This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.mft File: 63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.mft (raw, json) Hash identifier: H73LFB30ebIg36ezecIYv02vq5yst/VpXIpMfbizrSc= Subject key identifier: A3:0B:D9:5D:DD:01:5C:A5:F0:65:2D:7A:56:56:A8:52:3F:52:3E:A3 Authority key identifier: 63:E0:67:66:3A:09:E3:E8:4F:1C:5B:1C:31:DE:AB:FF:2A:4A:7C:07 Certificate issuer: /CN=63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07 Certificate serial: 4591B4FBE79804C717D027695B747A48BB9C2321 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.mft Manifest number: 01E4 Signing time: Sat 06 Dec 2025 14:31:15 +0000 Manifest this update: Sat 06 Dec 2025 14:26:15 +0000 Manifest next update: Tue 09 Dec 2025 20:14:15 +0000 Files and hashes: 1: 3130332e35312e3230352e302f32342d3234203d3e203435333035.roa (hash: ghssEE9zj9axglbKjUOvFcXIOFWwWgWFdjOGnyGNun8=) 2: 3130332e35312e3230342e302f32332d3234203d3e203435333035.roa (hash: UrdeubFj8MJMBosQTjUTlkyTLJKd5ipS0sOIHGHNGXw=) 3: 63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.crl (hash: 3PLblA4pMG0dgusNo9OX4DqPxZBqv6jhWA7zm/56Jpo=) 4: 3130332e35312e3230342e302f32342d3234203d3e203435333035.roa (hash: fJYZwNXP9c0qCqp/KxrF/x9WsoAi9ZRyA7KgfjlBJW0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.crl rsync://repo-rpki.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:91:b4:fb:e7:98:04:c7:17:d0:27:69:5b:74:7a:48:bb:9c:23:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07 Validity Not Before: Dec 6 14:26:15 2025 GMT Not After : Dec 9 20:14:15 2025 GMT Subject: CN=A30BD95DDD015CA5F0652D7A5656A8523F523EA3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:31:ba:52:12:45:bb:23:a5:80:e3:0f:43:42: 0c:2f:16:fc:43:20:89:e3:37:d3:95:5a:a4:35:13: 2b:40:28:fe:5c:5a:cc:c6:2b:52:06:05:ad:04:c9: ab:68:e0:ac:48:20:06:64:89:f7:95:82:b7:0d:d0: 76:33:0a:85:48:7b:7a:20:40:fc:a0:c6:45:4f:a3: eb:7c:86:82:1f:33:cb:18:7c:fd:db:5a:a2:2c:ca: 05:ec:e7:5d:8f:4b:11:d9:5d:10:e3:f9:2f:d0:f3: 9b:cd:85:13:c0:93:7b:1a:fc:1a:80:d1:4a:80:08: 82:2a:d5:4f:c6:fd:fc:6d:3c:f3:bb:6a:5c:82:07: 06:45:0d:33:de:8f:bc:2e:80:73:d9:0c:fa:1f:cd: ed:ec:07:01:1b:3b:eb:08:2f:6a:35:69:60:72:95: df:97:5e:e2:34:1d:3e:59:77:dc:89:2e:42:7e:79: be:b4:42:05:bf:a5:e1:a7:ac:14:1c:94:4b:6f:71: 39:10:82:8b:2d:bc:2c:57:85:1b:a0:dd:2e:4d:84: 74:f1:9a:a9:b4:73:90:40:3e:80:71:94:12:f4:71: 51:a8:01:e8:9b:e5:bc:00:ff:8b:15:74:0e:86:75: 11:80:59:d2:88:87:d0:d0:45:36:de:54:da:61:1d: 34:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:0B:D9:5D:DD:01:5C:A5:F0:65:2D:7A:56:56:A8:52:3F:52:3E:A3 X509v3 Authority Key Identifier: keyid:63:E0:67:66:3A:09:E3:E8:4F:1C:5B:1C:31:DE:AB:FF:2A:4A:7C:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:b1:cc:50:4a:4f:14:c9:00:d1:cc:4d:06:23:8b:25:0c:6f: 0a:08:5b:e5:1b:97:f1:06:0c:fb:64:71:bc:3c:8f:18:06:29: 8e:ca:84:cc:4a:46:59:89:97:dc:04:5f:e0:1b:52:08:f1:b7: 88:75:bf:b7:9a:98:3e:9f:e8:d2:cd:8b:9d:f3:33:cc:9f:c9: 0f:0c:3d:8e:23:c0:2a:ee:cf:94:d2:a0:d4:3e:8e:46:da:58: c9:cb:1c:e8:be:a4:30:5b:29:cb:33:0f:60:f9:61:36:22:e8: cc:e4:a9:e7:81:b7:84:f2:9d:22:a6:03:72:4e:49:ff:47:d9: c5:39:84:4b:8d:b7:a3:1e:06:02:dd:ca:fe:cd:25:d9:0c:e5: 90:b1:18:91:2f:71:df:e2:8a:80:5e:db:88:e7:a9:1f:b7:25: d5:3e:4c:10:92:79:6d:23:3c:8a:11:84:df:6c:90:99:76:95: 8e:f8:d7:53:1b:b5:32:45:41:d0:aa:ed:06:80:8e:5c:f2:85: cf:ba:14:6b:cf:45:06:bb:5a:d3:7f:6f:f5:30:ac:d2:e2:9b: 4d:70:af:6c:6c:da:7f:fd:c1:ba:9d:a6:b8:3a:64:4f:87:e8: 97:85:bf:2b:b1:f1:3f:35:4e:69:19:cb:25:e2:c9:b2:a5:3e: e9:ce:8c:37 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURZG0++eYBMcX0CdpW3R6SLucIyEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjNFMDY3NjYzQTA5RTNFODRGMUM1QjFDMzFERUFCRkYy QTRBN0MwNzAeFw0yNTEyMDYxNDI2MTVaFw0yNTEyMDkyMDE0MTVaMDMxMTAvBgNV BAMTKEEzMEJEOTVEREQwMTVDQTVGMDY1MkQ3QTU2NTZBODUyM0Y1MjNFQTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcMbpSEkW7I6WA4w9DQgwvFvxD IInjN9OVWqQ1EytAKP5cWszGK1IGBa0Eyato4KxIIAZkifeVgrcN0HYzCoVIe3og QPygxkVPo+t8hoIfM8sYfP3bWqIsygXs512PSxHZXRDj+S/Q85vNhRPAk3sa/BqA 0UqACIIq1U/G/fxtPPO7alyCBwZFDTPej7wugHPZDPofze3sBwEbO+sIL2o1aWBy ld+XXuI0HT5Zd9yJLkJ+eb60QgW/peGnrBQclEtvcTkQgostvCxXhRug3S5NhHTx mqm0c5BAPoBxlBL0cVGoAeib5bwA/4sVdA6GdRGAWdKIh9DQRTbeVNphHTSXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUowvZXd0BXKXwZS16VlaoUj9SPqMwHwYDVR0j BBgwFoAUY+BnZjoJ4+hPHFscMd6r/ypKfAcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NjViODRmMi05ODA0LTQ2NzAtOGJiYy1jMzMyNzFiNTkyNTkvMC82M0UwNjc2NjNB MDlFM0U4NEYxQzVCMUMzMURFQUJGRjJBNEE3QzA3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjNFMDY3NjYzQTA5RTNFODRGMUM1QjFDMzFERUFCRkYyQTRB N0MwNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzY1Yjg0ZjItOTgwNC00NjcwLThi YmMtYzMzMjcxYjU5MjU5LzAvNjNFMDY3NjYzQTA5RTNFODRGMUM1QjFDMzFERUFC RkYyQTRBN0MwNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFWxzFBKTxTJANHMTQYjiyUMbwoIW+Ubl/EG DPtkcbw8jxgGKY7KhMxKRlmJl9wEX+AbUgjxt4h1v7eamD6f6NLNi53zM8yfyQ8M PY4jwCruz5TSoNQ+jkbaWMnLHOi+pDBbKcszD2D5YTYi6MzkqeeBt4TynSKmA3JO Sf9H2cU5hEuNt6MeBgLdyv7NJdkM5ZCxGJEvcd/iioBe24jnqR+3JdU+TBCSeW0j PIoRhN9skJl2lY7411MbtTJFQdCq7QaAjlzyhc+6FGvPRQa7WtN/b/UwrNLim01w r2xs2n/9wbqdprg6ZE+H6JeFvyux8T81TmkZyyXiybKlPunOjDc= -----END CERTIFICATE-----Generated at Sun Dec 7 01:57:08 2025 by rpki-client