This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a017b828-17fa-48a2-a113-149f9467a328/0/63003FFDD063104898793061BDB2DB8D0788745D.mft File: 63003FFDD063104898793061BDB2DB8D0788745D.mft (raw, json) Hash identifier: syt4rdBfcofUm4p6dHGBtUfCYfhLntacY9FBZQzTfWU= Subject key identifier: 38:D1:50:44:5A:A2:3F:26:7E:D3:81:48:99:8C:75:AC:6F:6C:75:B2 Authority key identifier: 63:00:3F:FD:D0:63:10:48:98:79:30:61:BD:B2:DB:8D:07:88:74:5D Certificate issuer: /CN=63003FFDD063104898793061BDB2DB8D0788745D Certificate serial: 541909E9DFFE70281D4B90074C9306FDA7B7FDC2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/63003FFDD063104898793061BDB2DB8D0788745D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a017b828-17fa-48a2-a113-149f9467a328/0/63003FFDD063104898793061BDB2DB8D0788745D.mft Manifest number: 04F5 Signing time: Sat 06 Dec 2025 11:41:47 +0000 Manifest this update: Sat 06 Dec 2025 11:36:47 +0000 Manifest next update: Tue 09 Dec 2025 12:30:47 +0000 Files and hashes: 1: 63003FFDD063104898793061BDB2DB8D0788745D.crl (hash: 5odPE8sXZe1PTmyyf96dIi9QmtoN3O5mdGiKCtDkDWs=) 2: 3230322e3137332e31362e302f32312d3234203d3e203234323130.roa (hash: 8ngGpaw5U41sV4BmmrJGa5VA7KiMpIyW6XxofkOK1bo=) 3: 3138302e3135302e3233322e302f32312d3234203d3e203234323130.roa (hash: uBYWq9KOdocMUKkuJh410FmbT/FJLpr3pkzLuhHu42c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a017b828-17fa-48a2-a113-149f9467a328/0/63003FFDD063104898793061BDB2DB8D0788745D.crl rsync://repo-rpki.idnic.net/repo/a017b828-17fa-48a2-a113-149f9467a328/0/63003FFDD063104898793061BDB2DB8D0788745D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/63003FFDD063104898793061BDB2DB8D0788745D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 12:30:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:19:09:e9:df:fe:70:28:1d:4b:90:07:4c:93:06:fd:a7:b7:fd:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63003FFDD063104898793061BDB2DB8D0788745D Validity Not Before: Dec 6 11:36:47 2025 GMT Not After : Dec 9 12:30:47 2025 GMT Subject: CN=38D150445AA23F267ED38148998C75AC6F6C75B2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:b9:48:eb:a5:c2:65:3d:b9:6b:37:52:83:e4: ca:7c:d6:b3:61:aa:10:0a:7b:27:ba:79:30:bf:dc: a1:e5:ba:3a:32:2b:7b:4e:b8:34:f5:1f:16:b1:6f: 5c:6c:32:61:b6:1e:9b:0b:d6:8e:ad:6b:6e:46:bd: 83:b2:ee:9b:50:6d:ee:c0:0b:ba:28:83:7f:d7:15: 91:62:04:23:9d:1d:f3:34:32:3b:b6:d9:1f:7d:6d: e0:cc:72:00:c6:62:0a:6a:b7:6a:84:6a:3a:2e:12: 3c:f5:a0:f4:d5:bd:c3:2f:28:ec:1c:5e:c2:c4:51: 9b:65:1e:50:39:bd:47:85:9b:53:48:6a:dd:34:ff: 16:1e:fd:e5:09:a0:f5:32:d7:f5:ec:bd:51:e8:3d: f5:15:32:56:76:27:83:70:b5:10:f6:fa:7c:6d:ce: 44:64:a7:9c:a1:e0:22:71:93:4a:c7:66:a8:83:3b: a9:f4:93:2a:e8:5e:83:d9:e3:8c:e3:0f:a1:e4:30: 0c:19:90:d2:5e:f1:59:82:43:f1:48:1a:47:ef:89: 33:a4:bc:61:e6:f9:c6:d1:02:c2:91:7e:55:bb:da: b5:89:38:22:14:b0:88:84:f1:f6:13:85:a5:a3:b0: 45:81:c1:05:98:1f:de:54:29:9a:62:ce:71:4e:97: ca:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:D1:50:44:5A:A2:3F:26:7E:D3:81:48:99:8C:75:AC:6F:6C:75:B2 X509v3 Authority Key Identifier: keyid:63:00:3F:FD:D0:63:10:48:98:79:30:61:BD:B2:DB:8D:07:88:74:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a017b828-17fa-48a2-a113-149f9467a328/0/63003FFDD063104898793061BDB2DB8D0788745D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/63003FFDD063104898793061BDB2DB8D0788745D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a017b828-17fa-48a2-a113-149f9467a328/0/63003FFDD063104898793061BDB2DB8D0788745D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:59:64:0a:bf:c0:54:9c:59:3b:e3:e0:3d:7e:e0:3b:43:08: c0:23:ad:6c:14:5a:96:df:53:91:e7:42:ea:3d:e3:bc:0f:b5: b0:93:6d:5d:11:7e:a5:54:5f:5d:0a:6c:a4:1a:20:53:db:87: be:fc:87:27:91:7b:1a:57:7c:7c:f8:23:f4:3f:20:00:b3:67: ea:4f:5a:4f:fc:0d:42:3a:ff:38:4f:3f:9c:9f:41:4e:de:d4: 80:34:3e:47:b0:55:8e:fa:a2:7d:31:43:50:cd:8a:48:43:a7: bb:a4:19:a8:2f:26:c5:99:55:f2:9f:07:60:c6:42:82:38:b9: e6:f9:8d:ec:a1:b2:72:72:c4:ea:49:2b:f2:a4:5e:21:04:5d: 92:c8:5e:1d:6a:e0:95:74:6c:6f:c9:24:23:ca:d9:22:94:c5: 75:01:f6:99:96:04:5a:19:8e:59:56:a6:69:92:0e:b9:c2:07: 59:b0:7e:23:f9:7c:18:f5:28:ae:50:24:a2:84:e4:4c:13:9e: ca:4f:ae:ed:fa:f7:be:d4:b0:e7:f6:5a:65:9f:a1:b6:7d:0b: 52:80:25:84:7b:41:44:4c:57:c2:60:b1:a0:94:b4:ef:87:33: d2:4e:8d:e4:fc:80:78:95:d4:f0:5d:e7:aa:59:8b:34:49:04: f7:d1:a6:08 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVBkJ6d/+cCgdS5AHTJMG/ae3/cIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjMwMDNGRkREMDYzMTA0ODk4NzkzMDYxQkRCMkRCOEQw Nzg4NzQ1RDAeFw0yNTEyMDYxMTM2NDdaFw0yNTEyMDkxMjMwNDdaMDMxMTAvBgNV BAMTKDM4RDE1MDQ0NUFBMjNGMjY3RUQzODE0ODk5OEM3NUFDNkY2Qzc1QjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5uUjrpcJlPblrN1KD5Mp81rNh qhAKeye6eTC/3KHlujoyK3tOuDT1Hxaxb1xsMmG2HpsL1o6ta25GvYOy7ptQbe7A C7oog3/XFZFiBCOdHfM0Mju22R99beDMcgDGYgpqt2qEajouEjz1oPTVvcMvKOwc XsLEUZtlHlA5vUeFm1NIat00/xYe/eUJoPUy1/XsvVHoPfUVMlZ2J4NwtRD2+nxt zkRkp5yh4CJxk0rHZqiDO6n0kyroXoPZ44zjD6HkMAwZkNJe8VmCQ/FIGkfviTOk vGHm+cbRAsKRflW72rWJOCIUsIiE8fYThaWjsEWBwQWYH95UKZpiznFOl8qBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUONFQRFqiPyZ+04FImYx1rG9sdbIwHwYDVR0j BBgwFoAUYwA//dBjEEiYeTBhvbLbjQeIdF0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MDE3YjgyOC0xN2ZhLTQ4YTItYTExMy0xNDlmOTQ2N2EzMjgvMC82MzAwM0ZGREQw NjMxMDQ4OTg3OTMwNjFCREIyREI4RDA3ODg3NDVELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjMwMDNGRkREMDYzMTA0ODk4NzkzMDYxQkRCMkRCOEQwNzg4 NzQ1RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTAxN2I4MjgtMTdmYS00OGEyLWEx MTMtMTQ5Zjk0NjdhMzI4LzAvNjMwMDNGRkREMDYzMTA0ODk4NzkzMDYxQkRCMkRC OEQwNzg4NzQ1RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGlZZAq/wFScWTvj4D1+4DtDCMAjrWwUWpbf U5HnQuo947wPtbCTbV0RfqVUX10KbKQaIFPbh778hyeRexpXfHz4I/Q/IACzZ+pP Wk/8DUI6/zhPP5yfQU7e1IA0PkewVY76on0xQ1DNikhDp7ukGagvJsWZVfKfB2DG QoI4ueb5jeyhsnJyxOpJK/KkXiEEXZLIXh1q4JV0bG/JJCPK2SKUxXUB9pmWBFoZ jllWpmmSDrnCB1mwfiP5fBj1KK5QJKKE5EwTnspPru36977UsOf2WmWfobZ9C1KA JYR7QURMV8JgsaCUtO+HM9JOjeT8gHiV1PBd56pZizRJBPfRpgg= -----END CERTIFICATE-----Generated at Sat Dec 6 22:52:50 2025 by rpki-client