This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/87775dcf-283f-43c5-af60-09e0deba01a2/0/A63CCE6366E3FCB7A2666A9090F2A0575A74DCF4.mft File: A63CCE6366E3FCB7A2666A9090F2A0575A74DCF4.mft (raw, json) Hash identifier: ZGZmm9FX4KxEdqtyw49QgnqTArL/i55Tas5hGz6Ea7E= Subject key identifier: 43:EB:9F:E6:FE:25:A3:34:6F:0F:58:70:25:84:CE:06:3D:C8:98:B4 Authority key identifier: A6:3C:CE:63:66:E3:FC:B7:A2:66:6A:90:90:F2:A0:57:5A:74:DC:F4 Certificate issuer: /CN=A63CCE6366E3FCB7A2666A9090F2A0575A74DCF4 Certificate serial: 1E13CCF2A32BEB454D33676CD1A4789C79277512 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A63CCE6366E3FCB7A2666A9090F2A0575A74DCF4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/87775dcf-283f-43c5-af60-09e0deba01a2/0/A63CCE6366E3FCB7A2666A9090F2A0575A74DCF4.mft Manifest number: 0299 Signing time: Mon 01 Dec 2025 18:22:32 +0000 Manifest this update: Mon 01 Dec 2025 18:17:32 +0000 Manifest next update: Fri 05 Dec 2025 00:23:32 +0000 Files and hashes: 1: 323430343a343230303a3a2f33322d3438203d3e203234353336.roa (hash: Hub7rZ2q+AdvyEruoWB8nsArXPAxnFiXXAQjsmifcPA=) 2: 3230322e3134362e3137362e302f32312d3234203d3e203234353336.roa (hash: ILoC7SZWlYY8tT8nCMj2qTfJpiM1Y89EAaEhPrCEnXY=) 3: A63CCE6366E3FCB7A2666A9090F2A0575A74DCF4.crl (hash: 0+FbqIyrxieKGwp7Q8NePosiOF+Dm0PCgL7IVlu1EGk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/87775dcf-283f-43c5-af60-09e0deba01a2/0/A63CCE6366E3FCB7A2666A9090F2A0575A74DCF4.crl rsync://repo-rpki.idnic.net/repo/87775dcf-283f-43c5-af60-09e0deba01a2/0/A63CCE6366E3FCB7A2666A9090F2A0575A74DCF4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A63CCE6366E3FCB7A2666A9090F2A0575A74DCF4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 00:23:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:13:cc:f2:a3:2b:eb:45:4d:33:67:6c:d1:a4:78:9c:79:27:75:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A63CCE6366E3FCB7A2666A9090F2A0575A74DCF4 Validity Not Before: Dec 1 18:17:32 2025 GMT Not After : Dec 5 00:23:32 2025 GMT Subject: CN=43EB9FE6FE25A3346F0F58702584CE063DC898B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:54:3a:01:66:68:9c:90:c9:1d:f2:e5:28:dd: 16:aa:1d:e2:16:48:a8:76:cd:c4:de:b2:37:61:6c: d7:62:09:01:e3:5b:72:f0:aa:ff:92:48:9a:9b:c3: 58:2d:77:3b:e9:b9:07:f3:11:3b:0e:06:03:68:19: d9:31:96:44:ef:ff:ee:9c:58:67:28:50:49:32:8c: 20:41:21:bf:2a:04:c4:57:99:08:54:f9:cf:c1:6f: 95:74:e9:88:dd:2c:34:b2:b7:1b:f2:58:85:f3:02: 03:66:55:51:cc:27:99:8f:1f:10:f7:70:fe:70:e8: 23:f4:f5:70:49:a4:90:e1:8c:45:42:a4:4e:8b:41: 71:89:dd:2c:83:87:22:68:91:fd:7d:11:b2:c9:45: d0:d8:22:ea:1a:d0:4e:b5:3c:7e:79:a6:d1:88:c5: bd:28:45:d0:ad:da:d9:b4:5b:0f:ab:d8:87:7a:67: 00:0b:3f:ca:ca:75:56:bc:a4:cb:1a:f5:a7:f4:91: 1c:a9:46:cf:01:84:b6:af:a3:66:59:95:3d:01:14: a3:b1:91:ad:f5:f3:6c:85:14:a3:f2:01:c9:dd:35: f3:51:fc:bb:5b:84:6b:df:c4:83:4b:9a:b0:68:46: 40:4c:5f:bc:e5:c5:c5:e0:32:ed:c6:50:37:ef:66: 1c:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:EB:9F:E6:FE:25:A3:34:6F:0F:58:70:25:84:CE:06:3D:C8:98:B4 X509v3 Authority Key Identifier: keyid:A6:3C:CE:63:66:E3:FC:B7:A2:66:6A:90:90:F2:A0:57:5A:74:DC:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/87775dcf-283f-43c5-af60-09e0deba01a2/0/A63CCE6366E3FCB7A2666A9090F2A0575A74DCF4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A63CCE6366E3FCB7A2666A9090F2A0575A74DCF4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/87775dcf-283f-43c5-af60-09e0deba01a2/0/A63CCE6366E3FCB7A2666A9090F2A0575A74DCF4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:6d:c0:b2:1f:8d:94:7f:e3:91:98:f9:27:4d:68:78:33:df: 67:0a:c9:6d:2f:a1:5d:e7:1b:c1:bc:32:dc:bf:53:d1:0e:1a: 59:03:7a:ef:26:f6:8f:d2:3c:d7:aa:a1:be:ac:40:2f:52:54: 1a:94:cf:1c:54:37:18:24:92:25:96:71:9e:5f:a2:5b:ee:f4: c5:7d:86:e8:b5:89:2d:b3:61:cf:95:82:8a:98:13:25:39:31: c6:28:3b:4d:3f:76:74:60:88:a5:31:2d:93:73:92:98:e0:b8: 6d:cc:df:63:d7:37:fa:c9:91:61:80:bc:2b:d2:fe:b7:04:46: 59:88:6d:7b:77:e5:23:dd:95:3b:8b:73:46:aa:14:d5:dd:3c: f3:28:2e:c3:8f:b9:c6:04:f1:69:0c:54:22:4d:a4:a1:5d:53: b4:61:6e:ce:e0:e4:8b:17:14:10:7d:11:97:6c:03:2d:6e:1c: 3d:da:48:ab:ae:32:56:09:47:b2:9e:8c:42:df:9b:d4:31:a2: 9a:d4:15:85:b3:0c:7b:d6:a5:81:93:9b:ae:09:77:d1:d3:fd: ca:98:c3:54:ac:dd:2f:92:1c:94:dd:dc:97:cf:f7:5c:b0:99: 46:61:29:f4:a9:89:1a:7a:4d:90:60:7a:4a:67:39:56:24:4b: d6:16:1b:e3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHhPM8qMr60VNM2ds0aR4nHkndRIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTYzQ0NFNjM2NkUzRkNCN0EyNjY2QTkwOTBGMkEwNTc1 QTc0RENGNDAeFw0yNTEyMDExODE3MzJaFw0yNTEyMDUwMDIzMzJaMDMxMTAvBgNV BAMTKDQzRUI5RkU2RkUyNUEzMzQ2RjBGNTg3MDI1ODRDRTA2M0RDODk4QjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeVDoBZmickMkd8uUo3RaqHeIW SKh2zcTesjdhbNdiCQHjW3Lwqv+SSJqbw1gtdzvpuQfzETsOBgNoGdkxlkTv/+6c WGcoUEkyjCBBIb8qBMRXmQhU+c/Bb5V06YjdLDSytxvyWIXzAgNmVVHMJ5mPHxD3 cP5w6CP09XBJpJDhjEVCpE6LQXGJ3SyDhyJokf19EbLJRdDYIuoa0E61PH55ptGI xb0oRdCt2tm0Ww+r2Id6ZwALP8rKdVa8pMsa9af0kRypRs8BhLavo2ZZlT0BFKOx ka3182yFFKPyAcndNfNR/LtbhGvfxINLmrBoRkBMX7zlxcXgMu3GUDfvZhw/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQ+uf5v4lozRvD1hwJYTOBj3ImLQwHwYDVR0j BBgwFoAUpjzOY2bj/LeiZmqQkPKgV1p03PQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 Nzc3NWRjZi0yODNmLTQzYzUtYWY2MC0wOWUwZGViYTAxYTIvMC9BNjNDQ0U2MzY2 RTNGQ0I3QTI2NjZBOTA5MEYyQTA1NzVBNzREQ0Y0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTYzQ0NFNjM2NkUzRkNCN0EyNjY2QTkwOTBGMkEwNTc1QTc0 RENGNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODc3NzVkY2YtMjgzZi00M2M1LWFm NjAtMDllMGRlYmEwMWEyLzAvQTYzQ0NFNjM2NkUzRkNCN0EyNjY2QTkwOTBGMkEw NTc1QTc0RENGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABFtwLIfjZR/45GY+SdNaHgz32cKyW0voV3n G8G8Mty/U9EOGlkDeu8m9o/SPNeqob6sQC9SVBqUzxxUNxgkkiWWcZ5folvu9MV9 hui1iS2zYc+VgoqYEyU5McYoO00/dnRgiKUxLZNzkpjguG3M32PXN/rJkWGAvCvS /rcERlmIbXt35SPdlTuLc0aqFNXdPPMoLsOPucYE8WkMVCJNpKFdU7Rhbs7g5IsX FBB9EZdsAy1uHD3aSKuuMlYJR7KejELfm9QxoprUFYWzDHvWpYGTm64Jd9HT/cqY w1Ss3S+SHJTd3JfP91ywmUZhKfSpiRp6TZBgekpnOVYkS9YWG+M= -----END CERTIFICATE-----Generated at Wed Dec 3 14:14:27 2025 by rpki-client