This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/2d3ed012-afdb-42fb-971a-e162a9dec46d/0/64848BA7A76415C6458AAC267B0A57658022C3C5.mft File: 64848BA7A76415C6458AAC267B0A57658022C3C5.mft (raw, json) Hash identifier: ohNLEFnDpU/hw4a4O/N/tR0v7y584OYYFEEh0uLMIxY= Subject key identifier: 33:C6:A6:DB:1B:C5:1A:97:9D:D8:A4:55:D3:26:7C:F2:B4:54:C8:27 Authority key identifier: 64:84:8B:A7:A7:64:15:C6:45:8A:AC:26:7B:0A:57:65:80:22:C3:C5 Certificate issuer: /CN=64848BA7A76415C6458AAC267B0A57658022C3C5 Certificate serial: 203BEE4B88D5693CE5D83D4202510EAEDF319DEF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64848BA7A76415C6458AAC267B0A57658022C3C5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2d3ed012-afdb-42fb-971a-e162a9dec46d/0/64848BA7A76415C6458AAC267B0A57658022C3C5.mft Manifest number: 0291 Signing time: Sat 06 Dec 2025 13:32:18 +0000 Manifest this update: Sat 06 Dec 2025 13:27:18 +0000 Manifest next update: Tue 09 Dec 2025 18:27:18 +0000 Files and hashes: 1: 3130332e3137392e36382e302f32342d3234203d3e20313439333337.roa (hash: 3XMqr1SbGGTOsdpLnGk2+GvSMvPb+++c1PWx8+UbJng=) 2: 64848BA7A76415C6458AAC267B0A57658022C3C5.crl (hash: 0LZGAhD14/qbCz6qCjo2+8efr7euS/G4LR7EK2AaIhM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2d3ed012-afdb-42fb-971a-e162a9dec46d/0/64848BA7A76415C6458AAC267B0A57658022C3C5.crl rsync://repo-rpki.idnic.net/repo/2d3ed012-afdb-42fb-971a-e162a9dec46d/0/64848BA7A76415C6458AAC267B0A57658022C3C5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64848BA7A76415C6458AAC267B0A57658022C3C5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:3b:ee:4b:88:d5:69:3c:e5:d8:3d:42:02:51:0e:ae:df:31:9d:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64848BA7A76415C6458AAC267B0A57658022C3C5 Validity Not Before: Dec 6 13:27:18 2025 GMT Not After : Dec 9 18:27:18 2025 GMT Subject: CN=33C6A6DB1BC51A979DD8A455D3267CF2B454C827 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:9d:75:2d:c8:fe:1a:35:a2:90:6d:ce:4a:56: 67:c5:16:35:2d:88:5d:92:e8:fd:16:eb:cd:88:f3: c3:8d:6a:67:44:0e:52:e6:e9:85:94:9c:2e:ba:81: de:24:aa:f3:a4:6f:2e:43:48:a8:07:6a:85:9b:e9: a6:57:e4:82:c6:ee:8b:1f:98:97:9c:08:c3:3c:43: 5e:3d:4c:ed:ca:06:6a:98:9a:c5:cd:4f:7a:cb:69: be:11:89:f9:fd:ec:4f:77:c5:7e:b4:28:85:10:e3: a8:5e:37:83:9f:80:21:bf:10:7e:95:50:27:fc:78: a3:64:1e:9c:1a:d0:36:5b:39:a5:47:14:95:c3:a6: 7d:7b:1e:f1:4a:34:18:b3:2a:53:9c:77:ef:7f:d2: e2:6a:a6:53:78:ca:fb:8c:28:27:f9:0a:32:c0:fa: bd:be:a4:f4:f1:55:a3:b8:b1:bd:20:a4:f9:cf:66: b3:82:44:06:9f:e6:6b:07:e7:2f:78:53:54:81:a7: db:39:b0:66:2f:5d:7e:97:7d:10:9c:d0:2d:9b:96: a9:e3:8a:32:02:7b:7f:45:dc:35:e8:79:9d:83:3e: 57:4f:af:c1:dd:1d:05:83:02:50:25:e9:d6:e0:75: 95:9d:a7:cd:c7:e2:49:03:dd:13:60:0c:f3:f0:2f: a1:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:C6:A6:DB:1B:C5:1A:97:9D:D8:A4:55:D3:26:7C:F2:B4:54:C8:27 X509v3 Authority Key Identifier: keyid:64:84:8B:A7:A7:64:15:C6:45:8A:AC:26:7B:0A:57:65:80:22:C3:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2d3ed012-afdb-42fb-971a-e162a9dec46d/0/64848BA7A76415C6458AAC267B0A57658022C3C5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64848BA7A76415C6458AAC267B0A57658022C3C5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2d3ed012-afdb-42fb-971a-e162a9dec46d/0/64848BA7A76415C6458AAC267B0A57658022C3C5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:8a:2e:02:06:66:ba:8d:47:e7:9e:30:3d:59:e8:8b:6b:df: 50:90:20:33:bf:c8:36:17:f9:16:d1:e6:c4:3a:b4:76:3e:0c: e4:73:3e:74:33:9d:36:9a:06:1b:eb:94:a9:99:64:ee:c9:2b: be:40:f1:c9:1e:28:86:9a:a0:a8:bd:c1:17:28:7a:65:90:3e: b0:0f:b9:c1:2b:dc:00:a9:cf:03:10:0e:3b:ed:6d:c3:de:a6: c1:ad:6a:ba:55:51:03:60:3c:da:58:e8:63:df:82:24:21:8f: 35:84:1f:88:f8:b3:53:f1:5f:ed:a4:54:55:26:74:f2:77:e6: 2c:08:77:d3:42:41:74:c0:e1:7a:24:71:7f:e8:c3:27:48:3d: 10:9c:42:a0:0e:35:b1:86:aa:51:55:48:a6:fe:9b:98:45:e8: d1:ff:b1:07:0f:9c:bb:5a:1d:ff:a6:93:61:a0:85:2e:59:7d: 12:da:30:84:03:68:58:23:cf:4b:90:46:51:7f:d0:fa:0d:c3: dd:13:02:de:08:bf:d0:97:a8:46:10:97:e3:da:57:56:4d:18: fc:f3:6b:6b:f6:69:9a:49:22:4b:f7:d9:50:f1:b8:82:2f:94: 32:a4:bf:6d:82:af:f1:00:0c:ab:69:e3:46:7f:d1:72:36:bc: f2:f2:09:0e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIDvuS4jVaTzl2D1CAlEOrt8xne8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjQ4NDhCQTdBNzY0MTVDNjQ1OEFBQzI2N0IwQTU3NjU4 MDIyQzNDNTAeFw0yNTEyMDYxMzI3MThaFw0yNTEyMDkxODI3MThaMDMxMTAvBgNV BAMTKDMzQzZBNkRCMUJDNTFBOTc5REQ4QTQ1NUQzMjY3Q0YyQjQ1NEM4MjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnnXUtyP4aNaKQbc5KVmfFFjUt iF2S6P0W682I88ONamdEDlLm6YWUnC66gd4kqvOkby5DSKgHaoWb6aZX5ILG7osf mJecCMM8Q149TO3KBmqYmsXNT3rLab4Rifn97E93xX60KIUQ46heN4OfgCG/EH6V UCf8eKNkHpwa0DZbOaVHFJXDpn17HvFKNBizKlOcd+9/0uJqplN4yvuMKCf5CjLA +r2+pPTxVaO4sb0gpPnPZrOCRAaf5msH5y94U1SBp9s5sGYvXX6XfRCc0C2blqnj ijICe39F3DXoeZ2DPldPr8HdHQWDAlAl6dbgdZWdp83H4kkD3RNgDPPwL6FPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUM8am2xvFGped2KRV0yZ88rRUyCcwHwYDVR0j BBgwFoAUZISLp6dkFcZFiqwmewpXZYAiw8UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZDNlZDAxMi1hZmRiLTQyZmItOTcxYS1lMTYyYTlkZWM0NmQvMC82NDg0OEJBN0E3 NjQxNUM2NDU4QUFDMjY3QjBBNTc2NTgwMjJDM0M1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjQ4NDhCQTdBNzY0MTVDNjQ1OEFBQzI2N0IwQTU3NjU4MDIy QzNDNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmQzZWQwMTItYWZkYi00MmZiLTk3 MWEtZTE2MmE5ZGVjNDZkLzAvNjQ4NDhCQTdBNzY0MTVDNjQ1OEFBQzI2N0IwQTU3 NjU4MDIyQzNDNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ+KLgIGZrqNR+eeMD1Z6Itr31CQIDO/yDYX +RbR5sQ6tHY+DORzPnQznTaaBhvrlKmZZO7JK75A8ckeKIaaoKi9wRcoemWQPrAP ucEr3ACpzwMQDjvtbcPepsGtarpVUQNgPNpY6GPfgiQhjzWEH4j4s1PxX+2kVFUm dPJ35iwId9NCQXTA4XokcX/owydIPRCcQqAONbGGqlFVSKb+m5hF6NH/sQcPnLta Hf+mk2GghS5ZfRLaMIQDaFgjz0uQRlF/0PoNw90TAt4Iv9CXqEYQl+PaV1ZNGPzz a2v2aZpJIkv32VDxuIIvlDKkv22Cr/EADKtp40Z/0XI2vPLyCQ4= -----END CERTIFICATE-----Generated at Sun Dec 7 04:34:04 2025 by rpki-client