This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/9a0129a8-27e8-4046-8989-865b257ea6ca/0/A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A.mft File: A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A.mft (raw, json) Hash identifier: DC6ujDbfjMDMvhBy+CSqjCU8fz/fB7tyStDUQOOr7ww= Subject key identifier: 71:DF:75:BE:33:84:60:E1:77:14:37:12:FA:12:59:56:6B:CD:AD:C1 Authority key identifier: A6:49:57:71:5E:7D:CE:EC:3A:7D:4C:31:76:CC:97:ED:8E:5D:B3:1A Certificate issuer: /CN=A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A Certificate serial: 22AA18F426D5ADCAB76A741DB84EEFAEEC25FC82 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9a0129a8-27e8-4046-8989-865b257ea6ca/0/A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A.mft Manifest number: 01BB Signing time: Tue 16 Dec 2025 17:12:17 +0000 Manifest this update: Tue 16 Dec 2025 17:07:17 +0000 Manifest next update: Fri 19 Dec 2025 23:37:17 +0000 Files and hashes: 1: A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A.crl (hash: DBTkXddQZNzpP1Rmpqp06cfXKe/aKk3wXuV9ic7Ez5g=) 2: 3130332e3230332e39302e302f32342d3234203d3e20313530393236.roa (hash: lH+IV1VjfExz6EgaEksT/6x5pW3sOfiOZbcnKLG8hUk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9a0129a8-27e8-4046-8989-865b257ea6ca/0/A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A.crl rsync://repo-rpki.idnic.net/repo/9a0129a8-27e8-4046-8989-865b257ea6ca/0/A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Dec 2025 23:37:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:aa:18:f4:26:d5:ad:ca:b7:6a:74:1d:b8:4e:ef:ae:ec:25:fc:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A Validity Not Before: Dec 16 17:07:17 2025 GMT Not After : Dec 19 23:37:17 2025 GMT Subject: CN=71DF75BE338460E177143712FA1259566BCDADC1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:48:4a:bf:c6:fe:c5:7c:ac:4c:97:f8:6c:83: 59:d6:5a:60:92:c0:14:f7:c1:02:bb:5c:eb:94:d0: 50:e3:99:0a:c9:c2:b0:e3:f1:44:1a:91:b5:30:b9: 3d:52:37:3f:c4:24:1d:12:09:7b:d2:62:24:9a:f4: bb:92:60:3d:cc:c6:01:49:65:8a:13:d1:af:c2:1c: 21:41:26:ca:bb:a7:75:0d:7d:02:26:79:b5:92:86: 7b:60:25:15:5a:aa:c5:23:4d:f4:03:8c:5e:99:71: b7:7e:36:df:99:34:77:df:ec:1a:26:ee:68:60:a2: b0:41:94:d6:0c:f8:a8:a3:e1:3c:f0:e6:90:73:ac: bc:09:ee:70:e4:f5:c0:d0:29:ce:eb:60:68:fa:ea: 01:c8:e9:53:8f:35:07:81:3e:65:a2:72:6c:70:ee: f6:44:8a:52:bf:91:08:da:21:59:65:6a:41:e8:1d: e7:80:03:92:2e:40:78:56:25:3b:0d:53:96:48:40: ac:3c:20:d9:71:b3:60:97:e2:63:1a:aa:5f:66:64: 28:c4:4a:1b:5f:54:8a:d2:82:e7:23:6d:14:85:9c: da:d5:11:cf:6f:cc:8d:e4:97:e5:f7:00:c6:57:4d: 2f:ca:cb:b7:b2:d8:7e:a9:64:dc:c4:74:e7:af:da: d8:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:DF:75:BE:33:84:60:E1:77:14:37:12:FA:12:59:56:6B:CD:AD:C1 X509v3 Authority Key Identifier: keyid:A6:49:57:71:5E:7D:CE:EC:3A:7D:4C:31:76:CC:97:ED:8E:5D:B3:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9a0129a8-27e8-4046-8989-865b257ea6ca/0/A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9a0129a8-27e8-4046-8989-865b257ea6ca/0/A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:33:4c:d7:00:40:d2:e9:15:cd:8f:c9:54:76:c5:1a:18:fb: fa:35:0b:ff:4f:96:f3:6a:71:c5:f9:99:7c:70:91:cb:61:ab: 9f:c0:bd:2c:4d:b7:0e:e7:10:6e:ba:2d:46:72:26:e8:3b:c6: 05:d5:a1:a8:c6:03:be:88:b2:58:1b:46:ee:29:e1:79:1f:af: 57:41:3f:fc:34:88:dc:84:ab:ad:83:66:cd:06:31:78:ac:df: 05:be:32:29:f0:e1:89:e3:df:b9:c3:02:f0:06:f2:2d:d5:df: 3d:12:b8:36:ff:4e:2b:5e:8c:52:d3:1d:e5:2a:66:3d:56:93: 13:e9:e9:e1:55:c4:1b:a6:6e:5e:16:8a:3e:aa:3e:6f:60:d9: 03:4d:1a:c4:33:fe:6e:c8:46:97:79:ee:d6:68:27:0d:36:24: d6:8c:39:a4:b0:77:04:fa:a3:b4:fe:da:48:99:58:60:d0:fa: 0a:19:92:3a:d2:93:a5:9d:26:a3:42:7b:e2:5a:fc:27:32:7a: de:4f:2c:c5:9b:98:01:c5:cc:c3:d8:5d:b0:73:6a:ea:84:65: 19:16:2f:f6:9f:e2:0c:e9:7d:f4:33:80:dc:38:66:9f:e6:67: fe:1c:9a:1d:ae:92:c2:e1:f6:07:fc:7e:56:23:16:7a:ef:27: 90:3d:64:24 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIqoY9CbVrcq3anQduE7vruwl/IIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTY0OTU3NzE1RTdEQ0VFQzNBN0Q0QzMxNzZDQzk3RUQ4 RTVEQjMxQTAeFw0yNTEyMTYxNzA3MTdaFw0yNTEyMTkyMzM3MTdaMDMxMTAvBgNV BAMTKDcxREY3NUJFMzM4NDYwRTE3NzE0MzcxMkZBMTI1OTU2NkJDREFEQzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwSEq/xv7FfKxMl/hsg1nWWmCS wBT3wQK7XOuU0FDjmQrJwrDj8UQakbUwuT1SNz/EJB0SCXvSYiSa9LuSYD3MxgFJ ZYoT0a/CHCFBJsq7p3UNfQImebWShntgJRVaqsUjTfQDjF6Zcbd+Nt+ZNHff7Bom 7mhgorBBlNYM+Kij4Tzw5pBzrLwJ7nDk9cDQKc7rYGj66gHI6VOPNQeBPmWicmxw 7vZEilK/kQjaIVllakHoHeeAA5IuQHhWJTsNU5ZIQKw8INlxs2CX4mMaql9mZCjE ShtfVIrSgucjbRSFnNrVEc9vzI3kl+X3AMZXTS/Ky7ey2H6pZNzEdOev2tiTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcd91vjOEYOF3FDcS+hJZVmvNrcEwHwYDVR0j BBgwFoAUpklXcV59zuw6fUwxdsyX7Y5dsxowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YTAxMjlhOC0yN2U4LTQwNDYtODk4OS04NjViMjU3ZWE2Y2EvMC9BNjQ5NTc3MTVF N0RDRUVDM0E3RDRDMzE3NkNDOTdFRDhFNURCMzFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTY0OTU3NzE1RTdEQ0VFQzNBN0Q0QzMxNzZDQzk3RUQ4RTVE QjMxQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWEwMTI5YTgtMjdlOC00MDQ2LTg5 ODktODY1YjI1N2VhNmNhLzAvQTY0OTU3NzE1RTdEQ0VFQzNBN0Q0QzMxNzZDQzk3 RUQ4RTVEQjMxQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB0zTNcAQNLpFc2PyVR2xRoY+/o1C/9PlvNq ccX5mXxwkcthq5/AvSxNtw7nEG66LUZyJug7xgXVoajGA76IslgbRu4p4Xkfr1dB P/w0iNyEq62DZs0GMXis3wW+Minw4Ynj37nDAvAG8i3V3z0SuDb/TitejFLTHeUq Zj1WkxPp6eFVxBumbl4Wij6qPm9g2QNNGsQz/m7IRpd57tZoJw02JNaMOaSwdwT6 o7T+2kiZWGDQ+goZkjrSk6WdJqNCe+Ja/Ccyet5PLMWbmAHFzMPYXbBzauqEZRkW L/af4gzpffQzgNw4Zp/mZ/4cmh2uksLh9gf8flYjFnrvJ5A9ZCQ= -----END CERTIFICATE-----Generated at Fri Dec 19 00:13:44 2025 by rpki-client