This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.mft File: 63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.mft (raw, json) Hash identifier: RqPytEpii99/GV6Swiu/izLC+DvTfB2yHXyp9QzBjo4= Subject key identifier: 4B:FE:F6:FA:4F:E2:BE:CD:06:DD:98:38:F4:B4:DE:ED:C6:73:FF:A2 Authority key identifier: 63:E0:67:66:3A:09:E3:E8:4F:1C:5B:1C:31:DE:AB:FF:2A:4A:7C:07 Certificate issuer: /CN=63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07 Certificate serial: 60C88AB0A84A2115B01F847CC5ED742482AF3051 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.mft Manifest number: 01F3 Signing time: Fri 09 Jan 2026 08:51:16 +0000 Manifest this update: Fri 09 Jan 2026 08:46:16 +0000 Manifest next update: Mon 12 Jan 2026 14:12:16 +0000 Files and hashes: 1: 63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.crl (hash: iQZDkcUZo6ILWZ1di/px7jPYeTM7Xh7jfFkkqPSan0o=) 2: 3130332e35312e3230342e302f32332d3234203d3e203435333035.roa (hash: UrdeubFj8MJMBosQTjUTlkyTLJKd5ipS0sOIHGHNGXw=) 3: 3130332e35312e3230352e302f32342d3234203d3e203435333035.roa (hash: ghssEE9zj9axglbKjUOvFcXIOFWwWgWFdjOGnyGNun8=) 4: 3130332e35312e3230342e302f32342d3234203d3e203435333035.roa (hash: fJYZwNXP9c0qCqp/KxrF/x9WsoAi9ZRyA7KgfjlBJW0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.crl rsync://repo-rpki.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Jan 2026 14:12:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:c8:8a:b0:a8:4a:21:15:b0:1f:84:7c:c5:ed:74:24:82:af:30:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07 Validity Not Before: Jan 9 08:46:16 2026 GMT Not After : Jan 12 14:12:16 2026 GMT Subject: CN=4BFEF6FA4FE2BECD06DD9838F4B4DEEDC673FFA2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:d5:8c:f0:b3:74:06:07:ad:f1:d1:63:1e:2a: e3:b3:6f:4a:b9:12:e3:eb:85:1b:6a:4c:53:51:08: 09:b1:eb:ee:e9:52:71:5f:09:77:04:f1:66:c4:53: 29:aa:9d:f5:04:74:a0:02:cd:be:61:2f:2d:6c:97: 84:a1:bf:1b:75:5a:ea:0a:a5:0b:67:2b:d5:24:bb: f5:47:47:6e:b0:53:13:78:7a:0e:dc:32:72:5a:72: f8:07:fb:97:05:75:54:b0:ed:9d:bd:81:1a:55:da: ac:72:1b:20:29:f4:75:8d:0d:db:10:b6:51:d9:15: f2:d1:1b:df:0b:9e:86:0b:b5:b6:c0:ed:ac:9c:ff: d5:04:7f:1f:c9:13:be:8b:a6:bf:9d:0f:f9:33:80: 2e:aa:45:d2:7b:b3:3b:0f:55:81:0a:3f:46:1a:c4: 0f:59:be:39:9a:c6:e0:0b:95:8a:0d:07:89:d6:8b: 9a:7a:ef:a7:56:28:99:06:60:f6:c2:00:36:f9:04: 5e:9c:61:fb:84:d4:89:9f:c8:f4:c5:b8:3b:3d:a2: 2b:84:91:a2:ef:4d:de:b8:5f:65:f6:f1:f1:3a:04: 86:ac:7c:71:52:3f:92:d7:37:21:59:fd:71:72:c9: 99:01:1f:37:a6:26:49:64:80:2d:31:a0:ee:e2:a8: 54:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:FE:F6:FA:4F:E2:BE:CD:06:DD:98:38:F4:B4:DE:ED:C6:73:FF:A2 X509v3 Authority Key Identifier: keyid:63:E0:67:66:3A:09:E3:E8:4F:1C:5B:1C:31:DE:AB:FF:2A:4A:7C:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:99:f4:ea:a0:03:68:c0:f7:49:7f:cc:24:8d:fc:0a:c1:b1: d2:65:6a:79:39:57:42:52:9c:cc:a2:f8:86:57:ea:ca:5c:b5: cf:30:ec:2c:03:0a:86:79:f6:64:e2:8d:a2:ca:d9:2e:a6:45: d5:66:21:bf:ca:98:3a:79:de:94:af:91:2d:5a:d9:65:cb:f5: 0c:6d:bc:ec:ba:00:65:53:12:09:3d:80:a6:2b:a3:c5:a1:94: 12:f1:8e:dc:3b:b0:0e:47:fb:9a:44:74:b0:45:3c:30:cd:7c: ae:00:9c:80:a2:ca:fb:e3:52:4e:07:cc:69:b9:01:7b:bc:45: ae:a3:82:c4:94:9a:3d:45:66:85:21:70:49:07:98:93:ce:09: 3d:6d:75:8c:b4:6a:03:fc:eb:4c:b8:42:83:45:d4:51:36:4d: 8b:86:4c:2c:49:cb:b1:6a:42:d3:eb:7d:77:6f:ae:ad:20:25: ce:d9:d8:00:23:15:ee:f0:db:f1:43:93:a1:06:1e:ef:2d:80: 9c:a3:ee:02:86:75:c6:ca:83:f7:fe:90:9c:a6:40:05:4c:7d: 46:27:52:be:4e:05:a0:f4:c1:25:a5:d1:46:24:f8:cc:63:af: e5:2e:1c:89:f2:3c:4c:3c:05:a7:b3:39:26:3f:8c:66:30:bd: 1b:b1:47:68 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYMiKsKhKIRWwH4R8xe10JIKvMFEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjNFMDY3NjYzQTA5RTNFODRGMUM1QjFDMzFERUFCRkYy QTRBN0MwNzAeFw0yNjAxMDkwODQ2MTZaFw0yNjAxMTIxNDEyMTZaMDMxMTAvBgNV BAMTKDRCRkVGNkZBNEZFMkJFQ0QwNkREOTgzOEY0QjRERUVEQzY3M0ZGQTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD1Yzws3QGB63x0WMeKuOzb0q5 EuPrhRtqTFNRCAmx6+7pUnFfCXcE8WbEUymqnfUEdKACzb5hLy1sl4Shvxt1WuoK pQtnK9Uku/VHR26wUxN4eg7cMnJacvgH+5cFdVSw7Z29gRpV2qxyGyAp9HWNDdsQ tlHZFfLRG98LnoYLtbbA7ayc/9UEfx/JE76Lpr+dD/kzgC6qRdJ7szsPVYEKP0Ya xA9ZvjmaxuALlYoNB4nWi5p676dWKJkGYPbCADb5BF6cYfuE1ImfyPTFuDs9oiuE kaLvTd64X2X28fE6BIasfHFSP5LXNyFZ/XFyyZkBHzemJklkgC0xoO7iqFSZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUS/72+k/ivs0G3Zg49LTe7cZz/6IwHwYDVR0j BBgwFoAUY+BnZjoJ4+hPHFscMd6r/ypKfAcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NjViODRmMi05ODA0LTQ2NzAtOGJiYy1jMzMyNzFiNTkyNTkvMC82M0UwNjc2NjNB MDlFM0U4NEYxQzVCMUMzMURFQUJGRjJBNEE3QzA3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjNFMDY3NjYzQTA5RTNFODRGMUM1QjFDMzFERUFCRkYyQTRB N0MwNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzY1Yjg0ZjItOTgwNC00NjcwLThi YmMtYzMzMjcxYjU5MjU5LzAvNjNFMDY3NjYzQTA5RTNFODRGMUM1QjFDMzFERUFC RkYyQTRBN0MwNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF6Z9OqgA2jA90l/zCSN/ArBsdJlank5V0JS nMyi+IZX6spctc8w7CwDCoZ59mTijaLK2S6mRdVmIb/KmDp53pSvkS1a2WXL9Qxt vOy6AGVTEgk9gKYro8WhlBLxjtw7sA5H+5pEdLBFPDDNfK4AnICiyvvjUk4HzGm5 AXu8Ra6jgsSUmj1FZoUhcEkHmJPOCT1tdYy0agP860y4QoNF1FE2TYuGTCxJy7Fq QtPrfXdvrq0gJc7Z2AAjFe7w2/FDk6EGHu8tgJyj7gKGdcbKg/f+kJymQAVMfUYn Ur5OBaD0wSWl0UYk+Mxjr+UuHInyPEw8BaezOSY/jGYwvRuxR2g= -----END CERTIFICATE-----Generated at Fri Jan 9 18:27:47 2026 by rpki-client