This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/85f9002d-9267-4f8b-859a-dfa7d89143b4/0/63A008B749DB87C773CA05C5DF448BCA5357BB01.mft File: 63A008B749DB87C773CA05C5DF448BCA5357BB01.mft (raw, json) Hash identifier: XM8rtXkX6SVgYXG8fe48XMj7T9zlhrMnkYVMSJLvVSc= Subject key identifier: 59:89:A5:A0:BB:D4:EA:6D:72:47:59:AA:99:FC:E6:79:16:F6:71:DF Authority key identifier: 63:A0:08:B7:49:DB:87:C7:73:CA:05:C5:DF:44:8B:CA:53:57:BB:01 Certificate issuer: /CN=63A008B749DB87C773CA05C5DF448BCA5357BB01 Certificate serial: 424F56E5FE48818F210A16F42003B59DE456F7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/63A008B749DB87C773CA05C5DF448BCA5357BB01.cer Subject info access: rsync://repo-rpki.idnic.net/repo/85f9002d-9267-4f8b-859a-dfa7d89143b4/0/63A008B749DB87C773CA05C5DF448BCA5357BB01.mft Manifest number: 0352 Signing time: Sun 25 Jan 2026 12:22:20 +0000 Manifest this update: Sun 25 Jan 2026 12:17:20 +0000 Manifest next update: Wed 28 Jan 2026 16:35:20 +0000 Files and hashes: 1: 3130332e3136362e3234312e302f32342d3234203d3e20313431393639.roa (hash: Tji5eLarsbsUV7OPBAVD/9yKk9GUehEwx/Ji4JAvY3U=) 2: 63A008B749DB87C773CA05C5DF448BCA5357BB01.crl (hash: tbyDFVwLPezn6Kwq1zHv/qLGCVvvXJ92QCG1MwMGhzM=) 3: 3130332e3136362e3234302e302f32342d3234203d3e20313431393639.roa (hash: eZnK2eskkU6AREBsLNvr+wfApR29iHfhfxaLS8JDmM4=) 4: 3130332e3136362e3234302e302f32332d3233203d3e20313431393639.roa (hash: 16U5ENt1Fx7mXMkbXyDTcuDuUq+dB5XA/NthjrW4JLc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/85f9002d-9267-4f8b-859a-dfa7d89143b4/0/63A008B749DB87C773CA05C5DF448BCA5357BB01.crl rsync://repo-rpki.idnic.net/repo/85f9002d-9267-4f8b-859a-dfa7d89143b4/0/63A008B749DB87C773CA05C5DF448BCA5357BB01.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/63A008B749DB87C773CA05C5DF448BCA5357BB01.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 14:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:4f:56:e5:fe:48:81:8f:21:0a:16:f4:20:03:b5:9d:e4:56:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63A008B749DB87C773CA05C5DF448BCA5357BB01 Validity Not Before: Jan 25 12:17:20 2026 GMT Not After : Jan 28 16:35:20 2026 GMT Subject: CN=5989A5A0BBD4EA6D724759AA99FCE67916F671DF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:b0:b0:72:a9:37:62:cb:07:2c:b6:58:fb:1e: d2:59:eb:ce:9b:5d:e4:c5:bf:a1:26:4f:ab:63:67: f2:2a:d1:8a:33:2c:ae:22:38:4a:60:29:5f:ac:7a: 80:16:76:9a:85:68:de:12:31:d4:93:8f:c1:78:ca: 15:86:c8:d2:07:40:a3:bd:37:83:d9:f2:ec:e0:bf: 4a:ad:68:56:c0:2b:27:ca:94:9e:3c:53:28:e3:38: 81:61:6f:ab:4f:b1:c5:de:46:be:bd:d7:ad:d6:1e: 71:f1:4a:2b:7a:b3:8b:e5:94:67:2e:c1:39:d2:87: 14:ed:0f:08:46:b6:5d:53:16:54:16:a3:f3:cf:ec: f0:52:a9:02:4a:30:8f:86:d8:88:55:f0:4e:32:a6: 24:20:41:91:ad:c6:8d:31:37:fe:7e:f9:bb:5e:49: 34:12:4a:d9:da:f0:7a:54:4a:9b:de:52:9e:99:8c: e4:0a:65:13:09:c3:5d:76:f8:3a:5e:b5:d4:13:1a: 87:2b:ac:d7:76:74:61:e7:72:5f:6d:3b:67:f0:a4: 11:33:f1:2c:58:72:6e:f3:8b:18:1f:88:08:09:3a: 1c:e9:ee:79:92:78:b4:59:f1:1c:94:69:cc:d5:a6: 63:5d:4f:7f:26:7b:1a:c4:69:47:bb:bb:bd:8c:78: 3b:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:89:A5:A0:BB:D4:EA:6D:72:47:59:AA:99:FC:E6:79:16:F6:71:DF X509v3 Authority Key Identifier: keyid:63:A0:08:B7:49:DB:87:C7:73:CA:05:C5:DF:44:8B:CA:53:57:BB:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/85f9002d-9267-4f8b-859a-dfa7d89143b4/0/63A008B749DB87C773CA05C5DF448BCA5357BB01.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/63A008B749DB87C773CA05C5DF448BCA5357BB01.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/85f9002d-9267-4f8b-859a-dfa7d89143b4/0/63A008B749DB87C773CA05C5DF448BCA5357BB01.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:99:ca:c7:7a:9f:77:59:c4:f2:9d:6c:5f:c3:72:98:58:cd: 1a:fd:d4:a7:b1:8e:b2:bc:b2:16:9f:0f:0e:4e:05:81:eb:7c: be:ab:87:24:03:4c:a1:23:30:cb:d9:53:bd:8e:b4:e3:96:de: 76:23:1e:bc:fe:a0:0f:ab:bc:12:12:5d:2e:2c:dc:2e:dc:71: fc:35:1e:41:ef:f1:74:74:8f:d5:5c:7b:98:a6:1f:f1:c2:76: 84:2c:07:39:7e:a7:64:27:39:04:fa:bb:de:0d:54:e1:ab:5b: 33:27:f7:b1:20:34:a9:cb:37:e4:47:8b:f4:1b:ad:7d:66:13: 11:91:fb:0a:45:d6:31:cb:df:14:74:ba:fd:f9:d6:a4:9d:e4: c5:99:2b:de:f2:98:06:ea:8b:63:f2:59:a4:d3:b2:93:a6:ec: c4:3e:ca:c4:f5:74:76:f1:62:ed:4e:a2:45:80:70:6b:3b:84: 5b:3c:79:22:3d:3c:68:ad:47:20:89:bd:b6:83:63:07:1d:15: b2:4d:de:57:46:69:ca:03:4f:6d:55:57:f9:72:f6:f5:9c:27: 8c:03:cf:96:0c:9f:73:06:12:8b:a1:fe:ae:50:5e:08:41:7e: 38:53:6a:1f:b0:40:a9:64:9a:44:1d:21:a4:b7:ee:3c:31:37: 9d:cf:36:d5 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgITQk9W5f5IgY8hChb0IAO1neRW9zANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEyg2M0EwMDhCNzQ5REI4N0M3NzNDQTA1QzVERjQ0OEJDQTUz NTdCQjAxMB4XDTI2MDEyNTEyMTcyMFoXDTI2MDEyODE2MzUyMFowMzExMC8GA1UE AxMoNTk4OUE1QTBCQkQ0RUE2RDcyNDc1OUFBOTlGQ0U2NzkxNkY2NzFERjCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANCwsHKpN2LLByy2WPse0lnrzptd 5MW/oSZPq2Nn8irRijMsriI4SmApX6x6gBZ2moVo3hIx1JOPwXjKFYbI0gdAo703 g9ny7OC/Sq1oVsArJ8qUnjxTKOM4gWFvq0+xxd5Gvr3XrdYecfFKK3qzi+WUZy7B OdKHFO0PCEa2XVMWVBaj88/s8FKpAkowj4bYiFXwTjKmJCBBka3GjTE3/n75u15J NBJK2drwelRKm95SnpmM5AplEwnDXXb4Ol611BMahyus13Z0YedyX207Z/CkETPx LFhybvOLGB+ICAk6HOnueZJ4tFnxHJRpzNWmY11PfyZ7GsRpR7u7vYx4O1cCAwEA AaOCAjwwggI4MB0GA1UdDgQWBBRZiaWgu9TqbXJHWaqZ/OZ5FvZx3zAfBgNVHSME GDAWgBRjoAi3SduHx3PKBcXfRIvKU1e7ATAOBgNVHQ8BAf8EBAMCB4AwgYUGA1Ud HwR+MHwweqB4oHaGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzg1 ZjkwMDJkLTkyNjctNGY4Yi04NTlhLWRmYTdkODkxNDNiNC8wLzYzQTAwOEI3NDlE Qjg3Qzc3M0NBMDVDNURGNDQ4QkNBNTM1N0JCMDEuY3JsMHQGCCsGAQUFBwEBBGgw ZjBkBggrBgEFBQcwAoZYcnN5bmM6Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8v SUROSUMtSUQvMi82M0EwMDhCNzQ5REI4N0M3NzNDQTA1QzVERjQ0OEJDQTUzNTdC QjAxLmNlcjCBkwYIKwYBBQUHAQsEgYYwgYMwgYAGCCsGAQUFBzALhnRyc3luYzov L3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84NWY5MDAyZC05MjY3LTRmOGItODU5 YS1kZmE3ZDg5MTQzYjQvMC82M0EwMDhCNzQ5REI4N0M3NzNDQTA1QzVERjQ0OEJD QTUzNTdCQjAxLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADANBgkqhkiG9w0BAQsFAAOCAQEAU5nKx3qfd1nE8p1sX8NymFjNGv3Up7GOsryy Fp8PDk4Fget8vquHJANMoSMwy9lTvY6045bediMevP6gD6u8EhJdLizcLtxx/DUe Qe/xdHSP1Vx7mKYf8cJ2hCwHOX6nZCc5BPq73g1U4atbMyf3sSA0qcs35EeL9But fWYTEZH7CkXWMcvfFHS6/fnWpJ3kxZkr3vKYBuqLY/JZpNOyk6bsxD7KxPV0dvFi 7U6iRYBwazuEWzx5Ij08aK1HIIm9toNjBx0Vsk3eV0ZpygNPbVVX+XL29ZwnjAPP lgyfcwYSi6H+rlBeCEF+OFNqH7BAqWSaRB0hpLfuPDE3nc821Q== -----END CERTIFICATE-----Generated at Sun Jan 25 18:47:42 2026 by rpki-client