This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/96750bf9-9f58-428a-8952-8b5555ef7ca7/0/E64D2B2A02A172B64A71F75C753571C841216A21.mft File: E64D2B2A02A172B64A71F75C753571C841216A21.mft (raw, json) Hash identifier: +G5CQ6uhWzITsDgVTwSBWdapp3WWp9wK2m6Zybu5kYQ= Subject key identifier: D6:4E:71:56:24:FE:77:2A:07:02:DC:97:F5:CC:83:A6:62:08:E0:91 Authority key identifier: E6:4D:2B:2A:02:A1:72:B6:4A:71:F7:5C:75:35:71:C8:41:21:6A:21 Certificate issuer: /CN=E64D2B2A02A172B64A71F75C753571C841216A21 Certificate serial: 7747CB18F01FABFD75CDB90A674B58450C04786C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E64D2B2A02A172B64A71F75C753571C841216A21.cer Subject info access: rsync://repo-rpki.idnic.net/repo/96750bf9-9f58-428a-8952-8b5555ef7ca7/0/E64D2B2A02A172B64A71F75C753571C841216A21.mft Manifest number: D6 Signing time: Sat 06 Dec 2025 04:00:52 +0000 Manifest this update: Sat 06 Dec 2025 03:55:52 +0000 Manifest next update: Tue 09 Dec 2025 14:59:52 +0000 Files and hashes: 1: 3130332e3137372e35362e302f32332d3234203d3e20313437313532.roa (hash: 3wY6YhGHW2FNk89iUabtEb3voGoMeSvrsN+5cal1TNI=) 2: E64D2B2A02A172B64A71F75C753571C841216A21.crl (hash: Uu4l4VtkBhsft6SiL1af0Y1+eBE3cHf4EQyGwfAhzbg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/96750bf9-9f58-428a-8952-8b5555ef7ca7/0/E64D2B2A02A172B64A71F75C753571C841216A21.crl rsync://repo-rpki.idnic.net/repo/96750bf9-9f58-428a-8952-8b5555ef7ca7/0/E64D2B2A02A172B64A71F75C753571C841216A21.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E64D2B2A02A172B64A71F75C753571C841216A21.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 14:59:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:47:cb:18:f0:1f:ab:fd:75:cd:b9:0a:67:4b:58:45:0c:04:78:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E64D2B2A02A172B64A71F75C753571C841216A21 Validity Not Before: Dec 6 03:55:52 2025 GMT Not After : Dec 9 14:59:52 2025 GMT Subject: CN=D64E715624FE772A0702DC97F5CC83A66208E091 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:fc:5d:53:d6:1e:2a:f8:b5:cb:05:42:39:e3: 5a:ad:6a:45:3b:77:49:de:75:99:dd:de:b9:c5:18: fc:bb:e6:03:a6:f3:ae:29:32:5d:58:e1:59:71:c2: f0:24:22:8f:45:e9:31:32:1f:1f:c4:b0:08:86:9f: a0:b8:57:c4:be:fa:f4:85:7e:da:ce:56:15:9d:a7: 4d:d6:cd:43:3f:48:ff:be:8f:18:d3:43:3b:72:29: 35:ba:10:ee:8d:3b:ba:63:61:e6:59:2f:47:ff:71: e5:79:27:88:4f:b6:bd:ee:74:2a:67:b5:7a:2d:de: d9:d6:21:4f:a8:a5:86:7c:4a:ab:44:a0:30:18:01: 80:e7:65:46:09:63:03:60:c0:ac:3e:10:46:11:78: 1f:cc:67:d6:92:c5:d2:a8:60:ca:41:37:e9:f6:c4: 80:62:38:dd:b1:8d:5b:a3:f9:68:2d:43:ee:28:a4: fa:29:42:f2:9b:f8:c2:44:70:9b:08:cc:d8:c1:36: 7d:06:c2:f4:a0:52:29:d9:f6:0f:5f:2a:f0:2e:e6: ae:0b:a1:6f:78:9c:a8:ec:6a:40:90:15:49:87:38: 82:2e:9e:a8:83:72:82:e8:9f:7e:b4:5b:47:1e:00: e6:bf:30:2e:4d:47:d9:ff:b3:b7:2f:45:b5:bd:6b: 76:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:4E:71:56:24:FE:77:2A:07:02:DC:97:F5:CC:83:A6:62:08:E0:91 X509v3 Authority Key Identifier: keyid:E6:4D:2B:2A:02:A1:72:B6:4A:71:F7:5C:75:35:71:C8:41:21:6A:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/96750bf9-9f58-428a-8952-8b5555ef7ca7/0/E64D2B2A02A172B64A71F75C753571C841216A21.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E64D2B2A02A172B64A71F75C753571C841216A21.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/96750bf9-9f58-428a-8952-8b5555ef7ca7/0/E64D2B2A02A172B64A71F75C753571C841216A21.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:ec:46:f5:8c:ad:8d:d3:d8:8f:5a:e4:4f:be:71:60:18:c8: a0:6a:6e:61:7c:ec:cf:df:d2:a2:3f:6e:c7:7a:e9:c4:bb:31: ac:91:68:4c:af:51:43:56:09:1a:08:d5:78:06:d1:e7:56:11: 55:d8:19:be:1b:0c:cc:f2:cf:b3:1d:39:49:d2:d7:27:5c:4a: de:98:41:95:ab:2c:63:16:a9:09:80:77:38:8b:be:aa:5d:c0: 5a:b2:f1:09:d2:81:48:5e:3b:df:71:e8:13:71:92:1a:fb:2b: 44:9e:45:5d:6f:4f:d4:1c:0f:a8:50:14:98:ad:11:27:52:a1: 09:d0:2d:2d:26:bf:0a:bd:60:82:aa:79:93:03:cf:9e:5a:e5: ee:70:50:71:42:97:17:26:ff:5d:c7:73:3b:3d:1e:69:43:e5: 39:38:de:7a:18:6b:eb:c6:5c:44:d5:21:55:50:6d:60:84:81: 8a:72:7f:cb:95:d7:4d:d8:33:e6:2d:79:8f:52:cd:6f:4b:f3: f2:41:03:60:bd:43:f4:06:4a:a0:85:f1:42:d4:75:8b:db:8c: fd:e5:6c:d4:5c:f5:15:df:8a:82:c0:ce:f2:93:34:74:39:ca: 77:19:0e:c9:45:0e:25:86:bb:ba:e9:bc:00:17:49:54:55:ad: 7e:51:7d:23 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUd0fLGPAfq/11zbkKZ0tYRQwEeGwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTY0RDJCMkEwMkExNzJCNjRBNzFGNzVDNzUzNTcxQzg0 MTIxNkEyMTAeFw0yNTEyMDYwMzU1NTJaFw0yNTEyMDkxNDU5NTJaMDMxMTAvBgNV BAMTKEQ2NEU3MTU2MjRGRTc3MkEwNzAyREM5N0Y1Q0M4M0E2NjIwOEUwOTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC//F1T1h4q+LXLBUI541qtakU7 d0nedZnd3rnFGPy75gOm864pMl1Y4VlxwvAkIo9F6TEyHx/EsAiGn6C4V8S++vSF ftrOVhWdp03WzUM/SP++jxjTQztyKTW6EO6NO7pjYeZZL0f/ceV5J4hPtr3udCpn tXot3tnWIU+opYZ8SqtEoDAYAYDnZUYJYwNgwKw+EEYReB/MZ9aSxdKoYMpBN+n2 xIBiON2xjVuj+WgtQ+4opPopQvKb+MJEcJsIzNjBNn0GwvSgUinZ9g9fKvAu5q4L oW94nKjsakCQFUmHOIIunqiDcoLon360W0ceAOa/MC5NR9n/s7cvRbW9a3bNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1k5xViT+dyoHAtyX9cyDpmII4JEwHwYDVR0j BBgwFoAU5k0rKgKhcrZKcfdcdTVxyEEhaiEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 Njc1MGJmOS05ZjU4LTQyOGEtODk1Mi04YjU1NTVlZjdjYTcvMC9FNjREMkIyQTAy QTE3MkI2NEE3MUY3NUM3NTM1NzFDODQxMjE2QTIxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTY0RDJCMkEwMkExNzJCNjRBNzFGNzVDNzUzNTcxQzg0MTIx NkEyMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTY3NTBiZjktOWY1OC00MjhhLTg5 NTItOGI1NTU1ZWY3Y2E3LzAvRTY0RDJCMkEwMkExNzJCNjRBNzFGNzVDNzUzNTcx Qzg0MTIxNkEyMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADTsRvWMrY3T2I9a5E++cWAYyKBqbmF87M/f 0qI/bsd66cS7MayRaEyvUUNWCRoI1XgG0edWEVXYGb4bDMzyz7MdOUnS1ydcSt6Y QZWrLGMWqQmAdziLvqpdwFqy8QnSgUheO99x6BNxkhr7K0SeRV1vT9QcD6hQFJit ESdSoQnQLS0mvwq9YIKqeZMDz55a5e5wUHFClxcm/13Hczs9HmlD5Tk43noYa+vG XETVIVVQbWCEgYpyf8uV103YM+YteY9SzW9L8/JBA2C9Q/QGSqCF8ULUdYvbjP3l bNRc9RXfioLAzvKTNHQ5yncZDslFDiWGu7rpvAAXSVRVrX5RfSM= -----END CERTIFICATE-----Generated at Sat Dec 6 22:54:28 2025 by rpki-client