This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ab313d17-5b9b-4d23-9424-74579508ba54/0/64FFF4BF67B5B3EF9DC6545842C118D75F6042D8.mft File: 64FFF4BF67B5B3EF9DC6545842C118D75F6042D8.mft (raw, json) Hash identifier: 3MC2T5wHwpe+Mv3FW+J8AyUtJPCuWZYo6PzMd6Z9qwM= Subject key identifier: BC:BD:27:27:E7:AB:26:72:01:54:F8:88:63:4A:43:A7:33:E5:6A:8B Authority key identifier: 64:FF:F4:BF:67:B5:B3:EF:9D:C6:54:58:42:C1:18:D7:5F:60:42:D8 Certificate issuer: /CN=64FFF4BF67B5B3EF9DC6545842C118D75F6042D8 Certificate serial: 5195B9F1B679D3F29B379F9740BA17DA1BB3EAF5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64FFF4BF67B5B3EF9DC6545842C118D75F6042D8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ab313d17-5b9b-4d23-9424-74579508ba54/0/64FFF4BF67B5B3EF9DC6545842C118D75F6042D8.mft Manifest number: 01B3 Signing time: Wed 24 Dec 2025 02:23:10 +0000 Manifest this update: Wed 24 Dec 2025 02:18:10 +0000 Manifest next update: Sat 27 Dec 2025 07:24:10 +0000 Files and hashes: 1: 3130332e33362e36382e302f32342d3234203d3e20313333333631.roa (hash: oP07dPM6PnkRNB+PzrhdYOY9okyRdrsFM/T0aA1Ih1s=) 2: 3130332e33372e3232392e302f32342d3234203d3e20313333333631.roa (hash: OMvT7v+SWmvCcI/oQS1wfiv6hD1AXfKdII4PA3MiDEc=) 3: 64FFF4BF67B5B3EF9DC6545842C118D75F6042D8.crl (hash: unweYLnwxYkHC0+9oQN5Fz2EMBsscczCBTjUMXP4iJo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ab313d17-5b9b-4d23-9424-74579508ba54/0/64FFF4BF67B5B3EF9DC6545842C118D75F6042D8.crl rsync://repo-rpki.idnic.net/repo/ab313d17-5b9b-4d23-9424-74579508ba54/0/64FFF4BF67B5B3EF9DC6545842C118D75F6042D8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64FFF4BF67B5B3EF9DC6545842C118D75F6042D8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 07:24:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:95:b9:f1:b6:79:d3:f2:9b:37:9f:97:40:ba:17:da:1b:b3:ea:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64FFF4BF67B5B3EF9DC6545842C118D75F6042D8 Validity Not Before: Dec 24 02:18:10 2025 GMT Not After : Dec 27 07:24:10 2025 GMT Subject: CN=BCBD2727E7AB26720154F888634A43A733E56A8B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:9d:80:fc:58:3a:3a:11:bf:4c:06:83:ab:c6: 3b:2d:15:49:25:4d:65:bd:06:bc:87:66:6a:67:a3: dd:59:5f:3d:4d:93:ab:05:9d:16:0a:53:79:f1:93: d4:da:6c:09:d0:0d:0b:1c:0a:f0:62:49:f6:63:c6: 69:63:27:6b:86:47:db:dc:3a:d0:67:1e:dc:bc:ab: 64:11:06:19:81:cb:64:1b:e5:8d:8f:59:12:f1:4c: 13:80:2c:da:c8:ea:87:3b:e4:5d:61:14:0c:bc:13: 84:8e:af:c0:a9:1c:93:51:50:96:b4:b5:2d:a8:cc: 43:1d:f1:5f:2b:a9:4f:74:c1:69:e0:a1:24:87:81: 28:3b:99:01:b7:69:4a:d2:1f:1c:c1:0d:2b:3d:68: 10:79:2e:5d:8e:10:47:36:8d:43:11:48:94:1f:b5: 9c:b4:ec:e3:8f:a5:25:27:8e:0b:85:e0:b9:68:58: 5e:98:f4:3f:d0:ee:06:01:90:65:81:cc:f5:fc:9b: 18:80:27:3e:d7:ea:93:37:82:8d:f8:02:d8:04:74: d1:32:d2:b9:20:d2:82:6f:1a:da:ad:b5:fd:65:8b: 35:84:94:29:af:9e:ab:23:18:af:8b:6b:a6:ea:05: de:1f:02:1d:1b:52:76:f7:8a:74:16:1a:39:6f:77: 01:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:BD:27:27:E7:AB:26:72:01:54:F8:88:63:4A:43:A7:33:E5:6A:8B X509v3 Authority Key Identifier: keyid:64:FF:F4:BF:67:B5:B3:EF:9D:C6:54:58:42:C1:18:D7:5F:60:42:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ab313d17-5b9b-4d23-9424-74579508ba54/0/64FFF4BF67B5B3EF9DC6545842C118D75F6042D8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64FFF4BF67B5B3EF9DC6545842C118D75F6042D8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ab313d17-5b9b-4d23-9424-74579508ba54/0/64FFF4BF67B5B3EF9DC6545842C118D75F6042D8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:08:42:c5:33:c6:c0:3b:ef:e9:ae:d6:ee:a6:bd:99:f7:36: 28:f6:e0:cc:43:5c:b0:26:77:09:ac:6f:55:57:ab:1d:3a:6c: 90:62:27:63:22:94:9a:c7:73:2a:c2:e4:e7:73:93:ea:9b:51: f2:d4:22:be:ee:4b:de:a6:46:03:be:b6:61:2f:02:c7:a1:fc: e8:45:13:6e:a6:21:6b:79:13:7e:32:a4:02:0e:9b:3c:58:f0: a0:b5:37:9d:47:00:c7:76:8b:c6:77:b1:65:05:16:d0:a1:69: ae:88:65:05:ec:f9:6c:81:d4:53:f6:e8:28:05:af:80:aa:14: be:a7:df:67:66:fe:c5:c9:e6:7b:ce:89:d6:eb:b7:50:d2:0e: 94:59:a3:25:dc:e1:ce:a0:39:9f:e4:0f:01:fe:12:b4:af:f3: 63:b3:f6:e7:45:e1:d3:7e:3d:5d:43:5b:02:ba:67:db:aa:01: 10:26:c9:99:0b:44:63:e8:78:8c:56:d8:66:e5:71:64:e6:75: 5f:f4:2a:6c:96:10:3e:e9:46:f0:b2:8b:03:ea:12:27:61:2f: 30:4f:ea:3e:59:63:c7:a2:37:89:95:96:16:55:a2:5e:c8:2d: 7b:66:0e:ea:42:1b:e7:af:85:08:65:11:82:9b:d1:20:d1:b0: 8d:06:97:5a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUZW58bZ50/KbN5+XQLoX2huz6vUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjRGRkY0QkY2N0I1QjNFRjlEQzY1NDU4NDJDMTE4RDc1 RjYwNDJEODAeFw0yNTEyMjQwMjE4MTBaFw0yNTEyMjcwNzI0MTBaMDMxMTAvBgNV BAMTKEJDQkQyNzI3RTdBQjI2NzIwMTU0Rjg4ODYzNEE0M0E3MzNFNTZBOEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSnYD8WDo6Eb9MBoOrxjstFUkl TWW9BryHZmpno91ZXz1Nk6sFnRYKU3nxk9TabAnQDQscCvBiSfZjxmljJ2uGR9vc OtBnHty8q2QRBhmBy2Qb5Y2PWRLxTBOALNrI6oc75F1hFAy8E4SOr8CpHJNRUJa0 tS2ozEMd8V8rqU90wWngoSSHgSg7mQG3aUrSHxzBDSs9aBB5Ll2OEEc2jUMRSJQf tZy07OOPpSUnjguF4LloWF6Y9D/Q7gYBkGWBzPX8mxiAJz7X6pM3go34AtgEdNEy 0rkg0oJvGtqttf1lizWElCmvnqsjGK+La6bqBd4fAh0bUnb3inQWGjlvdwEbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvL0nJ+erJnIBVPiIY0pDpzPlaoswHwYDVR0j BBgwFoAUZP/0v2e1s++dxlRYQsEY119gQtgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YjMxM2QxNy01YjliLTRkMjMtOTQyNC03NDU3OTUwOGJhNTQvMC82NEZGRjRCRjY3 QjVCM0VGOURDNjU0NTg0MkMxMThENzVGNjA0MkQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjRGRkY0QkY2N0I1QjNFRjlEQzY1NDU4NDJDMTE4RDc1RjYw NDJEOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWIzMTNkMTctNWI5Yi00ZDIzLTk0 MjQtNzQ1Nzk1MDhiYTU0LzAvNjRGRkY0QkY2N0I1QjNFRjlEQzY1NDU4NDJDMTE4 RDc1RjYwNDJEOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB8IQsUzxsA77+mu1u6mvZn3Nij24MxDXLAm dwmsb1VXqx06bJBiJ2MilJrHcyrC5Odzk+qbUfLUIr7uS96mRgO+tmEvAseh/OhF E26mIWt5E34ypAIOmzxY8KC1N51HAMd2i8Z3sWUFFtChaa6IZQXs+WyB1FP26CgF r4CqFL6n32dm/sXJ5nvOidbrt1DSDpRZoyXc4c6gOZ/kDwH+ErSv82Oz9udF4dN+ PV1DWwK6Z9uqARAmyZkLRGPoeIxW2GblcWTmdV/0KmyWED7pRvCyiwPqEidhLzBP 6j5ZY8eiN4mVlhZVol7ILXtmDupCG+evhQhlEYKb0SDRsI0Gl1o= -----END CERTIFICATE-----Generated at Wed Dec 24 22:08:17 2025 by rpki-client