This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/9a0129a8-27e8-4046-8989-865b257ea6ca/0/A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A.mft File: A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A.mft (raw, json) Hash identifier: mRC2oxJouWczyHimDYJnABj2q048F+KQVhgZalp2Pso= Subject key identifier: F1:BE:4C:C0:CE:C1:F8:21:54:01:8C:36:09:42:C1:B8:F3:F0:99:44 Authority key identifier: A6:49:57:71:5E:7D:CE:EC:3A:7D:4C:31:76:CC:97:ED:8E:5D:B3:1A Certificate issuer: /CN=A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A Certificate serial: 024A5B0F84609231FDD00D4F0719DCEB6471A30A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9a0129a8-27e8-4046-8989-865b257ea6ca/0/A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A.mft Manifest number: 01BC Signing time: Thu 18 Dec 2025 23:43:28 +0000 Manifest this update: Thu 18 Dec 2025 23:38:28 +0000 Manifest next update: Mon 22 Dec 2025 05:01:28 +0000 Files and hashes: 1: 3130332e3230332e39302e302f32342d3234203d3e20313530393236.roa (hash: lH+IV1VjfExz6EgaEksT/6x5pW3sOfiOZbcnKLG8hUk=) 2: A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A.crl (hash: e4NnXrp2ZZ5d5DZj1grl78mOU8UKaw3PxG/7lODNJyI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9a0129a8-27e8-4046-8989-865b257ea6ca/0/A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A.crl rsync://repo-rpki.idnic.net/repo/9a0129a8-27e8-4046-8989-865b257ea6ca/0/A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 03:43:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:4a:5b:0f:84:60:92:31:fd:d0:0d:4f:07:19:dc:eb:64:71:a3:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A Validity Not Before: Dec 18 23:38:28 2025 GMT Not After : Dec 22 05:01:28 2025 GMT Subject: CN=F1BE4CC0CEC1F82154018C360942C1B8F3F09944 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:e8:5d:fc:7c:79:7c:37:9a:1b:5b:69:91:d7: be:d9:70:ac:04:e6:63:57:b1:74:43:58:6c:11:b8: 9e:51:22:10:f7:f8:ed:6d:cf:db:cf:a1:d4:f7:99: ca:99:76:33:07:80:e1:b3:9e:e1:93:ed:2b:7a:6c: e2:72:b2:2e:b2:e7:65:22:1a:92:65:58:dc:45:88: dd:7b:b9:f9:1d:16:95:58:ea:b7:c8:ce:1b:82:8f: 7a:68:ff:1a:3f:fa:cb:78:41:a2:3c:e2:df:12:96: ed:99:08:2b:6f:9f:79:8e:a8:f6:63:4b:8e:13:a7: 2d:0d:e9:4b:0c:4c:cd:03:17:6c:1f:ad:f6:b9:23: d8:b1:82:a0:8a:c7:cb:92:57:17:8d:ec:ac:54:b8: 43:b5:8c:6f:84:7f:a0:8a:34:bf:32:2f:c6:e3:93: 7a:48:46:4b:b0:f2:c9:5f:fb:24:d2:d3:dc:5e:2a: 0a:7a:c3:40:68:e9:09:22:94:ab:86:fe:7f:65:fb: 61:54:c7:8a:99:eb:42:c2:14:ba:b2:9b:e2:33:f8: 3f:ac:4d:b4:14:a8:c8:da:01:94:fd:de:38:bb:3e: b8:5d:df:b8:a5:90:5f:0c:a8:14:a1:3d:94:bc:be: be:dc:e7:7e:fd:62:59:cf:d0:a0:9c:f9:65:c4:80: 5e:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:BE:4C:C0:CE:C1:F8:21:54:01:8C:36:09:42:C1:B8:F3:F0:99:44 X509v3 Authority Key Identifier: keyid:A6:49:57:71:5E:7D:CE:EC:3A:7D:4C:31:76:CC:97:ED:8E:5D:B3:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9a0129a8-27e8-4046-8989-865b257ea6ca/0/A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9a0129a8-27e8-4046-8989-865b257ea6ca/0/A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:00:52:a5:4f:90:a3:ee:f5:7f:c7:f1:cf:e5:b2:25:20:ff: 87:1f:75:9c:94:31:1c:7f:5b:0f:74:02:33:33:aa:b3:e9:82: ab:5c:c3:fd:3d:f5:3f:d7:5f:f7:38:15:bc:0a:7c:b0:6c:77: 1c:61:d4:e5:a6:00:ad:32:7d:93:d9:7e:06:7a:21:f2:94:7f: aa:b2:0c:42:30:7c:80:71:19:74:21:80:e3:66:9c:e0:43:75: 98:4d:87:66:a9:48:e8:0b:c7:4f:6c:bd:62:b1:5c:96:d3:4c: 70:de:27:46:98:62:03:cd:01:10:aa:7b:f6:f0:b7:16:0a:79: bd:35:69:69:b7:c2:e7:2b:42:70:3c:04:7c:be:5b:89:21:83: 66:f6:4a:61:7e:e4:db:a8:cf:b7:46:73:2c:da:17:77:25:17: ae:4f:0e:e6:a0:69:4f:bb:c9:a0:8e:5e:46:69:02:0b:73:d8: 89:78:60:c5:a6:59:a7:b1:0f:36:cc:8d:19:22:64:bf:11:b6: 84:33:07:c5:3b:c7:45:43:64:29:e1:ab:8e:9d:a1:f9:28:b9: 26:d0:80:17:95:81:7a:ba:ec:38:87:73:b8:4b:ba:19:32:e4: f0:7d:a5:8f:6f:90:bb:ca:40:84:b8:4b:f0:b3:74:62:0e:c4: 48:17:ac:e0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAkpbD4RgkjH90A1PBxnc62RxowowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTY0OTU3NzE1RTdEQ0VFQzNBN0Q0QzMxNzZDQzk3RUQ4 RTVEQjMxQTAeFw0yNTEyMTgyMzM4MjhaFw0yNTEyMjIwNTAxMjhaMDMxMTAvBgNV BAMTKEYxQkU0Q0MwQ0VDMUY4MjE1NDAxOEMzNjA5NDJDMUI4RjNGMDk5NDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD06F38fHl8N5obW2mR177ZcKwE 5mNXsXRDWGwRuJ5RIhD3+O1tz9vPodT3mcqZdjMHgOGznuGT7St6bOJysi6y52Ui GpJlWNxFiN17ufkdFpVY6rfIzhuCj3po/xo/+st4QaI84t8Slu2ZCCtvn3mOqPZj S44Tpy0N6UsMTM0DF2wfrfa5I9ixgqCKx8uSVxeN7KxUuEO1jG+Ef6CKNL8yL8bj k3pIRkuw8slf+yTS09xeKgp6w0Bo6QkilKuG/n9l+2FUx4qZ60LCFLqym+Iz+D+s TbQUqMjaAZT93ji7Prhd37ilkF8MqBShPZS8vr7c5379YlnP0KCc+WXEgF4dAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8b5MwM7B+CFUAYw2CULBuPPwmUQwHwYDVR0j BBgwFoAUpklXcV59zuw6fUwxdsyX7Y5dsxowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YTAxMjlhOC0yN2U4LTQwNDYtODk4OS04NjViMjU3ZWE2Y2EvMC9BNjQ5NTc3MTVF N0RDRUVDM0E3RDRDMzE3NkNDOTdFRDhFNURCMzFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTY0OTU3NzE1RTdEQ0VFQzNBN0Q0QzMxNzZDQzk3RUQ4RTVE QjMxQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWEwMTI5YTgtMjdlOC00MDQ2LTg5 ODktODY1YjI1N2VhNmNhLzAvQTY0OTU3NzE1RTdEQ0VFQzNBN0Q0QzMxNzZDQzk3 RUQ4RTVEQjMxQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADoAUqVPkKPu9X/H8c/lsiUg/4cfdZyUMRx/ Ww90AjMzqrPpgqtcw/099T/XX/c4FbwKfLBsdxxh1OWmAK0yfZPZfgZ6IfKUf6qy DEIwfIBxGXQhgONmnOBDdZhNh2apSOgLx09svWKxXJbTTHDeJ0aYYgPNARCqe/bw txYKeb01aWm3wucrQnA8BHy+W4khg2b2SmF+5Nuoz7dGcyzaF3clF65PDuagaU+7 yaCOXkZpAgtz2Il4YMWmWaexDzbMjRkiZL8RtoQzB8U7x0VDZCnhq46dofkouSbQ gBeVgXq67DiHc7hLuhky5PB9pY9vkLvKQIS4S/CzdGIOxEgXrOA= -----END CERTIFICATE-----Generated at Fri Dec 19 11:19:36 2025 by rpki-client