This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a262d341-94b5-474e-8bcd-d17988f099b3/0/64B2DB7703C5C56A6F69C4789AB9F69214F22695.mft File: 64B2DB7703C5C56A6F69C4789AB9F69214F22695.mft (raw, json) Hash identifier: L7XSldAWqM748eLky2bfQXQf3T77DQl2DMYRgCFY728= Subject key identifier: DF:BF:86:DA:AC:81:CA:2A:6A:AD:B3:42:67:99:1C:91:71:A3:E7:40 Authority key identifier: 64:B2:DB:77:03:C5:C5:6A:6F:69:C4:78:9A:B9:F6:92:14:F2:26:95 Certificate issuer: /CN=64B2DB7703C5C56A6F69C4789AB9F69214F22695 Certificate serial: 3CE68454EBD1C5AF5C3FF9C02428EBE490100E2F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64B2DB7703C5C56A6F69C4789AB9F69214F22695.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a262d341-94b5-474e-8bcd-d17988f099b3/0/64B2DB7703C5C56A6F69C4789AB9F69214F22695.mft Manifest number: 01A8 Signing time: Thu 18 Dec 2025 07:41:09 +0000 Manifest this update: Thu 18 Dec 2025 07:36:09 +0000 Manifest next update: Sun 21 Dec 2025 10:13:09 +0000 Files and hashes: 1: 64B2DB7703C5C56A6F69C4789AB9F69214F22695.crl (hash: qsd3Qvf33UFsO+HeyEWEmFOs3ZjGXjkhqoqXlYL8YoI=) 2: 3130332e3131372e35382e302f32332d3234203d3e20313530393534.roa (hash: PRtjDQLWn7DOhqpJ6ZyrW9FMpW7szF9MrVItEP9hNn4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a262d341-94b5-474e-8bcd-d17988f099b3/0/64B2DB7703C5C56A6F69C4789AB9F69214F22695.crl rsync://repo-rpki.idnic.net/repo/a262d341-94b5-474e-8bcd-d17988f099b3/0/64B2DB7703C5C56A6F69C4789AB9F69214F22695.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64B2DB7703C5C56A6F69C4789AB9F69214F22695.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 10:13:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:e6:84:54:eb:d1:c5:af:5c:3f:f9:c0:24:28:eb:e4:90:10:0e:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64B2DB7703C5C56A6F69C4789AB9F69214F22695 Validity Not Before: Dec 18 07:36:09 2025 GMT Not After : Dec 21 10:13:09 2025 GMT Subject: CN=DFBF86DAAC81CA2A6AADB34267991C9171A3E740 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:ee:36:b7:92:fd:ab:8e:3c:9e:78:cc:7a:36: 68:3d:ff:2d:6d:ae:9f:5f:a6:f8:cd:33:0e:95:12: aa:e2:e0:1d:70:17:38:2f:a0:5c:6b:a8:0e:6a:8f: 27:cf:15:fb:fa:90:df:db:e8:e0:7d:44:2a:71:63: 55:e7:8b:ea:10:05:83:0d:52:c5:21:85:fc:07:f0: 41:68:1c:ea:24:13:81:f2:f5:52:86:65:b6:0e:e2: 1c:ed:60:9d:5c:3d:f7:ac:ab:e0:32:8f:9b:8f:4f: c4:6c:b5:79:ce:04:af:3c:d7:cd:8d:80:01:bb:34: 58:92:05:f5:62:67:ae:55:b3:8a:49:27:fa:4d:bc: f2:73:b8:aa:f1:96:93:ad:1e:59:84:af:8e:62:a2: 8d:b5:58:9e:1b:cf:e4:bc:a0:3b:d8:f5:a8:96:00: 65:da:c9:21:74:cf:80:2e:26:10:4d:1b:48:f6:26: 67:25:89:2f:60:7f:d9:a1:a6:59:7a:4a:7a:fe:a6: 02:fd:5e:50:c7:68:56:aa:47:f2:25:12:57:a5:8c: 8a:36:3b:aa:7d:2a:34:43:40:9c:8f:f1:60:ad:63: 9b:43:51:9d:83:43:97:a8:36:53:45:79:f2:2c:87: bc:27:5e:70:0b:a6:dc:01:51:b1:b0:d9:bc:3b:1d: 88:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:BF:86:DA:AC:81:CA:2A:6A:AD:B3:42:67:99:1C:91:71:A3:E7:40 X509v3 Authority Key Identifier: keyid:64:B2:DB:77:03:C5:C5:6A:6F:69:C4:78:9A:B9:F6:92:14:F2:26:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a262d341-94b5-474e-8bcd-d17988f099b3/0/64B2DB7703C5C56A6F69C4789AB9F69214F22695.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64B2DB7703C5C56A6F69C4789AB9F69214F22695.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a262d341-94b5-474e-8bcd-d17988f099b3/0/64B2DB7703C5C56A6F69C4789AB9F69214F22695.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d8:c1:05:e8:59:8c:b4:cb:17:9f:8d:af:65:ba:6c:4d:9d:8f: 0e:11:cb:78:0b:66:99:c5:be:64:ed:aa:f4:38:36:67:96:07: 3b:93:49:75:88:3a:0e:ae:e9:6a:85:de:07:a9:ee:f4:f2:29: cf:de:3a:e4:3c:a3:9d:cc:46:8d:90:42:38:02:75:4f:3d:17: 76:d5:c7:34:2c:de:14:cc:9e:9b:60:81:ef:1a:37:c1:86:80: 98:45:19:6e:c6:a7:77:4b:93:67:a8:fa:be:01:46:9b:f0:2a: b7:b6:be:9d:53:b6:d9:b2:09:1a:b6:db:79:4a:5b:d9:ee:04: 54:29:85:9b:9d:be:27:10:d5:d9:29:fe:ef:ef:1b:2e:43:a5: 03:71:19:97:b0:48:ed:10:4c:13:af:d0:ae:3b:d1:2a:b8:81: 33:44:b3:7d:67:69:b9:59:65:bf:8e:1b:a8:b8:7b:23:2e:f1: ce:f9:d3:14:68:93:1e:7b:40:e0:53:9b:f3:6c:a4:e5:0c:76: b6:06:fa:7d:43:f4:52:aa:ec:bc:0f:c9:aa:c2:ae:50:56:5e: 3d:59:c0:55:62:65:70:99:2a:8e:72:f2:e8:4a:d6:5b:99:5b: 86:99:ce:6d:5b:91:70:ce:2b:a2:de:2a:06:2d:47:f5:7a:bf: 70:6c:92:42 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPOaEVOvRxa9cP/nAJCjr5JAQDi8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjRCMkRCNzcwM0M1QzU2QTZGNjlDNDc4OUFCOUY2OTIx NEYyMjY5NTAeFw0yNTEyMTgwNzM2MDlaFw0yNTEyMjExMDEzMDlaMDMxMTAvBgNV BAMTKERGQkY4NkRBQUM4MUNBMkE2QUFEQjM0MjY3OTkxQzkxNzFBM0U3NDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM7ja3kv2rjjyeeMx6Nmg9/y1t rp9fpvjNMw6VEqri4B1wFzgvoFxrqA5qjyfPFfv6kN/b6OB9RCpxY1Xni+oQBYMN UsUhhfwH8EFoHOokE4Hy9VKGZbYO4hztYJ1cPfesq+Ayj5uPT8RstXnOBK88182N gAG7NFiSBfViZ65Vs4pJJ/pNvPJzuKrxlpOtHlmEr45ioo21WJ4bz+S8oDvY9aiW AGXaySF0z4AuJhBNG0j2JmcliS9gf9mhpll6Snr+pgL9XlDHaFaqR/IlEleljIo2 O6p9KjRDQJyP8WCtY5tDUZ2DQ5eoNlNFefIsh7wnXnALptwBUbGw2bw7HYilAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU37+G2qyByipqrbNCZ5kckXGj50AwHwYDVR0j BBgwFoAUZLLbdwPFxWpvacR4mrn2khTyJpUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MjYyZDM0MS05NGI1LTQ3NGUtOGJjZC1kMTc5ODhmMDk5YjMvMC82NEIyREI3NzAz QzVDNTZBNkY2OUM0Nzg5QUI5RjY5MjE0RjIyNjk1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjRCMkRCNzcwM0M1QzU2QTZGNjlDNDc4OUFCOUY2OTIxNEYy MjY5NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTI2MmQzNDEtOTRiNS00NzRlLThi Y2QtZDE3OTg4ZjA5OWIzLzAvNjRCMkRCNzcwM0M1QzU2QTZGNjlDNDc4OUFCOUY2 OTIxNEYyMjY5NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANjBBehZjLTLF5+Nr2W6bE2djw4Ry3gLZpnF vmTtqvQ4NmeWBzuTSXWIOg6u6WqF3gep7vTyKc/eOuQ8o53MRo2QQjgCdU89F3bV xzQs3hTMnptgge8aN8GGgJhFGW7Gp3dLk2eo+r4BRpvwKre2vp1TttmyCRq223lK W9nuBFQphZudvicQ1dkp/u/vGy5DpQNxGZewSO0QTBOv0K470Sq4gTNEs31nablZ Zb+OG6i4eyMu8c750xRokx57QOBTm/NspOUMdrYG+n1D9FKq7LwPyarCrlBWXj1Z wFViZXCZKo5y8uhK1luZW4aZzm1bkXDOK6LeKgYtR/V6v3BskkI= -----END CERTIFICATE-----Generated at Fri Dec 19 17:55:19 2025 by rpki-client