This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ab313d17-5b9b-4d23-9424-74579508ba54/0/64FFF4BF67B5B3EF9DC6545842C118D75F6042D8.mft File: 64FFF4BF67B5B3EF9DC6545842C118D75F6042D8.mft (raw, json) Hash identifier: wFUDYyU9ZKw3cJF/ZyWoHTdNL/1btODbI1f3zIhXNxs= Subject key identifier: 1F:E3:F4:9A:23:86:3B:08:50:55:E7:C1:C8:F8:8F:E5:62:EB:6D:83 Authority key identifier: 64:FF:F4:BF:67:B5:B3:EF:9D:C6:54:58:42:C1:18:D7:5F:60:42:D8 Certificate issuer: /CN=64FFF4BF67B5B3EF9DC6545842C118D75F6042D8 Certificate serial: 79A046C45E9E112993A8C38CB3C7737A6264EAAF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64FFF4BF67B5B3EF9DC6545842C118D75F6042D8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ab313d17-5b9b-4d23-9424-74579508ba54/0/64FFF4BF67B5B3EF9DC6545842C118D75F6042D8.mft Manifest number: 01B0 Signing time: Wed 17 Dec 2025 08:02:26 +0000 Manifest this update: Wed 17 Dec 2025 07:57:26 +0000 Manifest next update: Sat 20 Dec 2025 16:41:26 +0000 Files and hashes: 1: 3130332e33362e36382e302f32342d3234203d3e20313333333631.roa (hash: oP07dPM6PnkRNB+PzrhdYOY9okyRdrsFM/T0aA1Ih1s=) 2: 64FFF4BF67B5B3EF9DC6545842C118D75F6042D8.crl (hash: 2xHr9Y3yXxIxbV4oz6QvRlfcRSLIoXYsmII61ci6Tyc=) 3: 3130332e33372e3232392e302f32342d3234203d3e20313333333631.roa (hash: OMvT7v+SWmvCcI/oQS1wfiv6hD1AXfKdII4PA3MiDEc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ab313d17-5b9b-4d23-9424-74579508ba54/0/64FFF4BF67B5B3EF9DC6545842C118D75F6042D8.crl rsync://repo-rpki.idnic.net/repo/ab313d17-5b9b-4d23-9424-74579508ba54/0/64FFF4BF67B5B3EF9DC6545842C118D75F6042D8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64FFF4BF67B5B3EF9DC6545842C118D75F6042D8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 16:41:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:a0:46:c4:5e:9e:11:29:93:a8:c3:8c:b3:c7:73:7a:62:64:ea:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64FFF4BF67B5B3EF9DC6545842C118D75F6042D8 Validity Not Before: Dec 17 07:57:26 2025 GMT Not After : Dec 20 16:41:26 2025 GMT Subject: CN=1FE3F49A23863B085055E7C1C8F88FE562EB6D83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:10:2d:98:1c:d2:2c:90:d9:1d:95:28:18:67: 91:d5:0a:a9:f3:21:21:22:da:04:94:c4:03:eb:39: 7d:91:c5:14:08:0a:8c:cb:c3:99:c3:ee:2a:22:0b: b4:a1:4f:cc:ba:4b:75:c4:bc:2a:c2:99:3e:1e:a2: c1:3b:9a:ca:3a:07:b4:5f:aa:ba:f7:7a:d3:43:d4: 7b:8b:7b:10:e0:70:d3:e4:fd:f2:37:ae:84:7b:84: 5b:23:01:b2:c4:45:c8:83:a4:14:5d:fd:86:53:98: 01:ae:5f:74:e6:96:ea:5d:75:3d:51:ff:a1:3f:03: 17:43:ea:c5:47:0c:18:21:74:1f:e4:eb:f6:b5:4e: b7:37:0d:e9:76:7b:46:2b:70:a2:d6:cb:6a:3c:37: 2b:6e:ba:13:5b:68:ce:a5:74:be:a9:91:b4:6f:18: af:bb:9d:c1:d7:27:85:7b:9e:04:83:99:5e:f6:d1: 38:97:f3:2e:89:38:85:e7:3f:26:9e:ec:d3:18:84: 64:e2:52:b0:ed:86:8a:25:51:e9:d9:e7:96:e7:d3: 79:8d:18:4f:87:aa:65:bd:dd:0c:8b:0b:10:31:e7: f8:eb:e8:89:f4:00:18:2a:8b:13:b1:e5:27:ed:03: d0:8c:de:d3:24:57:87:6d:9d:c3:cc:8e:6d:76:70: 47:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:E3:F4:9A:23:86:3B:08:50:55:E7:C1:C8:F8:8F:E5:62:EB:6D:83 X509v3 Authority Key Identifier: keyid:64:FF:F4:BF:67:B5:B3:EF:9D:C6:54:58:42:C1:18:D7:5F:60:42:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ab313d17-5b9b-4d23-9424-74579508ba54/0/64FFF4BF67B5B3EF9DC6545842C118D75F6042D8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64FFF4BF67B5B3EF9DC6545842C118D75F6042D8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ab313d17-5b9b-4d23-9424-74579508ba54/0/64FFF4BF67B5B3EF9DC6545842C118D75F6042D8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:c4:9d:e9:d2:46:3d:16:47:d4:aa:3b:72:61:96:63:39:97: cd:9a:df:56:d3:b5:d6:9e:0f:9c:71:f9:74:31:cc:fd:19:46: 55:07:97:c9:e9:56:54:02:23:51:c2:fc:5c:cb:5e:1c:ad:49: 79:29:c8:f7:e0:3c:f6:9c:e0:d4:52:e5:b5:ee:20:38:e9:f7: 21:3c:8b:14:a7:4d:ba:01:7c:a1:f8:88:dd:5b:56:19:2d:d0: 31:ff:05:52:45:e3:35:70:4a:0f:b1:85:76:07:b6:27:fd:91: a6:70:42:d6:ad:62:24:38:a0:71:88:5e:99:d9:ca:67:32:d4: ad:b4:0f:2c:cf:33:5c:30:d5:07:79:7b:c9:16:db:cc:5f:52: e4:b3:e2:fc:1e:41:f8:c3:56:49:74:e2:45:c7:1d:47:6a:72: 87:45:96:e0:59:cd:83:44:f4:61:27:b7:8d:f5:5c:4c:da:ae: 35:2a:7a:01:a2:bd:d7:cd:9f:c7:b0:f6:72:86:f3:ac:1e:8c: 16:fd:48:2e:f6:5d:17:c2:9d:e7:30:c2:31:13:89:19:c8:17: 8e:da:76:0c:90:df:f2:85:85:a6:1e:a0:26:35:e5:2a:d5:16: 60:a4:49:37:67:f6:32:8d:6e:01:c0:e9:c2:66:2d:da:49:0c: a8:df:ad:5f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeaBGxF6eESmTqMOMs8dzemJk6q8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjRGRkY0QkY2N0I1QjNFRjlEQzY1NDU4NDJDMTE4RDc1 RjYwNDJEODAeFw0yNTEyMTcwNzU3MjZaFw0yNTEyMjAxNjQxMjZaMDMxMTAvBgNV BAMTKDFGRTNGNDlBMjM4NjNCMDg1MDU1RTdDMUM4Rjg4RkU1NjJFQjZEODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4EC2YHNIskNkdlSgYZ5HVCqnz ISEi2gSUxAPrOX2RxRQICozLw5nD7ioiC7ShT8y6S3XEvCrCmT4eosE7mso6B7Rf qrr3etND1HuLexDgcNPk/fI3roR7hFsjAbLERciDpBRd/YZTmAGuX3TmlupddT1R /6E/AxdD6sVHDBghdB/k6/a1Trc3Del2e0YrcKLWy2o8NytuuhNbaM6ldL6pkbRv GK+7ncHXJ4V7ngSDmV720TiX8y6JOIXnPyae7NMYhGTiUrDthoolUenZ55bn03mN GE+HqmW93QyLCxAx5/jr6In0ABgqixOx5SftA9CM3tMkV4dtncPMjm12cEfTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUH+P0miOGOwhQVefByPiP5WLrbYMwHwYDVR0j BBgwFoAUZP/0v2e1s++dxlRYQsEY119gQtgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YjMxM2QxNy01YjliLTRkMjMtOTQyNC03NDU3OTUwOGJhNTQvMC82NEZGRjRCRjY3 QjVCM0VGOURDNjU0NTg0MkMxMThENzVGNjA0MkQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjRGRkY0QkY2N0I1QjNFRjlEQzY1NDU4NDJDMTE4RDc1RjYw NDJEOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWIzMTNkMTctNWI5Yi00ZDIzLTk0 MjQtNzQ1Nzk1MDhiYTU0LzAvNjRGRkY0QkY2N0I1QjNFRjlEQzY1NDU4NDJDMTE4 RDc1RjYwNDJEOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEDEnenSRj0WR9SqO3JhlmM5l82a31bTtdae D5xx+XQxzP0ZRlUHl8npVlQCI1HC/FzLXhytSXkpyPfgPPac4NRS5bXuIDjp9yE8 ixSnTboBfKH4iN1bVhkt0DH/BVJF4zVwSg+xhXYHtif9kaZwQtatYiQ4oHGIXpnZ ymcy1K20DyzPM1ww1Qd5e8kW28xfUuSz4vweQfjDVkl04kXHHUdqcodFluBZzYNE 9GEnt431XEzarjUqegGivdfNn8ew9nKG86wejBb9SC72XRfCnecwwjETiRnIF47a dgyQ3/KFhaYeoCY15SrVFmCkSTdn9jKNbgHA6cJmLdpJDKjfrV8= -----END CERTIFICATE-----Generated at Fri Dec 19 11:22:52 2025 by rpki-client