This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/2d3ed012-afdb-42fb-971a-e162a9dec46d/0/64848BA7A76415C6458AAC267B0A57658022C3C5.mft File: 64848BA7A76415C6458AAC267B0A57658022C3C5.mft (raw, json) Hash identifier: imgZC0CchMg04v3NI/Bv1ynoq2X6bx97nXXLzaxx56Q= Subject key identifier: 0F:DA:64:D3:D6:E7:88:F0:56:8A:9F:81:9E:ED:67:9D:53:BA:D7:AD Authority key identifier: 64:84:8B:A7:A7:64:15:C6:45:8A:AC:26:7B:0A:57:65:80:22:C3:C5 Certificate issuer: /CN=64848BA7A76415C6458AAC267B0A57658022C3C5 Certificate serial: 0C455EF5711AD0EB10DBEB96FD1A5802848D95EE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64848BA7A76415C6458AAC267B0A57658022C3C5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2d3ed012-afdb-42fb-971a-e162a9dec46d/0/64848BA7A76415C6458AAC267B0A57658022C3C5.mft Manifest number: 0292 Signing time: Mon 08 Dec 2025 18:32:21 +0000 Manifest this update: Mon 08 Dec 2025 18:27:21 +0000 Manifest next update: Thu 11 Dec 2025 22:39:21 +0000 Files and hashes: 1: 64848BA7A76415C6458AAC267B0A57658022C3C5.crl (hash: goDaFPxPHVgV/NhkBQrKkCuCf/a2Nsv3byun0uhUMIs=) 2: 3130332e3137392e36382e302f32342d3234203d3e20313439333337.roa (hash: 3XMqr1SbGGTOsdpLnGk2+GvSMvPb+++c1PWx8+UbJng=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2d3ed012-afdb-42fb-971a-e162a9dec46d/0/64848BA7A76415C6458AAC267B0A57658022C3C5.crl rsync://repo-rpki.idnic.net/repo/2d3ed012-afdb-42fb-971a-e162a9dec46d/0/64848BA7A76415C6458AAC267B0A57658022C3C5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64848BA7A76415C6458AAC267B0A57658022C3C5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 22:39:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:45:5e:f5:71:1a:d0:eb:10:db:eb:96:fd:1a:58:02:84:8d:95:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64848BA7A76415C6458AAC267B0A57658022C3C5 Validity Not Before: Dec 8 18:27:21 2025 GMT Not After : Dec 11 22:39:21 2025 GMT Subject: CN=0FDA64D3D6E788F0568A9F819EED679D53BAD7AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ba:04:5f:7e:5e:68:5d:f1:8d:83:39:ff:72: 65:27:94:48:87:20:0a:95:4d:99:44:a2:f2:41:30: 73:2d:24:68:31:1f:57:95:c1:a2:d1:a8:02:0b:1a: 27:5c:6f:73:b6:18:b6:ce:6c:52:36:b9:c0:0a:5e: 59:f1:68:40:2a:23:bb:69:ef:c3:5c:86:fa:35:c8: ba:4b:e6:6e:7a:71:a4:35:05:d2:c5:09:f0:5d:ee: f9:22:b3:ee:c5:fa:a9:5c:ab:54:7e:cf:62:a4:81: fe:d3:63:c6:a6:e9:e6:32:62:f2:5e:94:b3:19:61: cd:13:73:a6:0b:cd:b5:45:c9:23:55:e9:c6:7f:3d: 9a:f9:da:20:db:4d:71:46:2d:92:8a:ff:f7:4d:8e: f6:61:1b:77:01:d6:5d:f0:41:c0:49:ea:b4:af:24: 19:d6:5d:9c:89:9e:ef:01:66:e1:76:28:3f:fd:b1: b4:5e:ad:8d:52:5a:9e:eb:d8:73:eb:30:a3:0b:30: cb:01:33:e5:71:69:ac:68:e3:b2:8c:3e:61:3b:27: 9a:b1:9f:8c:87:73:3a:60:3e:a8:fb:87:50:d2:ae: 49:77:eb:12:e2:78:e1:35:c8:20:35:9d:40:e4:29: 40:ec:a6:38:95:f9:f4:aa:be:12:96:fc:56:17:81: 8e:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:DA:64:D3:D6:E7:88:F0:56:8A:9F:81:9E:ED:67:9D:53:BA:D7:AD X509v3 Authority Key Identifier: keyid:64:84:8B:A7:A7:64:15:C6:45:8A:AC:26:7B:0A:57:65:80:22:C3:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2d3ed012-afdb-42fb-971a-e162a9dec46d/0/64848BA7A76415C6458AAC267B0A57658022C3C5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64848BA7A76415C6458AAC267B0A57658022C3C5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2d3ed012-afdb-42fb-971a-e162a9dec46d/0/64848BA7A76415C6458AAC267B0A57658022C3C5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d6:51:61:91:1c:ac:1d:89:9e:a4:83:68:f8:84:1e:62:98:f2: cb:56:c0:fa:87:d9:68:98:0d:f3:12:9b:38:fd:22:e9:bd:d3: b7:1f:3c:0a:6c:52:12:eb:cc:a9:07:42:ad:30:1a:ff:0f:1e: 82:b6:6a:b5:3d:4e:54:86:51:30:74:8e:73:60:fa:91:c8:9a: c3:1b:7a:a4:07:a8:10:6a:2d:c7:80:90:2f:c3:e9:6d:08:81: 5a:27:af:d0:46:8f:4d:18:47:0c:b7:e5:4b:b5:50:b6:7e:8c: e0:c4:a6:6d:19:72:7e:49:f4:ea:44:5d:aa:7c:12:01:16:91: b0:f4:31:4e:0c:2c:f1:4c:1f:8e:6d:da:09:94:ee:6c:36:97: 88:7b:32:c7:ec:2e:88:83:5f:3f:0d:c6:ef:c9:0b:de:4d:f2: a3:0a:92:29:16:a6:b8:0c:94:db:38:ce:00:a5:e7:a7:a6:79: 6a:b9:d3:65:28:8c:f4:8c:bd:7a:ce:f8:6c:a7:82:21:aa:3d: 49:1d:4d:10:1d:3a:36:e7:25:53:44:a9:5f:99:27:26:be:28: c5:40:dc:2a:0c:97:7f:ce:57:de:a4:7a:b7:b0:fe:38:9e:c8: 6c:24:b5:78:99:ea:e9:9d:b9:6d:7c:68:68:55:33:56:99:df: 73:d4:fd:4a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDEVe9XEa0OsQ2+uW/RpYAoSNle4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjQ4NDhCQTdBNzY0MTVDNjQ1OEFBQzI2N0IwQTU3NjU4 MDIyQzNDNTAeFw0yNTEyMDgxODI3MjFaFw0yNTEyMTEyMjM5MjFaMDMxMTAvBgNV BAMTKDBGREE2NEQzRDZFNzg4RjA1NjhBOUY4MTlFRUQ2NzlENTNCQUQ3QUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBugRffl5oXfGNgzn/cmUnlEiH IAqVTZlEovJBMHMtJGgxH1eVwaLRqAILGidcb3O2GLbObFI2ucAKXlnxaEAqI7tp 78Nchvo1yLpL5m56caQ1BdLFCfBd7vkis+7F+qlcq1R+z2Kkgf7TY8am6eYyYvJe lLMZYc0Tc6YLzbVFySNV6cZ/PZr52iDbTXFGLZKK//dNjvZhG3cB1l3wQcBJ6rSv JBnWXZyJnu8BZuF2KD/9sbRerY1SWp7r2HPrMKMLMMsBM+Vxaaxo47KMPmE7J5qx n4yHczpgPqj7h1DSrkl36xLieOE1yCA1nUDkKUDspjiV+fSqvhKW/FYXgY6jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUD9pk09bniPBWip+Bnu1nnVO6160wHwYDVR0j BBgwFoAUZISLp6dkFcZFiqwmewpXZYAiw8UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZDNlZDAxMi1hZmRiLTQyZmItOTcxYS1lMTYyYTlkZWM0NmQvMC82NDg0OEJBN0E3 NjQxNUM2NDU4QUFDMjY3QjBBNTc2NTgwMjJDM0M1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjQ4NDhCQTdBNzY0MTVDNjQ1OEFBQzI2N0IwQTU3NjU4MDIy QzNDNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmQzZWQwMTItYWZkYi00MmZiLTk3 MWEtZTE2MmE5ZGVjNDZkLzAvNjQ4NDhCQTdBNzY0MTVDNjQ1OEFBQzI2N0IwQTU3 NjU4MDIyQzNDNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANZRYZEcrB2JnqSDaPiEHmKY8stWwPqH2WiY DfMSmzj9Ium907cfPApsUhLrzKkHQq0wGv8PHoK2arU9TlSGUTB0jnNg+pHImsMb eqQHqBBqLceAkC/D6W0IgVonr9BGj00YRwy35Uu1ULZ+jODEpm0Zcn5J9OpEXap8 EgEWkbD0MU4MLPFMH45t2gmU7mw2l4h7MsfsLoiDXz8Nxu/JC95N8qMKkikWprgM lNs4zgCl56emeWq502UojPSMvXrO+GyngiGqPUkdTRAdOjbnJVNEqV+ZJya+KMVA 3CoMl3/OV96kerew/jieyGwktXiZ6umduW18aGhVM1aZ33PU/Uo= -----END CERTIFICATE-----Generated at Wed Dec 10 02:39:07 2025 by rpki-client