This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/f54ddc65-61c1-49e1-a895-3c03f587a27b/0/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.mft File: 2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.mft (raw, json) Hash identifier: BL3JlsAgWYrh7ONwdXdbAyHrHKndWMYMS74xxyHPoXk= Subject key identifier: 9D:3A:60:45:2D:7F:3F:33:77:49:E4:58:82:F3:3E:4B:9A:53:FF:03 Authority key identifier: 28:63:C0:F5:0E:0E:E5:0D:A8:CD:FB:2E:F1:2D:4B:58:11:B1:66:6C Certificate issuer: /CN=2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C Certificate serial: 367ED4E1F61138AFBAA06C8DC4BBA9E53A2A056D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f54ddc65-61c1-49e1-a895-3c03f587a27b/0/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.mft Manifest number: 0213 Signing time: Thu 04 Dec 2025 23:50:38 +0000 Manifest this update: Thu 04 Dec 2025 23:45:38 +0000 Manifest next update: Mon 08 Dec 2025 02:20:38 +0000 Files and hashes: 1: 3130332e3138332e35362e302f32342d3234203d3e20333938373730.roa (hash: j0zU5zNBxerw0e+KyvMXC5SwkVyUagvGQiIa+aM4WMg=) 2: 2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.crl (hash: FC0KFawBNhrm30Ak9e4QvUKmdv+I+SLu4z6ozVUgSC8=) 3: 3130332e3138332e35372e302f32342d3234203d3e203438343635.roa (hash: ih19KYxvAXsTsnPq7aFCmnb58F9kPF7YQb52MN4zD5E=) 4: 3130332e3138332e35362e302f32332d3234203d3e20313439343035.roa (hash: /nEcTC5QsPT94UNynHuxNo5heYOYhbTbt0590F0PjQ8=) 5: 3130332e3138332e35362e302f32342d3234203d3e203438343635.roa (hash: 9/+sbuomRYkbpuZkgeXYn2wYKrH6jZB0uQ6CyyEN0fI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f54ddc65-61c1-49e1-a895-3c03f587a27b/0/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.crl rsync://repo-rpki.idnic.net/repo/f54ddc65-61c1-49e1-a895-3c03f587a27b/0/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 02:20:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:7e:d4:e1:f6:11:38:af:ba:a0:6c:8d:c4:bb:a9:e5:3a:2a:05:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C Validity Not Before: Dec 4 23:45:38 2025 GMT Not After : Dec 8 02:20:38 2025 GMT Subject: CN=9D3A60452D7F3F337749E45882F33E4B9A53FF03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:1d:2d:af:ce:08:47:bf:e2:b6:c4:55:e9:23: 7f:6a:1e:ff:a6:89:6a:f6:2c:d7:9e:4b:c0:85:c1: 1e:90:a7:98:e2:3d:c0:10:ee:48:e1:ac:20:ac:d3: 0e:e4:96:b0:ff:43:53:e6:fd:6c:24:07:01:62:98: e8:bc:7e:5e:08:92:fa:f9:37:fa:67:c2:3d:01:84: 13:04:37:38:49:c9:73:24:a7:d2:34:66:1a:53:85: 80:d8:eb:16:dc:12:86:07:36:51:95:18:ae:9b:0c: 23:d9:d8:85:22:fc:9c:83:70:ed:f1:1d:45:a0:24: 9e:e5:44:2d:9d:77:99:82:71:c8:8c:9e:5d:8c:98: e9:b0:24:c9:46:7f:b7:70:d0:d0:5a:01:96:fb:e4: c5:22:9d:0f:df:5c:31:79:8b:a4:d6:4a:36:ee:6d: bd:21:af:86:5d:22:ab:ff:67:0c:ec:5c:8f:58:59: f5:ab:43:c4:4a:3d:f9:04:50:e8:1f:6f:b5:13:19: 66:8d:2f:85:50:56:23:89:29:74:2f:f1:fd:b2:81: e9:5d:cb:1d:dc:51:4d:2b:ca:2b:ce:7f:15:cb:9c: 1f:c6:db:13:3d:ab:bf:13:5e:ab:18:bd:7a:ac:d9: 42:37:90:51:5b:37:d0:44:4d:b6:a4:7d:69:bd:36: 35:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:3A:60:45:2D:7F:3F:33:77:49:E4:58:82:F3:3E:4B:9A:53:FF:03 X509v3 Authority Key Identifier: keyid:28:63:C0:F5:0E:0E:E5:0D:A8:CD:FB:2E:F1:2D:4B:58:11:B1:66:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f54ddc65-61c1-49e1-a895-3c03f587a27b/0/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f54ddc65-61c1-49e1-a895-3c03f587a27b/0/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:e5:13:63:3a:46:6b:27:21:b0:5e:0e:2c:c6:4e:9c:46:f5: cd:a7:95:77:10:4d:43:ce:2c:68:e1:c6:8c:57:dc:57:4c:ab: 89:04:68:d9:f8:5e:6a:e0:ac:37:bb:34:59:59:fd:8c:4c:77: 83:5e:50:8e:1c:3e:3b:3d:a4:7d:b0:87:ad:e4:c0:aa:7b:a3: 3f:64:ee:45:42:9f:a2:6d:cc:7e:b3:e1:fc:88:58:66:5a:97: f9:3a:b1:7f:cf:ba:64:d8:21:14:60:7a:74:05:ed:5f:39:b1: f7:65:46:0b:ed:37:6b:8d:12:6b:d9:ac:d1:72:b3:87:b4:ec: 58:7a:62:ea:ec:34:6d:ac:4b:79:31:92:ff:4d:45:a0:9f:78: 61:ff:2a:69:62:e5:a3:05:68:11:be:f5:60:92:01:92:da:d6: 39:71:26:77:50:61:82:cb:69:6a:4b:0f:a5:58:e2:52:38:2e: 85:b8:d2:6f:0c:95:e0:66:32:98:1e:25:b4:92:48:6c:d3:ae: 9a:9e:4c:44:39:56:f4:42:5b:84:e9:49:5c:36:e5:a2:53:0f: 8d:48:59:bc:e0:8a:2b:10:2e:1e:58:0f:c4:7b:8b:dc:16:9c: 3e:18:14:bf:91:73:28:d9:d4:0c:d9:ac:d7:fb:93:ee:83:6e: 5a:d3:d2:3e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNn7U4fYROK+6oGyNxLup5ToqBW0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjg2M0MwRjUwRTBFRTUwREE4Q0RGQjJFRjEyRDRCNTgx MUIxNjY2QzAeFw0yNTEyMDQyMzQ1MzhaFw0yNTEyMDgwMjIwMzhaMDMxMTAvBgNV BAMTKDlEM0E2MDQ1MkQ3RjNGMzM3NzQ5RTQ1ODgyRjMzRTRCOUE1M0ZGMDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbHS2vzghHv+K2xFXpI39qHv+m iWr2LNeeS8CFwR6Qp5jiPcAQ7kjhrCCs0w7klrD/Q1Pm/WwkBwFimOi8fl4Ikvr5 N/pnwj0BhBMENzhJyXMkp9I0ZhpThYDY6xbcEoYHNlGVGK6bDCPZ2IUi/JyDcO3x HUWgJJ7lRC2dd5mCcciMnl2MmOmwJMlGf7dw0NBaAZb75MUinQ/fXDF5i6TWSjbu bb0hr4ZdIqv/ZwzsXI9YWfWrQ8RKPfkEUOgfb7UTGWaNL4VQViOJKXQv8f2ygeld yx3cUU0ryivOfxXLnB/G2xM9q78TXqsYvXqs2UI3kFFbN9BETbakfWm9NjW1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnTpgRS1/PzN3SeRYgvM+S5pT/wMwHwYDVR0j BBgwFoAUKGPA9Q4O5Q2ozfsu8S1LWBGxZmwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NTRkZGM2NS02MWMxLTQ5ZTEtYTg5NS0zYzAzZjU4N2EyN2IvMC8yODYzQzBGNTBF MEVFNTBEQThDREZCMkVGMTJENEI1ODExQjE2NjZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjg2M0MwRjUwRTBFRTUwREE4Q0RGQjJFRjEyRDRCNTgxMUIx NjY2Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjU0ZGRjNjUtNjFjMS00OWUxLWE4 OTUtM2MwM2Y1ODdhMjdiLzAvMjg2M0MwRjUwRTBFRTUwREE4Q0RGQjJFRjEyRDRC NTgxMUIxNjY2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIflE2M6RmsnIbBeDizGTpxG9c2nlXcQTUPO LGjhxoxX3FdMq4kEaNn4XmrgrDe7NFlZ/YxMd4NeUI4cPjs9pH2wh63kwKp7oz9k 7kVCn6JtzH6z4fyIWGZal/k6sX/PumTYIRRgenQF7V85sfdlRgvtN2uNEmvZrNFy s4e07Fh6YursNG2sS3kxkv9NRaCfeGH/Kmli5aMFaBG+9WCSAZLa1jlxJndQYYLL aWpLD6VY4lI4LoW40m8MleBmMpgeJbSSSGzTrpqeTEQ5VvRCW4TpSVw25aJTD41I WbzgiisQLh5YD8R7i9wWnD4YFL+RcyjZ1AzZrNf7k+6DblrT0j4= -----END CERTIFICATE-----Generated at Sun Dec 7 01:44:33 2025 by rpki-client