This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/13d80643-d5e9-41af-94df-6d94fbf46487/0/104563E8068F3AE19631B1F43A5C9A47466100AC.mft
File: 104563E8068F3AE19631B1F43A5C9A47466100AC.mft (raw, json)
Hash identifier: ZOQHGHfmmvsd2E174Qb/Oj/Ho6B5O1E3iiktk9sDAtA=
Subject key identifier: 8D:4B:FC:E1:05:87:D0:8E:19:B5:43:12:BB:D3:79:1D:4F:31:2A:12
Authority key identifier: 10:45:63:E8:06:8F:3A:E1:96:31:B1:F4:3A:5C:9A:47:46:61:00:AC
Certificate issuer: /CN=104563E8068F3AE19631B1F43A5C9A47466100AC
Certificate serial: 1A10F5B2F0080C6964F7A2CFB77943CDC9F91379
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/104563E8068F3AE19631B1F43A5C9A47466100AC.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/13d80643-d5e9-41af-94df-6d94fbf46487/0/104563E8068F3AE19631B1F43A5C9A47466100AC.mft
Manifest number: 035B
Signing time: Sat 20 Dec 2025 21:01:43 +0000
Manifest this update: Sat 20 Dec 2025 20:56:43 +0000
Manifest next update: Wed 24 Dec 2025 07:39:43 +0000
Files and hashes: 1: 3130332e3130302e39392e302f32342d3234203d3e20313336383338.roa (hash: VcKH5MJv0PsbSw/ylAqkYnvN7oEA35OAIpUTZqe2tts=)
2: 104563E8068F3AE19631B1F43A5C9A47466100AC.crl (hash: 3UkQyZMqMOhR0ctTZysAi3RtMRz4LA4B880q+mbLFaI=)
3: 3130332e3130302e39382e302f32342d3234203d3e20313336383338.roa (hash: +SLRXlahaObHYrJgflPMiDjr0u2mDJrsOXf4SROIz+s=)
4: 3130332e3130302e39372e302f32342d3234203d3e20313336383338.roa (hash: mLstSys1ibyLiHgcMAosimwglWRWJ2SkAeeFcz0SnqE=)
5: 3130332e3130302e39362e302f32322d3234203d3e20313336383338.roa (hash: VLkItKFaeejUHC1WgS1PSkZ19Q0bo3xj4xKJ0hQtCic=)
6: 3130332e3130302e39362e302f32342d3234203d3e20313336383338.roa (hash: FFItnTTMKt/KdS5iV3+5t51Nd97nxTmIPrWc7N6PUvw=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/13d80643-d5e9-41af-94df-6d94fbf46487/0/104563E8068F3AE19631B1F43A5C9A47466100AC.crl
rsync://repo-rpki.idnic.net/repo/13d80643-d5e9-41af-94df-6d94fbf46487/0/104563E8068F3AE19631B1F43A5C9A47466100AC.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/104563E8068F3AE19631B1F43A5C9A47466100AC.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 24 Dec 2025 07:39:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:10:f5:b2:f0:08:0c:69:64:f7:a2:cf:b7:79:43:cd:c9:f9:13:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=104563E8068F3AE19631B1F43A5C9A47466100AC
Validity
Not Before: Dec 20 20:56:43 2025 GMT
Not After : Dec 24 07:39:43 2025 GMT
Subject: CN=8D4BFCE10587D08E19B54312BBD3791D4F312A12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:40:14:35:c1:5f:2a:c4:73:f1:f0:d7:82:bc:
74:f8:c0:f8:e6:d5:10:f0:c2:9d:19:be:19:34:32:
4d:cf:05:03:49:a9:71:b3:30:f8:da:8a:f0:67:07:
0b:20:0c:6c:0e:25:75:e3:fd:bd:ac:28:ff:47:a9:
e0:5b:05:37:44:6f:ea:d5:c2:10:5f:d2:de:c6:a9:
94:8a:40:a5:eb:d3:74:23:4b:11:75:5b:81:9a:9d:
ab:ff:3a:71:f3:95:1c:7e:cc:c2:74:6d:cf:a1:ab:
09:d1:48:5a:88:31:a1:a3:f7:bb:96:a8:e2:f2:fc:
cc:71:f6:26:cb:79:fc:21:7e:a7:4e:df:39:8e:6d:
b0:0e:38:b0:a5:0f:43:f3:fa:d0:a6:05:fa:3f:53:
40:40:a0:a2:8b:06:1c:69:7b:97:ad:ac:5f:18:00:
9e:72:93:d1:81:fe:2f:4c:73:2d:eb:15:40:0e:99:
1c:02:a5:d5:4d:37:57:6b:b7:23:87:3c:31:d5:76:
b0:f4:0c:8f:c9:7e:bf:a5:33:db:7c:d4:19:47:d5:
18:83:b7:4b:5e:0b:5e:ab:2e:5f:cc:63:55:30:2d:
5f:01:3e:8b:0a:8e:9d:07:5e:de:7f:8b:fc:d8:f6:
c3:80:33:75:02:2a:7a:78:da:68:70:08:74:bf:03:
4f:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:4B:FC:E1:05:87:D0:8E:19:B5:43:12:BB:D3:79:1D:4F:31:2A:12
X509v3 Authority Key Identifier:
keyid:10:45:63:E8:06:8F:3A:E1:96:31:B1:F4:3A:5C:9A:47:46:61:00:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/13d80643-d5e9-41af-94df-6d94fbf46487/0/104563E8068F3AE19631B1F43A5C9A47466100AC.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/104563E8068F3AE19631B1F43A5C9A47466100AC.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/13d80643-d5e9-41af-94df-6d94fbf46487/0/104563E8068F3AE19631B1F43A5C9A47466100AC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:96:9c:7c:a6:67:8d:48:e3:d4:66:be:70:e6:4c:98:99:c8:
25:73:bd:47:80:d8:d7:30:08:b1:1d:a5:d7:1b:21:c4:e9:56:
67:9f:e2:87:22:c0:b0:8c:eb:f6:8d:fe:1a:1e:72:bf:9e:c4:
16:83:fd:6b:4d:b1:43:61:fd:d2:b7:f1:12:f3:4e:80:75:a0:
f5:46:f6:3a:c7:98:ae:f6:95:aa:72:65:6c:8e:4f:9b:2a:48:
db:5d:25:85:f7:16:d2:02:b4:cd:33:d7:46:4b:13:8b:84:66:
43:41:d9:3a:0e:ad:de:64:56:3e:30:8c:f3:ce:ea:b0:24:fc:
53:cf:b6:f9:51:a9:78:f6:bc:14:b7:71:33:4a:dc:1d:94:75:
0d:75:05:e9:42:27:c7:e3:48:85:ca:9b:9b:0a:44:87:60:85:
7c:68:70:43:56:d4:85:f6:13:0c:29:ac:b6:44:51:5b:95:fb:
34:d0:be:39:51:81:81:51:6a:2c:32:2f:e6:87:74:72:b2:31:
52:69:c0:f0:da:f8:20:6b:9e:43:69:5e:ba:fa:ed:d8:38:2b:
f8:d6:80:47:b9:7e:fe:60:30:c3:9c:96:01:41:d1:8f:dd:7f:
87:77:62:0a:6f:d1:75:2b:76:40:a3:e5:3a:82:39:23:56:7b:
90:cd:73:6e
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUGhD1svAIDGlk96LPt3lDzcn5E3kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTA0NTYzRTgwNjhGM0FFMTk2MzFCMUY0M0E1QzlBNDc0
NjYxMDBBQzAeFw0yNTEyMjAyMDU2NDNaFw0yNTEyMjQwNzM5NDNaMDMxMTAvBgNV
BAMTKDhENEJGQ0UxMDU4N0QwOEUxOUI1NDMxMkJCRDM3OTFENEYzMTJBMTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfQBQ1wV8qxHPx8NeCvHT4wPjm
1RDwwp0Zvhk0Mk3PBQNJqXGzMPjaivBnBwsgDGwOJXXj/b2sKP9HqeBbBTdEb+rV
whBf0t7GqZSKQKXr03QjSxF1W4Ganav/OnHzlRx+zMJ0bc+hqwnRSFqIMaGj97uW
qOLy/Mxx9ibLefwhfqdO3zmObbAOOLClD0Pz+tCmBfo/U0BAoKKLBhxpe5etrF8Y
AJ5yk9GB/i9Mcy3rFUAOmRwCpdVNN1drtyOHPDHVdrD0DI/Jfr+lM9t81BlH1RiD
t0teC16rLl/MY1UwLV8BPosKjp0HXt5/i/zY9sOAM3UCKnp42mhwCHS/A09XAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUjUv84QWH0I4ZtUMSu9N5HU8xKhIwHwYDVR0j
BBgwFoAUEEVj6AaPOuGWMbH0OlyaR0ZhAKwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x
M2Q4MDY0My1kNWU5LTQxYWYtOTRkZi02ZDk0ZmJmNDY0ODcvMC8xMDQ1NjNFODA2
OEYzQUUxOTYzMUIxRjQzQTVDOUE0NzQ2NjEwMEFDLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMTA0NTYzRTgwNjhGM0FFMTk2MzFCMUY0M0E1QzlBNDc0NjYx
MDBBQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTNkODA2NDMtZDVlOS00MWFmLTk0
ZGYtNmQ5NGZiZjQ2NDg3LzAvMTA0NTYzRTgwNjhGM0FFMTk2MzFCMUY0M0E1QzlB
NDc0NjYxMDBBQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAFyWnHymZ41I49RmvnDmTJiZyCVzvUeA2Ncw
CLEdpdcbIcTpVmef4ociwLCM6/aN/hoecr+exBaD/WtNsUNh/dK38RLzToB1oPVG
9jrHmK72lapyZWyOT5sqSNtdJYX3FtICtM0z10ZLE4uEZkNB2ToOrd5kVj4wjPPO
6rAk/FPPtvlRqXj2vBS3cTNK3B2UdQ11BelCJ8fjSIXKm5sKRIdghXxocENW1IX2
EwwprLZEUVuV+zTQvjlRgYFRaiwyL+aHdHKyMVJpwPDa+CBrnkNpXrr67dg4K/jW
gEe5fv5gMMOclgFB0Y/df4d3Ygpv0XUrdkCj5TqCOSNWe5DNc24=
-----END CERTIFICATE-----
Generated at Mon Dec 22 04:01:44 2025 by rpki-client