This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/9141f884-d5c9-4336-9a5c-777419e56dce/0/63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC.mft File: 63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC.mft (raw, json) Hash identifier: IvkSEq5GbTTT3Xj15LzOiRLPsJfO2XCZlhpdWeUhQBA= Subject key identifier: D7:71:5E:5C:F2:3C:C7:C5:2F:05:FE:DE:CD:33:27:43:4C:A7:00:7A Authority key identifier: 63:FD:8D:EE:5A:44:38:A5:0F:F5:0B:6B:9B:9D:6A:3F:53:F3:48:DC Certificate issuer: /CN=63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC Certificate serial: 7EBE85976AC204CDB8E6E627F2BAB571B137E07B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9141f884-d5c9-4336-9a5c-777419e56dce/0/63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC.mft Manifest number: 0532 Signing time: Tue 02 Dec 2025 14:31:46 +0000 Manifest this update: Tue 02 Dec 2025 14:26:46 +0000 Manifest next update: Fri 05 Dec 2025 23:50:46 +0000 Files and hashes: 1: 63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC.crl (hash: P8gDe73/treCX2VVRjyKHtwVU30DkLQcE4CWwTivs8M=) 2: 3130332e35302e3231372e302f32342d3234203d3e20313332313634.roa (hash: KII5650hF6mmxLQ/rbgTb8PaRw7N913WBuqCn/GKGRI=) 3: 323030313a6466303a396530303a3a2f34382d3438203d3e20313332313634.roa (hash: UVW9pjMMh6nTzzAse0pe198GDDypk+vSUVBxDpcZFG8=) 4: 3130332e362e3131372e302f32342d3234203d3e20313332313634.roa (hash: kVt5AplIi2tCio95fGZq/cPfVyltnVVl2G0ZCHPdgRg=) 5: 3130332e35302e3231362e302f32342d3234203d3e20313332313634.roa (hash: ZpF/KGxPbErqJ8VSz1WkiCybrFY70jeXAIswB/bXwuI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9141f884-d5c9-4336-9a5c-777419e56dce/0/63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC.crl rsync://repo-rpki.idnic.net/repo/9141f884-d5c9-4336-9a5c-777419e56dce/0/63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 23:50:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:be:85:97:6a:c2:04:cd:b8:e6:e6:27:f2:ba:b5:71:b1:37:e0:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC Validity Not Before: Dec 2 14:26:46 2025 GMT Not After : Dec 5 23:50:46 2025 GMT Subject: CN=D7715E5CF23CC7C52F05FEDECD3327434CA7007A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:31:df:52:05:e4:b4:71:21:78:48:d2:cc:c2: 53:65:af:c5:fc:39:94:f5:b4:e1:8e:81:7a:e2:cd: a2:40:24:ce:9a:71:78:d0:59:ff:c4:a1:4d:f0:40: f3:25:8c:80:d7:6d:ae:7a:3a:cc:02:2a:51:3b:d1: 67:48:89:9a:54:43:87:a1:a6:06:c2:be:80:13:ff: 5a:7b:a1:5c:ca:f4:f3:7d:ce:5c:40:25:f4:b7:23: 5d:43:a6:94:64:08:6a:77:72:5d:fb:76:54:fe:00: 13:ee:4b:ec:f9:8a:d0:37:8f:93:3f:25:fb:2c:39: c9:e4:76:82:5f:cc:08:78:b2:9b:37:d4:05:46:0c: 43:d3:1a:d7:3d:be:99:23:18:d4:80:f7:c8:15:04: ec:d7:9b:5e:65:67:0a:12:22:88:42:32:f7:a7:56: ed:0c:cd:f1:7a:91:e1:b5:bd:a9:9a:05:a2:0f:a9: f7:5c:2e:1b:a0:73:7f:94:4a:2c:1f:76:54:53:6d: 83:a6:2a:1f:01:2f:92:e8:b5:02:25:62:b9:b5:c4: 74:df:3a:36:25:d3:a5:70:8e:d7:cb:0d:72:74:06: 2f:f7:bd:86:f0:56:84:bf:09:01:c1:cf:b8:57:25: 45:51:72:55:b7:0c:9a:57:41:ad:b2:ed:16:9d:27: 32:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:71:5E:5C:F2:3C:C7:C5:2F:05:FE:DE:CD:33:27:43:4C:A7:00:7A X509v3 Authority Key Identifier: keyid:63:FD:8D:EE:5A:44:38:A5:0F:F5:0B:6B:9B:9D:6A:3F:53:F3:48:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9141f884-d5c9-4336-9a5c-777419e56dce/0/63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9141f884-d5c9-4336-9a5c-777419e56dce/0/63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:9d:ce:34:c6:d9:6e:21:ce:2c:a1:dd:b9:dd:f0:6e:fd:16: 90:74:b8:13:98:93:63:5a:b4:2e:8a:2f:6b:eb:b1:37:05:f3: 2f:4c:75:d0:ce:92:59:9b:5c:8b:e4:52:4d:75:bd:dc:75:dc: b1:0c:77:44:f4:00:80:9f:53:11:38:94:a7:a1:02:09:7e:9e: 2e:f1:92:d4:1f:82:6a:3b:ce:14:63:2b:20:03:e4:2b:06:8d: 0f:75:78:95:79:60:d9:79:8c:6b:7b:0e:63:75:54:00:3e:6e: c3:32:5c:a5:03:08:42:f6:13:2a:8b:72:b4:70:2a:ed:06:56: a4:0a:66:f4:4a:a0:b1:c0:a8:a8:37:17:77:c4:52:85:57:48: 48:99:26:fd:91:1d:28:a2:86:67:10:76:df:78:17:38:3a:c3: 5e:b3:d5:54:be:85:59:c3:17:b8:97:39:9c:35:57:5c:9e:cc: f7:89:fc:10:46:4b:a2:7d:f4:fe:8d:8d:18:64:9a:71:5a:0c: 05:9a:5e:f2:26:33:f4:29:6b:ef:76:9a:26:8b:eb:b6:45:ac: f6:97:2f:8d:82:5c:27:2b:59:fc:ea:1e:e3:4d:5b:83:c1:bd: 91:70:4f:c8:07:78:e3:8e:a8:65:05:9f:1b:20:f8:ee:54:d9: 34:fa:0d:2c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfr6Fl2rCBM245uYn8rq1cbE34HswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjNGRDhERUU1QTQ0MzhBNTBGRjUwQjZCOUI5RDZBM0Y1 M0YzNDhEQzAeFw0yNTEyMDIxNDI2NDZaFw0yNTEyMDUyMzUwNDZaMDMxMTAvBgNV BAMTKEQ3NzE1RTVDRjIzQ0M3QzUyRjA1RkVERUNEMzMyNzQzNENBNzAwN0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWMd9SBeS0cSF4SNLMwlNlr8X8 OZT1tOGOgXrizaJAJM6acXjQWf/EoU3wQPMljIDXba56OswCKlE70WdIiZpUQ4eh pgbCvoAT/1p7oVzK9PN9zlxAJfS3I11DppRkCGp3cl37dlT+ABPuS+z5itA3j5M/ JfssOcnkdoJfzAh4sps31AVGDEPTGtc9vpkjGNSA98gVBOzXm15lZwoSIohCMven Vu0MzfF6keG1vamaBaIPqfdcLhugc3+USiwfdlRTbYOmKh8BL5LotQIlYrm1xHTf OjYl06VwjtfLDXJ0Bi/3vYbwVoS/CQHBz7hXJUVRclW3DJpXQa2y7RadJzKpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU13FeXPI8x8UvBf7ezTMnQ0ynAHowHwYDVR0j BBgwFoAUY/2N7lpEOKUP9Qtrm51qP1PzSNwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MTQxZjg4NC1kNWM5LTQzMzYtOWE1Yy03Nzc0MTllNTZkY2UvMC82M0ZEOERFRTVB NDQzOEE1MEZGNTBCNkI5QjlENkEzRjUzRjM0OERDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjNGRDhERUU1QTQ0MzhBNTBGRjUwQjZCOUI5RDZBM0Y1M0Yz NDhEQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTE0MWY4ODQtZDVjOS00MzM2LTlh NWMtNzc3NDE5ZTU2ZGNlLzAvNjNGRDhERUU1QTQ0MzhBNTBGRjUwQjZCOUI5RDZB M0Y1M0YzNDhEQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFydzjTG2W4hziyh3bnd8G79FpB0uBOYk2Na tC6KL2vrsTcF8y9MddDOklmbXIvkUk11vdx13LEMd0T0AICfUxE4lKehAgl+ni7x ktQfgmo7zhRjKyAD5CsGjQ91eJV5YNl5jGt7DmN1VAA+bsMyXKUDCEL2EyqLcrRw Ku0GVqQKZvRKoLHAqKg3F3fEUoVXSEiZJv2RHSiihmcQdt94Fzg6w16z1VS+hVnD F7iXOZw1V1yezPeJ/BBGS6J99P6NjRhkmnFaDAWaXvImM/Qpa+92miaL67ZFrPaX L42CXCcrWfzqHuNNW4PBvZFwT8gHeOOOqGUFnxsg+O5U2TT6DSw= -----END CERTIFICATE-----Generated at Wed Dec 3 13:57:16 2025 by rpki-client