This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a262d341-94b5-474e-8bcd-d17988f099b3/0/64B2DB7703C5C56A6F69C4789AB9F69214F22695.mft File: 64B2DB7703C5C56A6F69C4789AB9F69214F22695.mft (raw, json) Hash identifier: 4J278bZjTQ/TJVONIHClZlt9EfAy6l9wvWYLEdhnmOs= Subject key identifier: 7C:56:9D:CC:C8:0D:22:4B:75:26:AC:B6:A9:5F:A8:57:FB:F6:7D:40 Authority key identifier: 64:B2:DB:77:03:C5:C5:6A:6F:69:C4:78:9A:B9:F6:92:14:F2:26:95 Certificate issuer: /CN=64B2DB7703C5C56A6F69C4789AB9F69214F22695 Certificate serial: 3DADFDD3107819928E42161FAD43DE15F509559F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64B2DB7703C5C56A6F69C4789AB9F69214F22695.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a262d341-94b5-474e-8bcd-d17988f099b3/0/64B2DB7703C5C56A6F69C4789AB9F69214F22695.mft Manifest number: 01A1 Signing time: Tue 02 Dec 2025 14:21:09 +0000 Manifest this update: Tue 02 Dec 2025 14:16:09 +0000 Manifest next update: Fri 05 Dec 2025 18:17:09 +0000 Files and hashes: 1: 64B2DB7703C5C56A6F69C4789AB9F69214F22695.crl (hash: JAqinMswQsSc9plw8Q1+D2N1x6jYhcU1dE6BjCaoJCI=) 2: 3130332e3131372e35382e302f32332d3234203d3e20313530393534.roa (hash: PRtjDQLWn7DOhqpJ6ZyrW9FMpW7szF9MrVItEP9hNn4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a262d341-94b5-474e-8bcd-d17988f099b3/0/64B2DB7703C5C56A6F69C4789AB9F69214F22695.crl rsync://repo-rpki.idnic.net/repo/a262d341-94b5-474e-8bcd-d17988f099b3/0/64B2DB7703C5C56A6F69C4789AB9F69214F22695.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64B2DB7703C5C56A6F69C4789AB9F69214F22695.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 18:17:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:ad:fd:d3:10:78:19:92:8e:42:16:1f:ad:43:de:15:f5:09:55:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64B2DB7703C5C56A6F69C4789AB9F69214F22695 Validity Not Before: Dec 2 14:16:09 2025 GMT Not After : Dec 5 18:17:09 2025 GMT Subject: CN=7C569DCCC80D224B7526ACB6A95FA857FBF67D40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:d2:55:82:e7:3f:73:37:ed:82:0d:f7:23:ad: 90:cc:8e:19:57:41:bb:f4:02:56:d6:89:83:ad:72: 0e:2a:8f:6f:6e:bf:c6:1c:a2:d3:93:d8:d7:a0:7d: fe:1c:1e:d5:58:88:86:11:4c:c4:7b:25:91:92:17: d2:b2:fa:8a:be:21:f9:2f:21:77:ec:ec:00:76:6a: 3b:f7:25:96:f5:dd:84:42:53:c3:fe:3a:aa:64:31: a2:48:5c:0f:4b:e4:a2:52:4c:c8:8b:f8:4a:08:f2: bb:38:32:8e:21:cb:ca:f4:c1:75:39:5a:ed:50:2b: 75:9b:10:92:66:54:13:e9:2b:bb:03:c3:ee:fb:38: 95:50:a4:7a:f4:81:ee:8d:d6:55:be:0f:69:fe:d3: 8a:c3:2a:35:67:aa:8b:98:be:0d:ee:48:bd:87:35: 11:6c:22:33:fd:8b:0b:5e:dd:a2:45:72:87:9c:2d: 59:b4:a4:97:2c:5f:5f:69:be:2c:6b:4e:37:b4:7e: 47:fa:98:2f:cd:8e:49:8d:d6:e2:7f:c1:de:67:bd: 58:29:b0:20:d7:fc:b7:ee:4a:f9:09:c9:76:b8:2e: 26:e4:47:02:b4:17:87:d5:94:36:2f:27:6b:61:b7: d9:34:98:b2:84:da:7e:3c:de:70:f9:0e:85:6c:bc: fe:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:56:9D:CC:C8:0D:22:4B:75:26:AC:B6:A9:5F:A8:57:FB:F6:7D:40 X509v3 Authority Key Identifier: keyid:64:B2:DB:77:03:C5:C5:6A:6F:69:C4:78:9A:B9:F6:92:14:F2:26:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a262d341-94b5-474e-8bcd-d17988f099b3/0/64B2DB7703C5C56A6F69C4789AB9F69214F22695.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64B2DB7703C5C56A6F69C4789AB9F69214F22695.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a262d341-94b5-474e-8bcd-d17988f099b3/0/64B2DB7703C5C56A6F69C4789AB9F69214F22695.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:1f:3a:19:bd:42:f2:5d:99:3a:9f:aa:2a:13:e2:c3:f7:f5: 12:b6:04:c9:d2:51:be:e5:92:05:0a:32:2b:6f:f2:cc:dc:84: 2e:2e:bb:36:03:34:e9:13:7d:af:c7:51:08:ed:07:c6:ff:e0: fd:8a:9a:97:44:7c:37:6a:22:8a:9a:a6:f7:a3:c5:f5:67:00: bf:f8:ab:d4:9a:97:c9:1c:e7:6b:a5:d0:d9:41:da:e6:65:ff: 76:67:1d:de:88:a2:15:81:50:08:f6:6a:b5:6b:ac:84:36:2e: f9:7c:a2:f8:e2:84:49:fb:2c:34:fc:67:2a:52:5c:84:7b:15: 34:ed:20:bf:17:14:09:41:32:08:1e:48:ca:8f:de:49:a5:fc: da:ba:0d:e1:c8:ef:1b:32:0a:2e:55:f0:1a:14:9c:31:b8:13: cc:1d:24:f4:d9:41:10:8b:c3:4d:64:bd:85:b4:fc:e3:89:8b: ed:1b:8d:1d:45:2b:71:7d:50:88:32:c9:9d:61:34:91:80:af: ac:04:c7:67:3d:96:6e:01:f4:50:84:28:b7:b8:9e:ab:f1:7c: 88:8d:0a:ac:55:e8:90:ad:2f:41:6f:d2:30:ce:97:1f:4c:08: 82:1f:04:b2:59:2a:06:cb:35:98:71:a0:47:22:30:eb:e9:f2: 2f:5e:ea:13 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPa390xB4GZKOQhYfrUPeFfUJVZ8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjRCMkRCNzcwM0M1QzU2QTZGNjlDNDc4OUFCOUY2OTIx NEYyMjY5NTAeFw0yNTEyMDIxNDE2MDlaFw0yNTEyMDUxODE3MDlaMDMxMTAvBgNV BAMTKDdDNTY5RENDQzgwRDIyNEI3NTI2QUNCNkE5NUZBODU3RkJGNjdENDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN0lWC5z9zN+2CDfcjrZDMjhlX Qbv0AlbWiYOtcg4qj29uv8YcotOT2Negff4cHtVYiIYRTMR7JZGSF9Ky+oq+Ifkv IXfs7AB2ajv3JZb13YRCU8P+OqpkMaJIXA9L5KJSTMiL+EoI8rs4Mo4hy8r0wXU5 Wu1QK3WbEJJmVBPpK7sDw+77OJVQpHr0ge6N1lW+D2n+04rDKjVnqouYvg3uSL2H NRFsIjP9iwte3aJFcoecLVm0pJcsX19pvixrTje0fkf6mC/NjkmN1uJ/wd5nvVgp sCDX/LfuSvkJyXa4LibkRwK0F4fVlDYvJ2tht9k0mLKE2n483nD5DoVsvP5pAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfFadzMgNIkt1Jqy2qV+oV/v2fUAwHwYDVR0j BBgwFoAUZLLbdwPFxWpvacR4mrn2khTyJpUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MjYyZDM0MS05NGI1LTQ3NGUtOGJjZC1kMTc5ODhmMDk5YjMvMC82NEIyREI3NzAz QzVDNTZBNkY2OUM0Nzg5QUI5RjY5MjE0RjIyNjk1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjRCMkRCNzcwM0M1QzU2QTZGNjlDNDc4OUFCOUY2OTIxNEYy MjY5NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTI2MmQzNDEtOTRiNS00NzRlLThi Y2QtZDE3OTg4ZjA5OWIzLzAvNjRCMkRCNzcwM0M1QzU2QTZGNjlDNDc4OUFCOUY2 OTIxNEYyMjY5NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC0fOhm9QvJdmTqfqioT4sP39RK2BMnSUb7l kgUKMitv8szchC4uuzYDNOkTfa/HUQjtB8b/4P2KmpdEfDdqIoqapvejxfVnAL/4 q9Sal8kc52ul0NlB2uZl/3ZnHd6IohWBUAj2arVrrIQ2Lvl8ovjihEn7LDT8ZypS XIR7FTTtIL8XFAlBMggeSMqP3kml/Nq6DeHI7xsyCi5V8BoUnDG4E8wdJPTZQRCL w01kvYW0/OOJi+0bjR1FK3F9UIgyyZ1hNJGAr6wEx2c9lm4B9FCEKLe4nqvxfIiN CqxV6JCtL0Fv0jDOlx9MCIIfBLJZKgbLNZhxoEciMOvp8i9e6hM= -----END CERTIFICATE-----Generated at Wed Dec 3 14:42:26 2025 by rpki-client