This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a7099e42-2e9f-4e8a-99e8-ad50453b066f/0/64EB10DDE855CE764FFDFD8EFAE062A45060C522.mft File: 64EB10DDE855CE764FFDFD8EFAE062A45060C522.mft (raw, json) Hash identifier: S6zqlaSmehwhx4w8GPiRrov7G7PKN7rJ9VbAtpklR1s= Subject key identifier: 02:4F:23:7E:8B:15:D1:8E:22:93:38:C2:1A:AC:D9:CD:BE:62:12:FF Authority key identifier: 64:EB:10:DD:E8:55:CE:76:4F:FD:FD:8E:FA:E0:62:A4:50:60:C5:22 Certificate issuer: /CN=64EB10DDE855CE764FFDFD8EFAE062A45060C522 Certificate serial: 424C6C1877C477071126FB3262A264FCF6F5DD03 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64EB10DDE855CE764FFDFD8EFAE062A45060C522.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a7099e42-2e9f-4e8a-99e8-ad50453b066f/0/64EB10DDE855CE764FFDFD8EFAE062A45060C522.mft Manifest number: 0153 Signing time: Sat 24 Jan 2026 15:41:02 +0000 Manifest this update: Sat 24 Jan 2026 15:36:02 +0000 Manifest next update: Tue 27 Jan 2026 17:58:02 +0000 Files and hashes: 1: 64EB10DDE855CE764FFDFD8EFAE062A45060C522.crl (hash: 18zXDPbUKXH41zauPKovjfAXyva4A1ZT/hcvx5mGblg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a7099e42-2e9f-4e8a-99e8-ad50453b066f/0/64EB10DDE855CE764FFDFD8EFAE062A45060C522.crl rsync://repo-rpki.idnic.net/repo/a7099e42-2e9f-4e8a-99e8-ad50453b066f/0/64EB10DDE855CE764FFDFD8EFAE062A45060C522.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64EB10DDE855CE764FFDFD8EFAE062A45060C522.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 17:58:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:4c:6c:18:77:c4:77:07:11:26:fb:32:62:a2:64:fc:f6:f5:dd:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64EB10DDE855CE764FFDFD8EFAE062A45060C522 Validity Not Before: Jan 24 15:36:02 2026 GMT Not After : Jan 27 17:58:02 2026 GMT Subject: CN=024F237E8B15D18E229338C21AACD9CDBE6212FF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:30:fc:6c:25:df:3b:d1:ac:2e:31:db:a8:a5: 30:43:65:5f:3b:98:9a:91:cd:8b:fe:ab:f9:40:d3: 37:da:01:9f:ed:66:fc:13:13:b5:17:35:69:3f:5c: 7e:cd:8d:71:95:41:19:96:39:6e:23:b7:47:8f:22: 29:53:59:19:bc:cf:60:1b:37:be:39:fa:47:70:7f: 20:16:41:7b:22:38:6b:06:0b:86:98:2c:45:f2:b9: 5a:dd:18:61:e9:44:06:f9:47:2e:2c:42:cf:02:2a: 2d:89:64:28:9c:ab:36:79:99:59:bd:ee:47:9f:09: 87:e4:b3:46:a9:ec:0c:58:1a:e6:bb:71:88:24:c4: bc:b9:0c:1b:18:66:94:e2:28:a7:88:05:51:1c:dd: d7:fc:8a:c6:ea:2b:e1:73:4b:00:c5:49:53:e2:58: 88:ab:00:b0:af:c3:55:0c:e4:e3:b6:08:04:d6:ad: 1f:83:57:74:9c:ff:83:50:ec:db:b3:8e:6a:59:c2: 4c:34:b7:e6:ed:c7:51:a5:87:24:a3:a3:57:17:ef: 27:40:77:f3:bf:68:a8:91:33:48:52:ca:d1:12:87: d3:31:17:0a:b9:3b:94:2b:d8:60:04:15:89:d8:0f: 56:a6:be:13:50:94:36:2f:d0:41:04:4a:49:20:11: 72:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:4F:23:7E:8B:15:D1:8E:22:93:38:C2:1A:AC:D9:CD:BE:62:12:FF X509v3 Authority Key Identifier: keyid:64:EB:10:DD:E8:55:CE:76:4F:FD:FD:8E:FA:E0:62:A4:50:60:C5:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a7099e42-2e9f-4e8a-99e8-ad50453b066f/0/64EB10DDE855CE764FFDFD8EFAE062A45060C522.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64EB10DDE855CE764FFDFD8EFAE062A45060C522.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a7099e42-2e9f-4e8a-99e8-ad50453b066f/0/64EB10DDE855CE764FFDFD8EFAE062A45060C522.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:0a:8f:aa:b2:d0:e5:8d:4e:1a:3e:b4:2a:11:c3:1a:29:5c: 33:1d:4b:dc:99:10:3b:30:70:93:71:db:46:fb:11:f3:38:39: 61:81:f1:95:e1:d8:67:22:a1:d8:f5:fd:14:2b:de:aa:9c:86: c3:12:20:1f:34:09:14:34:83:ec:a5:7d:11:08:b8:64:0a:8a: 34:f6:27:70:80:28:9d:68:04:c3:06:0a:44:52:fe:54:67:92: 92:9d:31:f4:87:5d:30:84:60:ee:ae:83:89:2f:2e:93:54:3a: 78:3b:d0:8e:fb:3c:f3:1e:d2:8d:2c:10:fa:6c:79:31:40:a2: 1c:9b:4c:2c:ae:5e:fb:fd:f8:e0:31:00:4d:10:4f:1c:16:4a: c5:4c:9e:10:7f:3d:2a:1d:d1:24:5a:21:c4:20:18:82:6e:e0: 93:5c:5a:f8:cd:c6:ef:23:25:d8:fb:4c:13:69:7a:6c:0f:45: de:49:96:85:07:01:76:0c:2a:0f:3f:1c:b8:0a:c1:c7:86:33: 41:a8:6f:1d:e2:cd:d2:2c:b4:c0:b8:84:ae:1b:d4:c6:b8:ba: 79:db:ba:82:9e:03:0d:f6:b4:6e:8b:81:e7:1f:ab:0c:53:5c: 57:7f:2a:85:c7:f3:fc:1d:aa:d2:b0:91:1d:85:c2:94:76:31: 02:46:17:00 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQkxsGHfEdwcRJvsyYqJk/Pb13QMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjRFQjEwRERFODU1Q0U3NjRGRkRGRDhFRkFFMDYyQTQ1 MDYwQzUyMjAeFw0yNjAxMjQxNTM2MDJaFw0yNjAxMjcxNzU4MDJaMDMxMTAvBgNV BAMTKDAyNEYyMzdFOEIxNUQxOEUyMjkzMzhDMjFBQUNEOUNEQkU2MjEyRkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNMPxsJd870awuMduopTBDZV87 mJqRzYv+q/lA0zfaAZ/tZvwTE7UXNWk/XH7NjXGVQRmWOW4jt0ePIilTWRm8z2Ab N745+kdwfyAWQXsiOGsGC4aYLEXyuVrdGGHpRAb5Ry4sQs8CKi2JZCicqzZ5mVm9 7kefCYfks0ap7AxYGua7cYgkxLy5DBsYZpTiKKeIBVEc3df8isbqK+FzSwDFSVPi WIirALCvw1UM5OO2CATWrR+DV3Sc/4NQ7NuzjmpZwkw0t+btx1GlhySjo1cX7ydA d/O/aKiRM0hSytESh9MxFwq5O5Qr2GAEFYnYD1amvhNQlDYv0EEESkkgEXLPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAk8jfosV0Y4ikzjCGqzZzb5iEv8wHwYDVR0j BBgwFoAUZOsQ3ehVznZP/f2O+uBipFBgxSIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NzA5OWU0Mi0yZTlmLTRlOGEtOTllOC1hZDUwNDUzYjA2NmYvMC82NEVCMTBEREU4 NTVDRTc2NEZGREZEOEVGQUUwNjJBNDUwNjBDNTIyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjRFQjEwRERFODU1Q0U3NjRGRkRGRDhFRkFFMDYyQTQ1MDYw QzUyMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTcwOTllNDItMmU5Zi00ZThhLTk5 ZTgtYWQ1MDQ1M2IwNjZmLzAvNjRFQjEwRERFODU1Q0U3NjRGRkRGRDhFRkFFMDYy QTQ1MDYwQzUyMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADAKj6qy0OWNTho+tCoRwxopXDMdS9yZEDsw cJNx20b7EfM4OWGB8ZXh2Gciodj1/RQr3qqchsMSIB80CRQ0g+ylfREIuGQKijT2 J3CAKJ1oBMMGCkRS/lRnkpKdMfSHXTCEYO6ug4kvLpNUOng70I77PPMe0o0sEPps eTFAohybTCyuXvv9+OAxAE0QTxwWSsVMnhB/PSod0SRaIcQgGIJu4JNcWvjNxu8j Jdj7TBNpemwPRd5JloUHAXYMKg8/HLgKwceGM0Gobx3izdIstMC4hK4b1Ma4unnb uoKeAw32tG6LgecfqwxTXFd/KoXH8/wdqtKwkR2FwpR2MQJGFwA= -----END CERTIFICATE-----Generated at Sun Jan 25 22:00:44 2026 by rpki-client