This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/0e705927-ec64-44f5-9c9e-c9a55a523b64/0/64B46651D7B0C757E4AEDE01691F062FEEF15DB6.mft File: 64B46651D7B0C757E4AEDE01691F062FEEF15DB6.mft (raw, json) Hash identifier: UFP2DeQhNxN1oYnbITlzJDKOryZJggvnbVbO4ns2KDk= Subject key identifier: 29:3A:F8:F2:AD:1A:F8:CA:5E:28:E2:1C:5D:14:FC:B6:9A:8C:93:A2 Authority key identifier: 64:B4:66:51:D7:B0:C7:57:E4:AE:DE:01:69:1F:06:2F:EE:F1:5D:B6 Certificate issuer: /CN=64B46651D7B0C757E4AEDE01691F062FEEF15DB6 Certificate serial: 3FB2FB535BF9C11F9C0C40AC5B4F95E5716166D2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64B46651D7B0C757E4AEDE01691F062FEEF15DB6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0e705927-ec64-44f5-9c9e-c9a55a523b64/0/64B46651D7B0C757E4AEDE01691F062FEEF15DB6.mft Manifest number: 0229 Signing time: Tue 02 Dec 2025 04:11:38 +0000 Manifest this update: Tue 02 Dec 2025 04:06:38 +0000 Manifest next update: Fri 05 Dec 2025 12:18:38 +0000 Files and hashes: 1: 3130332e3135382e3230392e302f32342d3234203d3e20313431313436.roa (hash: cu+gkkkTCuwJj0tPWyI4oDjIIQe1JqfFTuFCDD6tSKw=) 2: 64B46651D7B0C757E4AEDE01691F062FEEF15DB6.crl (hash: D2enCsAmLk1kBPUHUIQQLVDCa8FwCrPDs8heeOha5vU=) 3: 3130332e3135382e3230382e302f32342d3234203d3e20313431313436.roa (hash: Mc8Ea5+5WJ6GF7G0KNR6Ybiy7ufabhA8F83CYeyA+z0=) 4: 3130332e3135382e3230382e302f32332d3234203d3e20313431313436.roa (hash: fQYP6KBmK43mZ1BOpBi0K6IbkEvJhG31/o2xXC40uG8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0e705927-ec64-44f5-9c9e-c9a55a523b64/0/64B46651D7B0C757E4AEDE01691F062FEEF15DB6.crl rsync://repo-rpki.idnic.net/repo/0e705927-ec64-44f5-9c9e-c9a55a523b64/0/64B46651D7B0C757E4AEDE01691F062FEEF15DB6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64B46651D7B0C757E4AEDE01691F062FEEF15DB6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 12:18:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:b2:fb:53:5b:f9:c1:1f:9c:0c:40:ac:5b:4f:95:e5:71:61:66:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64B46651D7B0C757E4AEDE01691F062FEEF15DB6 Validity Not Before: Dec 2 04:06:38 2025 GMT Not After : Dec 5 12:18:38 2025 GMT Subject: CN=293AF8F2AD1AF8CA5E28E21C5D14FCB69A8C93A2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:e3:ad:47:a0:c6:24:81:ad:c9:c9:4d:58:57: d4:0b:a9:4a:53:fe:57:51:4d:b4:74:c6:17:b5:4e: 76:6a:a1:6b:66:ea:e4:8a:c6:19:7b:d2:20:69:07: 66:56:f9:51:e0:3e:15:a1:64:8d:dd:98:55:76:32: 07:89:46:9c:76:00:ab:9e:44:7c:52:52:c7:0d:72: a1:0d:93:38:93:90:c9:7b:bb:ae:68:3c:f9:3d:14: ad:31:b5:a0:0f:43:2b:b8:2f:2a:7e:93:15:60:c4: 30:a9:ee:78:c4:14:7e:ed:e3:c3:41:fb:f0:51:3a: c9:67:75:a7:50:48:02:ca:3f:37:62:f6:e6:58:0b: 1c:7c:12:7f:92:26:45:45:ce:99:26:57:f6:8f:0c: 1a:f0:e4:b0:65:d7:1d:b7:37:82:01:c2:ef:6d:13: 21:f4:2f:95:bb:76:e1:87:8f:f7:03:7d:4a:54:72: 30:b9:5a:d2:a6:e4:b3:e3:62:b8:58:1e:a6:4c:56: c5:e6:11:4e:fc:fa:f7:03:dc:0c:6b:58:71:66:50: 26:dc:6e:d2:dc:ba:54:12:1f:87:a7:16:6e:33:a8: 68:c4:91:5d:65:a6:fd:23:73:8f:bc:0a:46:59:2d: 5e:33:96:40:37:56:c3:d0:cc:10:e0:47:4b:65:29: d0:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:3A:F8:F2:AD:1A:F8:CA:5E:28:E2:1C:5D:14:FC:B6:9A:8C:93:A2 X509v3 Authority Key Identifier: keyid:64:B4:66:51:D7:B0:C7:57:E4:AE:DE:01:69:1F:06:2F:EE:F1:5D:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0e705927-ec64-44f5-9c9e-c9a55a523b64/0/64B46651D7B0C757E4AEDE01691F062FEEF15DB6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64B46651D7B0C757E4AEDE01691F062FEEF15DB6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0e705927-ec64-44f5-9c9e-c9a55a523b64/0/64B46651D7B0C757E4AEDE01691F062FEEF15DB6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:da:61:c6:47:15:77:1e:01:d2:96:1e:77:ef:51:f5:a8:e1: 9c:1d:8b:b5:4b:8d:ce:1c:40:31:58:0f:5d:8b:9a:83:78:b1: 84:38:c8:5b:bc:d0:40:7a:16:24:29:de:ad:85:78:e1:1d:2c: 35:4c:6b:41:8a:50:ab:af:6f:c6:fb:8c:c5:b9:e7:fe:57:e5: 2b:c1:ea:fa:5f:5d:fa:73:f7:78:27:66:50:09:58:50:e7:0a: d2:bc:92:20:15:22:13:8f:bd:c4:84:83:57:bc:31:86:d7:ce: b6:e3:9e:90:dc:98:7d:0a:72:0d:ed:cd:52:f5:02:a8:08:00: b6:cb:08:63:7b:31:0a:88:fa:8e:49:db:b4:a9:fc:b3:33:40: 47:49:7d:2c:70:40:18:f6:81:df:3f:1c:a8:46:95:51:42:8d: d9:af:31:41:24:34:d3:9b:5b:d9:60:e3:aa:ce:18:3e:58:c1: d7:f5:9a:52:ca:6a:d4:43:9f:8b:19:dd:9b:7e:10:fd:ee:30: a4:be:55:ee:eb:4c:f8:62:c5:73:7c:70:8d:91:8b:1f:3e:bf: dc:7d:60:40:3a:c9:6f:ef:fa:59:f1:de:bb:fd:12:dc:02:9e: 8d:ba:52:0a:e6:e3:b3:9e:8b:7c:83:4a:69:b4:e1:e4:9a:01: cb:16:9c:40 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP7L7U1v5wR+cDECsW0+V5XFhZtIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjRCNDY2NTFEN0IwQzc1N0U0QUVERTAxNjkxRjA2MkZF RUYxNURCNjAeFw0yNTEyMDIwNDA2MzhaFw0yNTEyMDUxMjE4MzhaMDMxMTAvBgNV BAMTKDI5M0FGOEYyQUQxQUY4Q0E1RTI4RTIxQzVEMTRGQ0I2OUE4QzkzQTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ461HoMYkga3JyU1YV9QLqUpT /ldRTbR0xhe1TnZqoWtm6uSKxhl70iBpB2ZW+VHgPhWhZI3dmFV2MgeJRpx2AKue RHxSUscNcqENkziTkMl7u65oPPk9FK0xtaAPQyu4Lyp+kxVgxDCp7njEFH7t48NB +/BROslndadQSALKPzdi9uZYCxx8En+SJkVFzpkmV/aPDBrw5LBl1x23N4IBwu9t EyH0L5W7duGHj/cDfUpUcjC5WtKm5LPjYrhYHqZMVsXmEU78+vcD3AxrWHFmUCbc btLculQSH4enFm4zqGjEkV1lpv0jc4+8CkZZLV4zlkA3VsPQzBDgR0tlKdAdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKTr48q0a+MpeKOIcXRT8tpqMk6IwHwYDVR0j BBgwFoAUZLRmUdewx1fkrt4BaR8GL+7xXbYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZTcwNTkyNy1lYzY0LTQ0ZjUtOWM5ZS1jOWE1NWE1MjNiNjQvMC82NEI0NjY1MUQ3 QjBDNzU3RTRBRURFMDE2OTFGMDYyRkVFRjE1REI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjRCNDY2NTFEN0IwQzc1N0U0QUVERTAxNjkxRjA2MkZFRUYx NURCNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGU3MDU5MjctZWM2NC00NGY1LTlj OWUtYzlhNTVhNTIzYjY0LzAvNjRCNDY2NTFEN0IwQzc1N0U0QUVERTAxNjkxRjA2 MkZFRUYxNURCNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJzaYcZHFXceAdKWHnfvUfWo4Zwdi7VLjc4c QDFYD12LmoN4sYQ4yFu80EB6FiQp3q2FeOEdLDVMa0GKUKuvb8b7jMW55/5X5SvB 6vpfXfpz93gnZlAJWFDnCtK8kiAVIhOPvcSEg1e8MYbXzrbjnpDcmH0Kcg3tzVL1 AqgIALbLCGN7MQqI+o5J27Sp/LMzQEdJfSxwQBj2gd8/HKhGlVFCjdmvMUEkNNOb W9lg46rOGD5Ywdf1mlLKatRDn4sZ3Zt+EP3uMKS+Ve7rTPhixXN8cI2Rix8+v9x9 YEA6yW/v+lnx3rv9EtwCno26Ugrm47Oei3yDSmm04eSaAcsWnEA= -----END CERTIFICATE-----Generated at Wed Dec 3 14:44:04 2025 by rpki-client