This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a7099e42-2e9f-4e8a-99e8-ad50453b066f/0/64EB10DDE855CE764FFDFD8EFAE062A45060C522.mft File: 64EB10DDE855CE764FFDFD8EFAE062A45060C522.mft (raw, json) Hash identifier: cYi1NPTK/MxAOSr4LwI6LxeKh7HTQIaYNevOqA7ALQY= Subject key identifier: 85:DD:6A:B0:2B:AD:72:DA:1D:7F:34:84:46:BB:A7:FE:7E:0B:F3:9F Authority key identifier: 64:EB:10:DD:E8:55:CE:76:4F:FD:FD:8E:FA:E0:62:A4:50:60:C5:22 Certificate issuer: /CN=64EB10DDE855CE764FFDFD8EFAE062A45060C522 Certificate serial: 3B1AE53F48E8096708F673D17B31349B795984CA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64EB10DDE855CE764FFDFD8EFAE062A45060C522.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a7099e42-2e9f-4e8a-99e8-ad50453b066f/0/64EB10DDE855CE764FFDFD8EFAE062A45060C522.mft Manifest number: 013B Signing time: Mon 01 Dec 2025 12:31:03 +0000 Manifest this update: Mon 01 Dec 2025 12:26:03 +0000 Manifest next update: Thu 04 Dec 2025 12:32:03 +0000 Files and hashes: 1: 64EB10DDE855CE764FFDFD8EFAE062A45060C522.crl (hash: MT4Yw/BkFk6mNze0519m0pN7RJASnLXG92XzAXyPpaA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a7099e42-2e9f-4e8a-99e8-ad50453b066f/0/64EB10DDE855CE764FFDFD8EFAE062A45060C522.crl rsync://repo-rpki.idnic.net/repo/a7099e42-2e9f-4e8a-99e8-ad50453b066f/0/64EB10DDE855CE764FFDFD8EFAE062A45060C522.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64EB10DDE855CE764FFDFD8EFAE062A45060C522.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Dec 2025 12:32:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:1a:e5:3f:48:e8:09:67:08:f6:73:d1:7b:31:34:9b:79:59:84:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64EB10DDE855CE764FFDFD8EFAE062A45060C522 Validity Not Before: Dec 1 12:26:03 2025 GMT Not After : Dec 4 12:32:03 2025 GMT Subject: CN=85DD6AB02BAD72DA1D7F348446BBA7FE7E0BF39F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:6e:f6:ad:0e:18:0e:0d:a1:22:a3:e5:30:32: f1:b1:fe:4d:46:45:4d:49:f3:ff:9d:72:3d:0b:ce: 9d:2a:1a:50:c9:e8:72:7e:67:57:14:96:f0:48:4b: 0e:c8:4a:fe:2a:46:16:66:93:b7:1d:9b:d6:76:ef: 09:b6:b3:53:54:83:09:40:d6:1a:c7:82:e4:6a:cf: ea:4d:34:39:de:26:2b:49:fe:9c:87:09:c4:a5:16: 96:56:e8:84:94:3f:05:fd:c9:4c:c1:45:2f:13:ac: b5:8e:a2:aa:9a:a4:a9:ad:8b:f8:ad:1e:a7:bd:8d: 50:fc:da:f9:fc:ec:0f:2d:c7:77:8e:08:9f:2c:a9: 8c:a8:5e:4e:b2:89:99:50:2b:f5:6c:8a:75:57:0f: d3:6f:76:70:9b:a7:dc:5a:32:31:a6:77:bc:c9:d5: 59:3e:9c:25:b7:e0:42:c2:6b:8a:4a:4f:c5:93:7f: c1:17:f0:bd:5a:46:95:93:ab:59:77:79:42:92:05: 43:87:4d:30:be:96:dc:b4:1d:33:d9:30:84:15:b6: 32:a5:99:fe:9e:f9:13:0d:88:0f:8a:27:71:c9:47: 37:3f:0c:32:71:6b:dc:f2:53:c3:ab:3b:e3:58:68: d1:46:16:17:f0:04:54:0d:8d:a6:79:7a:d9:a4:19: b4:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:DD:6A:B0:2B:AD:72:DA:1D:7F:34:84:46:BB:A7:FE:7E:0B:F3:9F X509v3 Authority Key Identifier: keyid:64:EB:10:DD:E8:55:CE:76:4F:FD:FD:8E:FA:E0:62:A4:50:60:C5:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a7099e42-2e9f-4e8a-99e8-ad50453b066f/0/64EB10DDE855CE764FFDFD8EFAE062A45060C522.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64EB10DDE855CE764FFDFD8EFAE062A45060C522.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a7099e42-2e9f-4e8a-99e8-ad50453b066f/0/64EB10DDE855CE764FFDFD8EFAE062A45060C522.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c3:35:ec:58:7b:96:40:37:7c:2e:22:ed:98:cf:ad:8d:c0:f6: 52:ad:e2:2b:a8:d4:07:46:f6:ac:c6:a3:4f:59:02:bd:b8:d3: ac:9e:ee:23:4d:06:12:4e:10:ce:dc:5f:2d:40:33:45:99:b5: c5:a0:3a:e7:70:db:f5:84:bd:5a:b4:61:24:f8:76:a2:f6:08: 51:2d:35:2a:4c:f7:b8:60:4e:3a:e8:8d:8c:29:4c:c5:6b:67: 45:ef:d4:66:cd:43:b2:4b:f9:1c:78:c2:00:93:a6:01:61:2e: 80:82:fd:cf:62:4a:4d:3b:e9:ca:92:7d:59:8d:b7:6e:50:12: d3:90:55:93:1d:9a:b4:89:27:7d:26:77:20:5b:48:84:fd:87: 6c:25:41:53:8f:86:f0:d2:b5:a9:fe:7b:2a:9a:1f:cb:82:86: b4:7b:82:d0:46:00:55:af:77:57:a1:59:3b:58:a4:1d:82:9f: 01:4a:b2:c8:23:57:03:4f:0e:1a:c8:1c:b7:37:1f:47:de:2e: ee:36:4f:18:f8:97:37:bb:aa:a0:ba:e3:d4:5b:c4:9e:74:18: 6c:6c:5c:a9:a8:df:6b:3c:84:63:56:75:db:ff:ad:81:bc:91: a5:c2:5d:ed:21:08:7e:37:03:1f:d4:b0:2e:17:4e:55:9e:bc: 67:a1:b9:69 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOxrlP0joCWcI9nPRezE0m3lZhMowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjRFQjEwRERFODU1Q0U3NjRGRkRGRDhFRkFFMDYyQTQ1 MDYwQzUyMjAeFw0yNTEyMDExMjI2MDNaFw0yNTEyMDQxMjMyMDNaMDMxMTAvBgNV BAMTKDg1REQ2QUIwMkJBRDcyREExRDdGMzQ4NDQ2QkJBN0ZFN0UwQkYzOUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHbvatDhgODaEio+UwMvGx/k1G RU1J8/+dcj0Lzp0qGlDJ6HJ+Z1cUlvBISw7ISv4qRhZmk7cdm9Z27wm2s1NUgwlA 1hrHguRqz+pNNDneJitJ/pyHCcSlFpZW6ISUPwX9yUzBRS8TrLWOoqqapKmti/it Hqe9jVD82vn87A8tx3eOCJ8sqYyoXk6yiZlQK/VsinVXD9NvdnCbp9xaMjGmd7zJ 1Vk+nCW34ELCa4pKT8WTf8EX8L1aRpWTq1l3eUKSBUOHTTC+lty0HTPZMIQVtjKl mf6e+RMNiA+KJ3HJRzc/DDJxa9zyU8OrO+NYaNFGFhfwBFQNjaZ5etmkGbRdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhd1qsCutctodfzSERrun/n4L858wHwYDVR0j BBgwFoAUZOsQ3ehVznZP/f2O+uBipFBgxSIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NzA5OWU0Mi0yZTlmLTRlOGEtOTllOC1hZDUwNDUzYjA2NmYvMC82NEVCMTBEREU4 NTVDRTc2NEZGREZEOEVGQUUwNjJBNDUwNjBDNTIyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjRFQjEwRERFODU1Q0U3NjRGRkRGRDhFRkFFMDYyQTQ1MDYw QzUyMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTcwOTllNDItMmU5Zi00ZThhLTk5 ZTgtYWQ1MDQ1M2IwNjZmLzAvNjRFQjEwRERFODU1Q0U3NjRGRkRGRDhFRkFFMDYy QTQ1MDYwQzUyMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMM17Fh7lkA3fC4i7ZjPrY3A9lKt4iuo1AdG 9qzGo09ZAr2406ye7iNNBhJOEM7cXy1AM0WZtcWgOudw2/WEvVq0YST4dqL2CFEt NSpM97hgTjrojYwpTMVrZ0Xv1GbNQ7JL+Rx4wgCTpgFhLoCC/c9iSk076cqSfVmN t25QEtOQVZMdmrSJJ30mdyBbSIT9h2wlQVOPhvDStan+eyqaH8uChrR7gtBGAFWv d1ehWTtYpB2CnwFKssgjVwNPDhrIHLc3H0feLu42Txj4lze7qqC649RbxJ50GGxs XKmo32s8hGNWddv/rYG8kaXCXe0hCH43Ax/UsC4XTlWevGehuWk= -----END CERTIFICATE-----Generated at Wed Dec 3 14:13:24 2025 by rpki-client