This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/341ff3e2-76b6-4833-86b5-82f3fa4ebcb7/0/064A8F9FBD487AB04370A31B7D603B27E6674937.mft File: 064A8F9FBD487AB04370A31B7D603B27E6674937.mft (raw, json) Hash identifier: 4Eeyb+/YDxejj11aslmAj+OrOPQYUvsRugt2Nmc7010= Subject key identifier: 8D:D5:22:CE:AA:F2:4C:88:80:64:66:47:A0:34:43:03:EC:99:79:AD Authority key identifier: 06:4A:8F:9F:BD:48:7A:B0:43:70:A3:1B:7D:60:3B:27:E6:67:49:37 Certificate issuer: /CN=064A8F9FBD487AB04370A31B7D603B27E6674937 Certificate serial: 1161C26A93A5C3FE59FA66F5F0FCFA47EE62536F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/064A8F9FBD487AB04370A31B7D603B27E6674937.cer Subject info access: rsync://repo-rpki.idnic.net/repo/341ff3e2-76b6-4833-86b5-82f3fa4ebcb7/0/064A8F9FBD487AB04370A31B7D603B27E6674937.mft Manifest number: 01A2 Signing time: Fri 05 Dec 2025 17:52:11 +0000 Manifest this update: Fri 05 Dec 2025 17:47:11 +0000 Manifest next update: Mon 08 Dec 2025 23:31:11 +0000 Files and hashes: 1: 064A8F9FBD487AB04370A31B7D603B27E6674937.crl (hash: uHveXXPgvn3Q1No7Wda0ymtNfm/II/D9ZXpz+I6PiYk=) 2: 3130332e3134342e32302e302f32342d3234203d3e20313339343233.roa (hash: sFMVy7dDJJRHWvtmqbp2frseo5smPIhlhNP2pmcRkE8=) 3: 3130332e3134342e32302e302f32332d3234203d3e20313339343233.roa (hash: eS4FjrViWLyiilxg1RkpEK5h3em7xO1B2/rM7GMa+rk=) 4: 3130332e3134342e32312e302f32342d3234203d3e20313339343233.roa (hash: +C1/uvN7CYXfdE0s0cHFFQ7douw+zlPNc8mJpTG123o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/341ff3e2-76b6-4833-86b5-82f3fa4ebcb7/0/064A8F9FBD487AB04370A31B7D603B27E6674937.crl rsync://repo-rpki.idnic.net/repo/341ff3e2-76b6-4833-86b5-82f3fa4ebcb7/0/064A8F9FBD487AB04370A31B7D603B27E6674937.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/064A8F9FBD487AB04370A31B7D603B27E6674937.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 23:31:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:61:c2:6a:93:a5:c3:fe:59:fa:66:f5:f0:fc:fa:47:ee:62:53:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=064A8F9FBD487AB04370A31B7D603B27E6674937 Validity Not Before: Dec 5 17:47:11 2025 GMT Not After : Dec 8 23:31:11 2025 GMT Subject: CN=8DD522CEAAF24C8880646647A0344303EC9979AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:6c:83:f3:ab:53:c0:3d:c5:14:2a:cf:3c:0d: 07:2a:f8:35:60:b5:f0:fb:5d:3d:93:37:3a:25:1c: f9:40:7e:ea:d4:21:4a:84:7d:17:36:81:a9:f9:9f: f6:4e:3b:15:1b:f7:c2:c0:78:c8:9d:39:30:06:13: 7e:a1:13:95:5f:15:e2:4f:5b:fb:2c:16:61:55:0c: 6d:12:2b:92:6c:aa:99:a3:9c:db:a4:61:2b:62:19: fa:10:83:8c:89:0e:56:e0:59:80:4d:f5:5b:b6:0b: 1a:40:b1:97:75:e7:a4:f8:62:8b:fb:e8:fd:36:a7: 67:72:55:ca:4b:d0:13:88:a2:7e:3d:b6:ed:50:73: d6:49:36:b3:c2:53:de:79:68:7c:8f:ca:1b:f3:bf: a7:27:18:b9:be:f0:ff:c8:95:8a:d7:ef:9c:aa:a4: c6:bc:7a:5c:33:df:c1:6e:14:5d:91:a4:b4:91:11: 3d:51:c1:27:41:e8:ff:75:1c:1f:98:51:35:e3:fd: cb:c2:f9:ee:33:5c:14:4d:71:ca:3d:e5:e2:0c:5c: 67:42:ea:9c:6f:44:fa:af:6e:86:4b:97:fd:93:c7: 44:1c:a2:8c:4a:f3:80:f7:ee:ec:ad:83:97:c1:f4: d3:a2:26:55:d9:e8:e7:24:b7:9a:a5:03:ee:56:42: 31:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:D5:22:CE:AA:F2:4C:88:80:64:66:47:A0:34:43:03:EC:99:79:AD X509v3 Authority Key Identifier: keyid:06:4A:8F:9F:BD:48:7A:B0:43:70:A3:1B:7D:60:3B:27:E6:67:49:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/341ff3e2-76b6-4833-86b5-82f3fa4ebcb7/0/064A8F9FBD487AB04370A31B7D603B27E6674937.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/064A8F9FBD487AB04370A31B7D603B27E6674937.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/341ff3e2-76b6-4833-86b5-82f3fa4ebcb7/0/064A8F9FBD487AB04370A31B7D603B27E6674937.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:b4:77:47:82:39:42:14:a9:06:8a:16:c4:9a:fa:87:da:e3: 34:09:67:f0:87:1f:1b:59:92:70:c8:17:1e:7c:1b:b7:d3:a9: d6:45:11:cd:a3:7a:c5:6e:11:e9:97:9d:10:e4:9e:25:9b:b3: cb:58:ba:23:35:68:88:e6:84:3a:20:8d:c2:1b:33:76:fa:5e: 76:fe:0a:67:66:8c:5c:19:25:56:10:e2:1f:1e:6c:79:91:18: a1:e5:77:11:d0:b3:ab:11:e3:77:4c:24:8f:7a:ac:8c:76:56: d3:59:e3:73:85:20:f6:70:c5:bf:3a:db:eb:68:c9:fb:d3:4a: d3:db:cc:3a:91:05:77:93:97:bd:4a:37:9d:44:c4:5b:99:60: 82:0e:bf:fe:3f:00:32:56:6d:b7:fd:20:66:44:ef:e4:df:6e: ca:33:35:8c:81:b2:9e:d7:43:90:26:b9:9e:c7:38:f3:3c:39: 0d:5f:68:b8:5d:8b:e5:1b:f8:07:7b:3b:0a:a5:c2:8a:ed:88: a8:4f:92:02:7c:21:3b:91:98:09:84:fc:85:08:22:90:f7:34: 39:a8:7d:9d:0a:db:1f:59:e0:8d:de:6c:99:e4:c5:9f:4d:b7: dc:db:b0:0d:59:6c:72:e8:03:19:c7:47:e3:25:8e:99:f6:c6: 1b:e1:61:5b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEWHCapOlw/5Z+mb18Pz6R+5iU28wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDY0QThGOUZCRDQ4N0FCMDQzNzBBMzFCN0Q2MDNCMjdF NjY3NDkzNzAeFw0yNTEyMDUxNzQ3MTFaFw0yNTEyMDgyMzMxMTFaMDMxMTAvBgNV BAMTKDhERDUyMkNFQUFGMjRDODg4MDY0NjY0N0EwMzQ0MzAzRUM5OTc5QUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0bIPzq1PAPcUUKs88DQcq+DVg tfD7XT2TNzolHPlAfurUIUqEfRc2gan5n/ZOOxUb98LAeMidOTAGE36hE5VfFeJP W/ssFmFVDG0SK5JsqpmjnNukYStiGfoQg4yJDlbgWYBN9Vu2CxpAsZd156T4Yov7 6P02p2dyVcpL0BOIon49tu1Qc9ZJNrPCU955aHyPyhvzv6cnGLm+8P/IlYrX75yq pMa8elwz38FuFF2RpLSRET1RwSdB6P91HB+YUTXj/cvC+e4zXBRNcco95eIMXGdC 6pxvRPqvboZLl/2Tx0QcooxK84D37uytg5fB9NOiJlXZ6Ockt5qlA+5WQjG/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjdUizqryTIiAZGZHoDRDA+yZea0wHwYDVR0j BBgwFoAUBkqPn71IerBDcKMbfWA7J+ZnSTcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NDFmZjNlMi03NmI2LTQ4MzMtODZiNS04MmYzZmE0ZWJjYjcvMC8wNjRBOEY5RkJE NDg3QUIwNDM3MEEzMUI3RDYwM0IyN0U2Njc0OTM3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDY0QThGOUZCRDQ4N0FCMDQzNzBBMzFCN0Q2MDNCMjdFNjY3 NDkzNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzQxZmYzZTItNzZiNi00ODMzLTg2 YjUtODJmM2ZhNGViY2I3LzAvMDY0QThGOUZCRDQ4N0FCMDQzNzBBMzFCN0Q2MDNC MjdFNjY3NDkzNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHa0d0eCOUIUqQaKFsSa+ofa4zQJZ/CHHxtZ knDIFx58G7fTqdZFEc2jesVuEemXnRDkniWbs8tYuiM1aIjmhDogjcIbM3b6Xnb+ CmdmjFwZJVYQ4h8ebHmRGKHldxHQs6sR43dMJI96rIx2VtNZ43OFIPZwxb862+to yfvTStPbzDqRBXeTl71KN51ExFuZYIIOv/4/ADJWbbf9IGZE7+TfbsozNYyBsp7X Q5AmuZ7HOPM8OQ1faLhdi+Ub+Ad7OwqlwortiKhPkgJ8ITuRmAmE/IUIIpD3NDmo fZ0K2x9Z4I3ebJnkxZ9Nt9zbsA1ZbHLoAxnHR+Mljpn2xhvhYVs= -----END CERTIFICATE-----Generated at Sun Dec 7 01:00:14 2025 by rpki-client