This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.mft File: 63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.mft (raw, json) Hash identifier: m0p1vM8VRSMJR7KM56wCGQPyeYSmGchwv5VdcuBIX+c= Subject key identifier: 61:CB:FE:3F:35:71:1F:DB:DA:F6:7C:2D:69:E9:F4:B5:74:85:3F:BB Authority key identifier: 63:E0:67:66:3A:09:E3:E8:4F:1C:5B:1C:31:DE:AB:FF:2A:4A:7C:07 Certificate issuer: /CN=63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07 Certificate serial: 06F8A625CAF531E5C429862C0DE672385CAC4CB3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.mft Manifest number: 01FA Signing time: Sun 25 Jan 2026 02:11:16 +0000 Manifest this update: Sun 25 Jan 2026 02:06:16 +0000 Manifest next update: Wed 28 Jan 2026 08:57:16 +0000 Files and hashes: 1: 63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.crl (hash: lYAYdbQkopkNaQNUZqv+3yWpdlU+FKJLRF/rKecskTk=) 2: 3130332e35312e3230352e302f32342d3234203d3e203435333035.roa (hash: ghssEE9zj9axglbKjUOvFcXIOFWwWgWFdjOGnyGNun8=) 3: 3130332e35312e3230342e302f32342d3234203d3e203435333035.roa (hash: fJYZwNXP9c0qCqp/KxrF/x9WsoAi9ZRyA7KgfjlBJW0=) 4: 3130332e35312e3230342e302f32332d3234203d3e203435333035.roa (hash: UrdeubFj8MJMBosQTjUTlkyTLJKd5ipS0sOIHGHNGXw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.crl rsync://repo-rpki.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 08:57:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:f8:a6:25:ca:f5:31:e5:c4:29:86:2c:0d:e6:72:38:5c:ac:4c:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07 Validity Not Before: Jan 25 02:06:16 2026 GMT Not After : Jan 28 08:57:16 2026 GMT Subject: CN=61CBFE3F35711FDBDAF67C2D69E9F4B574853FBB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:0a:ed:3d:62:c9:35:94:55:89:62:c9:e2:7d: b2:48:67:05:30:ed:7e:59:b0:2e:cc:12:fa:8e:1e: 92:10:61:ce:92:2e:3c:59:8b:1b:ed:c4:d7:f6:6b: 68:c2:4d:11:a3:da:f7:34:38:94:79:28:97:f1:3b: e6:4f:95:3e:06:d6:e2:5c:43:6c:cc:0e:02:8e:75: 53:0d:36:e3:8f:59:34:7b:50:5b:0b:36:4c:f8:18: 4b:f4:5c:af:62:ae:bb:bd:3f:5c:e0:ed:6c:14:d4: fd:ab:78:27:7a:78:b7:1e:cc:81:80:4c:50:d5:cc: fb:a7:96:5b:b3:44:e8:35:1d:91:9d:21:80:29:0b: 63:a0:c7:1d:12:38:e3:9e:06:3d:70:62:c9:60:13: 1a:8c:9a:0f:e1:59:06:c4:c0:ab:6b:ad:43:9f:c6: 64:20:a9:11:98:77:99:95:b5:f7:66:7c:db:a5:25: 3e:3c:de:06:02:01:d4:f9:17:e0:1d:cf:03:b0:a3: cf:56:a3:b4:22:e0:b5:22:af:c7:36:eb:a6:bd:d0: 01:79:c3:6f:2d:69:9c:ef:a2:71:6c:e3:da:5f:11: ae:20:34:82:60:81:77:9b:d2:ff:21:24:9e:e1:53: 7c:8e:03:6a:17:af:d3:a2:21:56:4f:03:60:c2:8c: b2:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:CB:FE:3F:35:71:1F:DB:DA:F6:7C:2D:69:E9:F4:B5:74:85:3F:BB X509v3 Authority Key Identifier: keyid:63:E0:67:66:3A:09:E3:E8:4F:1C:5B:1C:31:DE:AB:FF:2A:4A:7C:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:4f:85:0e:1c:b4:92:ba:a6:2e:f8:0b:43:78:ec:65:04:0a: 99:1b:79:f3:e5:a5:5e:ef:56:6f:ce:41:af:10:d7:a9:72:76: d7:49:6a:d9:f6:85:a9:48:03:d8:ad:7e:9f:73:0a:98:0d:47: 52:19:3d:91:cd:51:ce:39:a3:84:13:b2:46:f9:44:56:c1:cb: 32:08:1f:b4:19:7b:4b:3a:19:69:46:af:45:0c:7a:a7:ad:4d: 6b:3c:fb:a1:14:82:f6:1f:01:2b:8a:76:04:71:92:72:c0:6e: ca:ff:8a:10:69:bd:3f:10:91:ed:7a:42:a5:3c:af:46:b4:92: bc:0c:82:9b:53:16:cd:1a:3a:02:8e:19:17:09:19:82:9d:15: ba:7d:c4:07:43:d6:13:eb:c0:5a:e3:a9:1c:91:f5:5a:cb:5e: 79:6c:17:cd:92:96:da:fd:52:78:17:8b:64:91:c4:89:bd:49: da:0f:74:5f:c3:68:5b:da:6e:db:e1:1a:c7:87:99:21:6d:07: 3f:93:e3:e2:21:cb:3b:b9:63:5f:60:7e:b7:78:e3:73:87:15: 5c:66:50:2c:0e:95:38:28:34:45:32:24:e4:a6:2e:ef:83:17: ba:d5:22:17:70:41:52:9d:a6:40:c3:2b:fa:57:0f:6c:3f:e4: ef:96:84:c9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBvimJcr1MeXEKYYsDeZyOFysTLMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjNFMDY3NjYzQTA5RTNFODRGMUM1QjFDMzFERUFCRkYy QTRBN0MwNzAeFw0yNjAxMjUwMjA2MTZaFw0yNjAxMjgwODU3MTZaMDMxMTAvBgNV BAMTKDYxQ0JGRTNGMzU3MTFGREJEQUY2N0MyRDY5RTlGNEI1NzQ4NTNGQkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuCu09Ysk1lFWJYsnifbJIZwUw 7X5ZsC7MEvqOHpIQYc6SLjxZixvtxNf2a2jCTRGj2vc0OJR5KJfxO+ZPlT4G1uJc Q2zMDgKOdVMNNuOPWTR7UFsLNkz4GEv0XK9irru9P1zg7WwU1P2reCd6eLcezIGA TFDVzPunlluzROg1HZGdIYApC2Ogxx0SOOOeBj1wYslgExqMmg/hWQbEwKtrrUOf xmQgqRGYd5mVtfdmfNulJT483gYCAdT5F+AdzwOwo89Wo7Qi4LUir8c266a90AF5 w28taZzvonFs49pfEa4gNIJggXeb0v8hJJ7hU3yOA2oXr9OiIVZPA2DCjLIDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYcv+PzVxH9va9nwtaen0tXSFP7swHwYDVR0j BBgwFoAUY+BnZjoJ4+hPHFscMd6r/ypKfAcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NjViODRmMi05ODA0LTQ2NzAtOGJiYy1jMzMyNzFiNTkyNTkvMC82M0UwNjc2NjNB MDlFM0U4NEYxQzVCMUMzMURFQUJGRjJBNEE3QzA3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjNFMDY3NjYzQTA5RTNFODRGMUM1QjFDMzFERUFCRkYyQTRB N0MwNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzY1Yjg0ZjItOTgwNC00NjcwLThi YmMtYzMzMjcxYjU5MjU5LzAvNjNFMDY3NjYzQTA5RTNFODRGMUM1QjFDMzFERUFC RkYyQTRBN0MwNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA5PhQ4ctJK6pi74C0N47GUECpkbefPlpV7v Vm/OQa8Q16lydtdJatn2halIA9itfp9zCpgNR1IZPZHNUc45o4QTskb5RFbByzII H7QZe0s6GWlGr0UMeqetTWs8+6EUgvYfASuKdgRxknLAbsr/ihBpvT8Qke16QqU8 r0a0krwMgptTFs0aOgKOGRcJGYKdFbp9xAdD1hPrwFrjqRyR9VrLXnlsF82Sltr9 UngXi2SRxIm9SdoPdF/DaFvabtvhGseHmSFtBz+T4+Ihyzu5Y19gfrd443OHFVxm UCwOlTgoNEUyJOSmLu+DF7rVIhdwQVKdpkDDK/pXD2w/5O+WhMk= -----END CERTIFICATE-----Generated at Sun Jan 25 20:25:00 2026 by rpki-client