This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/8cf3c211-0645-4882-a4f1-46be867b7983/0/2664CBE10F2B9FF1BEC50A6A85DC7AA52B9F17FA.mft File: 2664CBE10F2B9FF1BEC50A6A85DC7AA52B9F17FA.mft (raw, json) Hash identifier: /NvPXNCEN7y1JcfXuhXXuRFd18m4Sve0rm0KjpE0DfQ= Subject key identifier: B3:39:A4:E8:77:32:33:36:EF:E5:E4:1B:5B:80:E3:50:C0:1A:DA:F9 Authority key identifier: 26:64:CB:E1:0F:2B:9F:F1:BE:C5:0A:6A:85:DC:7A:A5:2B:9F:17:FA Certificate issuer: /CN=2664CBE10F2B9FF1BEC50A6A85DC7AA52B9F17FA Certificate serial: 398FE87AE819803802468647D044F798179DA6F9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2664CBE10F2B9FF1BEC50A6A85DC7AA52B9F17FA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8cf3c211-0645-4882-a4f1-46be867b7983/0/2664CBE10F2B9FF1BEC50A6A85DC7AA52B9F17FA.mft Manifest number: 03E6 Signing time: Wed 24 Dec 2025 16:22:47 +0000 Manifest this update: Wed 24 Dec 2025 16:17:47 +0000 Manifest next update: Sat 27 Dec 2025 23:57:47 +0000 Files and hashes: 1: 2664CBE10F2B9FF1BEC50A6A85DC7AA52B9F17FA.crl (hash: kRwfN/EmE5VQ3yQd+2/SK79940CRS8PeWQ24nqHIkvk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8cf3c211-0645-4882-a4f1-46be867b7983/0/2664CBE10F2B9FF1BEC50A6A85DC7AA52B9F17FA.crl rsync://repo-rpki.idnic.net/repo/8cf3c211-0645-4882-a4f1-46be867b7983/0/2664CBE10F2B9FF1BEC50A6A85DC7AA52B9F17FA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2664CBE10F2B9FF1BEC50A6A85DC7AA52B9F17FA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 17:20:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:8f:e8:7a:e8:19:80:38:02:46:86:47:d0:44:f7:98:17:9d:a6:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2664CBE10F2B9FF1BEC50A6A85DC7AA52B9F17FA Validity Not Before: Dec 24 16:17:47 2025 GMT Not After : Dec 27 23:57:47 2025 GMT Subject: CN=B339A4E877323336EFE5E41B5B80E350C01ADAF9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:ef:b0:ce:6f:d9:a4:7e:68:be:e0:0e:9d:3d: 81:90:28:d2:6b:6c:12:fd:d5:2d:49:fc:90:a6:7a: 75:29:fe:62:2b:30:50:a2:b8:42:76:e5:43:57:a5: 0f:01:cc:c3:84:c7:ee:af:ef:14:db:9a:72:5e:10: 3f:88:e3:0f:72:a9:be:57:77:a0:09:41:b0:af:b6: 40:cd:72:58:91:7b:a9:63:c7:6e:7e:e4:b0:e3:21: b9:28:4f:7e:93:89:6d:94:15:9c:e1:b2:d1:7d:04: e1:91:46:77:d0:95:ee:e3:b6:13:6e:de:b3:22:a2: 91:16:cd:15:9b:da:ac:54:cd:fc:84:45:f1:51:d7: 36:b1:7c:3c:1d:40:cc:a3:ec:c2:b1:8a:ff:5f:af: 6f:47:7a:9b:66:27:96:22:94:94:61:cd:22:28:5e: ec:a8:96:7c:83:75:95:76:eb:69:1e:02:b8:0f:14: 0d:8f:ab:37:61:ae:95:0e:bd:14:58:16:65:b7:e0: 51:d2:73:8a:29:43:db:ae:2a:65:f5:07:fd:ae:a3: 25:6d:47:8c:8b:6e:be:92:4e:96:0e:2d:03:ce:64: 5d:0b:47:e4:a4:42:df:b7:af:85:cf:3b:ac:aa:46: 87:25:ee:9d:f8:75:74:d3:4e:a1:02:44:ab:63:1e: d8:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:39:A4:E8:77:32:33:36:EF:E5:E4:1B:5B:80:E3:50:C0:1A:DA:F9 X509v3 Authority Key Identifier: keyid:26:64:CB:E1:0F:2B:9F:F1:BE:C5:0A:6A:85:DC:7A:A5:2B:9F:17:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8cf3c211-0645-4882-a4f1-46be867b7983/0/2664CBE10F2B9FF1BEC50A6A85DC7AA52B9F17FA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2664CBE10F2B9FF1BEC50A6A85DC7AA52B9F17FA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8cf3c211-0645-4882-a4f1-46be867b7983/0/2664CBE10F2B9FF1BEC50A6A85DC7AA52B9F17FA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:25:7f:c5:6a:f0:26:93:b8:1a:50:4d:d1:4f:fa:70:ea:89: 6f:80:9f:dd:b4:0a:ec:bf:39:1e:26:57:6f:8b:f4:80:3c:f9: 52:39:cd:18:64:67:66:14:f1:5a:f6:71:40:66:c1:46:c3:eb: ca:57:74:99:2e:a1:fd:32:89:49:00:f2:ec:3f:ba:94:3e:cf: 6e:7d:cf:3b:4c:61:01:a1:36:5e:7b:dd:5b:92:f8:c8:77:e8: 10:ec:6b:85:ae:37:b9:97:f5:c8:d8:c6:da:68:d4:92:23:4a: 41:5a:87:14:6d:10:4e:f2:fc:78:19:42:62:50:74:a6:8a:99: 6f:d4:38:2a:d2:6f:11:d4:7e:3a:45:a6:48:05:b3:c4:4c:a0: 16:f2:8f:36:de:26:0a:29:88:84:20:f6:1d:e3:b0:4c:81:1b: 6f:57:db:19:d5:1e:d1:dd:72:88:20:32:4d:eb:7a:b2:c9:5d: 7a:1d:8d:d7:a2:d2:63:90:e0:74:a0:2c:6f:08:89:8b:18:46: 76:1c:1a:ef:0a:58:5c:07:73:a6:ce:7c:9c:0f:12:d4:14:e6: cd:18:b2:b0:19:c6:99:84:a4:62:69:c0:29:16:44:27:8d:36: 8b:98:ff:ef:46:ac:2d:52:4e:90:54:ea:d2:6f:ea:c8:c7:77: f1:7f:bd:95 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOY/oeugZgDgCRoZH0ET3mBedpvkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjY2NENCRTEwRjJCOUZGMUJFQzUwQTZBODVEQzdBQTUy QjlGMTdGQTAeFw0yNTEyMjQxNjE3NDdaFw0yNTEyMjcyMzU3NDdaMDMxMTAvBgNV BAMTKEIzMzlBNEU4NzczMjMzMzZFRkU1RTQxQjVCODBFMzUwQzAxQURBRjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDw77DOb9mkfmi+4A6dPYGQKNJr bBL91S1J/JCmenUp/mIrMFCiuEJ25UNXpQ8BzMOEx+6v7xTbmnJeED+I4w9yqb5X d6AJQbCvtkDNcliRe6ljx25+5LDjIbkoT36TiW2UFZzhstF9BOGRRnfQle7jthNu 3rMiopEWzRWb2qxUzfyERfFR1zaxfDwdQMyj7MKxiv9fr29HeptmJ5YilJRhzSIo XuyolnyDdZV262keArgPFA2PqzdhrpUOvRRYFmW34FHSc4opQ9uuKmX1B/2uoyVt R4yLbr6STpYOLQPOZF0LR+SkQt+3r4XPO6yqRocl7p34dXTTTqECRKtjHtjDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUszmk6HcyMzbv5eQbW4DjUMAa2vkwHwYDVR0j BBgwFoAUJmTL4Q8rn/G+xQpqhdx6pSufF/owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 Y2YzYzIxMS0wNjQ1LTQ4ODItYTRmMS00NmJlODY3Yjc5ODMvMC8yNjY0Q0JFMTBG MkI5RkYxQkVDNTBBNkE4NURDN0FBNTJCOUYxN0ZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjY2NENCRTEwRjJCOUZGMUJFQzUwQTZBODVEQzdBQTUyQjlG MTdGQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGNmM2MyMTEtMDY0NS00ODgyLWE0 ZjEtNDZiZTg2N2I3OTgzLzAvMjY2NENCRTEwRjJCOUZGMUJFQzUwQTZBODVEQzdB QTUyQjlGMTdGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACIlf8Vq8CaTuBpQTdFP+nDqiW+An920Cuy/ OR4mV2+L9IA8+VI5zRhkZ2YU8Vr2cUBmwUbD68pXdJkuof0yiUkA8uw/upQ+z259 zztMYQGhNl573VuS+Mh36BDsa4WuN7mX9cjYxtpo1JIjSkFahxRtEE7y/HgZQmJQ dKaKmW/UOCrSbxHUfjpFpkgFs8RMoBbyjzbeJgopiIQg9h3jsEyBG29X2xnVHtHd coggMk3rerLJXXodjdei0mOQ4HSgLG8IiYsYRnYcGu8KWFwHc6bOfJwPEtQU5s0Y srAZxpmEpGJpwCkWRCeNNouY/+9GrC1STpBU6tJv6sjHd/F/vZU= -----END CERTIFICATE-----Generated at Wed Dec 24 22:07:00 2025 by rpki-client