This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/B563D708A094B24FC361EDD11C91EE7979AB0471.mft File: B563D708A094B24FC361EDD11C91EE7979AB0471.mft (raw, json) Hash identifier: oZ3Elroo44/Vxzi8BrN0RFreaxN4XsgbMX7C47gGVlo= Subject key identifier: 91:E8:48:0E:D8:F3:81:69:B9:6E:3E:D0:35:C0:5D:DE:44:52:BE:FE Authority key identifier: B5:63:D7:08:A0:94:B2:4F:C3:61:ED:D1:1C:91:EE:79:79:AB:04:71 Certificate issuer: /CN=B563D708A094B24FC361EDD11C91EE7979AB0471 Certificate serial: 3FF6FF4B529BED35B0E39A3335DCB52A7A9E68C3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B563D708A094B24FC361EDD11C91EE7979AB0471.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/B563D708A094B24FC361EDD11C91EE7979AB0471.mft Manifest number: 04B4 Signing time: Sun 14 Dec 2025 16:21:13 +0000 Manifest this update: Sun 14 Dec 2025 16:16:13 +0000 Manifest next update: Thu 18 Dec 2025 01:52:13 +0000 Files and hashes: 1: 3130332e3135382e3233352e302f32342d3234203d3e20313431383938.roa (hash: 1oRmxMWEmNWfiObwNq2iDBD7Utfj4IUiGgv5WjZ9wmA=) 2: 3130332e3135382e3233342e302f32332d3233203d3e20313431313332.roa (hash: VerBshfKSbDiG4ilBKzo2++FEnDv7+7VU/P4UtUMaSI=) 3: 3130332e3135382e3233342e302f32342d3234203d3e20313431383938.roa (hash: DC1WzlYzoLRsGjbVoxuqgztNqkwtiD8GKj7bCCztmOc=) 4: 3130332e3135382e3233342e302f32342d3234203d3e20313431313332.roa (hash: LFN1lWDxbZdPzNeB6sbVhDvJLLQcsJmGzjZZihSsn1w=) 5: 3130332e3135382e3233352e302f32342d3234203d3e20313431313332.roa (hash: kpMxQvSYLU76Gm9LQAAGgZvfd3otWzRiAJhO9y4zBsk=) 6: B563D708A094B24FC361EDD11C91EE7979AB0471.crl (hash: mdcLjVGhAsO6ucxD1jF/3RGnIonRSjqA7KarB1NhixM=) 7: 3130332e3135382e3233342e302f32332d3233203d3e20313431383938.roa (hash: Fqgr+r9WG3m7zmpO3rSwg44QNE4blwlf0zSotQ3DNUo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/B563D708A094B24FC361EDD11C91EE7979AB0471.crl rsync://repo-rpki.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/B563D708A094B24FC361EDD11C91EE7979AB0471.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B563D708A094B24FC361EDD11C91EE7979AB0471.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Dec 2025 01:52:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:f6:ff:4b:52:9b:ed:35:b0:e3:9a:33:35:dc:b5:2a:7a:9e:68:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B563D708A094B24FC361EDD11C91EE7979AB0471 Validity Not Before: Dec 14 16:16:13 2025 GMT Not After : Dec 18 01:52:13 2025 GMT Subject: CN=91E8480ED8F38169B96E3ED035C05DDE4452BEFE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:be:aa:39:a6:30:c6:20:ca:84:70:88:5c:10: b2:19:81:a6:69:90:a6:2b:60:14:f1:ef:6b:97:d2: 2e:18:03:51:69:02:30:c0:56:65:b0:04:b4:1c:26: 68:5d:b8:1d:40:79:76:54:9b:da:46:68:20:18:d3: 28:5e:da:44:89:07:51:90:b8:02:91:cc:f9:42:e6: aa:10:cc:90:0e:b7:fe:5a:c0:a8:69:53:45:cf:3b: 85:4b:b4:d1:51:60:53:2d:12:1c:f7:e6:ab:23:87: cc:e5:89:69:97:f5:3c:d7:22:a6:8d:5a:2a:aa:62: 46:be:ac:90:8f:b4:57:e3:41:ae:27:c5:7b:3e:f6: c0:57:30:ae:17:f7:01:51:54:99:36:82:6e:0e:7a: 32:da:a6:69:18:dc:76:87:1e:c9:e8:6b:58:29:8e: 1f:35:a5:11:5c:e3:e6:8d:a8:d6:42:0d:9d:20:17: 30:3a:3b:fe:87:cf:e7:e2:52:fa:4d:3a:b7:36:9c: 2f:b4:92:a9:98:d8:cd:4a:30:1e:88:c5:aa:36:48: 41:f4:77:d4:c0:b8:f6:6c:fc:fb:c4:12:20:ad:8a: 02:91:66:37:85:72:8e:69:ca:92:d1:b0:ed:12:a9: d1:c2:a1:c3:ee:a9:6c:87:d0:43:ca:1e:0a:81:2f: 10:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:E8:48:0E:D8:F3:81:69:B9:6E:3E:D0:35:C0:5D:DE:44:52:BE:FE X509v3 Authority Key Identifier: keyid:B5:63:D7:08:A0:94:B2:4F:C3:61:ED:D1:1C:91:EE:79:79:AB:04:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/B563D708A094B24FC361EDD11C91EE7979AB0471.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B563D708A094B24FC361EDD11C91EE7979AB0471.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/B563D708A094B24FC361EDD11C91EE7979AB0471.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:94:46:5f:da:a5:a8:0a:f0:3f:0b:b1:e8:ff:dd:c9:63:11: c9:00:bf:ea:90:c4:9a:37:47:7b:06:9c:c1:54:48:58:4d:2b: 03:75:f8:d2:83:13:93:10:27:05:5d:a1:5f:a8:5f:15:a3:04: a6:b8:65:89:6d:0b:c4:f6:54:01:83:ee:dc:44:54:8d:77:7a: bf:90:83:ef:75:a9:e2:5c:0a:7d:7f:7e:38:5c:b2:cf:08:a3: b8:82:12:86:db:cc:0f:e5:15:60:b2:25:6e:35:70:67:26:da: 9b:71:65:6c:a2:c9:0c:4f:a4:1c:fd:32:24:b0:34:6f:b6:93: df:3d:f2:de:ed:e1:04:3a:9c:be:4a:37:38:0f:60:2a:f0:50: cf:d1:21:ac:0d:eb:64:fa:04:ca:e9:2e:30:df:b3:25:9c:c7: a9:b3:3b:94:43:23:1a:93:64:47:2c:28:7d:af:4d:a0:9d:7a: cc:20:36:28:2a:18:e5:c4:ad:69:d4:e2:c8:60:43:cc:24:e3: 9a:cb:04:1b:7c:58:4a:b3:cc:a3:97:1c:ce:2d:73:67:5f:6b: 1a:96:d3:af:23:17:ca:1d:ec:89:a1:05:a8:0e:e2:1f:f2:ec: 40:c8:57:9a:6d:57:02:d2:67:9e:ec:70:8c:d8:44:d1:e7:88: 16:8e:dc:ad -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP/b/S1Kb7TWw45ozNdy1KnqeaMMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjU2M0Q3MDhBMDk0QjI0RkMzNjFFREQxMUM5MUVFNzk3 OUFCMDQ3MTAeFw0yNTEyMTQxNjE2MTNaFw0yNTEyMTgwMTUyMTNaMDMxMTAvBgNV BAMTKDkxRTg0ODBFRDhGMzgxNjlCOTZFM0VEMDM1QzA1RERFNDQ1MkJFRkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/vqo5pjDGIMqEcIhcELIZgaZp kKYrYBTx72uX0i4YA1FpAjDAVmWwBLQcJmhduB1AeXZUm9pGaCAY0yhe2kSJB1GQ uAKRzPlC5qoQzJAOt/5awKhpU0XPO4VLtNFRYFMtEhz35qsjh8zliWmX9TzXIqaN WiqqYka+rJCPtFfjQa4nxXs+9sBXMK4X9wFRVJk2gm4OejLapmkY3HaHHsnoa1gp jh81pRFc4+aNqNZCDZ0gFzA6O/6Hz+fiUvpNOrc2nC+0kqmY2M1KMB6Ixao2SEH0 d9TAuPZs/PvEEiCtigKRZjeFco5pypLRsO0SqdHCocPuqWyH0EPKHgqBLxAnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkehIDtjzgWm5bj7QNcBd3kRSvv4wHwYDVR0j BBgwFoAUtWPXCKCUsk/DYe3RHJHueXmrBHEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MDM2ZTA3Yy04MjgzLTQzZDMtOTE2NC0zZTBlNmNhY2Y0OTkvMC9CNTYzRDcwOEEw OTRCMjRGQzM2MUVERDExQzkxRUU3OTc5QUIwNDcxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjU2M0Q3MDhBMDk0QjI0RkMzNjFFREQxMUM5MUVFNzk3OUFC MDQ3MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTAzNmUwN2MtODI4My00M2QzLTkx NjQtM2UwZTZjYWNmNDk5LzAvQjU2M0Q3MDhBMDk0QjI0RkMzNjFFREQxMUM5MUVF Nzk3OUFCMDQ3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJWURl/apagK8D8Lsej/3cljEckAv+qQxJo3 R3sGnMFUSFhNKwN1+NKDE5MQJwVdoV+oXxWjBKa4ZYltC8T2VAGD7txEVI13er+Q g+91qeJcCn1/fjhcss8Io7iCEobbzA/lFWCyJW41cGcm2ptxZWyiyQxPpBz9MiSw NG+2k9898t7t4QQ6nL5KNzgPYCrwUM/RIawN62T6BMrpLjDfsyWcx6mzO5RDIxqT ZEcsKH2vTaCdeswgNigqGOXErWnU4shgQ8wk45rLBBt8WEqzzKOXHM4tc2dfaxqW 068jF8od7ImhBagO4h/y7EDIV5ptVwLSZ57scIzYRNHniBaO3K0= -----END CERTIFICATE-----Generated at Tue Dec 16 20:03:34 2025 by rpki-client