This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a7099e42-2e9f-4e8a-99e8-ad50453b066f/0/64EB10DDE855CE764FFDFD8EFAE062A45060C522.mft File: 64EB10DDE855CE764FFDFD8EFAE062A45060C522.mft (raw, json) Hash identifier: FF5B064E25MJDFNqW93CnetHSm1gqrKlaj1RiC7QNBQ= Subject key identifier: 53:96:52:DE:83:ED:0E:B9:0B:DA:8C:98:E5:4A:59:34:D9:D9:BB:D2 Authority key identifier: 64:EB:10:DD:E8:55:CE:76:4F:FD:FD:8E:FA:E0:62:A4:50:60:C5:22 Certificate issuer: /CN=64EB10DDE855CE764FFDFD8EFAE062A45060C522 Certificate serial: 6D6FE594575F52B88179B123E84E7D51451533A8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64EB10DDE855CE764FFDFD8EFAE062A45060C522.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a7099e42-2e9f-4e8a-99e8-ad50453b066f/0/64EB10DDE855CE764FFDFD8EFAE062A45060C522.mft Manifest number: 0146 Signing time: Thu 25 Dec 2025 08:31:01 +0000 Manifest this update: Thu 25 Dec 2025 08:26:01 +0000 Manifest next update: Sun 28 Dec 2025 15:20:01 +0000 Files and hashes: 1: 64EB10DDE855CE764FFDFD8EFAE062A45060C522.crl (hash: VJjBMvkWF+iA7oK9VsoCw4Q0o7rO/tzPk8Ys0vtXr5g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a7099e42-2e9f-4e8a-99e8-ad50453b066f/0/64EB10DDE855CE764FFDFD8EFAE062A45060C522.crl rsync://repo-rpki.idnic.net/repo/a7099e42-2e9f-4e8a-99e8-ad50453b066f/0/64EB10DDE855CE764FFDFD8EFAE062A45060C522.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64EB10DDE855CE764FFDFD8EFAE062A45060C522.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 15:20:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:6f:e5:94:57:5f:52:b8:81:79:b1:23:e8:4e:7d:51:45:15:33:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64EB10DDE855CE764FFDFD8EFAE062A45060C522 Validity Not Before: Dec 25 08:26:01 2025 GMT Not After : Dec 28 15:20:01 2025 GMT Subject: CN=539652DE83ED0EB90BDA8C98E54A5934D9D9BBD2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:b6:47:1b:07:41:0d:65:b8:d8:ff:a1:f4:2d: 3d:f1:01:bd:b8:3a:7d:bc:4d:ed:84:13:82:89:8c: c2:52:d7:6a:ee:38:5d:f5:bf:ff:fa:f8:17:1a:42: 11:4b:16:f9:a8:bd:e6:c7:99:f2:cd:82:6e:4a:0f: 90:d2:74:6b:37:55:e0:ee:04:c7:25:e8:1d:92:88: 83:75:2e:28:ee:52:6c:ae:31:58:36:9f:55:45:76: 8f:9f:0a:ec:3f:27:a6:91:3e:b5:c5:84:7b:c5:e0: d0:9b:46:dd:e2:53:d8:be:0a:e1:17:44:ef:2e:ef: 82:68:df:1c:14:8b:f2:65:d2:2a:ba:3c:f1:3b:56: e4:9f:a0:68:d7:8c:55:e6:4c:e6:b2:0b:cf:87:a6: a4:23:fd:82:96:aa:ff:d3:28:e8:24:9d:d5:6d:19: 63:bb:7f:96:1f:fb:31:a0:a6:4f:69:f2:6c:64:d8: 12:39:65:ef:49:ff:6b:1e:38:dc:e3:14:1a:16:99: 08:20:94:5f:f2:ff:6f:ae:96:fc:c3:a2:61:80:69: e9:3b:84:25:0a:5d:d3:f9:fd:fe:75:22:2c:c3:37: 1e:b4:5d:ce:5f:80:9a:c4:eb:e1:82:60:b9:62:06: 92:cc:dc:ea:13:9b:da:d3:68:a9:cb:10:7d:dd:ba: bb:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:96:52:DE:83:ED:0E:B9:0B:DA:8C:98:E5:4A:59:34:D9:D9:BB:D2 X509v3 Authority Key Identifier: keyid:64:EB:10:DD:E8:55:CE:76:4F:FD:FD:8E:FA:E0:62:A4:50:60:C5:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a7099e42-2e9f-4e8a-99e8-ad50453b066f/0/64EB10DDE855CE764FFDFD8EFAE062A45060C522.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64EB10DDE855CE764FFDFD8EFAE062A45060C522.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a7099e42-2e9f-4e8a-99e8-ad50453b066f/0/64EB10DDE855CE764FFDFD8EFAE062A45060C522.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:4b:a4:ad:b8:cc:7d:4b:bb:4c:fe:38:c1:6a:8e:44:75:e4: 45:ec:a0:64:3f:9d:ee:cc:1c:01:f9:d5:e0:7e:83:1b:40:9b: 85:fc:74:1a:4d:09:40:13:90:41:cf:0e:5d:1c:d7:63:e0:0f: 95:17:39:97:8e:ea:ff:9b:e2:9a:a6:82:7e:cf:7e:cb:2d:aa: 67:12:ed:15:5d:ac:31:b1:94:2d:5b:eb:c9:a9:73:cf:5a:48: 7d:9e:d5:f9:d2:a7:23:8b:ad:83:1c:f1:bc:41:67:25:a7:58: f9:57:2c:9f:15:2e:d1:43:49:b5:a1:d9:e4:35:27:b8:92:84: 53:1a:2b:49:e0:f0:b6:76:7e:20:99:8f:d5:15:f6:38:7e:aa: 69:59:96:e5:ba:3a:fa:86:43:6b:86:6d:77:16:d0:5e:31:9e: 40:6c:c6:bc:50:16:52:1e:61:0d:42:c9:64:d6:06:e7:ee:dd: 12:b3:7b:08:a3:17:81:a6:4d:d2:e8:11:02:83:5f:10:e1:c0: 78:0a:80:b5:34:6e:42:49:7d:9c:54:1a:61:64:e4:60:ec:66: 50:8a:e3:61:f3:28:ab:f0:53:66:41:4c:fc:f2:3c:e1:6d:a6: 60:89:9b:e1:fa:97:8c:99:b7:07:a5:32:2d:06:ee:61:15:03: ce:80:f7:38 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbW/llFdfUriBebEj6E59UUUVM6gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjRFQjEwRERFODU1Q0U3NjRGRkRGRDhFRkFFMDYyQTQ1 MDYwQzUyMjAeFw0yNTEyMjUwODI2MDFaFw0yNTEyMjgxNTIwMDFaMDMxMTAvBgNV BAMTKDUzOTY1MkRFODNFRDBFQjkwQkRBOEM5OEU1NEE1OTM0RDlEOUJCRDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxtkcbB0ENZbjY/6H0LT3xAb24 On28Te2EE4KJjMJS12ruOF31v//6+BcaQhFLFvmovebHmfLNgm5KD5DSdGs3VeDu BMcl6B2SiIN1LijuUmyuMVg2n1VFdo+fCuw/J6aRPrXFhHvF4NCbRt3iU9i+CuEX RO8u74Jo3xwUi/Jl0iq6PPE7VuSfoGjXjFXmTOayC8+HpqQj/YKWqv/TKOgkndVt GWO7f5Yf+zGgpk9p8mxk2BI5Ze9J/2seONzjFBoWmQgglF/y/2+ulvzDomGAaek7 hCUKXdP5/f51IizDNx60Xc5fgJrE6+GCYLliBpLM3OoTm9rTaKnLEH3dursXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUU5ZS3oPtDrkL2oyY5UpZNNnZu9IwHwYDVR0j BBgwFoAUZOsQ3ehVznZP/f2O+uBipFBgxSIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NzA5OWU0Mi0yZTlmLTRlOGEtOTllOC1hZDUwNDUzYjA2NmYvMC82NEVCMTBEREU4 NTVDRTc2NEZGREZEOEVGQUUwNjJBNDUwNjBDNTIyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjRFQjEwRERFODU1Q0U3NjRGRkRGRDhFRkFFMDYyQTQ1MDYw QzUyMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTcwOTllNDItMmU5Zi00ZThhLTk5 ZTgtYWQ1MDQ1M2IwNjZmLzAvNjRFQjEwRERFODU1Q0U3NjRGRkRGRDhFRkFFMDYy QTQ1MDYwQzUyMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIBLpK24zH1Lu0z+OMFqjkR15EXsoGQ/ne7M HAH51eB+gxtAm4X8dBpNCUATkEHPDl0c12PgD5UXOZeO6v+b4pqmgn7PfsstqmcS 7RVdrDGxlC1b68mpc89aSH2e1fnSpyOLrYMc8bxBZyWnWPlXLJ8VLtFDSbWh2eQ1 J7iShFMaK0ng8LZ2fiCZj9UV9jh+qmlZluW6OvqGQ2uGbXcW0F4xnkBsxrxQFlIe YQ1CyWTWBufu3RKzewijF4GmTdLoEQKDXxDhwHgKgLU0bkJJfZxUGmFk5GDsZlCK 42HzKKvwU2ZBTPzyPOFtpmCJm+H6l4yZtwelMi0G7mEVA86A9zg= -----END CERTIFICATE-----Generated at Sat Dec 27 08:08:59 2025 by rpki-client