This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/1/1E64BF65051052D913D7DB8C4512F615E3FAB9B2.mft File: 1E64BF65051052D913D7DB8C4512F615E3FAB9B2.mft (raw, json) Hash identifier: lv0YdrjJ5Vrhr68GkE8e5Ihv/LWaTqkCbAvWwzSmbzU= Subject key identifier: 79:EC:0A:5A:5E:FC:FE:E6:30:F1:6A:BB:0E:94:82:28:3C:BD:F2:A9 Authority key identifier: 1E:64:BF:65:05:10:52:D9:13:D7:DB:8C:45:12:F6:15:E3:FA:B9:B2 Certificate issuer: /CN=1E64BF65051052D913D7DB8C4512F615E3FAB9B2 Certificate serial: 11654678D6386CCEE3ED66E55FAF6EBE6FF9A2A3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1E64BF65051052D913D7DB8C4512F615E3FAB9B2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/1/1E64BF65051052D913D7DB8C4512F615E3FAB9B2.mft Manifest number: FB Signing time: Mon 22 Dec 2025 23:01:43 +0000 Manifest this update: Mon 22 Dec 2025 22:56:43 +0000 Manifest next update: Thu 25 Dec 2025 23:06:43 +0000 Files and hashes: 1: 1E64BF65051052D913D7DB8C4512F615E3FAB9B2.crl (hash: TAh4H5JZY8k9dsNf54V2uWdvi4HJwo2Ec7IzO0hVZVw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/1/1E64BF65051052D913D7DB8C4512F615E3FAB9B2.crl rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/1/1E64BF65051052D913D7DB8C4512F615E3FAB9B2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1E64BF65051052D913D7DB8C4512F615E3FAB9B2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 23:06:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:65:46:78:d6:38:6c:ce:e3:ed:66:e5:5f:af:6e:be:6f:f9:a2:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1E64BF65051052D913D7DB8C4512F615E3FAB9B2 Validity Not Before: Dec 22 22:56:43 2025 GMT Not After : Dec 25 23:06:43 2025 GMT Subject: CN=79EC0A5A5EFCFEE630F16ABB0E9482283CBDF2A9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:d7:42:f0:a8:80:ca:f7:d3:24:da:47:a8:cd: 6d:63:9c:88:6b:3a:c4:d2:82:68:96:16:0c:64:05: b6:55:41:24:d0:9b:80:73:24:1d:6e:d7:66:61:ed: 95:dd:12:26:b6:99:ca:8b:0a:31:7f:4f:6a:ac:78: d6:5d:c0:3e:99:a9:5d:ce:98:09:19:78:47:8f:c2: 33:2b:72:c5:7c:c1:c3:35:6e:a3:2b:e5:74:c6:3b: 87:be:9c:2c:3c:6f:38:9c:ca:6a:99:0e:97:f5:ed: 7c:44:51:39:8b:ad:0a:18:36:3c:1a:3d:5d:9a:0e: 1b:f9:33:9c:c4:1a:c5:11:58:40:4d:d5:c1:c3:c2: b5:f3:bb:cf:56:73:a7:7a:99:59:96:f5:4a:02:ab: 29:04:d6:96:25:cb:dc:d9:5d:47:c2:4d:5c:dc:f7: 74:02:c6:c9:cd:a2:95:2b:aa:f5:b0:2b:57:fc:81: 98:a7:c7:b8:f8:75:85:c9:c2:fe:70:98:40:fb:fe: ac:43:77:64:51:3d:8d:cc:47:f8:9e:45:15:10:26: 53:c9:77:0c:0c:16:a7:d9:4c:9d:04:3c:e7:9e:36: e0:72:20:f3:3a:45:6e:f5:2c:d1:ef:75:87:92:65: f3:7c:5a:c9:8c:46:70:ac:e1:4f:cc:48:61:e1:11: cc:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:EC:0A:5A:5E:FC:FE:E6:30:F1:6A:BB:0E:94:82:28:3C:BD:F2:A9 X509v3 Authority Key Identifier: keyid:1E:64:BF:65:05:10:52:D9:13:D7:DB:8C:45:12:F6:15:E3:FA:B9:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/1/1E64BF65051052D913D7DB8C4512F615E3FAB9B2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1E64BF65051052D913D7DB8C4512F615E3FAB9B2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/1/1E64BF65051052D913D7DB8C4512F615E3FAB9B2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:26:31:86:94:d3:98:2d:e3:c7:21:64:b7:2b:5b:e9:f0:9d: ba:9f:24:55:26:4c:64:c4:a8:f6:2b:3c:31:db:ee:68:13:a1: 3d:57:ea:61:0d:90:d5:ce:89:45:e2:69:e1:66:64:44:e0:a1: 9f:af:bd:62:64:c4:07:a0:3c:c4:22:ca:a3:8c:1c:76:1a:93: 14:95:27:01:d8:c0:40:8d:b0:83:11:6c:28:6e:8a:9f:7e:09: c5:cd:f5:08:42:26:41:b6:21:03:7c:b4:58:7e:a3:bf:e2:c5: 17:a9:74:89:3c:51:ba:d3:a2:71:63:5b:29:68:be:1e:9e:14: c8:08:93:c8:40:a0:eb:d1:e1:63:00:0d:6c:08:69:1d:3c:3e: f8:41:e8:9c:c9:1a:22:cb:46:42:86:f2:30:47:46:e9:47:52: 81:23:43:3d:52:02:db:81:30:dc:f1:6f:94:e2:c4:6c:b2:fc: 23:12:d6:11:92:aa:b0:11:6a:7f:2f:ca:5c:eb:10:5a:a7:7e: 34:b0:9d:f2:d7:ee:ed:a7:bc:df:cf:e0:61:c3:dc:05:27:90: 1e:ae:5b:b7:8c:1e:c0:26:56:79:15:c7:69:36:fa:88:ca:e6: 2b:dd:56:15:3d:e0:2d:3c:df:91:cf:66:c5:a9:13:37:d2:ab: 4f:ab:f9:09 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEWVGeNY4bM7j7WblX69uvm/5oqMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUU2NEJGNjUwNTEwNTJEOTEzRDdEQjhDNDUxMkY2MTVF M0ZBQjlCMjAeFw0yNTEyMjIyMjU2NDNaFw0yNTEyMjUyMzA2NDNaMDMxMTAvBgNV BAMTKDc5RUMwQTVBNUVGQ0ZFRTYzMEYxNkFCQjBFOTQ4MjI4M0NCREYyQTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC410LwqIDK99Mk2keozW1jnIhr OsTSgmiWFgxkBbZVQSTQm4BzJB1u12Zh7ZXdEia2mcqLCjF/T2qseNZdwD6ZqV3O mAkZeEePwjMrcsV8wcM1bqMr5XTGO4e+nCw8bzicymqZDpf17XxEUTmLrQoYNjwa PV2aDhv5M5zEGsURWEBN1cHDwrXzu89Wc6d6mVmW9UoCqykE1pYly9zZXUfCTVzc 93QCxsnNopUrqvWwK1f8gZinx7j4dYXJwv5wmED7/qxDd2RRPY3MR/ieRRUQJlPJ dwwMFqfZTJ0EPOeeNuByIPM6RW71LNHvdYeSZfN8WsmMRnCs4U/MSGHhEcwbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeewKWl78/uYw8Wq7DpSCKDy98qkwHwYDVR0j BBgwFoAUHmS/ZQUQUtkT19uMRRL2FeP6ubIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZTE5ODgxNi01YWY5LTQ3ZWYtYjk4OS00MmYyNzMxODQ4YmUvMS8xRTY0QkY2NTA1 MTA1MkQ5MTNEN0RCOEM0NTEyRjYxNUUzRkFCOUIyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUU2NEJGNjUwNTEwNTJEOTEzRDdEQjhDNDUxMkY2MTVFM0ZB QjlCMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWUxOTg4MTYtNWFmOS00N2VmLWI5 ODktNDJmMjczMTg0OGJlLzEvMUU2NEJGNjUwNTEwNTJEOTEzRDdEQjhDNDUxMkY2 MTVFM0ZBQjlCMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALkmMYaU05gt48chZLcrW+nwnbqfJFUmTGTE qPYrPDHb7mgToT1X6mENkNXOiUXiaeFmZETgoZ+vvWJkxAegPMQiyqOMHHYakxSV JwHYwECNsIMRbChuip9+CcXN9QhCJkG2IQN8tFh+o7/ixRepdIk8UbrTonFjWylo vh6eFMgIk8hAoOvR4WMADWwIaR08PvhB6JzJGiLLRkKG8jBHRulHUoEjQz1SAtuB MNzxb5TixGyy/CMS1hGSqrARan8vylzrEFqnfjSwnfLX7u2nvN/P4GHD3AUnkB6u W7eMHsAmVnkVx2k2+ojK5ivdVhU94C0835HPZsWpEzfSq0+r+Qk= -----END CERTIFICATE-----Generated at Wed Dec 24 16:45:00 2025 by rpki-client