This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/1/1E64BF65051052D913D7DB8C4512F615E3FAB9B2.mft File: 1E64BF65051052D913D7DB8C4512F615E3FAB9B2.mft (raw, json) Hash identifier: khgL6Cc39I772jrnK7BVCbakDqxFo/ROF426dGzRtNE= Subject key identifier: C7:72:48:C3:0A:22:3A:40:FA:A9:D8:E2:BA:86:DE:15:72:20:CE:3E Authority key identifier: 1E:64:BF:65:05:10:52:D9:13:D7:DB:8C:45:12:F6:15:E3:FA:B9:B2 Certificate issuer: /CN=1E64BF65051052D913D7DB8C4512F615E3FAB9B2 Certificate serial: 7D80D365A1D2197C570CFF4526974077A2C68CED Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1E64BF65051052D913D7DB8C4512F615E3FAB9B2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/1/1E64BF65051052D913D7DB8C4512F615E3FAB9B2.mft Manifest number: F3 Signing time: Fri 05 Dec 2025 12:21:11 +0000 Manifest this update: Fri 05 Dec 2025 12:16:11 +0000 Manifest next update: Mon 08 Dec 2025 15:35:11 +0000 Files and hashes: 1: 1E64BF65051052D913D7DB8C4512F615E3FAB9B2.crl (hash: Z4xu1VDCxc59v7a8YC1zwdvdwS6Yd2QD4tqGGw9SJAk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/1/1E64BF65051052D913D7DB8C4512F615E3FAB9B2.crl rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/1/1E64BF65051052D913D7DB8C4512F615E3FAB9B2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1E64BF65051052D913D7DB8C4512F615E3FAB9B2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 15:35:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:80:d3:65:a1:d2:19:7c:57:0c:ff:45:26:97:40:77:a2:c6:8c:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1E64BF65051052D913D7DB8C4512F615E3FAB9B2 Validity Not Before: Dec 5 12:16:11 2025 GMT Not After : Dec 8 15:35:11 2025 GMT Subject: CN=C77248C30A223A40FAA9D8E2BA86DE157220CE3E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:76:9a:6f:43:e8:ce:92:78:18:1a:8d:33:16: 9f:7b:97:a9:1b:97:f3:55:53:8d:bf:df:d1:1b:e3: 58:09:5e:82:a5:84:da:6b:ad:0d:d8:86:48:2f:4d: 4d:b8:69:3c:4d:1f:9f:6d:af:b2:e7:66:89:b3:4d: 17:65:65:83:82:58:c9:fa:19:fa:1d:13:a9:a2:3b: a6:ef:68:f0:d8:16:e8:14:d7:06:ec:55:dc:75:d2: 58:99:6c:25:57:39:4c:57:61:ef:3d:2e:fd:5e:0c: 6e:a4:dc:41:c8:68:c8:b8:34:96:e1:2e:a1:d5:b4: a2:e3:8e:cc:e8:93:47:30:23:02:7d:05:43:f2:53: 0a:e0:d2:f8:2b:2a:de:00:39:a6:1f:03:82:86:84: 9f:40:85:d8:0f:78:d0:2c:d0:56:9d:c6:4c:b3:54: 5c:98:14:c7:c3:32:0f:cd:d4:a8:1f:27:f9:a1:ec: e1:e2:4e:e1:c6:2a:64:3e:1b:ce:f1:28:71:72:d0: 6a:e1:b6:79:c5:87:e8:f2:bc:06:e0:9f:cf:f4:b0: eb:47:51:d6:42:df:ba:83:4c:4b:ce:f0:e1:fc:18: 7b:d1:3d:7f:90:fa:35:5c:e7:90:63:a0:3e:ed:91: 16:ac:58:c1:5d:2c:71:05:ea:21:a1:a6:2f:44:6e: 47:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:72:48:C3:0A:22:3A:40:FA:A9:D8:E2:BA:86:DE:15:72:20:CE:3E X509v3 Authority Key Identifier: keyid:1E:64:BF:65:05:10:52:D9:13:D7:DB:8C:45:12:F6:15:E3:FA:B9:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/1/1E64BF65051052D913D7DB8C4512F615E3FAB9B2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1E64BF65051052D913D7DB8C4512F615E3FAB9B2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/1/1E64BF65051052D913D7DB8C4512F615E3FAB9B2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:76:7f:b2:df:64:98:7c:a5:52:92:1d:98:24:0b:66:66:e0: 6a:ec:b1:a2:de:9a:23:c3:61:a8:e1:9e:b6:24:cf:10:b6:76: 1f:54:1b:ae:1d:91:67:1b:4f:3e:fd:83:7a:e5:3b:d7:fd:71: 2d:92:7c:d5:68:00:25:3a:ab:6f:f9:35:93:09:ca:e3:9f:ca: 68:bd:a4:69:83:6b:c3:fd:83:b9:2a:dd:e6:18:ac:93:52:c5: 43:18:9f:1b:bf:84:63:68:18:e4:68:7b:6d:3c:50:61:39:af: dc:e7:a9:c5:f4:f3:69:27:b3:5f:62:40:b3:3c:59:da:6e:51: 3f:5c:bd:a1:cd:1a:89:38:cc:b1:54:b0:d2:21:10:97:49:00: 37:8e:a5:63:37:2a:db:dc:1b:8c:a0:43:e2:64:49:80:35:60: cd:53:16:26:6f:ba:3c:1a:38:48:89:81:d7:5c:30:00:8d:69: 53:45:7e:d0:81:73:2c:07:8e:63:0d:49:3f:a9:fd:ad:11:09: 8c:7e:70:0e:45:9c:7a:67:26:19:fa:e2:95:d1:ee:a4:a3:6f: 88:e0:66:51:fe:75:2b:86:66:f2:83:68:40:07:b4:b7:7a:c9: d3:9e:3f:5a:18:a0:c7:4d:e4:28:ba:84:b5:a6:7b:91:bf:9c: b6:7a:82:c4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfYDTZaHSGXxXDP9FJpdAd6LGjO0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUU2NEJGNjUwNTEwNTJEOTEzRDdEQjhDNDUxMkY2MTVF M0ZBQjlCMjAeFw0yNTEyMDUxMjE2MTFaFw0yNTEyMDgxNTM1MTFaMDMxMTAvBgNV BAMTKEM3NzI0OEMzMEEyMjNBNDBGQUE5RDhFMkJBODZERTE1NzIyMENFM0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvdppvQ+jOkngYGo0zFp97l6kb l/NVU42/39Eb41gJXoKlhNprrQ3YhkgvTU24aTxNH59tr7LnZomzTRdlZYOCWMn6 GfodE6miO6bvaPDYFugU1wbsVdx10liZbCVXOUxXYe89Lv1eDG6k3EHIaMi4NJbh LqHVtKLjjszok0cwIwJ9BUPyUwrg0vgrKt4AOaYfA4KGhJ9AhdgPeNAs0Fadxkyz VFyYFMfDMg/N1KgfJ/mh7OHiTuHGKmQ+G87xKHFy0GrhtnnFh+jyvAbgn8/0sOtH UdZC37qDTEvO8OH8GHvRPX+Q+jVc55BjoD7tkRasWMFdLHEF6iGhpi9EbkdVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUx3JIwwoiOkD6qdjiuobeFXIgzj4wHwYDVR0j BBgwFoAUHmS/ZQUQUtkT19uMRRL2FeP6ubIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZTE5ODgxNi01YWY5LTQ3ZWYtYjk4OS00MmYyNzMxODQ4YmUvMS8xRTY0QkY2NTA1 MTA1MkQ5MTNEN0RCOEM0NTEyRjYxNUUzRkFCOUIyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUU2NEJGNjUwNTEwNTJEOTEzRDdEQjhDNDUxMkY2MTVFM0ZB QjlCMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWUxOTg4MTYtNWFmOS00N2VmLWI5 ODktNDJmMjczMTg0OGJlLzEvMUU2NEJGNjUwNTEwNTJEOTEzRDdEQjhDNDUxMkY2 MTVFM0ZBQjlCMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADh2f7LfZJh8pVKSHZgkC2Zm4GrssaLemiPD YajhnrYkzxC2dh9UG64dkWcbTz79g3rlO9f9cS2SfNVoACU6q2/5NZMJyuOfymi9 pGmDa8P9g7kq3eYYrJNSxUMYnxu/hGNoGORoe208UGE5r9znqcX082kns19iQLM8 WdpuUT9cvaHNGok4zLFUsNIhEJdJADeOpWM3KtvcG4ygQ+JkSYA1YM1TFiZvujwa OEiJgddcMACNaVNFftCBcywHjmMNST+p/a0RCYx+cA5FnHpnJhn64pXR7qSjb4jg ZlH+dSuGZvKDaEAHtLd6ydOeP1oYoMdN5Ci6hLWme5G/nLZ6gsQ= -----END CERTIFICATE-----Generated at Sat Dec 6 22:53:22 2025 by rpki-client