This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/85f9002d-9267-4f8b-859a-dfa7d89143b4/0/63A008B749DB87C773CA05C5DF448BCA5357BB01.mft File: 63A008B749DB87C773CA05C5DF448BCA5357BB01.mft (raw, json) Hash identifier: Ef6blPLqLeCzAy6Igu+xiYsEHIXqfkhcAzwV3NOBlhI= Subject key identifier: F6:AC:33:34:0D:66:06:11:0B:85:06:AE:6F:E0:00:CE:32:D8:4D:00 Authority key identifier: 63:A0:08:B7:49:DB:87:C7:73:CA:05:C5:DF:44:8B:CA:53:57:BB:01 Certificate issuer: /CN=63A008B749DB87C773CA05C5DF448BCA5357BB01 Certificate serial: 074E9D3D0C28F30C38CECD4DE278723CBDEC458F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/63A008B749DB87C773CA05C5DF448BCA5357BB01.cer Subject info access: rsync://repo-rpki.idnic.net/repo/85f9002d-9267-4f8b-859a-dfa7d89143b4/0/63A008B749DB87C773CA05C5DF448BCA5357BB01.mft Manifest number: 033A Signing time: Tue 02 Dec 2025 03:12:18 +0000 Manifest this update: Tue 02 Dec 2025 03:07:18 +0000 Manifest next update: Fri 05 Dec 2025 09:03:18 +0000 Files and hashes: 1: 3130332e3136362e3234302e302f32342d3234203d3e20313431393639.roa (hash: eZnK2eskkU6AREBsLNvr+wfApR29iHfhfxaLS8JDmM4=) 2: 3130332e3136362e3234312e302f32342d3234203d3e20313431393639.roa (hash: Tji5eLarsbsUV7OPBAVD/9yKk9GUehEwx/Ji4JAvY3U=) 3: 63A008B749DB87C773CA05C5DF448BCA5357BB01.crl (hash: Xu8e5AhUlTCLjlAxM37R2WFNxfpjENnKOALLGqpbrjY=) 4: 3130332e3136362e3234302e302f32332d3233203d3e20313431393639.roa (hash: 16U5ENt1Fx7mXMkbXyDTcuDuUq+dB5XA/NthjrW4JLc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/85f9002d-9267-4f8b-859a-dfa7d89143b4/0/63A008B749DB87C773CA05C5DF448BCA5357BB01.crl rsync://repo-rpki.idnic.net/repo/85f9002d-9267-4f8b-859a-dfa7d89143b4/0/63A008B749DB87C773CA05C5DF448BCA5357BB01.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/63A008B749DB87C773CA05C5DF448BCA5357BB01.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 09:03:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:4e:9d:3d:0c:28:f3:0c:38:ce:cd:4d:e2:78:72:3c:bd:ec:45:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63A008B749DB87C773CA05C5DF448BCA5357BB01 Validity Not Before: Dec 2 03:07:18 2025 GMT Not After : Dec 5 09:03:18 2025 GMT Subject: CN=F6AC33340D6606110B8506AE6FE000CE32D84D00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:62:0f:16:78:8d:ac:8b:3f:3a:61:b9:a1:a8: d9:b3:c2:55:0b:2d:1c:76:fd:fd:8d:93:38:a9:f9: 25:a3:6b:93:2c:ac:dd:13:dc:e0:8b:bd:53:2c:36: ba:68:e2:39:5b:00:7b:b1:fe:73:25:8b:61:fb:b7: 39:a8:ce:2c:83:bc:03:fd:de:d1:bf:67:77:3c:98: 56:9c:b3:e7:d7:f3:1e:89:05:77:07:7d:8d:e5:bf: 4c:f7:8b:7d:b2:a0:d6:ec:8d:35:25:d4:1c:d9:79: 17:89:d6:3f:f8:f2:8f:ee:8a:0e:2c:52:b3:1f:e4: 4d:73:3d:e1:8c:0b:03:57:39:2b:1b:91:ed:0a:52: da:10:a9:06:fa:9a:73:fa:8d:2a:5c:2b:8a:2d:49: ee:09:95:3a:fc:72:4f:f4:00:3f:0d:b5:a2:21:55: 47:3f:9b:b6:45:bd:c7:e9:e7:7e:89:62:53:28:04: e1:9c:17:b2:4c:d0:fa:f9:a8:4e:10:cf:83:37:22: b3:3f:15:fd:e5:d1:e5:09:a3:98:96:30:12:21:8b: 30:f5:07:6a:90:ab:8f:e0:0f:6b:c0:b8:ca:28:5e: 11:7e:8c:65:87:f0:ae:a6:27:57:4e:7a:11:71:df: c8:7c:6d:16:87:ad:12:b8:85:0f:86:6f:1d:f0:23: 54:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:AC:33:34:0D:66:06:11:0B:85:06:AE:6F:E0:00:CE:32:D8:4D:00 X509v3 Authority Key Identifier: keyid:63:A0:08:B7:49:DB:87:C7:73:CA:05:C5:DF:44:8B:CA:53:57:BB:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/85f9002d-9267-4f8b-859a-dfa7d89143b4/0/63A008B749DB87C773CA05C5DF448BCA5357BB01.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/63A008B749DB87C773CA05C5DF448BCA5357BB01.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/85f9002d-9267-4f8b-859a-dfa7d89143b4/0/63A008B749DB87C773CA05C5DF448BCA5357BB01.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:46:8a:0e:ce:0c:e7:c3:1d:ba:86:24:93:3b:9d:5a:1c:7c: ac:a1:36:6d:d2:22:5f:46:ce:31:4d:ab:ed:da:7e:7e:ae:05: 28:15:83:f0:66:e7:d9:b8:23:e5:b7:b7:47:25:f9:2d:c4:6c: 3b:01:d6:5e:67:8d:1a:eb:1c:1b:9a:bc:48:e8:ed:3c:bb:9d: 95:f7:a8:4b:54:3a:18:3b:50:52:d2:26:fd:d6:07:87:7a:ef: 9f:0d:50:52:a5:50:1c:f5:9b:f3:0b:72:f9:c6:f5:db:c3:90: b2:61:af:81:12:f8:0a:a7:f5:c0:b7:5a:95:e6:71:f9:0b:14: aa:be:9f:65:59:ac:0c:03:5b:62:df:c6:49:5a:6e:8c:c4:c8: 84:0e:4e:33:1f:8c:0a:ac:b2:33:7c:9e:d8:dd:14:45:6f:31: 48:a9:69:4f:e7:c4:02:29:5f:af:15:6a:67:6d:af:be:5c:ff: 3a:bf:ed:6d:5b:62:f9:11:b0:b9:73:8a:59:a0:fa:33:d9:93: 55:e9:87:1c:d0:d0:ba:b9:03:74:c9:11:f7:43:10:98:67:63: 56:2b:a7:96:83:4a:1e:27:3c:81:2f:d3:08:ba:85:49:33:09: 23:5f:f6:1f:0d:bc:af:b5:f0:7c:38:2a:b2:04:8b:5f:76:e9: 6f:90:b2:31 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUB06dPQwo8ww4zs1N4nhyPL3sRY8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjNBMDA4Qjc0OURCODdDNzczQ0EwNUM1REY0NDhCQ0E1 MzU3QkIwMTAeFw0yNTEyMDIwMzA3MThaFw0yNTEyMDUwOTAzMThaMDMxMTAvBgNV BAMTKEY2QUMzMzM0MEQ2NjA2MTEwQjg1MDZBRTZGRTAwMENFMzJEODREMDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuYg8WeI2siz86YbmhqNmzwlUL LRx2/f2Nkzip+SWja5MsrN0T3OCLvVMsNrpo4jlbAHux/nMli2H7tzmoziyDvAP9 3tG/Z3c8mFacs+fX8x6JBXcHfY3lv0z3i32yoNbsjTUl1BzZeReJ1j/48o/uig4s UrMf5E1zPeGMCwNXOSsbke0KUtoQqQb6mnP6jSpcK4otSe4JlTr8ck/0AD8NtaIh VUc/m7ZFvcfp536JYlMoBOGcF7JM0Pr5qE4Qz4M3IrM/Ff3l0eUJo5iWMBIhizD1 B2qQq4/gD2vAuMooXhF+jGWH8K6mJ1dOehFx38h8bRaHrRK4hQ+Gbx3wI1T1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9qwzNA1mBhELhQaub+AAzjLYTQAwHwYDVR0j BBgwFoAUY6AIt0nbh8dzygXF30SLylNXuwEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NWY5MDAyZC05MjY3LTRmOGItODU5YS1kZmE3ZDg5MTQzYjQvMC82M0EwMDhCNzQ5 REI4N0M3NzNDQTA1QzVERjQ0OEJDQTUzNTdCQjAxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjNBMDA4Qjc0OURCODdDNzczQ0EwNUM1REY0NDhCQ0E1MzU3 QkIwMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODVmOTAwMmQtOTI2Ny00ZjhiLTg1 OWEtZGZhN2Q4OTE0M2I0LzAvNjNBMDA4Qjc0OURCODdDNzczQ0EwNUM1REY0NDhC Q0E1MzU3QkIwMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFNGig7ODOfDHbqGJJM7nVocfKyhNm3SIl9G zjFNq+3afn6uBSgVg/Bm59m4I+W3t0cl+S3EbDsB1l5njRrrHBuavEjo7Ty7nZX3 qEtUOhg7UFLSJv3WB4d6758NUFKlUBz1m/MLcvnG9dvDkLJhr4ES+Aqn9cC3WpXm cfkLFKq+n2VZrAwDW2LfxklabozEyIQOTjMfjAqssjN8ntjdFEVvMUipaU/nxAIp X68Vamdtr75c/zq/7W1bYvkRsLlzilmg+jPZk1XphxzQ0Lq5A3TJEfdDEJhnY1Yr p5aDSh4nPIEv0wi6hUkzCSNf9h8NvK+18Hw4KrIEi1926W+QsjE= -----END CERTIFICATE-----Generated at Wed Dec 3 13:56:34 2025 by rpki-client