This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/824d1ebb-aeeb-4945-9ef2-32ad9bfdeb19/0/63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D.mft File: 63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D.mft (raw, json) Hash identifier: uL0FmWkTAPN5xw2isxCPZZqystg48HdO/FTLcKK3UrI= Subject key identifier: 54:28:B3:E3:EA:6A:58:57:CA:55:B7:D5:86:74:2B:AF:91:75:05:34 Authority key identifier: 63:C4:BF:4B:1C:27:C3:40:5E:E7:CA:1D:54:3C:1F:03:BE:F1:2F:7D Certificate issuer: /CN=63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D Certificate serial: 18618A6C31B79253B16C2C7AE94F7E3691EA4763 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/824d1ebb-aeeb-4945-9ef2-32ad9bfdeb19/0/63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D.mft Manifest number: 011F Signing time: Sat 31 Jan 2026 10:02:13 +0000 Manifest this update: Sat 31 Jan 2026 09:57:13 +0000 Manifest next update: Tue 03 Feb 2026 19:29:13 +0000 Files and hashes: 1: 63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D.crl (hash: tBPFTFoG2kOIhQ4+hSGJqWIg24Vdn7iwPL2W9uodi+E=) 2: 3135372e36362e3132392e302f32342d3234203d3e20313336383733.roa (hash: FOCno4gbHCAnLnmHobD1PWQDcUoK6xzxe9dzOJ2yOWg=) 3: 3135372e36362e3132382e302f32332d3234203d3e20313336383733.roa (hash: uCH/JrJsLPZexF0rUx1EEQxpnCx3s5VDJ8IscbtIU4M=) 4: 3135372e36362e3132382e302f32342d3234203d3e20313336383733.roa (hash: 1t/YY4k/2f409jhOunWIVWLeQdkIptD7DDSdwQQxlp4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/824d1ebb-aeeb-4945-9ef2-32ad9bfdeb19/0/63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D.crl rsync://repo-rpki.idnic.net/repo/824d1ebb-aeeb-4945-9ef2-32ad9bfdeb19/0/63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Feb 2026 19:29:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:61:8a:6c:31:b7:92:53:b1:6c:2c:7a:e9:4f:7e:36:91:ea:47:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D Validity Not Before: Jan 31 09:57:13 2026 GMT Not After : Feb 3 19:29:13 2026 GMT Subject: CN=5428B3E3EA6A5857CA55B7D586742BAF91750534 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:cc:57:ce:ad:47:fe:ce:e9:78:1d:9e:07:24: d4:6c:65:8b:3a:1d:81:32:49:40:25:d8:2f:5f:db: 12:23:c8:e5:08:f9:c2:41:0d:28:e6:c2:8d:1f:cd: b7:3f:86:9a:81:b0:4b:e4:e4:1b:75:cc:fe:1a:70: c0:8d:11:5a:3f:40:dc:0c:71:10:66:fb:8f:36:9c: 42:7a:e5:98:59:68:c8:c8:27:bf:57:67:f5:83:7f: ed:8c:09:7c:59:98:4b:2c:4a:fe:ff:93:12:fb:d9: 6d:29:77:47:68:37:eb:5a:68:f1:4c:46:38:f5:63: a3:44:9f:cb:d1:1f:c2:10:9d:44:91:f0:ec:09:9a: 77:e3:80:9e:dc:2f:f8:02:72:bb:84:46:da:ba:43: 3e:01:73:42:dc:7a:9f:b5:62:bc:23:d8:7f:a8:60: 86:a0:fd:2b:0e:bc:e0:84:26:5d:74:73:4b:35:cc: ff:06:19:ea:c2:17:e9:57:1d:44:21:27:02:64:60: f5:6b:c4:9d:93:61:78:18:0e:19:9d:8c:e7:93:79: 5d:65:d5:18:81:6d:51:a5:fc:33:0a:c6:5b:6d:ac: 55:3a:88:34:48:8b:59:8b:7d:3e:ed:17:1f:e7:6c: eb:1f:b8:44:1b:5a:7d:14:19:e2:c6:ba:7a:5e:8c: 6c:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:28:B3:E3:EA:6A:58:57:CA:55:B7:D5:86:74:2B:AF:91:75:05:34 X509v3 Authority Key Identifier: keyid:63:C4:BF:4B:1C:27:C3:40:5E:E7:CA:1D:54:3C:1F:03:BE:F1:2F:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/824d1ebb-aeeb-4945-9ef2-32ad9bfdeb19/0/63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/824d1ebb-aeeb-4945-9ef2-32ad9bfdeb19/0/63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:6d:c9:0b:a7:03:1c:35:bc:c2:79:0a:98:e4:74:59:5f:05: af:78:32:ce:db:ae:1d:c3:26:f8:df:fe:68:bd:58:25:1b:ce: bb:d7:95:01:f2:e3:e4:c1:e6:ee:c5:0a:f3:70:e5:fb:c5:cb: be:7d:1e:77:7f:68:06:30:fd:a4:9d:c8:1a:1a:f0:c0:4f:d2: 66:f2:5e:35:06:da:0a:27:18:0f:bd:a2:31:ee:b5:c5:84:1a: 4b:66:15:f4:5c:eb:94:2d:c7:1c:a0:a6:cd:96:64:c2:eb:a3: 2f:16:29:58:df:f2:bf:16:11:99:9a:8f:d0:66:00:0d:6d:47: 7f:a0:10:f0:82:22:10:44:40:d3:bc:a3:c5:89:cb:98:45:c8: a3:36:73:ee:51:fb:05:7e:b3:4e:c1:26:90:be:cf:0c:5e:5a: dd:ee:f8:5e:0d:72:f1:9c:63:ab:d3:89:84:60:a7:15:e8:f1: 57:01:3d:9b:f9:43:6a:74:27:c9:06:47:f1:1a:f6:de:7d:59: 1b:9b:95:6a:99:eb:f9:08:94:58:a4:83:6e:2c:7e:1e:cb:27: 79:40:a5:80:fd:bb:c1:a9:eb:d1:94:0e:50:d2:82:3c:68:11: 79:56:aa:78:6f:1f:a6:73:2d:8a:7d:74:55:f6:23:57:31:52: 1a:2b:e3:31 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGGGKbDG3klOxbCx66U9+NpHqR2MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjNDNEJGNEIxQzI3QzM0MDVFRTdDQTFENTQzQzFGMDNC RUYxMkY3RDAeFw0yNjAxMzEwOTU3MTNaFw0yNjAyMDMxOTI5MTNaMDMxMTAvBgNV BAMTKDU0MjhCM0UzRUE2QTU4NTdDQTU1QjdENTg2NzQyQkFGOTE3NTA1MzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6zFfOrUf+zul4HZ4HJNRsZYs6 HYEySUAl2C9f2xIjyOUI+cJBDSjmwo0fzbc/hpqBsEvk5Bt1zP4acMCNEVo/QNwM cRBm+482nEJ65ZhZaMjIJ79XZ/WDf+2MCXxZmEssSv7/kxL72W0pd0doN+taaPFM Rjj1Y6NEn8vRH8IQnUSR8OwJmnfjgJ7cL/gCcruERtq6Qz4Bc0Lcep+1Yrwj2H+o YIag/SsOvOCEJl10c0s1zP8GGerCF+lXHUQhJwJkYPVrxJ2TYXgYDhmdjOeTeV1l 1RiBbVGl/DMKxlttrFU6iDRIi1mLfT7tFx/nbOsfuEQbWn0UGeLGunpejGwtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVCiz4+pqWFfKVbfVhnQrr5F1BTQwHwYDVR0j BBgwFoAUY8S/Sxwnw0Be58odVDwfA77xL30wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MjRkMWViYi1hZWViLTQ5NDUtOWVmMi0zMmFkOWJmZGViMTkvMC82M0M0QkY0QjFD MjdDMzQwNUVFN0NBMUQ1NDNDMUYwM0JFRjEyRjdELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNjNDNEJGNEIxQzI3QzM0MDVFRTdDQTFENTQzQzFGMDNCRUYx MkY3RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODI0ZDFlYmItYWVlYi00OTQ1LTll ZjItMzJhZDliZmRlYjE5LzAvNjNDNEJGNEIxQzI3QzM0MDVFRTdDQTFENTQzQzFG MDNCRUYxMkY3RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADBtyQunAxw1vMJ5CpjkdFlfBa94Ms7brh3D Jvjf/mi9WCUbzrvXlQHy4+TB5u7FCvNw5fvFy759Hnd/aAYw/aSdyBoa8MBP0mby XjUG2gonGA+9ojHutcWEGktmFfRc65Qtxxygps2WZMLroy8WKVjf8r8WEZmaj9Bm AA1tR3+gEPCCIhBEQNO8o8WJy5hFyKM2c+5R+wV+s07BJpC+zwxeWt3u+F4NcvGc Y6vTiYRgpxXo8VcBPZv5Q2p0J8kGR/Ea9t59WRublWqZ6/kIlFikg24sfh7LJ3lA pYD9u8Gp69GUDlDSgjxoEXlWqnhvH6ZzLYp9dFX2I1cxUhor4zE= -----END CERTIFICATE-----Generated at Mon Feb 2 15:57:49 2026 by rpki-client