This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/1/1E64BF65051052D913D7DB8C4512F615E3FAB9B2.mft File: 1E64BF65051052D913D7DB8C4512F615E3FAB9B2.mft (raw, json) Hash identifier: jfmBSGfEvbyufq3j7uxgxP1BrGeRajASXUamVt6cSuY= Subject key identifier: AD:58:A3:24:4F:FA:20:4A:DA:3C:4C:3E:E8:CD:C9:3C:2A:D9:91:D6 Authority key identifier: 1E:64:BF:65:05:10:52:D9:13:D7:DB:8C:45:12:F6:15:E3:FA:B9:B2 Certificate issuer: /CN=1E64BF65051052D913D7DB8C4512F615E3FAB9B2 Certificate serial: 016F847368E6EF46E4F3D8293708812A4F0AA35B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1E64BF65051052D913D7DB8C4512F615E3FAB9B2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/1/1E64BF65051052D913D7DB8C4512F615E3FAB9B2.mft Manifest number: F8 Signing time: Tue 16 Dec 2025 11:51:11 +0000 Manifest this update: Tue 16 Dec 2025 11:46:11 +0000 Manifest next update: Fri 19 Dec 2025 20:50:11 +0000 Files and hashes: 1: 1E64BF65051052D913D7DB8C4512F615E3FAB9B2.crl (hash: Yi+uPrQWfQJLIRECm9tM2KpdjTNZ+rES6ekchd0ML8E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/1/1E64BF65051052D913D7DB8C4512F615E3FAB9B2.crl rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/1/1E64BF65051052D913D7DB8C4512F615E3FAB9B2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1E64BF65051052D913D7DB8C4512F615E3FAB9B2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Dec 2025 20:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:6f:84:73:68:e6:ef:46:e4:f3:d8:29:37:08:81:2a:4f:0a:a3:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1E64BF65051052D913D7DB8C4512F615E3FAB9B2 Validity Not Before: Dec 16 11:46:11 2025 GMT Not After : Dec 19 20:50:11 2025 GMT Subject: CN=AD58A3244FFA204ADA3C4C3EE8CDC93C2AD991D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:28:1f:8c:da:af:5b:1e:e3:9f:93:34:61:7e: 5b:11:49:34:25:98:29:f6:de:c1:11:5d:8f:b1:bb: 00:50:ba:27:61:5b:85:54:4b:40:44:45:aa:2a:84: b8:b6:1f:be:bc:ee:cd:ab:8d:5f:7a:eb:bc:1c:ff: c2:3e:a1:89:38:96:55:e8:79:42:8f:08:44:e0:65: ae:ad:dd:a4:20:d1:41:c6:d7:e9:04:39:a0:c2:92: eb:61:71:3b:4c:0f:b8:be:72:f5:58:23:22:51:31: 86:cb:59:81:21:47:6a:4f:97:07:f6:1a:c4:c3:37: 4e:a1:fd:e0:49:17:f3:5f:48:19:ce:69:89:fe:43: 8c:11:fe:4a:52:24:4f:33:58:83:fd:6c:81:2c:ee: d7:65:86:ee:d6:09:f1:bf:b3:a9:e2:92:6a:3c:61: 8a:c2:97:59:20:4b:70:8a:34:83:d1:bb:77:8e:68: 7d:06:2c:a8:23:c7:7b:e7:83:b4:d9:75:e1:16:bd: ec:89:af:d3:97:36:87:82:9a:ab:8d:b3:4c:b8:b9: 48:1e:59:e8:d3:e0:41:bd:4f:06:9e:ab:d2:80:4c: eb:49:d4:9f:63:a8:21:5b:fe:32:a7:cf:24:28:7f: fa:d5:3c:1c:79:f0:bb:10:59:9a:98:db:5b:7a:b7: d2:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:58:A3:24:4F:FA:20:4A:DA:3C:4C:3E:E8:CD:C9:3C:2A:D9:91:D6 X509v3 Authority Key Identifier: keyid:1E:64:BF:65:05:10:52:D9:13:D7:DB:8C:45:12:F6:15:E3:FA:B9:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/1/1E64BF65051052D913D7DB8C4512F615E3FAB9B2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1E64BF65051052D913D7DB8C4512F615E3FAB9B2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/1/1E64BF65051052D913D7DB8C4512F615E3FAB9B2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:7d:9e:f7:2b:84:25:4b:f6:ee:40:17:36:7b:cc:a0:01:f8: cc:e3:c9:56:e6:3e:67:fb:89:e0:a3:b6:18:ca:09:68:dd:2d: bb:88:9f:df:39:f5:10:17:a0:2b:03:f9:38:67:3a:de:23:53: d3:d3:1d:3c:83:13:f4:66:ee:9e:2b:d5:e0:5f:20:66:2f:5f: f7:f8:fa:d9:36:c4:c1:20:79:c7:76:84:68:ad:d3:8a:87:fe: c2:5f:0b:3b:91:ce:89:5f:18:19:d2:a0:07:52:4e:78:1b:f0: b2:1d:ba:66:04:4a:92:e7:90:08:20:f9:cb:c1:46:a3:ea:04: 24:82:b3:c0:0d:9f:2f:43:0f:2f:40:7a:e1:e4:29:25:2e:8c: 19:77:48:fb:73:80:b4:df:bd:ba:aa:0f:50:d5:0e:7d:df:ef: 4d:91:38:08:7a:c4:de:2f:04:d6:6b:9a:9c:d1:cc:af:8e:ff: 97:80:36:11:00:e6:90:c9:8b:46:fe:07:b7:a0:91:ff:f2:70: cb:1b:bd:5b:2e:d0:cb:fd:d3:79:a9:38:b5:fd:9b:be:26:c0: 6a:64:ca:8d:e8:25:6b:9e:91:9d:10:59:f2:f9:1d:75:8f:ca: 1d:e9:e0:b1:24:70:c8:b3:4f:22:46:0b:41:ec:54:99:fb:7c: 37:08:66:46 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAW+Ec2jm70bk89gpNwiBKk8Ko1swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUU2NEJGNjUwNTEwNTJEOTEzRDdEQjhDNDUxMkY2MTVF M0ZBQjlCMjAeFw0yNTEyMTYxMTQ2MTFaFw0yNTEyMTkyMDUwMTFaMDMxMTAvBgNV BAMTKEFENThBMzI0NEZGQTIwNEFEQTNDNEMzRUU4Q0RDOTNDMkFEOTkxRDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHKB+M2q9bHuOfkzRhflsRSTQl mCn23sERXY+xuwBQuidhW4VUS0BERaoqhLi2H7687s2rjV9667wc/8I+oYk4llXo eUKPCETgZa6t3aQg0UHG1+kEOaDCkuthcTtMD7i+cvVYIyJRMYbLWYEhR2pPlwf2 GsTDN06h/eBJF/NfSBnOaYn+Q4wR/kpSJE8zWIP9bIEs7tdlhu7WCfG/s6nikmo8 YYrCl1kgS3CKNIPRu3eOaH0GLKgjx3vng7TZdeEWveyJr9OXNoeCmquNs0y4uUge WejT4EG9Twaeq9KATOtJ1J9jqCFb/jKnzyQof/rVPBx58LsQWZqY21t6t9KnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrVijJE/6IEraPEw+6M3JPCrZkdYwHwYDVR0j BBgwFoAUHmS/ZQUQUtkT19uMRRL2FeP6ubIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZTE5ODgxNi01YWY5LTQ3ZWYtYjk4OS00MmYyNzMxODQ4YmUvMS8xRTY0QkY2NTA1 MTA1MkQ5MTNEN0RCOEM0NTEyRjYxNUUzRkFCOUIyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUU2NEJGNjUwNTEwNTJEOTEzRDdEQjhDNDUxMkY2MTVFM0ZB QjlCMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWUxOTg4MTYtNWFmOS00N2VmLWI5 ODktNDJmMjczMTg0OGJlLzEvMUU2NEJGNjUwNTEwNTJEOTEzRDdEQjhDNDUxMkY2 MTVFM0ZBQjlCMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADB9nvcrhCVL9u5AFzZ7zKAB+MzjyVbmPmf7 ieCjthjKCWjdLbuIn9859RAXoCsD+ThnOt4jU9PTHTyDE/Rm7p4r1eBfIGYvX/f4 +tk2xMEgecd2hGit04qH/sJfCzuRzolfGBnSoAdSTngb8LIdumYESpLnkAgg+cvB RqPqBCSCs8ANny9DDy9AeuHkKSUujBl3SPtzgLTfvbqqD1DVDn3f702ROAh6xN4v BNZrmpzRzK+O/5eANhEA5pDJi0b+B7egkf/ycMsbvVsu0Mv903mpOLX9m74mwGpk yo3oJWuekZ0QWfL5HXWPyh3p4LEkcMizTyJGC0HsVJn7fDcIZkY= -----END CERTIFICATE-----Generated at Thu Dec 18 09:28:24 2025 by rpki-client