This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/96750bf9-9f58-428a-8952-8b5555ef7ca7/0/E64D2B2A02A172B64A71F75C753571C841216A21.mft File: E64D2B2A02A172B64A71F75C753571C841216A21.mft (raw, json) Hash identifier: wTMLJZvwk6Bmpk5wxARzo8PCTi5VsqLa+kz9c0Eki1k= Subject key identifier: B0:33:87:0C:D6:0B:41:B3:C5:23:DA:46:AC:43:34:A3:2A:85:B2:3C Authority key identifier: E6:4D:2B:2A:02:A1:72:B6:4A:71:F7:5C:75:35:71:C8:41:21:6A:21 Certificate issuer: /CN=E64D2B2A02A172B64A71F75C753571C841216A21 Certificate serial: 72630E2DF8BD8C08DF175F630722C41D921B54B0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E64D2B2A02A172B64A71F75C753571C841216A21.cer Subject info access: rsync://repo-rpki.idnic.net/repo/96750bf9-9f58-428a-8952-8b5555ef7ca7/0/E64D2B2A02A172B64A71F75C753571C841216A21.mft Manifest number: DB Signing time: Wed 17 Dec 2025 17:40:52 +0000 Manifest this update: Wed 17 Dec 2025 17:35:52 +0000 Manifest next update: Sun 21 Dec 2025 03:02:52 +0000 Files and hashes: 1: 3130332e3137372e35362e302f32332d3234203d3e20313437313532.roa (hash: 3wY6YhGHW2FNk89iUabtEb3voGoMeSvrsN+5cal1TNI=) 2: E64D2B2A02A172B64A71F75C753571C841216A21.crl (hash: J1E2kABo7NJ5SEqUp7x7Vrbztqqh+P2HPSmaCrSimhg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/96750bf9-9f58-428a-8952-8b5555ef7ca7/0/E64D2B2A02A172B64A71F75C753571C841216A21.crl rsync://repo-rpki.idnic.net/repo/96750bf9-9f58-428a-8952-8b5555ef7ca7/0/E64D2B2A02A172B64A71F75C753571C841216A21.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E64D2B2A02A172B64A71F75C753571C841216A21.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 03:02:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:63:0e:2d:f8:bd:8c:08:df:17:5f:63:07:22:c4:1d:92:1b:54:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E64D2B2A02A172B64A71F75C753571C841216A21 Validity Not Before: Dec 17 17:35:52 2025 GMT Not After : Dec 21 03:02:52 2025 GMT Subject: CN=B033870CD60B41B3C523DA46AC4334A32A85B23C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:66:bb:b4:ab:43:19:ac:62:d6:0d:4b:bf:55: 0d:25:5d:5f:55:52:9d:73:07:97:9c:d9:5e:8d:b5: 73:43:5a:c6:bb:ba:27:fe:34:4b:1f:d5:1b:34:1c: de:fe:60:18:7c:25:5c:57:01:fc:b2:fd:cb:ef:88: 46:e4:eb:ab:b4:60:73:4e:47:39:1b:e7:25:a8:e0: c5:53:f0:b7:a6:c2:f7:d2:1f:bb:98:6b:72:71:3a: 20:22:04:bd:87:88:d7:0c:91:b8:29:71:7f:4d:04: a8:a1:0b:98:fb:80:f2:56:07:a4:28:c7:ff:2f:62: 03:0e:81:45:c7:1c:18:97:b6:40:9a:30:9f:a6:53: 6a:47:5c:3b:a7:21:e2:6d:bd:af:b2:db:4d:ef:ed: e0:64:9a:09:2b:c1:f9:ab:35:32:65:9e:3b:c4:da: f9:ba:fa:72:94:5d:e5:60:a1:f4:ab:72:86:35:11: 08:cb:94:e4:1f:18:a9:14:f4:5b:3b:03:c5:0f:92: 0a:5d:ee:1c:1c:ac:aa:2b:13:a3:db:89:4c:4e:9d: f4:c2:83:da:86:59:35:9f:47:a8:ae:a9:ba:3a:23: ef:13:74:c0:c6:4b:56:81:5b:93:68:f5:56:66:b2: 4c:8c:e3:d2:c2:e8:34:08:61:7e:f0:df:2b:41:04: 41:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:33:87:0C:D6:0B:41:B3:C5:23:DA:46:AC:43:34:A3:2A:85:B2:3C X509v3 Authority Key Identifier: keyid:E6:4D:2B:2A:02:A1:72:B6:4A:71:F7:5C:75:35:71:C8:41:21:6A:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/96750bf9-9f58-428a-8952-8b5555ef7ca7/0/E64D2B2A02A172B64A71F75C753571C841216A21.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E64D2B2A02A172B64A71F75C753571C841216A21.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/96750bf9-9f58-428a-8952-8b5555ef7ca7/0/E64D2B2A02A172B64A71F75C753571C841216A21.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:75:52:c8:dd:5d:1d:dc:62:c9:ad:7f:ee:d0:5b:cf:51:b5: b5:b7:9d:20:7f:0c:64:af:33:c1:a5:cd:cb:92:be:5b:6e:af: f3:90:8b:11:ff:87:ed:97:cf:23:7f:12:56:54:ab:f1:57:3e: b5:6c:c6:7f:49:ac:c1:5a:05:ef:2f:f5:43:49:db:d5:25:6c: 45:46:ab:0e:09:64:2f:c1:f5:0e:2f:4d:b6:9c:da:68:b9:9f: f6:98:9f:ba:f9:37:08:4a:19:be:2a:34:87:7f:59:e4:06:3c: 30:39:0e:bb:de:54:4c:d2:9a:0e:12:38:6f:5b:64:10:94:8f: 49:90:33:bd:52:0f:6e:85:f2:10:5c:da:46:5f:db:78:86:ae: c8:ff:df:f7:b4:55:76:40:e9:8c:99:e6:79:32:02:1b:3b:e4: c7:27:cd:c7:a7:44:b1:b5:6b:b5:6b:7a:d9:eb:fe:21:49:a0: 0e:6d:60:67:79:04:32:d4:0a:4b:92:af:43:1e:7d:a9:16:58: d9:bc:e1:80:1d:c9:3a:c8:c6:f1:79:d9:9c:6e:3a:2e:b8:d0: e7:59:a2:72:4b:9e:fa:f2:92:1b:cf:0f:33:f5:5b:c4:23:81: 68:ea:1c:ec:44:56:35:68:45:75:ed:79:21:1b:00:2f:b8:f6: 3f:c2:0c:ab -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcmMOLfi9jAjfF19jByLEHZIbVLAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTY0RDJCMkEwMkExNzJCNjRBNzFGNzVDNzUzNTcxQzg0 MTIxNkEyMTAeFw0yNTEyMTcxNzM1NTJaFw0yNTEyMjEwMzAyNTJaMDMxMTAvBgNV BAMTKEIwMzM4NzBDRDYwQjQxQjNDNTIzREE0NkFDNDMzNEEzMkE4NUIyM0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdZru0q0MZrGLWDUu/VQ0lXV9V Up1zB5ec2V6NtXNDWsa7uif+NEsf1Rs0HN7+YBh8JVxXAfyy/cvviEbk66u0YHNO Rzkb5yWo4MVT8LemwvfSH7uYa3JxOiAiBL2HiNcMkbgpcX9NBKihC5j7gPJWB6Qo x/8vYgMOgUXHHBiXtkCaMJ+mU2pHXDunIeJtva+y203v7eBkmgkrwfmrNTJlnjvE 2vm6+nKUXeVgofSrcoY1EQjLlOQfGKkU9Fs7A8UPkgpd7hwcrKorE6PbiUxOnfTC g9qGWTWfR6iuqbo6I+8TdMDGS1aBW5No9VZmskyM49LC6DQIYX7w3ytBBEEfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsDOHDNYLQbPFI9pGrEM0oyqFsjwwHwYDVR0j BBgwFoAU5k0rKgKhcrZKcfdcdTVxyEEhaiEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 Njc1MGJmOS05ZjU4LTQyOGEtODk1Mi04YjU1NTVlZjdjYTcvMC9FNjREMkIyQTAy QTE3MkI2NEE3MUY3NUM3NTM1NzFDODQxMjE2QTIxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTY0RDJCMkEwMkExNzJCNjRBNzFGNzVDNzUzNTcxQzg0MTIx NkEyMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTY3NTBiZjktOWY1OC00MjhhLTg5 NTItOGI1NTU1ZWY3Y2E3LzAvRTY0RDJCMkEwMkExNzJCNjRBNzFGNzVDNzUzNTcx Qzg0MTIxNkEyMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE11UsjdXR3cYsmtf+7QW89RtbW3nSB/DGSv M8GlzcuSvltur/OQixH/h+2XzyN/ElZUq/FXPrVsxn9JrMFaBe8v9UNJ29UlbEVG qw4JZC/B9Q4vTbac2mi5n/aYn7r5NwhKGb4qNId/WeQGPDA5DrveVEzSmg4SOG9b ZBCUj0mQM71SD26F8hBc2kZf23iGrsj/3/e0VXZA6YyZ5nkyAhs75McnzcenRLG1 a7Vretnr/iFJoA5tYGd5BDLUCkuSr0MefakWWNm84YAdyTrIxvF52ZxuOi640OdZ onJLnvrykhvPDzP1W8QjgWjqHOxEVjVoRXXteSEbAC+49j/CDKs= -----END CERTIFICATE-----Generated at Fri Dec 19 11:19:37 2025 by rpki-client