This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/f73ab79d-00d5-49cb-ac10-3bd4f2386bc6/0/45795CE411027C6961B89E9C0FBDB9B73BD61C39.mft File: 45795CE411027C6961B89E9C0FBDB9B73BD61C39.mft (raw, json) Hash identifier: PygtUUQnAqC/9iYOenS1mIxTe8Gqyx8ZFXXdLWexUU0= Subject key identifier: 00:0E:72:F5:17:DE:9B:4A:E2:C2:5A:C1:88:1B:16:CF:F1:B7:D0:BA Authority key identifier: 45:79:5C:E4:11:02:7C:69:61:B8:9E:9C:0F:BD:B9:B7:3B:D6:1C:39 Certificate issuer: /CN=45795CE411027C6961B89E9C0FBDB9B73BD61C39 Certificate serial: 15A1FBECCE5C372ED164D87ABFF8068ACF5990AE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45795CE411027C6961B89E9C0FBDB9B73BD61C39.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f73ab79d-00d5-49cb-ac10-3bd4f2386bc6/0/45795CE411027C6961B89E9C0FBDB9B73BD61C39.mft Manifest number: 0534 Signing time: Wed 17 Dec 2025 19:11:00 +0000 Manifest this update: Wed 17 Dec 2025 19:06:00 +0000 Manifest next update: Sun 21 Dec 2025 05:29:00 +0000 Files and hashes: 1: 45795CE411027C6961B89E9C0FBDB9B73BD61C39.crl (hash: EJkj2B2mESL3ro1+mXxPrCZATx9Uam6AA9+soPUmOZk=) 2: 323030313a6466303a623238303a3a2f34382d3438203d3e20313338383733.roa (hash: Hrvwt79CsllNFcgj1XkX080ZEGTR3oJEJ5/uQyuwag4=) 3: 3130332e3134302e37392e302f32342d3234203d3e203438343635.roa (hash: DkleJkN5W2PyaQBgkh3h9+A6EIKYUBI0XIE9LsGOkEE=) 4: 3130332e3134302e37382e302f32332d3234203d3e20313338383733.roa (hash: DGGFs/nhZ+k7NUxZJLoh30LOsNcccBtIeZpWg8Hba0w=) 5: 3130332e3134302e37382e302f32342d3234203d3e203438343635.roa (hash: rLQgAbVnt3V9mbyukLPioMNmLMKQ2mxQ9vlQUzCluhI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f73ab79d-00d5-49cb-ac10-3bd4f2386bc6/0/45795CE411027C6961B89E9C0FBDB9B73BD61C39.crl rsync://repo-rpki.idnic.net/repo/f73ab79d-00d5-49cb-ac10-3bd4f2386bc6/0/45795CE411027C6961B89E9C0FBDB9B73BD61C39.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45795CE411027C6961B89E9C0FBDB9B73BD61C39.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 05:29:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:a1:fb:ec:ce:5c:37:2e:d1:64:d8:7a:bf:f8:06:8a:cf:59:90:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45795CE411027C6961B89E9C0FBDB9B73BD61C39 Validity Not Before: Dec 17 19:06:00 2025 GMT Not After : Dec 21 05:29:00 2025 GMT Subject: CN=000E72F517DE9B4AE2C25AC1881B16CFF1B7D0BA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ec:92:39:2d:58:99:ca:f6:44:22:78:fe:5d: d0:92:1a:af:49:90:ba:19:14:e2:e1:40:bc:19:ac: 1b:cc:24:17:00:8d:65:87:6d:e2:ef:8c:3b:6f:5c: b2:c4:67:4f:49:0e:2d:6a:ba:98:01:0a:89:8b:91: 30:76:46:35:47:1b:eb:25:7d:13:e4:d6:9e:08:dc: ef:7c:86:78:6f:6a:ae:55:72:aa:3e:5b:26:1b:08: ca:13:54:a2:69:bd:42:12:e6:9c:05:46:b3:fa:10: 51:d0:66:49:47:23:a0:d6:70:e1:9d:b7:2f:a4:2e: 71:a0:ea:eb:65:f5:d2:b5:2e:e8:10:d0:77:18:0e: 18:17:46:8e:fb:8a:21:c4:b3:9b:8e:02:7c:4d:f6: e2:fc:8f:c0:7c:ab:e4:57:9a:5a:ec:cb:7e:72:71: c7:28:16:15:ec:df:1c:bf:36:ec:03:b3:61:d3:1b: af:40:cb:5e:5c:0c:f1:14:59:ef:a7:2b:30:c8:c4: 75:fc:dd:16:7f:db:3c:42:68:7a:cc:17:da:27:67: 9b:ff:19:b8:3b:20:8a:d5:e7:d9:5f:05:d1:ed:e0: bd:38:43:a1:1a:2d:37:8e:9a:b3:3a:4b:1d:36:d3: cd:5f:90:51:04:2b:9f:dc:42:54:e0:b2:b1:4a:3e: 19:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:0E:72:F5:17:DE:9B:4A:E2:C2:5A:C1:88:1B:16:CF:F1:B7:D0:BA X509v3 Authority Key Identifier: keyid:45:79:5C:E4:11:02:7C:69:61:B8:9E:9C:0F:BD:B9:B7:3B:D6:1C:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f73ab79d-00d5-49cb-ac10-3bd4f2386bc6/0/45795CE411027C6961B89E9C0FBDB9B73BD61C39.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45795CE411027C6961B89E9C0FBDB9B73BD61C39.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f73ab79d-00d5-49cb-ac10-3bd4f2386bc6/0/45795CE411027C6961B89E9C0FBDB9B73BD61C39.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c2:ac:bf:9d:fa:e4:c3:4a:bc:20:53:a1:85:54:c5:7e:4a:6d: 26:fa:5d:d3:3c:2e:21:ae:00:63:e7:38:77:8f:86:4b:c5:73: 68:a8:cc:fa:26:2a:fb:e2:1b:34:b4:d3:6f:d6:30:99:50:ae: 43:59:7a:e5:43:48:06:c5:85:4b:d7:48:52:34:e0:67:bd:a3: 8a:d9:57:6e:f3:ea:bb:a4:f9:bb:9f:64:3c:39:8f:8f:ec:4e: 02:4b:20:3b:16:0a:e8:b6:00:db:b0:39:9b:ef:31:c7:ad:55: 65:ea:2b:cc:04:18:58:70:d7:8f:42:99:00:73:87:cb:fc:b3: e3:51:da:e2:6f:59:05:5b:9a:4f:12:6e:f6:1e:a8:0b:f4:af: 13:9d:e5:da:14:48:85:eb:19:bc:57:d8:c3:82:5a:47:0f:14: 1e:11:37:12:cd:98:bd:ed:51:aa:49:e3:e8:7b:0f:ef:5a:f9: 15:ee:37:27:9a:4a:60:66:ad:05:b9:76:96:c5:8c:e1:be:73: 9c:8d:fe:e6:0b:cd:60:8c:49:99:76:81:1c:5c:82:05:db:e2: e5:4b:76:eb:a7:bb:81:d2:15:d4:be:94:ff:5f:6c:70:f1:cb: 96:64:b4:c4:42:52:b3:02:46:f6:aa:d7:ab:30:8d:a4:ee:0e: b6:dd:46:c3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFaH77M5cNy7RZNh6v/gGis9ZkK4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDU3OTVDRTQxMTAyN0M2OTYxQjg5RTlDMEZCREI5Qjcz QkQ2MUMzOTAeFw0yNTEyMTcxOTA2MDBaFw0yNTEyMjEwNTI5MDBaMDMxMTAvBgNV BAMTKDAwMEU3MkY1MTdERTlCNEFFMkMyNUFDMTg4MUIxNkNGRjFCN0QwQkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC67JI5LViZyvZEInj+XdCSGq9J kLoZFOLhQLwZrBvMJBcAjWWHbeLvjDtvXLLEZ09JDi1qupgBComLkTB2RjVHG+sl fRPk1p4I3O98hnhvaq5Vcqo+WyYbCMoTVKJpvUIS5pwFRrP6EFHQZklHI6DWcOGd ty+kLnGg6utl9dK1LugQ0HcYDhgXRo77iiHEs5uOAnxN9uL8j8B8q+RXmlrsy35y cccoFhXs3xy/NuwDs2HTG69Ay15cDPEUWe+nKzDIxHX83RZ/2zxCaHrMF9onZ5v/ Gbg7IIrV59lfBdHt4L04Q6EaLTeOmrM6Sx02081fkFEEK5/cQlTgsrFKPhkPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAA5y9Rfem0riwlrBiBsWz/G30LowHwYDVR0j BBgwFoAURXlc5BECfGlhuJ6cD725tzvWHDkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NzNhYjc5ZC0wMGQ1LTQ5Y2ItYWMxMC0zYmQ0ZjIzODZiYzYvMC80NTc5NUNFNDEx MDI3QzY5NjFCODlFOUMwRkJEQjlCNzNCRDYxQzM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDU3OTVDRTQxMTAyN0M2OTYxQjg5RTlDMEZCREI5QjczQkQ2 MUMzOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjczYWI3OWQtMDBkNS00OWNiLWFj MTAtM2JkNGYyMzg2YmM2LzAvNDU3OTVDRTQxMTAyN0M2OTYxQjg5RTlDMEZCREI5 QjczQkQ2MUMzOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMKsv5365MNKvCBToYVUxX5KbSb6XdM8LiGu AGPnOHePhkvFc2iozPomKvviGzS002/WMJlQrkNZeuVDSAbFhUvXSFI04Ge9o4rZ V27z6ruk+bufZDw5j4/sTgJLIDsWCui2ANuwOZvvMcetVWXqK8wEGFhw149CmQBz h8v8s+NR2uJvWQVbmk8SbvYeqAv0rxOd5doUSIXrGbxX2MOCWkcPFB4RNxLNmL3t UapJ4+h7D+9a+RXuNyeaSmBmrQW5dpbFjOG+c5yN/uYLzWCMSZl2gRxcggXb4uVL duunu4HSFdS+lP9fbHDxy5ZktMRCUrMCRvaq16swjaTuDrbdRsM= -----END CERTIFICATE-----Generated at Fri Dec 19 11:33:12 2025 by rpki-client