ4zyygMwHwYDVR0j BBgwFoAURcl3DCwHwmlkR/qh6CDkYXCjxWwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NzExNTU5ZS1kNWVjLTRjMTktYjMzNS1lZTI5ZGRmYmI5ZDUvMC80NUM5NzcwQzJD MDdDMjY5NjQ0N0ZBQTFFODIwRTQ2MTcwQTNDNTZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDVDOTc3MEMyQzA3QzI2OTY0NDdGQUExRTgyMEU0NjE3MEEz QzU2Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzcxMTU1OWUtZDVlYy00YzE5LWIz MzUtZWUyOWRkZmJiOWQ1LzAvNDVDOTc3MEMyQzA3QzI2OTY0NDdGQUExRTgyMEU0 NjE3MEEzQzU2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEVWzy0VQ15GFmGGFPcdlCZ41A+lfs/Df1/d loau1cv1X2vxddJT6LiRRLxezLQFkN0SACcTxl2aPwhicMH79Dv5H9epAP2hZ0rV xqoqSJ+M0Lz0ZxajVl4qmg4fIxqUwjGMdJSMIa32E7QvfpXULzYM57eCPGVm8a/C G+Xdv2odH0IvRXU6FHDcFs6YHGY2ksaVV0ktnJRsR7hzdoxQiL0DMz16BN0ITSEi DEbLR/RDdxY3DH8k84SUq7Nn7QysTz5GWP9gcy13fYd+xru7Bt2mKOqxNpmVJ00Y BqP2YiPCA6RkRKwfN/9oPYCyGJSix7MSgEfbu9sBmc1eCu0YpyY= -----END CERTIFICATE-----Generated at Sat Dec 20 14:09:21 2025 by rpki-client