This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/824d1ebb-aeeb-4945-9ef2-32ad9bfdeb19/0/63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D.mft File: 63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D.mft (raw, json) Hash identifier: tgEKpRdQ0eqUWH8LtKMu1ldrJMg+2gyW1gBI8Sbnk8g= Subject key identifier: A2:83:15:F8:DA:18:13:91:B6:2C:8E:50:83:2D:5C:1B:55:90:DA:26 Authority key identifier: 63:C4:BF:4B:1C:27:C3:40:5E:E7:CA:1D:54:3C:1F:03:BE:F1:2F:7D Certificate issuer: /CN=63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D Certificate serial: 700818EB01C605742E1D6F2F56A4E50C29F94320 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/824d1ebb-aeeb-4945-9ef2-32ad9bfdeb19/0/63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D.mft Manifest number: 0106 Signing time: Sat 06 Dec 2025 12:12:14 +0000 Manifest this update: Sat 06 Dec 2025 12:07:14 +0000 Manifest next update: Tue 09 Dec 2025 19:04:14 +0000 Files and hashes: 1: 3135372e36362e3132382e302f32332d3234203d3e20313336383733.roa (hash: uCH/JrJsLPZexF0rUx1EEQxpnCx3s5VDJ8IscbtIU4M=) 2: 63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D.crl (hash: CvBiL3tvBzcvPMKLeoc1Wq2hpjGHTqsxNcg4UZcUMxM=) 3: 3135372e36362e3132392e302f32342d3234203d3e20313336383733.roa (hash: FOCno4gbHCAnLnmHobD1PWQDcUoK6xzxe9dzOJ2yOWg=) 4: 3135372e36362e3132382e302f32342d3234203d3e20313336383733.roa (hash: 1t/YY4k/2f409jhOunWIVWLeQdkIptD7DDSdwQQxlp4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/824d1ebb-aeeb-4945-9ef2-32ad9bfdeb19/0/63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D.crl rsync://repo-rpki.idnic.net/repo/824d1ebb-aeeb-4945-9ef2-32ad9bfdeb19/0/63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 06:55:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:08:18:eb:01:c6:05:74:2e:1d:6f:2f:56:a4:e5:0c:29:f9:43:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D Validity Not Before: Dec 6 12:07:14 2025 GMT Not After : Dec 9 19:04:14 2025 GMT Subject: CN=A28315F8DA181391B62C8E50832D5C1B5590DA26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:77:fc:82:de:e8:1f:2a:49:c9:61:d7:3b:e9: c3:1d:9c:a8:98:e7:67:f6:95:78:16:b7:2d:bb:85: 04:4f:2e:57:dc:23:c5:e8:6f:c3:5a:32:9a:38:c6: 07:71:94:d3:1f:07:14:cf:86:f2:40:b9:c6:0b:d2: e0:c1:c9:ac:56:01:3e:e1:f0:b8:54:04:fc:11:dd: 77:4c:fb:40:e2:31:dc:f4:d7:52:3b:4d:ca:22:89: 0a:ea:a8:66:aa:d0:c4:e6:9b:16:25:77:5d:96:27: 0e:b2:59:58:f9:1f:66:94:dd:d3:a7:3a:53:73:d5: e1:aa:33:c9:1a:25:ec:83:a0:6f:a9:ac:74:c3:32: 3c:58:e0:53:b0:0a:8b:6e:fa:83:58:dd:d3:b1:9e: 00:e6:18:ab:cf:fa:07:25:f7:3b:90:64:bd:20:18: 08:10:45:6d:41:7b:50:6b:be:76:d9:e6:0e:09:78: 59:a1:d1:fa:74:b1:6d:28:30:37:27:13:1a:1e:2b: 3b:0d:0a:9c:fe:f6:3d:09:da:72:4f:74:91:43:bb: 5b:48:a8:78:8a:2c:29:e1:54:c9:0b:e7:92:1c:2e: 3d:52:68:46:e0:21:f5:71:a3:f3:dd:2b:24:a0:6b: c4:c5:1b:b7:27:7f:6c:f1:40:c1:a8:f8:dc:72:d2: 3b:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:83:15:F8:DA:18:13:91:B6:2C:8E:50:83:2D:5C:1B:55:90:DA:26 X509v3 Authority Key Identifier: keyid:63:C4:BF:4B:1C:27:C3:40:5E:E7:CA:1D:54:3C:1F:03:BE:F1:2F:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/824d1ebb-aeeb-4945-9ef2-32ad9bfdeb19/0/63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/824d1ebb-aeeb-4945-9ef2-32ad9bfdeb19/0/63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption da:b1:49:fe:64:66:29:bf:e3:9c:a8:f8:13:f8:25:1b:08:d9: b4:28:a3:79:bc:cd:af:0a:a5:83:cc:b6:41:3c:22:4f:bd:2e: f2:e1:65:d6:58:ba:7b:3d:03:31:78:cb:a9:02:1a:89:d6:54: 0e:13:9d:ea:8d:75:5f:9e:6a:27:7a:6d:8c:ba:bf:9c:96:ff: 8a:51:a2:51:8b:4d:3c:df:20:af:f7:37:01:fe:79:3d:07:2e: 89:df:7d:ce:16:fc:fa:d0:b8:5f:9f:b4:f2:45:58:f5:da:7f: 2e:5f:4e:31:66:1a:09:2b:fb:8d:2e:10:98:9b:5f:39:4a:e9: 36:66:fe:54:ba:5a:84:5b:1a:18:dd:40:c8:27:d4:7d:36:a6: 05:5c:a5:ff:0d:d7:de:eb:c4:2a:55:9d:ab:19:f2:a9:30:f9: 3d:77:f2:96:cd:96:6f:3e:4f:b3:a3:eb:56:de:a3:1d:c4:d7: 47:30:c5:20:01:e8:6a:b9:0a:0b:09:4c:53:58:65:4f:a3:19: 8d:f0:15:ad:1a:8c:98:8f:00:a2:a9:5c:e4:e3:c7:0f:cf:31: a7:7c:6b:a8:c9:e3:97:af:9a:70:61:ab:6d:27:c2:5b:90:7e: 09:be:97:55:be:e2:28:54:aa:21:4a:20:fd:01:55:34:dd:14: 92:af:8c:5c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcAgY6wHGBXQuHW8vVqTlDCn5QyAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjNDNEJGNEIxQzI3QzM0MDVFRTdDQTFENTQzQzFGMDNC RUYxMkY3RDAeFw0yNTEyMDYxMjA3MTRaFw0yNTEyMDkxOTA0MTRaMDMxMTAvBgNV BAMTKEEyODMxNUY4REExODEzOTFCNjJDOEU1MDgzMkQ1QzFCNTU5MERBMjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDud/yC3ugfKknJYdc76cMdnKiY 52f2lXgWty27hQRPLlfcI8Xob8NaMpo4xgdxlNMfBxTPhvJAucYL0uDByaxWAT7h 8LhUBPwR3XdM+0DiMdz011I7TcoiiQrqqGaq0MTmmxYld12WJw6yWVj5H2aU3dOn OlNz1eGqM8kaJeyDoG+prHTDMjxY4FOwCotu+oNY3dOxngDmGKvP+gcl9zuQZL0g GAgQRW1Be1BrvnbZ5g4JeFmh0fp0sW0oMDcnExoeKzsNCpz+9j0J2nJPdJFDu1tI qHiKLCnhVMkL55IcLj1SaEbgIfVxo/PdKySga8TFG7cnf2zxQMGo+Nxy0ju1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUooMV+NoYE5G2LI5Qgy1cG1WQ2iYwHwYDVR0j BBgwFoAUY8S/Sxwnw0Be58odVDwfA77xL30wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MjRkMWViYi1hZWViLTQ5NDUtOWVmMi0zMmFkOWJmZGViMTkvMC82M0M0QkY0QjFD MjdDMzQwNUVFN0NBMUQ1NDNDMUYwM0JFRjEyRjdELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNjNDNEJGNEIxQzI3QzM0MDVFRTdDQTFENTQzQzFGMDNCRUYx MkY3RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODI0ZDFlYmItYWVlYi00OTQ1LTll ZjItMzJhZDliZmRlYjE5LzAvNjNDNEJGNEIxQzI3QzM0MDVFRTdDQTFENTQzQzFG MDNCRUYxMkY3RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANqxSf5kZim/45yo+BP4JRsI2bQoo3m8za8K pYPMtkE8Ik+9LvLhZdZYuns9AzF4y6kCGonWVA4TneqNdV+eaid6bYy6v5yW/4pR olGLTTzfIK/3NwH+eT0HLonffc4W/PrQuF+ftPJFWPXafy5fTjFmGgkr+40uEJib XzlK6TZm/lS6WoRbGhjdQMgn1H02pgVcpf8N197rxCpVnasZ8qkw+T138pbNlm8+ T7Oj61beox3E10cwxSAB6Gq5CgsJTFNYZU+jGY3wFa0ajJiPAKKpXOTjxw/PMad8 a6jJ45evmnBhq20nwluQfgm+l1W+4ihUqiFKIP0BVTTdFJKvjFw= -----END CERTIFICATE-----Generated at Sun Dec 7 18:56:47 2025 by rpki-client