This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a017b828-17fa-48a2-a113-149f9467a328/0/63003FFDD063104898793061BDB2DB8D0788745D.mft File: 63003FFDD063104898793061BDB2DB8D0788745D.mft (raw, json) Hash identifier: b6uMe4xeWdP6ZVGYPUgaOLku8Ywk9M0zkrT0PFxTQmE= Subject key identifier: 3D:50:3D:4F:A0:64:55:92:10:F0:3D:12:11:56:02:06:A5:1A:7D:40 Authority key identifier: 63:00:3F:FD:D0:63:10:48:98:79:30:61:BD:B2:DB:8D:07:88:74:5D Certificate issuer: /CN=63003FFDD063104898793061BDB2DB8D0788745D Certificate serial: 4CD55D53952F00DB6AED713E01722174D94F1A85 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/63003FFDD063104898793061BDB2DB8D0788745D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a017b828-17fa-48a2-a113-149f9467a328/0/63003FFDD063104898793061BDB2DB8D0788745D.mft Manifest number: 04F3 Signing time: Mon 01 Dec 2025 14:41:48 +0000 Manifest this update: Mon 01 Dec 2025 14:36:48 +0000 Manifest next update: Fri 05 Dec 2025 01:53:48 +0000 Files and hashes: 1: 3230322e3137332e31362e302f32312d3234203d3e203234323130.roa (hash: 8ngGpaw5U41sV4BmmrJGa5VA7KiMpIyW6XxofkOK1bo=) 2: 3138302e3135302e3233322e302f32312d3234203d3e203234323130.roa (hash: uBYWq9KOdocMUKkuJh410FmbT/FJLpr3pkzLuhHu42c=) 3: 63003FFDD063104898793061BDB2DB8D0788745D.crl (hash: sE4YOxEPqkeVWoyvUop2K9UwV9Sd29/E/0rYcZQe57g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a017b828-17fa-48a2-a113-149f9467a328/0/63003FFDD063104898793061BDB2DB8D0788745D.crl rsync://repo-rpki.idnic.net/repo/a017b828-17fa-48a2-a113-149f9467a328/0/63003FFDD063104898793061BDB2DB8D0788745D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/63003FFDD063104898793061BDB2DB8D0788745D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 01:53:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:d5:5d:53:95:2f:00:db:6a:ed:71:3e:01:72:21:74:d9:4f:1a:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63003FFDD063104898793061BDB2DB8D0788745D Validity Not Before: Dec 1 14:36:48 2025 GMT Not After : Dec 5 01:53:48 2025 GMT Subject: CN=3D503D4FA064559210F03D1211560206A51A7D40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:99:67:52:9b:57:2b:b1:8d:5e:69:43:b8:ed: 55:b2:29:c8:85:d0:05:d3:38:8e:9f:f6:49:56:3d: ab:5b:b1:90:b7:f9:df:62:eb:ff:36:69:bd:4b:68: b2:9d:c1:b6:f9:e7:4f:41:63:84:d4:4a:9d:2e:7f: 7b:1d:b4:f2:2e:90:a1:87:f1:d4:84:e4:9d:89:f1: 17:0c:e1:d5:b2:ec:74:87:da:d1:33:41:79:d9:c0: 0c:2d:57:ab:e2:f1:e1:6d:3b:f5:54:80:7b:9c:a9: e0:02:62:c2:c3:ed:a5:31:27:7b:7f:83:eb:6c:13: 52:0c:d6:8a:8b:5b:5a:60:39:e9:76:b9:50:6a:be: fa:10:bc:af:b1:d2:a4:79:fa:42:10:1f:67:c6:bb: 9e:8d:16:88:94:b5:30:0c:ef:14:d6:87:96:42:03: c6:74:ca:59:eb:aa:c5:f9:5d:b8:f7:04:c1:66:26: 03:dc:59:83:cf:ab:5e:9c:1a:f7:fc:93:d5:1b:dd: 4d:1c:fc:b0:52:d3:38:7d:7e:ee:4c:a9:b7:80:d1: 02:37:fd:80:07:67:dd:34:13:a7:67:f3:41:a7:87: c5:d6:c1:3d:12:d9:8a:02:9a:42:82:3f:92:22:dc: 3e:a8:a7:bf:e7:93:bc:5f:49:69:b9:a4:0b:dc:56: 1c:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:50:3D:4F:A0:64:55:92:10:F0:3D:12:11:56:02:06:A5:1A:7D:40 X509v3 Authority Key Identifier: keyid:63:00:3F:FD:D0:63:10:48:98:79:30:61:BD:B2:DB:8D:07:88:74:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a017b828-17fa-48a2-a113-149f9467a328/0/63003FFDD063104898793061BDB2DB8D0788745D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/63003FFDD063104898793061BDB2DB8D0788745D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a017b828-17fa-48a2-a113-149f9467a328/0/63003FFDD063104898793061BDB2DB8D0788745D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:66:e5:bf:5c:42:9d:05:63:ac:67:75:a2:5a:7c:93:c0:35: 93:27:a5:89:55:1b:b2:c5:20:af:15:5d:70:f1:73:df:0e:52: 39:ba:bf:7c:10:f3:3e:ac:1e:eb:69:2a:2c:a7:df:04:bf:43: ba:cb:b2:e6:84:5d:e4:0e:da:71:05:37:9f:77:2e:cf:84:80: 60:9d:25:8a:e1:1c:f0:08:a4:3a:dc:d7:6c:0b:18:e4:51:c5: e8:a1:0f:bd:e3:d6:1e:00:67:60:2e:ed:54:59:9d:e2:de:4c: 70:61:12:37:fe:1d:12:2c:04:f1:6a:8b:90:5a:89:b9:8f:37: a3:83:5d:9c:c7:45:27:93:4c:73:03:8f:5f:76:e5:68:51:a5: 7c:0c:84:76:15:4e:29:ad:9c:ac:59:48:9c:28:2d:9c:42:18: f5:46:07:b1:b5:4a:56:83:ea:20:5c:83:ab:0b:14:49:36:87: 08:75:1f:13:8f:45:d8:ae:6d:90:97:cb:ba:e2:b7:b9:86:b1: cc:11:1f:ca:c3:79:21:95:2b:69:d8:51:c5:b1:88:27:c7:5c: 30:7c:01:7f:02:b6:6f:c1:4c:16:70:b1:c3:14:03:d4:c4:64: 4b:8d:fc:14:30:22:79:5b:31:21:74:47:35:3f:92:76:23:f2: 2b:08:70:67 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTNVdU5UvANtq7XE+AXIhdNlPGoUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjMwMDNGRkREMDYzMTA0ODk4NzkzMDYxQkRCMkRCOEQw Nzg4NzQ1RDAeFw0yNTEyMDExNDM2NDhaFw0yNTEyMDUwMTUzNDhaMDMxMTAvBgNV BAMTKDNENTAzRDRGQTA2NDU1OTIxMEYwM0QxMjExNTYwMjA2QTUxQTdENDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhmWdSm1crsY1eaUO47VWyKciF 0AXTOI6f9klWPatbsZC3+d9i6/82ab1LaLKdwbb5509BY4TUSp0uf3sdtPIukKGH 8dSE5J2J8RcM4dWy7HSH2tEzQXnZwAwtV6vi8eFtO/VUgHucqeACYsLD7aUxJ3t/ g+tsE1IM1oqLW1pgOel2uVBqvvoQvK+x0qR5+kIQH2fGu56NFoiUtTAM7xTWh5ZC A8Z0ylnrqsX5Xbj3BMFmJgPcWYPPq16cGvf8k9Ub3U0c/LBS0zh9fu5MqbeA0QI3 /YAHZ900E6dn80Gnh8XWwT0S2YoCmkKCP5Ii3D6op7/nk7xfSWm5pAvcVhxnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPVA9T6BkVZIQ8D0SEVYCBqUafUAwHwYDVR0j BBgwFoAUYwA//dBjEEiYeTBhvbLbjQeIdF0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MDE3YjgyOC0xN2ZhLTQ4YTItYTExMy0xNDlmOTQ2N2EzMjgvMC82MzAwM0ZGREQw NjMxMDQ4OTg3OTMwNjFCREIyREI4RDA3ODg3NDVELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjMwMDNGRkREMDYzMTA0ODk4NzkzMDYxQkRCMkRCOEQwNzg4 NzQ1RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTAxN2I4MjgtMTdmYS00OGEyLWEx MTMtMTQ5Zjk0NjdhMzI4LzAvNjMwMDNGRkREMDYzMTA0ODk4NzkzMDYxQkRCMkRC OEQwNzg4NzQ1RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGFm5b9cQp0FY6xndaJafJPANZMnpYlVG7LF IK8VXXDxc98OUjm6v3wQ8z6sHutpKiyn3wS/Q7rLsuaEXeQO2nEFN593Ls+EgGCd JYrhHPAIpDrc12wLGORRxeihD73j1h4AZ2Au7VRZneLeTHBhEjf+HRIsBPFqi5Ba ibmPN6ODXZzHRSeTTHMDj1925WhRpXwMhHYVTimtnKxZSJwoLZxCGPVGB7G1SlaD 6iBcg6sLFEk2hwh1HxOPRdiubZCXy7rit7mGscwRH8rDeSGVK2nYUcWxiCfHXDB8 AX8Ctm/BTBZwscMUA9TEZEuN/BQwInlbMSF0RzU/knYj8isIcGc= -----END CERTIFICATE-----Generated at Wed Dec 3 16:49:55 2025 by rpki-client