This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/1/1E64BF65051052D913D7DB8C4512F615E3FAB9B2.mft
File: 1E64BF65051052D913D7DB8C4512F615E3FAB9B2.mft (raw, json)
Hash identifier: JKrVJ62xgIbWeA2kKa1lU1sSuNOziB43FskZJj+tpFU=
Subject key identifier: E3:F1:46:BD:B2:19:B5:AB:C0:9C:C3:CE:3A:C4:10:FD:86:C8:9A:04
Authority key identifier: 1E:64:BF:65:05:10:52:D9:13:D7:DB:8C:45:12:F6:15:E3:FA:B9:B2
Certificate issuer: /CN=1E64BF65051052D913D7DB8C4512F615E3FAB9B2
Certificate serial: 41D8A1F74CABE87861D240ED6D3053F70A415667
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1E64BF65051052D913D7DB8C4512F615E3FAB9B2.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/1/1E64BF65051052D913D7DB8C4512F615E3FAB9B2.mft
Manifest number: F9
Signing time: Thu 18 Dec 2025 20:51:12 +0000
Manifest this update: Thu 18 Dec 2025 20:46:12 +0000
Manifest next update: Sun 21 Dec 2025 21:25:12 +0000
Files and hashes: 1: 1E64BF65051052D913D7DB8C4512F615E3FAB9B2.crl (hash: vGwVPBti8A4n+1iTX7sgbPhTQaX9PHzHY5hNZegmPxQ=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/1/1E64BF65051052D913D7DB8C4512F615E3FAB9B2.crl
rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/1/1E64BF65051052D913D7DB8C4512F615E3FAB9B2.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1E64BF65051052D913D7DB8C4512F615E3FAB9B2.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 21 Dec 2025 21:25:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:d8:a1:f7:4c:ab:e8:78:61:d2:40:ed:6d:30:53:f7:0a:41:56:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1E64BF65051052D913D7DB8C4512F615E3FAB9B2
Validity
Not Before: Dec 18 20:46:12 2025 GMT
Not After : Dec 21 21:25:12 2025 GMT
Subject: CN=E3F146BDB219B5ABC09CC3CE3AC410FD86C89A04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:4c:c8:77:20:40:ee:2c:70:67:2c:16:2a:0c:
3e:8a:58:2c:ec:8b:a0:3b:30:c5:14:55:2c:a7:38:
a4:ee:90:57:ed:b0:c7:db:cb:3f:56:7d:59:8a:04:
0b:24:13:d9:60:a6:e1:03:ae:63:20:c4:9d:31:cf:
af:cd:a6:aa:02:29:c9:1f:47:29:28:6d:5e:4c:d9:
0f:41:c2:dd:6b:60:19:88:72:c5:54:fd:73:ae:6b:
7d:92:a0:fe:f8:8a:38:c3:42:f4:69:ca:45:cc:fc:
ca:4f:d1:10:01:3c:4b:37:85:83:76:9e:55:dd:48:
c9:52:0c:57:14:25:58:79:af:e9:8f:1d:90:cb:c7:
4f:1d:2d:fb:4b:29:8e:e4:80:52:2c:f4:f9:ec:c0:
01:87:a2:92:24:09:74:59:14:db:e2:cc:35:83:e4:
ae:ed:f1:fd:a4:ec:ce:a9:2e:46:4f:6b:0a:14:9f:
37:7e:6d:e1:83:43:c7:3f:fe:6b:68:e5:1d:1b:f6:
e2:ab:fa:51:e9:f8:76:9e:95:5b:65:6f:c6:bf:df:
2f:77:0e:b9:7a:eb:84:e0:14:21:a0:e6:22:42:16:
d4:e5:14:10:3d:00:e8:ba:7d:8b:c5:08:e8:8e:83:
38:62:ee:d1:70:32:1c:6d:cc:7d:e6:d7:b6:35:47:
c3:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:F1:46:BD:B2:19:B5:AB:C0:9C:C3:CE:3A:C4:10:FD:86:C8:9A:04
X509v3 Authority Key Identifier:
keyid:1E:64:BF:65:05:10:52:D9:13:D7:DB:8C:45:12:F6:15:E3:FA:B9:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/1/1E64BF65051052D913D7DB8C4512F615E3FAB9B2.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1E64BF65051052D913D7DB8C4512F615E3FAB9B2.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/1/1E64BF65051052D913D7DB8C4512F615E3FAB9B2.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d8:2b:8e:6d:1d:ba:70:b5:17:ab:cd:ba:60:ed:ca:13:50:07:
ff:ff:94:c8:85:42:e9:f7:9a:95:3a:dd:0c:85:dc:65:f0:d9:
cc:a8:12:a2:a6:58:4a:f1:5d:9c:c6:16:14:bf:54:e3:43:38:
86:ed:12:d0:52:ca:90:92:d0:b5:5d:e6:77:30:fa:e4:fe:64:
64:54:96:97:4b:60:ce:54:5b:84:b0:72:51:ec:55:6a:e6:65:
c9:3c:fe:a6:0a:80:f9:85:6b:df:19:21:96:e6:d6:00:c2:c2:
7c:87:ce:59:b3:c1:2e:0e:55:ac:ea:cf:12:f6:97:55:a2:67:
12:4b:13:4a:c6:4f:ca:4d:ca:7e:4c:ac:a8:0d:c1:28:99:43:
7b:ae:54:36:8a:42:d6:e7:40:c0:13:b7:7f:e5:2a:27:d1:a1:
c5:05:6e:79:87:fd:cc:ca:de:c6:2f:26:5c:cc:b5:ce:6c:9e:
a0:09:d0:76:da:6c:32:8a:a7:56:00:57:7e:cf:9f:fd:b7:f7:
ba:88:5d:95:cc:50:bf:d7:f0:1f:15:c5:e0:32:b8:ed:c5:4c:
4b:a0:a6:39:40:ba:4a:df:59:94:fd:7c:7b:f0:b0:62:1c:93:
b1:da:11:60:1d:a7:fa:e8:70:8e:76:cd:5b:69:76:90:26:57:
eb:fe:8e:3d
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUQdih90yr6Hhh0kDtbTBT9wpBVmcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUU2NEJGNjUwNTEwNTJEOTEzRDdEQjhDNDUxMkY2MTVF
M0ZBQjlCMjAeFw0yNTEyMTgyMDQ2MTJaFw0yNTEyMjEyMTI1MTJaMDMxMTAvBgNV
BAMTKEUzRjE0NkJEQjIxOUI1QUJDMDlDQzNDRTNBQzQxMEZEODZDODlBMDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDyTMh3IEDuLHBnLBYqDD6KWCzs
i6A7MMUUVSynOKTukFftsMfbyz9WfVmKBAskE9lgpuEDrmMgxJ0xz6/NpqoCKckf
RykobV5M2Q9Bwt1rYBmIcsVU/XOua32SoP74ijjDQvRpykXM/MpP0RABPEs3hYN2
nlXdSMlSDFcUJVh5r+mPHZDLx08dLftLKY7kgFIs9PnswAGHopIkCXRZFNvizDWD
5K7t8f2k7M6pLkZPawoUnzd+beGDQ8c//mto5R0b9uKr+lHp+HaelVtlb8a/3y93
Drl664TgFCGg5iJCFtTlFBA9AOi6fYvFCOiOgzhi7tFwMhxtzH3m17Y1R8N9AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU4/FGvbIZtavAnMPOOsQQ/YbImgQwHwYDVR0j
BBgwFoAUHmS/ZQUQUtkT19uMRRL2FeP6ubIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
ZTE5ODgxNi01YWY5LTQ3ZWYtYjk4OS00MmYyNzMxODQ4YmUvMS8xRTY0QkY2NTA1
MTA1MkQ5MTNEN0RCOEM0NTEyRjYxNUUzRkFCOUIyLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMUU2NEJGNjUwNTEwNTJEOTEzRDdEQjhDNDUxMkY2MTVFM0ZB
QjlCMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWUxOTg4MTYtNWFmOS00N2VmLWI5
ODktNDJmMjczMTg0OGJlLzEvMUU2NEJGNjUwNTEwNTJEOTEzRDdEQjhDNDUxMkY2
MTVFM0ZBQjlCMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBANgrjm0dunC1F6vNumDtyhNQB///lMiFQun3
mpU63QyF3GXw2cyoEqKmWErxXZzGFhS/VONDOIbtEtBSypCS0LVd5ncw+uT+ZGRU
lpdLYM5UW4SwclHsVWrmZck8/qYKgPmFa98ZIZbm1gDCwnyHzlmzwS4OVazqzxL2
l1WiZxJLE0rGT8pNyn5MrKgNwSiZQ3uuVDaKQtbnQMATt3/lKifRocUFbnmH/czK
3sYvJlzMtc5snqAJ0HbabDKKp1YAV37Pn/2397qIXZXMUL/X8B8VxeAyuO3FTEug
pjlAukrfWZT9fHvwsGIck7HaEWAdp/rocI52zVtpdpAmV+v+jj0=
-----END CERTIFICATE-----
Generated at Fri Dec 19 11:19:41 2025 by rpki-client