This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a7099e42-2e9f-4e8a-99e8-ad50453b066f/0/64EB10DDE855CE764FFDFD8EFAE062A45060C522.mft File: 64EB10DDE855CE764FFDFD8EFAE062A45060C522.mft (raw, json) Hash identifier: 0AX0Z5RhdNnWIsXkUTid5XuhZeF9BqlarAXhX20Nr2k= Subject key identifier: 12:41:57:03:A9:41:7A:48:ED:C7:89:77:B9:6B:81:E0:E7:BA:BB:E3 Authority key identifier: 64:EB:10:DD:E8:55:CE:76:4F:FD:FD:8E:FA:E0:62:A4:50:60:C5:22 Certificate issuer: /CN=64EB10DDE855CE764FFDFD8EFAE062A45060C522 Certificate serial: 417E0F961AC0810151914D0826D3684B199EFF43 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64EB10DDE855CE764FFDFD8EFAE062A45060C522.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a7099e42-2e9f-4e8a-99e8-ad50453b066f/0/64EB10DDE855CE764FFDFD8EFAE062A45060C522.mft Manifest number: 013D Signing time: Fri 05 Dec 2025 13:01:02 +0000 Manifest this update: Fri 05 Dec 2025 12:56:02 +0000 Manifest next update: Mon 08 Dec 2025 17:10:02 +0000 Files and hashes: 1: 64EB10DDE855CE764FFDFD8EFAE062A45060C522.crl (hash: v77vMOna634DGoWamkLx5A7qu3+rC5FX6/A6b7ORKVE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a7099e42-2e9f-4e8a-99e8-ad50453b066f/0/64EB10DDE855CE764FFDFD8EFAE062A45060C522.crl rsync://repo-rpki.idnic.net/repo/a7099e42-2e9f-4e8a-99e8-ad50453b066f/0/64EB10DDE855CE764FFDFD8EFAE062A45060C522.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64EB10DDE855CE764FFDFD8EFAE062A45060C522.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 17:10:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:7e:0f:96:1a:c0:81:01:51:91:4d:08:26:d3:68:4b:19:9e:ff:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64EB10DDE855CE764FFDFD8EFAE062A45060C522 Validity Not Before: Dec 5 12:56:02 2025 GMT Not After : Dec 8 17:10:02 2025 GMT Subject: CN=12415703A9417A48EDC78977B96B81E0E7BABBE3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:45:df:90:19:b7:46:67:2b:0e:68:36:5f:d3: 92:e4:71:d3:1a:1a:1b:2d:47:f3:cf:dc:50:07:ab: d4:43:63:cb:90:ea:90:e9:e7:a7:b5:b2:ac:83:fd: 7a:f0:8f:ee:87:84:ee:08:17:06:5f:44:7e:f3:d3: 4b:f5:52:15:7b:e0:15:9a:c9:12:79:ce:6c:c9:3a: 63:45:5b:37:9e:a8:56:42:08:58:a3:6d:6e:2b:c2: 19:ca:25:18:1c:18:71:6b:57:ff:d7:22:23:0f:ee: 34:1c:eb:af:2e:d9:f6:c0:dc:7d:92:5e:b0:30:4c: aa:12:4e:f7:92:6a:42:41:19:ed:82:82:96:3d:49: 64:b6:ea:e5:94:cc:25:58:ad:8a:f3:a0:93:05:dc: f3:f0:9f:c2:ea:b1:dd:12:92:48:b4:44:7b:ad:e3: c5:7a:d0:a1:6c:58:55:c5:d7:83:e5:22:e5:89:b1: 99:0a:84:b0:5e:cf:5a:fa:43:76:d6:2d:c7:f9:50: f8:f4:64:35:ff:24:25:3a:e0:a4:ea:54:3a:82:82: fd:cd:54:0d:56:b1:ba:0d:67:ef:da:57:37:bd:8f: 45:4e:6e:e0:8e:1b:59:c5:32:b2:4c:13:9c:a6:91: ce:ec:78:13:71:ee:6f:2e:54:51:89:1d:e0:d0:d8: 9b:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:41:57:03:A9:41:7A:48:ED:C7:89:77:B9:6B:81:E0:E7:BA:BB:E3 X509v3 Authority Key Identifier: keyid:64:EB:10:DD:E8:55:CE:76:4F:FD:FD:8E:FA:E0:62:A4:50:60:C5:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a7099e42-2e9f-4e8a-99e8-ad50453b066f/0/64EB10DDE855CE764FFDFD8EFAE062A45060C522.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64EB10DDE855CE764FFDFD8EFAE062A45060C522.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a7099e42-2e9f-4e8a-99e8-ad50453b066f/0/64EB10DDE855CE764FFDFD8EFAE062A45060C522.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:54:40:2a:45:b7:49:cb:36:ff:44:cf:06:dd:95:11:a2:eb: cb:03:79:0b:57:13:ec:50:4c:81:18:8f:e3:e9:c7:d1:f6:21: ce:1a:ae:97:4c:c7:77:03:ee:c0:b0:1b:b4:be:69:02:7f:8a: 64:4e:ad:f0:cf:c5:f0:89:d8:ed:6b:97:6c:ec:39:66:7e:c5: 28:83:a4:12:e9:97:7b:c4:36:00:1b:47:87:cd:63:29:44:17: 28:1c:83:7b:49:5f:c7:f6:69:7f:d0:77:21:a6:06:be:e8:1e: de:02:6e:c3:49:09:6a:ff:6d:7b:c0:9b:43:6e:b3:5e:1d:50: 09:9b:a0:4f:24:d3:6d:7a:fb:0e:f9:dd:7a:a6:aa:4a:0f:4e: e6:d7:c8:2a:c4:02:4a:b1:f2:58:60:fb:ee:08:6c:a0:1d:d5: d2:ed:1f:83:b5:89:c8:2b:d2:e3:4f:a9:26:da:4a:8f:d5:a8: f5:50:26:f2:45:19:4b:81:55:48:c9:3b:94:fd:44:1a:3d:d7: e2:6e:b5:b1:c1:f6:32:72:20:76:90:20:5c:ac:ac:0f:41:e9: 71:5f:42:b7:c4:bf:b4:13:bb:e8:15:25:49:69:8a:4c:e7:c0: ac:68:f0:79:11:85:23:c7:93:94:57:16:48:08:e8:ce:08:fa: b6:05:82:88 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQX4PlhrAgQFRkU0IJtNoSxme/0MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjRFQjEwRERFODU1Q0U3NjRGRkRGRDhFRkFFMDYyQTQ1 MDYwQzUyMjAeFw0yNTEyMDUxMjU2MDJaFw0yNTEyMDgxNzEwMDJaMDMxMTAvBgNV BAMTKDEyNDE1NzAzQTk0MTdBNDhFREM3ODk3N0I5NkI4MUUwRTdCQUJCRTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0Rd+QGbdGZysOaDZf05LkcdMa GhstR/PP3FAHq9RDY8uQ6pDp56e1sqyD/Xrwj+6HhO4IFwZfRH7z00v1UhV74BWa yRJ5zmzJOmNFWzeeqFZCCFijbW4rwhnKJRgcGHFrV//XIiMP7jQc668u2fbA3H2S XrAwTKoSTveSakJBGe2CgpY9SWS26uWUzCVYrYrzoJMF3PPwn8Lqsd0Skki0RHut 48V60KFsWFXF14PlIuWJsZkKhLBez1r6Q3bWLcf5UPj0ZDX/JCU64KTqVDqCgv3N VA1WsboNZ+/aVze9j0VObuCOG1nFMrJME5ymkc7seBNx7m8uVFGJHeDQ2JtpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEkFXA6lBekjtx4l3uWuB4Oe6u+MwHwYDVR0j BBgwFoAUZOsQ3ehVznZP/f2O+uBipFBgxSIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NzA5OWU0Mi0yZTlmLTRlOGEtOTllOC1hZDUwNDUzYjA2NmYvMC82NEVCMTBEREU4 NTVDRTc2NEZGREZEOEVGQUUwNjJBNDUwNjBDNTIyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjRFQjEwRERFODU1Q0U3NjRGRkRGRDhFRkFFMDYyQTQ1MDYw QzUyMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTcwOTllNDItMmU5Zi00ZThhLTk5 ZTgtYWQ1MDQ1M2IwNjZmLzAvNjRFQjEwRERFODU1Q0U3NjRGRkRGRDhFRkFFMDYy QTQ1MDYwQzUyMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACVUQCpFt0nLNv9EzwbdlRGi68sDeQtXE+xQ TIEYj+Ppx9H2Ic4arpdMx3cD7sCwG7S+aQJ/imROrfDPxfCJ2O1rl2zsOWZ+xSiD pBLpl3vENgAbR4fNYylEFygcg3tJX8f2aX/QdyGmBr7oHt4CbsNJCWr/bXvAm0Nu s14dUAmboE8k0216+w753XqmqkoPTubXyCrEAkqx8lhg++4IbKAd1dLtH4O1icgr 0uNPqSbaSo/VqPVQJvJFGUuBVUjJO5T9RBo91+JutbHB9jJyIHaQIFysrA9B6XFf QrfEv7QTu+gVJUlpikznwKxo8HkRhSPHk5RXFkgI6M4I+rYFgog= -----END CERTIFICATE-----Generated at Sun Dec 7 02:16:05 2025 by rpki-client