This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/8cf3c211-0645-4882-a4f1-46be867b7983/0/2664CBE10F2B9FF1BEC50A6A85DC7AA52B9F17FA.mft File: 2664CBE10F2B9FF1BEC50A6A85DC7AA52B9F17FA.mft (raw, json) Hash identifier: lwwposVteUQmoX4KPJnAorToAmjsn+tSY9/jpoVt6Ho= Subject key identifier: 5F:12:FF:52:81:53:D8:59:93:85:32:89:38:A3:D9:64:41:B8:AB:61 Authority key identifier: 26:64:CB:E1:0F:2B:9F:F1:BE:C5:0A:6A:85:DC:7A:A5:2B:9F:17:FA Certificate issuer: /CN=2664CBE10F2B9FF1BEC50A6A85DC7AA52B9F17FA Certificate serial: 65FF6C5DA07714B279AF859BABAAD4EBD03158DD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2664CBE10F2B9FF1BEC50A6A85DC7AA52B9F17FA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8cf3c211-0645-4882-a4f1-46be867b7983/0/2664CBE10F2B9FF1BEC50A6A85DC7AA52B9F17FA.mft Manifest number: 03DC Signing time: Tue 02 Dec 2025 18:22:18 +0000 Manifest this update: Tue 02 Dec 2025 18:17:18 +0000 Manifest next update: Fri 05 Dec 2025 18:22:18 +0000 Files and hashes: 1: 2664CBE10F2B9FF1BEC50A6A85DC7AA52B9F17FA.crl (hash: Cn8ve91HUdIJK98DOSlE8nb+0X9ay+MWLtWUmGOnsm4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8cf3c211-0645-4882-a4f1-46be867b7983/0/2664CBE10F2B9FF1BEC50A6A85DC7AA52B9F17FA.crl rsync://repo-rpki.idnic.net/repo/8cf3c211-0645-4882-a4f1-46be867b7983/0/2664CBE10F2B9FF1BEC50A6A85DC7AA52B9F17FA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2664CBE10F2B9FF1BEC50A6A85DC7AA52B9F17FA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 18:22:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:ff:6c:5d:a0:77:14:b2:79:af:85:9b:ab:aa:d4:eb:d0:31:58:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2664CBE10F2B9FF1BEC50A6A85DC7AA52B9F17FA Validity Not Before: Dec 2 18:17:18 2025 GMT Not After : Dec 5 18:22:18 2025 GMT Subject: CN=5F12FF528153D8599385328938A3D96441B8AB61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:17:49:f4:a1:74:52:7d:93:48:34:fb:7c:66: 2b:44:7b:80:5c:9c:37:99:f2:3e:98:7f:a3:f0:2e: 86:33:3b:bd:aa:2a:32:f2:4f:90:71:9a:e8:46:9f: bd:4a:4c:0a:a5:dc:22:76:89:63:ac:51:5d:b0:7e: 85:c2:21:3d:a2:e6:a7:c4:37:95:33:90:50:be:81: 8d:ad:2b:c1:4e:29:d2:7c:f0:6d:aa:e5:0f:af:95: 6b:d1:57:63:59:e5:8d:c2:57:ae:ae:5c:f7:8e:db: e9:cb:7e:b6:66:fe:28:eb:1a:e9:d2:17:5c:da:87: d4:ce:a4:24:1f:05:7b:b5:80:9b:f1:59:89:67:d9: ff:9d:2b:c1:8b:c2:e8:87:70:79:1b:a9:b6:36:52: f6:7b:10:9c:35:27:f8:d1:ac:77:00:fc:5a:74:e1: c2:1b:c1:5b:21:c5:cf:69:3e:3e:3d:09:af:d0:3a: 13:f2:6c:70:69:cc:89:04:7c:3f:57:64:9d:c7:70: 35:86:1e:f6:2c:a8:45:56:9b:8b:a5:c5:28:42:2f: 66:e9:15:75:6a:24:b5:4e:1e:f6:be:ec:a7:83:21: 83:64:05:45:3c:47:f7:9e:6f:30:05:36:4a:74:c9: 37:4a:e2:f8:c6:b1:87:ce:03:53:95:df:ce:6a:3f: 7e:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:12:FF:52:81:53:D8:59:93:85:32:89:38:A3:D9:64:41:B8:AB:61 X509v3 Authority Key Identifier: keyid:26:64:CB:E1:0F:2B:9F:F1:BE:C5:0A:6A:85:DC:7A:A5:2B:9F:17:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8cf3c211-0645-4882-a4f1-46be867b7983/0/2664CBE10F2B9FF1BEC50A6A85DC7AA52B9F17FA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2664CBE10F2B9FF1BEC50A6A85DC7AA52B9F17FA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8cf3c211-0645-4882-a4f1-46be867b7983/0/2664CBE10F2B9FF1BEC50A6A85DC7AA52B9F17FA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:cc:44:c0:95:d5:4a:fb:6b:68:40:9f:ca:67:c8:39:ce:c1: ee:ee:a0:3b:67:cd:7a:a6:fe:92:d6:bd:02:00:32:e0:4a:9d: 1c:62:fd:c7:2d:e0:bc:62:18:37:d8:5a:05:95:c2:51:3c:24: 47:2d:fe:1c:e4:38:c6:de:6a:c5:28:99:fe:c3:a5:bd:f5:91: 1a:27:72:da:d0:76:bb:84:20:01:40:20:4e:4c:4e:b6:24:f3: d8:50:19:2a:f1:ce:a8:82:17:9b:a8:3d:f7:80:e6:b7:be:29: 14:a0:eb:a2:14:03:2e:ba:71:6d:b7:d9:09:6d:32:20:c2:be: f2:27:ee:7d:5d:89:e6:8f:b2:39:0c:ff:46:5f:2c:ec:fc:e0: ee:a4:bd:8f:f7:41:ab:13:79:3a:9c:bf:b6:14:04:20:38:e8: dc:d4:2c:95:da:5e:c8:cb:66:80:b3:3e:92:83:49:f8:2c:e8: 24:d4:75:97:89:ac:9f:36:12:64:0e:21:2c:ab:9d:97:64:3d: ce:16:77:88:82:21:35:00:d8:b0:36:9f:a3:92:f8:8b:a5:07: ae:c2:f3:13:d4:c3:75:03:0d:c8:a2:a5:fe:e3:68:51:78:96: bb:db:3f:68:bd:f0:7e:11:91:3c:c8:e1:6c:a6:3a:1a:fe:c4: c9:1d:ef:f5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZf9sXaB3FLJ5r4Wbq6rU69AxWN0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjY2NENCRTEwRjJCOUZGMUJFQzUwQTZBODVEQzdBQTUy QjlGMTdGQTAeFw0yNTEyMDIxODE3MThaFw0yNTEyMDUxODIyMThaMDMxMTAvBgNV BAMTKDVGMTJGRjUyODE1M0Q4NTk5Mzg1MzI4OTM4QTNEOTY0NDFCOEFCNjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSF0n0oXRSfZNINPt8ZitEe4Bc nDeZ8j6Yf6PwLoYzO72qKjLyT5BxmuhGn71KTAql3CJ2iWOsUV2wfoXCIT2i5qfE N5UzkFC+gY2tK8FOKdJ88G2q5Q+vlWvRV2NZ5Y3CV66uXPeO2+nLfrZm/ijrGunS F1zah9TOpCQfBXu1gJvxWYln2f+dK8GLwuiHcHkbqbY2UvZ7EJw1J/jRrHcA/Fp0 4cIbwVshxc9pPj49Ca/QOhPybHBpzIkEfD9XZJ3HcDWGHvYsqEVWm4ulxShCL2bp FXVqJLVOHva+7KeDIYNkBUU8R/eebzAFNkp0yTdK4vjGsYfOA1OV385qP375AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXxL/UoFT2FmThTKJOKPZZEG4q2EwHwYDVR0j BBgwFoAUJmTL4Q8rn/G+xQpqhdx6pSufF/owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 Y2YzYzIxMS0wNjQ1LTQ4ODItYTRmMS00NmJlODY3Yjc5ODMvMC8yNjY0Q0JFMTBG MkI5RkYxQkVDNTBBNkE4NURDN0FBNTJCOUYxN0ZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjY2NENCRTEwRjJCOUZGMUJFQzUwQTZBODVEQzdBQTUyQjlG MTdGQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGNmM2MyMTEtMDY0NS00ODgyLWE0 ZjEtNDZiZTg2N2I3OTgzLzAvMjY2NENCRTEwRjJCOUZGMUJFQzUwQTZBODVEQzdB QTUyQjlGMTdGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADDMRMCV1Ur7a2hAn8pnyDnOwe7uoDtnzXqm /pLWvQIAMuBKnRxi/cct4LxiGDfYWgWVwlE8JEct/hzkOMbeasUomf7Dpb31kRon ctrQdruEIAFAIE5MTrYk89hQGSrxzqiCF5uoPfeA5re+KRSg66IUAy66cW232Qlt MiDCvvIn7n1dieaPsjkM/0ZfLOz84O6kvY/3QasTeTqcv7YUBCA46NzULJXaXsjL ZoCzPpKDSfgs6CTUdZeJrJ82EmQOISyrnZdkPc4Wd4iCITUA2LA2n6OS+IulB67C 8xPUw3UDDciipf7jaFF4lrvbP2i98H4RkTzI4WymOhr+xMkd7/U= -----END CERTIFICATE-----Generated at Wed Dec 3 13:56:33 2025 by rpki-client