This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/0e705927-ec64-44f5-9c9e-c9a55a523b64/0/64B46651D7B0C757E4AEDE01691F062FEEF15DB6.mft File: 64B46651D7B0C757E4AEDE01691F062FEEF15DB6.mft (raw, json) Hash identifier: QtuLjr5L52FBkBZizz1iCWAJgvkYJskNshNFXNmns/o= Subject key identifier: B7:04:E1:4D:99:18:A0:79:06:89:03:22:49:8C:68:7E:16:9A:E7:36 Authority key identifier: 64:B4:66:51:D7:B0:C7:57:E4:AE:DE:01:69:1F:06:2F:EE:F1:5D:B6 Certificate issuer: /CN=64B46651D7B0C757E4AEDE01691F062FEEF15DB6 Certificate serial: 2F91D4A7FD927458B97255589607A839A35C42A7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64B46651D7B0C757E4AEDE01691F062FEEF15DB6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0e705927-ec64-44f5-9c9e-c9a55a523b64/0/64B46651D7B0C757E4AEDE01691F062FEEF15DB6.mft Manifest number: 022B Signing time: Sat 06 Dec 2025 15:51:38 +0000 Manifest this update: Sat 06 Dec 2025 15:46:38 +0000 Manifest next update: Tue 09 Dec 2025 22:29:38 +0000 Files and hashes: 1: 3130332e3135382e3230382e302f32342d3234203d3e20313431313436.roa (hash: Mc8Ea5+5WJ6GF7G0KNR6Ybiy7ufabhA8F83CYeyA+z0=) 2: 3130332e3135382e3230382e302f32332d3234203d3e20313431313436.roa (hash: fQYP6KBmK43mZ1BOpBi0K6IbkEvJhG31/o2xXC40uG8=) 3: 64B46651D7B0C757E4AEDE01691F062FEEF15DB6.crl (hash: EfxWg12CLNp1S8ftMwKrVgBMdlf1F7agw7bgLzWWsPE=) 4: 3130332e3135382e3230392e302f32342d3234203d3e20313431313436.roa (hash: cu+gkkkTCuwJj0tPWyI4oDjIIQe1JqfFTuFCDD6tSKw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0e705927-ec64-44f5-9c9e-c9a55a523b64/0/64B46651D7B0C757E4AEDE01691F062FEEF15DB6.crl rsync://repo-rpki.idnic.net/repo/0e705927-ec64-44f5-9c9e-c9a55a523b64/0/64B46651D7B0C757E4AEDE01691F062FEEF15DB6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64B46651D7B0C757E4AEDE01691F062FEEF15DB6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:91:d4:a7:fd:92:74:58:b9:72:55:58:96:07:a8:39:a3:5c:42:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64B46651D7B0C757E4AEDE01691F062FEEF15DB6 Validity Not Before: Dec 6 15:46:38 2025 GMT Not After : Dec 9 22:29:38 2025 GMT Subject: CN=B704E14D9918A07906890322498C687E169AE736 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:d4:89:c6:8e:1f:dc:5a:da:30:cf:81:6c:af: f8:2a:c5:d1:17:1b:24:04:77:ac:b2:71:7f:ae:a7: 03:78:86:71:3f:0c:fe:df:d7:c5:ec:63:1d:b4:6f: a0:1d:b8:fd:6e:7b:d4:16:42:91:2f:ff:e3:67:06: 5e:6b:34:3c:48:ed:a4:e3:6a:f8:4f:b2:10:ae:90: 98:47:03:71:9c:cb:de:9f:99:35:7e:7d:65:96:7f: 7f:7b:36:49:c7:86:6e:0d:60:9c:3c:b6:91:1d:71: 93:f9:13:c7:8b:1b:f8:b4:c2:3f:4b:a9:e4:41:7f: 0b:44:da:36:04:8f:a7:23:a6:15:67:02:b5:10:40: 7a:50:01:3e:a9:7e:57:b8:5d:b5:02:1a:3f:2c:57: 89:15:43:09:a9:b1:7b:63:6d:36:b2:6a:2b:f4:e2: 65:0b:f9:64:c9:a4:a6:e2:88:e7:aa:e1:05:e5:b6: 6f:c1:b0:67:a9:6a:d4:5c:ac:4d:86:75:b9:c3:d4: ef:9c:2c:87:b5:58:00:2d:39:c2:66:ed:2d:cd:46: 3c:3b:3d:39:3b:57:13:b9:f9:8d:9c:0f:5d:4a:77: 99:11:19:74:6d:fe:ee:18:0e:cd:13:f9:7f:9d:67: bc:78:6c:55:76:ca:64:02:83:8c:e7:7e:ea:41:0a: 5c:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:04:E1:4D:99:18:A0:79:06:89:03:22:49:8C:68:7E:16:9A:E7:36 X509v3 Authority Key Identifier: keyid:64:B4:66:51:D7:B0:C7:57:E4:AE:DE:01:69:1F:06:2F:EE:F1:5D:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0e705927-ec64-44f5-9c9e-c9a55a523b64/0/64B46651D7B0C757E4AEDE01691F062FEEF15DB6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64B46651D7B0C757E4AEDE01691F062FEEF15DB6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0e705927-ec64-44f5-9c9e-c9a55a523b64/0/64B46651D7B0C757E4AEDE01691F062FEEF15DB6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:35:b5:ca:ed:0e:5d:3f:c0:59:67:53:c3:f2:99:10:56:39: 14:10:41:28:ef:f0:d9:e2:fd:31:3a:0a:4d:05:1e:7d:05:b8: 03:bc:fb:f3:a7:42:bc:f4:94:a1:03:c5:bb:b9:1c:e7:9e:d5: 48:b5:c6:55:87:4a:50:cf:a9:d2:5d:d0:ff:b9:38:59:21:9d: 6e:d8:3e:f3:35:e5:e5:5a:75:15:ea:e3:cf:c1:e1:a2:4e:77: 18:2b:1c:cc:ee:a4:38:4d:ed:83:e9:40:27:52:81:63:bf:3c: 72:87:3c:60:10:dd:d6:1b:eb:5d:e9:08:2e:a3:3f:20:a4:66: 44:3b:9b:da:45:e3:17:d2:be:62:80:8d:17:fb:99:4f:17:80: 55:0b:4d:0f:3d:34:49:63:8c:39:e7:36:65:86:ba:b4:eb:3a: cb:75:df:58:42:d9:37:44:c0:b8:35:7e:b2:a7:8d:e9:38:b9: 9d:62:5a:49:4d:ab:c9:36:be:87:f3:37:96:94:13:3b:90:ee: 57:a9:ee:bb:10:64:25:10:bb:24:6f:05:37:fc:d5:44:c3:b4: f4:6e:c7:c3:93:6c:84:22:b1:e8:ac:05:b2:bc:2b:84:b1:07: 09:ca:17:31:1e:7f:a3:e2:6c:3c:1b:a3:20:56:4e:e8:b9:cb: 26:72:a1:68 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL5HUp/2SdFi5clVYlgeoOaNcQqcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjRCNDY2NTFEN0IwQzc1N0U0QUVERTAxNjkxRjA2MkZF RUYxNURCNjAeFw0yNTEyMDYxNTQ2MzhaFw0yNTEyMDkyMjI5MzhaMDMxMTAvBgNV BAMTKEI3MDRFMTREOTkxOEEwNzkwNjg5MDMyMjQ5OEM2ODdFMTY5QUU3MzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF1InGjh/cWtowz4Fsr/gqxdEX GyQEd6yycX+upwN4hnE/DP7f18XsYx20b6AduP1ue9QWQpEv/+NnBl5rNDxI7aTj avhPshCukJhHA3Gcy96fmTV+fWWWf397NknHhm4NYJw8tpEdcZP5E8eLG/i0wj9L qeRBfwtE2jYEj6cjphVnArUQQHpQAT6pfle4XbUCGj8sV4kVQwmpsXtjbTayaiv0 4mUL+WTJpKbiiOeq4QXltm/BsGepatRcrE2GdbnD1O+cLIe1WAAtOcJm7S3NRjw7 PTk7VxO5+Y2cD11Kd5kRGXRt/u4YDs0T+X+dZ7x4bFV2ymQCg4znfupBClwbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtwThTZkYoHkGiQMiSYxofhaa5zYwHwYDVR0j BBgwFoAUZLRmUdewx1fkrt4BaR8GL+7xXbYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZTcwNTkyNy1lYzY0LTQ0ZjUtOWM5ZS1jOWE1NWE1MjNiNjQvMC82NEI0NjY1MUQ3 QjBDNzU3RTRBRURFMDE2OTFGMDYyRkVFRjE1REI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjRCNDY2NTFEN0IwQzc1N0U0QUVERTAxNjkxRjA2MkZFRUYx NURCNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGU3MDU5MjctZWM2NC00NGY1LTlj OWUtYzlhNTVhNTIzYjY0LzAvNjRCNDY2NTFEN0IwQzc1N0U0QUVERTAxNjkxRjA2 MkZFRUYxNURCNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFQ1tcrtDl0/wFlnU8PymRBWORQQQSjv8Nni /TE6Ck0FHn0FuAO8+/OnQrz0lKEDxbu5HOee1Ui1xlWHSlDPqdJd0P+5OFkhnW7Y PvM15eVadRXq48/B4aJOdxgrHMzupDhN7YPpQCdSgWO/PHKHPGAQ3dYb613pCC6j PyCkZkQ7m9pF4xfSvmKAjRf7mU8XgFULTQ89NEljjDnnNmWGurTrOst131hC2TdE wLg1frKnjek4uZ1iWklNq8k2vofzN5aUEzuQ7lep7rsQZCUQuyRvBTf81UTDtPRu x8OTbIQiseisBbK8K4SxBwnKFzEef6PibDwboyBWTui5yyZyoWg= -----END CERTIFICATE-----Generated at Sun Dec 7 00:49:13 2025 by rpki-client