This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/f1ae12fa-98fd-4e51-980e-ad5f5b90d7a6/0/45164C20EAF7FAB583FB12C81727150895FCEC70.mft File: 45164C20EAF7FAB583FB12C81727150895FCEC70.mft (raw, json) Hash identifier: LDqFn+pUHk2o8r/dBismGiSOJru+ex2gvh2Pl0+7wTQ= Subject key identifier: E9:97:84:3E:12:CB:8A:D1:58:4B:28:1C:CD:71:9C:06:CF:A1:34:5A Authority key identifier: 45:16:4C:20:EA:F7:FA:B5:83:FB:12:C8:17:27:15:08:95:FC:EC:70 Certificate issuer: /CN=45164C20EAF7FAB583FB12C81727150895FCEC70 Certificate serial: 7B425C4D80ACE95A372AFB1DC615736C275731E8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45164C20EAF7FAB583FB12C81727150895FCEC70.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f1ae12fa-98fd-4e51-980e-ad5f5b90d7a6/0/45164C20EAF7FAB583FB12C81727150895FCEC70.mft Manifest number: 0151 Signing time: Thu 18 Dec 2025 15:52:25 +0000 Manifest this update: Thu 18 Dec 2025 15:47:25 +0000 Manifest next update: Sun 21 Dec 2025 17:17:25 +0000 Files and hashes: 1: 3130332e3135332e34302e302f32332d3234203d3e20313430343534.roa (hash: TTBU1STvQaNI1wpqoaj9bG2m/T27T+WPjYQLtuioWoo=) 2: 45164C20EAF7FAB583FB12C81727150895FCEC70.crl (hash: uEGzOJIVTkFUS9A1jkA7QBENi0VH3PcClH3Ji2MCqc0=) 3: 3130332e3130382e3135362e302f32322d3234203d3e20313430343534.roa (hash: cLToJ49OKqVQRgjYGYNvWnWnJYTEY5LWx4h5YZdNEfg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f1ae12fa-98fd-4e51-980e-ad5f5b90d7a6/0/45164C20EAF7FAB583FB12C81727150895FCEC70.crl rsync://repo-rpki.idnic.net/repo/f1ae12fa-98fd-4e51-980e-ad5f5b90d7a6/0/45164C20EAF7FAB583FB12C81727150895FCEC70.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45164C20EAF7FAB583FB12C81727150895FCEC70.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 17:17:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:42:5c:4d:80:ac:e9:5a:37:2a:fb:1d:c6:15:73:6c:27:57:31:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45164C20EAF7FAB583FB12C81727150895FCEC70 Validity Not Before: Dec 18 15:47:25 2025 GMT Not After : Dec 21 17:17:25 2025 GMT Subject: CN=E997843E12CB8AD1584B281CCD719C06CFA1345A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:08:73:92:df:3f:60:4d:57:19:2f:c1:ec:c0: 95:56:99:b4:41:f2:a1:91:c6:c9:c0:80:dc:ea:01: a8:69:db:ca:b3:fc:c0:74:cb:a0:ad:33:d5:00:60: 2d:8c:cb:c3:c2:38:3c:72:37:7f:ee:e0:ef:1e:9b: 3f:f7:4e:6c:99:eb:1e:9c:74:79:81:fc:a2:2d:a3: cc:42:f0:f0:b6:c9:70:06:76:95:7d:97:ed:2b:d4: 2a:8f:1f:06:2f:dc:d5:4a:aa:fb:92:bc:6f:fb:28: f7:10:54:89:0b:c9:49:a2:57:13:35:0f:05:ce:6e: 8b:e8:a7:38:f7:a9:95:1b:0f:29:8d:5e:a6:40:43: f6:a1:5a:40:1d:89:04:2d:f8:8d:eb:e6:c7:01:a1: ba:94:ff:98:a8:ff:f9:4c:2f:98:2e:29:64:44:7f: bb:1f:22:84:76:99:13:12:cb:5a:c4:62:4d:c0:06: f4:e9:b5:ba:12:86:f3:0f:b2:2e:e8:cf:cb:79:93: 06:1f:23:56:e4:db:e6:4a:94:e8:85:d1:c1:4d:4f: c2:b6:e8:db:41:1a:f9:1a:ca:5c:4a:80:0e:56:b9: 44:05:4c:0a:51:65:cd:00:78:2d:be:f4:5d:28:01: 11:9c:7f:8f:2c:c8:d4:38:60:f6:bd:83:5f:c2:4a: 5c:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:97:84:3E:12:CB:8A:D1:58:4B:28:1C:CD:71:9C:06:CF:A1:34:5A X509v3 Authority Key Identifier: keyid:45:16:4C:20:EA:F7:FA:B5:83:FB:12:C8:17:27:15:08:95:FC:EC:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f1ae12fa-98fd-4e51-980e-ad5f5b90d7a6/0/45164C20EAF7FAB583FB12C81727150895FCEC70.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45164C20EAF7FAB583FB12C81727150895FCEC70.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f1ae12fa-98fd-4e51-980e-ad5f5b90d7a6/0/45164C20EAF7FAB583FB12C81727150895FCEC70.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:97:97:00:fc:4b:f2:63:4c:21:74:2b:21:e7:67:52:ab:a3: 05:ae:10:0e:f2:5e:4a:27:05:d4:38:85:08:13:72:2c:f5:03: 9d:77:db:f0:0e:08:17:5e:63:07:5a:51:33:0b:97:09:a5:e6: 75:fd:09:d2:07:9a:6b:ef:35:c4:66:fd:12:0f:50:64:8a:6a: fa:48:f5:39:cc:9d:4e:de:6a:01:84:69:e4:b1:c5:f3:d5:d6: fb:bc:ee:ae:2b:de:f1:78:11:46:8a:51:49:cd:0f:4b:d4:46: 17:e1:f0:b0:8c:97:c8:2c:6c:0c:29:b3:ee:90:33:e2:4e:69: 09:45:f4:88:6e:ec:2f:45:2a:d2:f0:bd:8b:69:16:3d:b0:e9: a2:f7:ca:bd:4b:f5:de:7e:8c:38:c6:50:21:b6:97:76:b3:2c: 4a:8f:6c:70:c8:84:b4:86:fb:80:ae:9f:04:3a:2a:8d:53:c2: 03:3e:bc:46:7d:84:20:11:02:27:26:85:65:df:e6:53:46:73: 56:6a:e5:02:77:87:d1:92:a8:1c:41:2e:18:7a:09:41:26:93: 9b:e8:93:44:e3:42:b3:69:66:61:06:14:83:93:d2:1c:33:e9: 18:e7:c5:b4:d0:1b:a1:5c:4f:9b:44:4b:46:1e:0b:6b:be:a7: 71:2d:b8:e9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUe0JcTYCs6Vo3KvsdxhVzbCdXMegwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUxNjRDMjBFQUY3RkFCNTgzRkIxMkM4MTcyNzE1MDg5 NUZDRUM3MDAeFw0yNTEyMTgxNTQ3MjVaFw0yNTEyMjExNzE3MjVaMDMxMTAvBgNV BAMTKEU5OTc4NDNFMTJDQjhBRDE1ODRCMjgxQ0NENzE5QzA2Q0ZBMTM0NUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRCHOS3z9gTVcZL8HswJVWmbRB 8qGRxsnAgNzqAahp28qz/MB0y6CtM9UAYC2My8PCODxyN3/u4O8emz/3TmyZ6x6c dHmB/KIto8xC8PC2yXAGdpV9l+0r1CqPHwYv3NVKqvuSvG/7KPcQVIkLyUmiVxM1 DwXObovopzj3qZUbDymNXqZAQ/ahWkAdiQQt+I3r5scBobqU/5io//lML5guKWRE f7sfIoR2mRMSy1rEYk3ABvTptboShvMPsi7oz8t5kwYfI1bk2+ZKlOiF0cFNT8K2 6NtBGvkaylxKgA5WuUQFTApRZc0AeC2+9F0oARGcf48syNQ4YPa9g1/CSly1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6ZeEPhLLitFYSygczXGcBs+hNFowHwYDVR0j BBgwFoAURRZMIOr3+rWD+xLIFycVCJX87HAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MWFlMTJmYS05OGZkLTRlNTEtOTgwZS1hZDVmNWI5MGQ3YTYvMC80NTE2NEMyMEVB RjdGQUI1ODNGQjEyQzgxNzI3MTUwODk1RkNFQzcwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDUxNjRDMjBFQUY3RkFCNTgzRkIxMkM4MTcyNzE1MDg5NUZD RUM3MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjFhZTEyZmEtOThmZC00ZTUxLTk4 MGUtYWQ1ZjViOTBkN2E2LzAvNDUxNjRDMjBFQUY3RkFCNTgzRkIxMkM4MTcyNzE1 MDg5NUZDRUM3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEmXlwD8S/JjTCF0KyHnZ1KrowWuEA7yXkon BdQ4hQgTciz1A5132/AOCBdeYwdaUTMLlwml5nX9CdIHmmvvNcRm/RIPUGSKavpI 9TnMnU7eagGEaeSxxfPV1vu87q4r3vF4EUaKUUnND0vURhfh8LCMl8gsbAwps+6Q M+JOaQlF9Ihu7C9FKtLwvYtpFj2w6aL3yr1L9d5+jDjGUCG2l3azLEqPbHDIhLSG +4CunwQ6Ko1TwgM+vEZ9hCARAicmhWXf5lNGc1Zq5QJ3h9GSqBxBLhh6CUEmk5vo k0TjQrNpZmEGFIOT0hwz6RjnxbTQG6FcT5tES0YeC2u+p3EtuOk= -----END CERTIFICATE-----Generated at Sat Dec 20 09:05:29 2025 by rpki-client