This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a262d341-94b5-474e-8bcd-d17988f099b3/0/64B2DB7703C5C56A6F69C4789AB9F69214F22695.mft File: 64B2DB7703C5C56A6F69C4789AB9F69214F22695.mft (raw, json) Hash identifier: QPOh21Lad8X73SLRPwD81wgAYP9NgV+2yelsdDgSWSs= Subject key identifier: 09:45:E3:C6:82:2E:8E:A6:99:1D:E3:3D:45:07:F5:0A:B2:AD:E9:EF Authority key identifier: 64:B2:DB:77:03:C5:C5:6A:6F:69:C4:78:9A:B9:F6:92:14:F2:26:95 Certificate issuer: /CN=64B2DB7703C5C56A6F69C4789AB9F69214F22695 Certificate serial: 75846A0AAE2B5F904DE184B63A69A2615051D407 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64B2DB7703C5C56A6F69C4789AB9F69214F22695.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a262d341-94b5-474e-8bcd-d17988f099b3/0/64B2DB7703C5C56A6F69C4789AB9F69214F22695.mft Manifest number: 01A2 Signing time: Thu 04 Dec 2025 18:21:09 +0000 Manifest this update: Thu 04 Dec 2025 18:16:09 +0000 Manifest next update: Sun 07 Dec 2025 22:08:09 +0000 Files and hashes: 1: 64B2DB7703C5C56A6F69C4789AB9F69214F22695.crl (hash: fGv+vF8d3r1z6HaQoJAv7RB2PdBrhVbmBiSUCpSspck=) 2: 3130332e3131372e35382e302f32332d3234203d3e20313530393534.roa (hash: PRtjDQLWn7DOhqpJ6ZyrW9FMpW7szF9MrVItEP9hNn4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a262d341-94b5-474e-8bcd-d17988f099b3/0/64B2DB7703C5C56A6F69C4789AB9F69214F22695.crl rsync://repo-rpki.idnic.net/repo/a262d341-94b5-474e-8bcd-d17988f099b3/0/64B2DB7703C5C56A6F69C4789AB9F69214F22695.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64B2DB7703C5C56A6F69C4789AB9F69214F22695.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Dec 2025 22:08:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:84:6a:0a:ae:2b:5f:90:4d:e1:84:b6:3a:69:a2:61:50:51:d4:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64B2DB7703C5C56A6F69C4789AB9F69214F22695 Validity Not Before: Dec 4 18:16:09 2025 GMT Not After : Dec 7 22:08:09 2025 GMT Subject: CN=0945E3C6822E8EA6991DE33D4507F50AB2ADE9EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:8d:0f:96:22:b3:38:40:c6:38:83:8e:ed:70: 5b:2c:85:79:f3:b4:1c:cd:65:f7:0a:c7:01:ee:0f: ca:8a:d7:26:0a:a1:ed:14:5d:0e:60:e7:2b:a9:d6: 94:bf:82:55:9e:a7:0e:d0:c3:42:e8:d1:fe:ec:56: a9:f4:92:2d:e9:14:29:a8:50:b0:18:0a:df:76:b1: 80:f4:1d:71:1c:71:93:e3:58:66:06:6d:3f:c3:34: a7:5f:24:e5:4b:ed:3b:a0:e7:ae:41:21:ea:e7:38: 77:95:60:e5:1e:ce:aa:7d:2d:82:dd:b7:f1:b5:2d: 83:01:03:bd:6f:fb:dc:d7:fb:c5:fc:7e:3b:b6:2f: ee:2d:2a:56:ae:cd:15:85:b8:b7:89:8d:de:c5:88: 67:0d:fb:b7:28:9e:fb:c5:8f:da:21:7c:13:2f:5d: 8d:f2:94:20:eb:cf:55:25:75:a8:5e:df:6f:c6:2a: 81:22:a7:73:ee:61:e0:52:24:13:7b:e9:9b:1d:50: 4e:1b:0a:f5:67:10:eb:cf:3f:2b:4b:c2:d0:0f:c6: 19:61:c3:c0:b9:23:a3:a6:c8:a1:74:47:9d:ee:57: ee:00:94:b3:2f:e2:3e:f9:6c:66:f2:f2:05:ac:9c: 87:9b:f1:e4:4b:d1:45:1e:fd:c2:30:14:e1:1f:18: de:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:45:E3:C6:82:2E:8E:A6:99:1D:E3:3D:45:07:F5:0A:B2:AD:E9:EF X509v3 Authority Key Identifier: keyid:64:B2:DB:77:03:C5:C5:6A:6F:69:C4:78:9A:B9:F6:92:14:F2:26:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a262d341-94b5-474e-8bcd-d17988f099b3/0/64B2DB7703C5C56A6F69C4789AB9F69214F22695.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64B2DB7703C5C56A6F69C4789AB9F69214F22695.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a262d341-94b5-474e-8bcd-d17988f099b3/0/64B2DB7703C5C56A6F69C4789AB9F69214F22695.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:fb:ed:70:c5:fa:81:0f:a3:8e:37:5e:4a:d7:9f:95:10:5b: ef:67:41:d9:ec:41:34:f6:6b:98:a4:ca:6b:91:04:c9:3f:72: 44:5b:34:5c:eb:05:09:2d:81:ea:b0:c6:c3:c4:05:41:27:01: 6a:90:2f:a5:82:3a:ab:a0:4e:36:b4:ef:40:3f:dc:d2:99:96: e0:6e:28:3e:01:af:22:62:52:6b:07:ca:fe:a9:20:b3:08:d8: 8e:9a:37:0f:5f:ab:08:e6:76:bc:ee:10:92:48:df:b0:fd:e3: 0b:9e:86:7a:a8:fd:34:d7:e3:af:ea:73:e6:15:e9:79:ba:b5: d0:03:6f:b0:38:20:09:a8:5d:e9:01:cc:eb:5c:7b:82:10:01: 62:e8:24:8d:75:0a:5a:bd:42:dc:be:11:34:f2:f0:42:2c:5d: 8d:05:0c:99:e0:a0:6c:d7:28:72:e3:63:c9:6b:57:60:31:18: 7b:ce:79:07:f9:d4:1e:8d:92:ac:34:46:bd:e2:99:1f:07:84: 3f:cc:ae:aa:d1:61:59:18:3a:30:be:0b:55:75:ac:08:57:53: 35:2b:71:ec:65:0a:a4:42:94:32:e0:ef:b6:0a:8b:97:bf:5a: df:44:d1:ea:51:a4:b9:a1:6e:48:d3:61:7d:0f:8a:5a:ff:6a: 88:9b:95:1c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdYRqCq4rX5BN4YS2OmmiYVBR1AcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjRCMkRCNzcwM0M1QzU2QTZGNjlDNDc4OUFCOUY2OTIx NEYyMjY5NTAeFw0yNTEyMDQxODE2MDlaFw0yNTEyMDcyMjA4MDlaMDMxMTAvBgNV BAMTKDA5NDVFM0M2ODIyRThFQTY5OTFERTMzRDQ1MDdGNTBBQjJBREU5RUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkjQ+WIrM4QMY4g47tcFsshXnz tBzNZfcKxwHuD8qK1yYKoe0UXQ5g5yup1pS/glWepw7Qw0Lo0f7sVqn0ki3pFCmo ULAYCt92sYD0HXEccZPjWGYGbT/DNKdfJOVL7Tug565BIernOHeVYOUezqp9LYLd t/G1LYMBA71v+9zX+8X8fju2L+4tKlauzRWFuLeJjd7FiGcN+7convvFj9ohfBMv XY3ylCDrz1Uldahe32/GKoEip3PuYeBSJBN76ZsdUE4bCvVnEOvPPytLwtAPxhlh w8C5I6OmyKF0R53uV+4AlLMv4j75bGby8gWsnIeb8eRL0UUe/cIwFOEfGN7bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCUXjxoIujqaZHeM9RQf1CrKt6e8wHwYDVR0j BBgwFoAUZLLbdwPFxWpvacR4mrn2khTyJpUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MjYyZDM0MS05NGI1LTQ3NGUtOGJjZC1kMTc5ODhmMDk5YjMvMC82NEIyREI3NzAz QzVDNTZBNkY2OUM0Nzg5QUI5RjY5MjE0RjIyNjk1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjRCMkRCNzcwM0M1QzU2QTZGNjlDNDc4OUFCOUY2OTIxNEYy MjY5NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTI2MmQzNDEtOTRiNS00NzRlLThi Y2QtZDE3OTg4ZjA5OWIzLzAvNjRCMkRCNzcwM0M1QzU2QTZGNjlDNDc4OUFCOUY2 OTIxNEYyMjY5NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEb77XDF+oEPo443XkrXn5UQW+9nQdnsQTT2 a5ikymuRBMk/ckRbNFzrBQktgeqwxsPEBUEnAWqQL6WCOqugTja070A/3NKZluBu KD4BryJiUmsHyv6pILMI2I6aNw9fqwjmdrzuEJJI37D94wuehnqo/TTX46/qc+YV 6Xm6tdADb7A4IAmoXekBzOtce4IQAWLoJI11Clq9Qty+ETTy8EIsXY0FDJngoGzX KHLjY8lrV2AxGHvOeQf51B6Nkqw0Rr3imR8HhD/MrqrRYVkYOjC+C1V1rAhXUzUr cexlCqRClDLg77YKi5e/Wt9E0epRpLmhbkjTYX0Pilr/aoiblRw= -----END CERTIFICATE-----Generated at Sat Dec 6 23:50:38 2025 by rpki-client