This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/341ff3e2-76b6-4833-86b5-82f3fa4ebcb7/0/064A8F9FBD487AB04370A31B7D603B27E6674937.mft File: 064A8F9FBD487AB04370A31B7D603B27E6674937.mft (raw, json) Hash identifier: RbkfjoLPdsTJoTCdCqP8Ktxtt7iUKEtblOuuy9GqxJE= Subject key identifier: 1B:18:2C:D3:8A:65:13:F9:93:0D:95:3A:BC:D2:43:A7:A1:50:58:B2 Authority key identifier: 06:4A:8F:9F:BD:48:7A:B0:43:70:A3:1B:7D:60:3B:27:E6:67:49:37 Certificate issuer: /CN=064A8F9FBD487AB04370A31B7D603B27E6674937 Certificate serial: 7C54D9391EB2D1EA9889C68D816749D49165DFFF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/064A8F9FBD487AB04370A31B7D603B27E6674937.cer Subject info access: rsync://repo-rpki.idnic.net/repo/341ff3e2-76b6-4833-86b5-82f3fa4ebcb7/0/064A8F9FBD487AB04370A31B7D603B27E6674937.mft Manifest number: 01A8 Signing time: Fri 19 Dec 2025 04:32:39 +0000 Manifest this update: Fri 19 Dec 2025 04:27:39 +0000 Manifest next update: Mon 22 Dec 2025 13:43:39 +0000 Files and hashes: 1: 3130332e3134342e32302e302f32332d3234203d3e20313339343233.roa (hash: eS4FjrViWLyiilxg1RkpEK5h3em7xO1B2/rM7GMa+rk=) 2: 3130332e3134342e32302e302f32342d3234203d3e20313339343233.roa (hash: sFMVy7dDJJRHWvtmqbp2frseo5smPIhlhNP2pmcRkE8=) 3: 3130332e3134342e32312e302f32342d3234203d3e20313339343233.roa (hash: +C1/uvN7CYXfdE0s0cHFFQ7douw+zlPNc8mJpTG123o=) 4: 064A8F9FBD487AB04370A31B7D603B27E6674937.crl (hash: azzLm4whHmYpe8HE1plA1RjZg2Do6sE2lFkeYb2YXZ8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/341ff3e2-76b6-4833-86b5-82f3fa4ebcb7/0/064A8F9FBD487AB04370A31B7D603B27E6674937.crl rsync://repo-rpki.idnic.net/repo/341ff3e2-76b6-4833-86b5-82f3fa4ebcb7/0/064A8F9FBD487AB04370A31B7D603B27E6674937.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/064A8F9FBD487AB04370A31B7D603B27E6674937.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 13:43:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:54:d9:39:1e:b2:d1:ea:98:89:c6:8d:81:67:49:d4:91:65:df:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=064A8F9FBD487AB04370A31B7D603B27E6674937 Validity Not Before: Dec 19 04:27:39 2025 GMT Not After : Dec 22 13:43:39 2025 GMT Subject: CN=1B182CD38A6513F9930D953ABCD243A7A15058B2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:22:9b:bc:2e:96:97:a0:07:21:d5:16:5a:61: 98:e8:3e:e4:94:63:d5:63:7b:84:5d:36:2c:93:fc: a9:1a:71:c3:6d:c3:06:db:fd:00:4e:9d:25:7c:d1: 09:65:8b:ba:f9:cc:cf:d1:bc:6a:83:e4:aa:06:e8: 5a:d2:ec:9b:70:48:0e:25:e1:d0:23:2e:9a:1e:a4: ed:fa:ef:23:d8:d2:65:19:fb:d6:ab:f9:d0:72:bf: 56:a4:4c:4f:da:3f:75:37:52:47:48:67:e8:68:8a: e8:88:43:0b:a6:b7:81:dc:ea:65:79:6e:37:3d:e1: d6:ae:94:a2:4e:61:ad:0f:ab:8e:a1:af:fe:c7:ed: 11:f0:3a:0c:d9:e0:8f:90:2a:31:33:f4:43:f2:ca: 35:bb:2d:0b:6b:36:bc:2d:1a:d1:91:29:3c:70:70: 82:da:6e:45:57:5b:78:ac:5e:6c:3c:4a:23:18:b0: 64:ab:c1:3c:f9:56:6e:c9:4e:50:6b:9e:53:67:64: 43:f0:8a:a3:e3:9a:9b:77:9f:f5:7d:41:b9:9f:4f: 8b:3d:3d:60:65:30:2f:50:e3:f7:f4:38:4e:fa:d1: ae:b2:0d:e8:0f:43:75:c6:ce:c1:c1:9d:da:4f:50: df:8d:11:45:61:af:56:72:fb:51:c1:e9:de:3c:d0: 71:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:18:2C:D3:8A:65:13:F9:93:0D:95:3A:BC:D2:43:A7:A1:50:58:B2 X509v3 Authority Key Identifier: keyid:06:4A:8F:9F:BD:48:7A:B0:43:70:A3:1B:7D:60:3B:27:E6:67:49:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/341ff3e2-76b6-4833-86b5-82f3fa4ebcb7/0/064A8F9FBD487AB04370A31B7D603B27E6674937.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/064A8F9FBD487AB04370A31B7D603B27E6674937.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/341ff3e2-76b6-4833-86b5-82f3fa4ebcb7/0/064A8F9FBD487AB04370A31B7D603B27E6674937.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:75:d1:64:01:56:ab:5f:16:c7:0b:03:a1:4a:6e:79:2e:ea: 5a:26:b8:0b:5c:ba:74:5c:55:ed:81:a7:13:58:34:21:57:0a: 6e:75:f0:1b:d1:ff:18:2b:bb:fe:e7:ef:82:36:b4:72:a5:44: 8e:9f:43:45:f1:f8:ca:11:06:62:9d:43:89:e3:1b:75:4e:3d: 31:41:aa:7d:91:3c:28:d2:84:e6:57:03:40:34:1d:e8:a7:61: 8f:58:d8:07:e0:ec:c1:07:a0:2e:31:92:6e:b8:25:4d:4a:11: 39:b7:4d:89:37:a9:cb:17:57:0d:fb:8d:c5:fb:00:22:af:9a: 7d:3b:4d:26:42:e1:d9:43:16:62:cb:0f:49:25:11:f8:02:9d: 31:ef:e2:47:65:9b:e3:93:88:9d:58:88:54:a7:f7:b4:64:26: 86:5b:12:f1:fc:88:83:e0:8d:58:59:1b:7b:57:10:32:0b:7e: 3a:40:10:7a:43:a1:ea:85:64:f3:ab:c3:16:55:91:99:1b:96: d4:a6:b5:53:ef:2c:aa:aa:2f:be:1d:e1:4b:d9:67:46:66:6c: 60:fa:f0:e4:18:e1:a7:3f:01:a1:e1:c6:91:61:67:b2:c5:97: b1:f8:1d:71:22:a3:d9:29:76:27:6e:0d:34:ee:e2:48:b6:54: d5:1f:71:98 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfFTZOR6y0eqYicaNgWdJ1JFl3/8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDY0QThGOUZCRDQ4N0FCMDQzNzBBMzFCN0Q2MDNCMjdF NjY3NDkzNzAeFw0yNTEyMTkwNDI3MzlaFw0yNTEyMjIxMzQzMzlaMDMxMTAvBgNV BAMTKDFCMTgyQ0QzOEE2NTEzRjk5MzBEOTUzQUJDRDI0M0E3QTE1MDU4QjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2Ipu8LpaXoAch1RZaYZjoPuSU Y9Vje4RdNiyT/KkaccNtwwbb/QBOnSV80Qlli7r5zM/RvGqD5KoG6FrS7JtwSA4l 4dAjLpoepO367yPY0mUZ+9ar+dByv1akTE/aP3U3UkdIZ+hoiuiIQwumt4Hc6mV5 bjc94daulKJOYa0Pq46hr/7H7RHwOgzZ4I+QKjEz9EPyyjW7LQtrNrwtGtGRKTxw cILabkVXW3isXmw8SiMYsGSrwTz5Vm7JTlBrnlNnZEPwiqPjmpt3n/V9QbmfT4s9 PWBlMC9Q4/f0OE760a6yDegPQ3XGzsHBndpPUN+NEUVhr1Zy+1HB6d480HFFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGxgs04plE/mTDZU6vNJDp6FQWLIwHwYDVR0j BBgwFoAUBkqPn71IerBDcKMbfWA7J+ZnSTcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NDFmZjNlMi03NmI2LTQ4MzMtODZiNS04MmYzZmE0ZWJjYjcvMC8wNjRBOEY5RkJE NDg3QUIwNDM3MEEzMUI3RDYwM0IyN0U2Njc0OTM3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDY0QThGOUZCRDQ4N0FCMDQzNzBBMzFCN0Q2MDNCMjdFNjY3 NDkzNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzQxZmYzZTItNzZiNi00ODMzLTg2 YjUtODJmM2ZhNGViY2I3LzAvMDY0QThGOUZCRDQ4N0FCMDQzNzBBMzFCN0Q2MDNC MjdFNjY3NDkzNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEB10WQBVqtfFscLA6FKbnku6lomuAtcunRc Ve2BpxNYNCFXCm518BvR/xgru/7n74I2tHKlRI6fQ0Xx+MoRBmKdQ4njG3VOPTFB qn2RPCjShOZXA0A0HeinYY9Y2Afg7MEHoC4xkm64JU1KETm3TYk3qcsXVw37jcX7 ACKvmn07TSZC4dlDFmLLD0klEfgCnTHv4kdlm+OTiJ1YiFSn97RkJoZbEvH8iIPg jVhZG3tXEDILfjpAEHpDoeqFZPOrwxZVkZkbltSmtVPvLKqqL74d4UvZZ0ZmbGD6 8OQY4ac/AaHhxpFhZ7LFl7H4HXEio9kpdiduDTTu4ki2VNUfcZg= -----END CERTIFICATE-----Generated at Sun Dec 21 22:56:29 2025 by rpki-client