This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/B563D708A094B24FC361EDD11C91EE7979AB0471.mft File: B563D708A094B24FC361EDD11C91EE7979AB0471.mft (raw, json) Hash identifier: liFXTCWP+ZycsYy36xxk5eiZSeNpbR2FGi4CR02vMuM= Subject key identifier: BB:0C:63:94:EC:D1:1D:AA:ED:70:06:6A:2C:25:AD:74:72:24:CE:5F Authority key identifier: B5:63:D7:08:A0:94:B2:4F:C3:61:ED:D1:1C:91:EE:79:79:AB:04:71 Certificate issuer: /CN=B563D708A094B24FC361EDD11C91EE7979AB0471 Certificate serial: 4DD2E5342E3F1DC5717E30B968FCA0B54F85E26B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B563D708A094B24FC361EDD11C91EE7979AB0471.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/B563D708A094B24FC361EDD11C91EE7979AB0471.mft Manifest number: 04B0 Signing time: Sat 06 Dec 2025 02:51:12 +0000 Manifest this update: Sat 06 Dec 2025 02:46:12 +0000 Manifest next update: Tue 09 Dec 2025 10:06:12 +0000 Files and hashes: 1: 3130332e3135382e3233352e302f32342d3234203d3e20313431313332.roa (hash: kpMxQvSYLU76Gm9LQAAGgZvfd3otWzRiAJhO9y4zBsk=) 2: 3130332e3135382e3233342e302f32332d3233203d3e20313431313332.roa (hash: VerBshfKSbDiG4ilBKzo2++FEnDv7+7VU/P4UtUMaSI=) 3: 3130332e3135382e3233342e302f32342d3234203d3e20313431313332.roa (hash: LFN1lWDxbZdPzNeB6sbVhDvJLLQcsJmGzjZZihSsn1w=) 4: 3130332e3135382e3233352e302f32342d3234203d3e20313431383938.roa (hash: 1oRmxMWEmNWfiObwNq2iDBD7Utfj4IUiGgv5WjZ9wmA=) 5: B563D708A094B24FC361EDD11C91EE7979AB0471.crl (hash: yl9qdr27gZEY/DbAaTIj0FMJJ3cZHhugAJyFkjhfKPI=) 6: 3130332e3135382e3233342e302f32332d3233203d3e20313431383938.roa (hash: Fqgr+r9WG3m7zmpO3rSwg44QNE4blwlf0zSotQ3DNUo=) 7: 3130332e3135382e3233342e302f32342d3234203d3e20313431383938.roa (hash: DC1WzlYzoLRsGjbVoxuqgztNqkwtiD8GKj7bCCztmOc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/B563D708A094B24FC361EDD11C91EE7979AB0471.crl rsync://repo-rpki.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/B563D708A094B24FC361EDD11C91EE7979AB0471.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B563D708A094B24FC361EDD11C91EE7979AB0471.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 10:06:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:d2:e5:34:2e:3f:1d:c5:71:7e:30:b9:68:fc:a0:b5:4f:85:e2:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B563D708A094B24FC361EDD11C91EE7979AB0471 Validity Not Before: Dec 6 02:46:12 2025 GMT Not After : Dec 9 10:06:12 2025 GMT Subject: CN=BB0C6394ECD11DAAED70066A2C25AD747224CE5F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:9c:6e:19:18:d6:51:7b:dc:3d:8b:e1:a9:05: 71:44:d9:6d:d4:00:3b:d6:c6:fc:dd:b0:06:70:0f: 63:32:59:fa:ba:89:09:e2:44:63:cb:c3:4d:9e:31: 2d:6b:db:69:05:d2:12:47:f4:e9:f3:44:c2:42:b4: 21:04:ae:b0:42:55:96:69:ce:d1:79:d7:90:b2:b9: 42:d4:31:39:eb:73:40:57:dd:0b:56:ea:bd:c0:2c: a2:5b:1d:57:28:29:a7:bd:74:10:f2:a8:7c:f7:17: 9d:c3:16:20:56:7d:63:c5:f8:81:13:71:13:12:6e: 03:c8:1d:3c:24:a4:26:28:de:0f:84:fa:a8:1d:ce: 60:f0:43:07:6f:b7:59:50:ce:ed:3b:26:0a:b4:04: 52:74:05:c3:aa:91:c7:a9:fe:f5:ab:46:f6:b2:f8: a7:f5:c5:2c:28:d4:64:97:f1:e0:06:0e:5f:85:e5: d9:60:a8:88:e8:5c:fa:84:30:92:76:86:d2:1e:54: 7f:d6:17:30:23:95:49:40:3b:8d:23:01:9f:82:57: 91:aa:7a:a7:a7:9a:89:4f:36:45:73:cc:2d:2f:a4: 0b:f0:b3:c8:88:11:9c:1a:36:31:ff:73:ec:da:fe: a2:cc:86:10:63:c2:b9:67:33:1f:21:c0:fc:1f:60: 4a:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:0C:63:94:EC:D1:1D:AA:ED:70:06:6A:2C:25:AD:74:72:24:CE:5F X509v3 Authority Key Identifier: keyid:B5:63:D7:08:A0:94:B2:4F:C3:61:ED:D1:1C:91:EE:79:79:AB:04:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/B563D708A094B24FC361EDD11C91EE7979AB0471.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B563D708A094B24FC361EDD11C91EE7979AB0471.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/B563D708A094B24FC361EDD11C91EE7979AB0471.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:32:e5:f1:58:8d:19:ba:b2:b5:62:a1:a2:2b:2a:68:3d:09: 28:82:d9:62:4b:bb:ce:ac:da:cc:a4:4d:3b:d7:df:e6:6d:1c: 6a:0d:b1:d4:84:94:4f:29:38:5b:99:65:3e:91:83:a8:a0:0f: c5:08:f7:fa:d6:8b:37:e0:fa:19:67:3d:d2:e3:0a:56:cc:a0: 2a:e8:03:80:17:0d:82:c1:ab:52:32:9e:5e:0b:19:a1:4f:9c: bd:fc:08:8d:ea:ef:5b:13:50:e3:88:ce:aa:da:c3:e0:de:74: 00:61:c0:52:c7:10:d9:3e:61:01:4f:08:bc:5c:97:88:54:eb: de:e7:d3:f5:55:a6:a5:8d:5b:db:b0:82:1e:12:fc:b1:a2:7c: 25:0f:13:3a:f3:62:78:03:cc:17:53:73:9c:48:5c:6d:9d:bd: 74:13:9c:bc:b7:d6:d1:86:2e:c1:0d:5a:66:30:a3:50:37:7a: 81:da:47:0e:71:72:36:28:39:93:aa:40:bb:68:74:fe:27:d6: 52:79:cf:0a:c3:86:2d:4a:d8:76:68:a3:b0:5c:e1:cd:2a:4d: 93:c2:e4:7a:c7:b3:48:63:56:1d:76:40:03:e3:1c:9b:4c:64: 88:65:f7:d2:d6:00:c4:d7:0f:d3:45:c0:ca:ec:87:e6:0d:1f: 96:ea:15:f0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTdLlNC4/HcVxfjC5aPygtU+F4mswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjU2M0Q3MDhBMDk0QjI0RkMzNjFFREQxMUM5MUVFNzk3 OUFCMDQ3MTAeFw0yNTEyMDYwMjQ2MTJaFw0yNTEyMDkxMDA2MTJaMDMxMTAvBgNV BAMTKEJCMEM2Mzk0RUNEMTFEQUFFRDcwMDY2QTJDMjVBRDc0NzIyNENFNUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDenG4ZGNZRe9w9i+GpBXFE2W3U ADvWxvzdsAZwD2MyWfq6iQniRGPLw02eMS1r22kF0hJH9OnzRMJCtCEErrBCVZZp ztF515CyuULUMTnrc0BX3QtW6r3ALKJbHVcoKae9dBDyqHz3F53DFiBWfWPF+IET cRMSbgPIHTwkpCYo3g+E+qgdzmDwQwdvt1lQzu07Jgq0BFJ0BcOqkcep/vWrRvay +Kf1xSwo1GSX8eAGDl+F5dlgqIjoXPqEMJJ2htIeVH/WFzAjlUlAO40jAZ+CV5Gq eqenmolPNkVzzC0vpAvws8iIEZwaNjH/c+za/qLMhhBjwrlnMx8hwPwfYErpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuwxjlOzRHartcAZqLCWtdHIkzl8wHwYDVR0j BBgwFoAUtWPXCKCUsk/DYe3RHJHueXmrBHEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MDM2ZTA3Yy04MjgzLTQzZDMtOTE2NC0zZTBlNmNhY2Y0OTkvMC9CNTYzRDcwOEEw OTRCMjRGQzM2MUVERDExQzkxRUU3OTc5QUIwNDcxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjU2M0Q3MDhBMDk0QjI0RkMzNjFFREQxMUM5MUVFNzk3OUFC MDQ3MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTAzNmUwN2MtODI4My00M2QzLTkx NjQtM2UwZTZjYWNmNDk5LzAvQjU2M0Q3MDhBMDk0QjI0RkMzNjFFREQxMUM5MUVF Nzk3OUFCMDQ3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJEy5fFYjRm6srVioaIrKmg9CSiC2WJLu86s 2sykTTvX3+ZtHGoNsdSElE8pOFuZZT6Rg6igD8UI9/rWizfg+hlnPdLjClbMoCro A4AXDYLBq1Iynl4LGaFPnL38CI3q71sTUOOIzqraw+DedABhwFLHENk+YQFPCLxc l4hU697n0/VVpqWNW9uwgh4S/LGifCUPEzrzYngDzBdTc5xIXG2dvXQTnLy31tGG LsENWmYwo1A3eoHaRw5xcjYoOZOqQLtodP4n1lJ5zwrDhi1K2HZoo7Bc4c0qTZPC 5HrHs0hjVh12QAPjHJtMZIhl99LWAMTXD9NFwMrsh+YNH5bqFfA= -----END CERTIFICATE-----Generated at Sun Dec 7 03:37:28 2025 by rpki-client