This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/87775dcf-283f-43c5-af60-09e0deba01a2/0/A63CCE6366E3FCB7A2666A9090F2A0575A74DCF4.mft File: A63CCE6366E3FCB7A2666A9090F2A0575A74DCF4.mft (raw, json) Hash identifier: PDkzgq8a4ZOiXJJbeDFUicbaQmTUNnedGnymNjfZXgs= Subject key identifier: 40:8A:71:6B:1B:E1:F1:8E:C0:1B:E4:F3:27:E8:89:01:F6:26:38:5E Authority key identifier: A6:3C:CE:63:66:E3:FC:B7:A2:66:6A:90:90:F2:A0:57:5A:74:DC:F4 Certificate issuer: /CN=A63CCE6366E3FCB7A2666A9090F2A0575A74DCF4 Certificate serial: 7E2E9207F6DC97CC36A0ECDEA0E1A92D67AD14BA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A63CCE6366E3FCB7A2666A9090F2A0575A74DCF4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/87775dcf-283f-43c5-af60-09e0deba01a2/0/A63CCE6366E3FCB7A2666A9090F2A0575A74DCF4.mft Manifest number: 02A0 Signing time: Wed 17 Dec 2025 08:12:33 +0000 Manifest this update: Wed 17 Dec 2025 08:07:33 +0000 Manifest next update: Sat 20 Dec 2025 20:05:33 +0000 Files and hashes: 1: 323430343a343230303a3a2f33322d3438203d3e203234353336.roa (hash: Hub7rZ2q+AdvyEruoWB8nsArXPAxnFiXXAQjsmifcPA=) 2: A63CCE6366E3FCB7A2666A9090F2A0575A74DCF4.crl (hash: f1T9im5kJfIvP9y7YWhm8O7oYZtm5U0w7sOaNKqvTAw=) 3: 3230322e3134362e3137362e302f32312d3234203d3e203234353336.roa (hash: ILoC7SZWlYY8tT8nCMj2qTfJpiM1Y89EAaEhPrCEnXY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/87775dcf-283f-43c5-af60-09e0deba01a2/0/A63CCE6366E3FCB7A2666A9090F2A0575A74DCF4.crl rsync://repo-rpki.idnic.net/repo/87775dcf-283f-43c5-af60-09e0deba01a2/0/A63CCE6366E3FCB7A2666A9090F2A0575A74DCF4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A63CCE6366E3FCB7A2666A9090F2A0575A74DCF4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 20:05:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:2e:92:07:f6:dc:97:cc:36:a0:ec:de:a0:e1:a9:2d:67:ad:14:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A63CCE6366E3FCB7A2666A9090F2A0575A74DCF4 Validity Not Before: Dec 17 08:07:33 2025 GMT Not After : Dec 20 20:05:33 2025 GMT Subject: CN=408A716B1BE1F18EC01BE4F327E88901F626385E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:4c:ff:41:44:ce:ed:7e:cc:3f:0c:4b:3c:1c: eb:ce:28:b4:a4:f4:fc:56:31:4d:b7:20:33:4e:70: 7b:76:5b:55:37:1d:7b:1f:0a:6f:22:1e:90:8f:62: fd:e7:51:bb:c8:ff:1e:d1:e3:31:fd:be:fb:ab:3d: bd:f0:6b:f4:dc:b7:9f:b9:6b:70:d9:48:95:7e:4a: 5a:41:d9:57:0b:56:e9:98:06:1e:09:9f:9d:a8:06: 4d:8f:bd:90:39:a4:db:03:28:37:6e:b4:1b:8b:74: 8e:ba:c0:26:f9:a4:fd:97:e2:86:8b:36:7a:3c:17: 95:ca:f3:56:1e:ea:e6:9a:90:fe:d8:54:60:cc:88: 89:ff:f5:26:74:47:3d:f3:6a:ba:e6:9b:12:85:c2: 1d:f4:d4:9c:ed:b4:04:f6:86:41:d2:3b:a2:00:bd: d9:1a:a6:2b:f3:0f:15:ca:66:a3:8d:31:f7:98:fc: bb:d0:13:b8:2f:58:50:49:11:6c:f7:73:ec:b1:29: 7d:c1:55:78:32:8d:58:36:29:71:57:6b:5e:0f:d8: ee:82:d7:1f:b6:70:36:a7:13:52:40:cb:3b:ac:5f: 2a:32:21:36:5d:99:73:1c:f3:a3:98:7c:9d:56:6e: 4f:65:c3:17:da:f5:79:3d:20:c2:34:10:5e:15:ff: 31:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:8A:71:6B:1B:E1:F1:8E:C0:1B:E4:F3:27:E8:89:01:F6:26:38:5E X509v3 Authority Key Identifier: keyid:A6:3C:CE:63:66:E3:FC:B7:A2:66:6A:90:90:F2:A0:57:5A:74:DC:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/87775dcf-283f-43c5-af60-09e0deba01a2/0/A63CCE6366E3FCB7A2666A9090F2A0575A74DCF4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A63CCE6366E3FCB7A2666A9090F2A0575A74DCF4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/87775dcf-283f-43c5-af60-09e0deba01a2/0/A63CCE6366E3FCB7A2666A9090F2A0575A74DCF4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:be:91:4b:54:d4:8b:a6:73:1e:8c:eb:f1:e7:42:61:13:d3: 53:db:51:fa:fc:68:df:81:3f:bb:bc:e7:9d:8a:61:7d:8a:6f: c5:e1:64:65:3f:4f:be:f0:c3:d1:04:4b:22:22:6a:71:3b:88: 66:1e:79:55:e9:0b:3c:38:e5:af:01:57:05:6d:e6:9e:21:83: b8:e2:b2:ea:c5:52:14:81:ba:12:0a:51:25:7d:7b:a6:2e:db: d2:61:e2:d4:5d:3c:3c:fc:5b:3e:6c:45:ca:a2:a7:78:a6:13: 10:6b:fe:b4:40:f5:e4:cd:29:2c:66:7e:3c:6f:63:11:c6:54: cc:d5:9b:a3:9d:dc:a1:8f:c5:5c:07:19:d2:8d:56:92:16:7b: 97:23:fe:bb:c3:b7:12:b2:87:d6:f3:37:54:a3:8a:e9:fa:25: c6:56:86:3e:fc:c4:4f:6f:9c:d3:4e:9d:ae:ce:ac:b2:c5:d5: 47:c7:f3:40:7f:29:de:44:46:67:53:3f:be:2d:67:01:14:83: c2:e9:ce:9a:4b:bc:7d:fa:15:bb:60:fe:63:db:d0:de:02:47: 8e:c0:dd:bb:23:4a:44:be:43:03:86:b4:d7:10:cc:f1:75:95: 60:1b:4e:ee:45:1e:81:43:1a:ff:f1:18:5a:2d:f1:1e:ff:ff: 4c:68:0d:f9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfi6SB/bcl8w2oOzeoOGpLWetFLowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTYzQ0NFNjM2NkUzRkNCN0EyNjY2QTkwOTBGMkEwNTc1 QTc0RENGNDAeFw0yNTEyMTcwODA3MzNaFw0yNTEyMjAyMDA1MzNaMDMxMTAvBgNV BAMTKDQwOEE3MTZCMUJFMUYxOEVDMDFCRTRGMzI3RTg4OTAxRjYyNjM4NUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD2TP9BRM7tfsw/DEs8HOvOKLSk 9PxWMU23IDNOcHt2W1U3HXsfCm8iHpCPYv3nUbvI/x7R4zH9vvurPb3wa/Tct5+5 a3DZSJV+SlpB2VcLVumYBh4Jn52oBk2PvZA5pNsDKDdutBuLdI66wCb5pP2X4oaL Nno8F5XK81Ye6uaakP7YVGDMiIn/9SZ0Rz3zarrmmxKFwh301JzttAT2hkHSO6IA vdkapivzDxXKZqONMfeY/LvQE7gvWFBJEWz3c+yxKX3BVXgyjVg2KXFXa14P2O6C 1x+2cDanE1JAyzusXyoyITZdmXMc86OYfJ1Wbk9lwxfa9Xk9IMI0EF4V/zFFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQIpxaxvh8Y7AG+TzJ+iJAfYmOF4wHwYDVR0j BBgwFoAUpjzOY2bj/LeiZmqQkPKgV1p03PQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 Nzc3NWRjZi0yODNmLTQzYzUtYWY2MC0wOWUwZGViYTAxYTIvMC9BNjNDQ0U2MzY2 RTNGQ0I3QTI2NjZBOTA5MEYyQTA1NzVBNzREQ0Y0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTYzQ0NFNjM2NkUzRkNCN0EyNjY2QTkwOTBGMkEwNTc1QTc0 RENGNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODc3NzVkY2YtMjgzZi00M2M1LWFm NjAtMDllMGRlYmEwMWEyLzAvQTYzQ0NFNjM2NkUzRkNCN0EyNjY2QTkwOTBGMkEw NTc1QTc0RENGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABC+kUtU1Iumcx6M6/HnQmET01PbUfr8aN+B P7u8552KYX2Kb8XhZGU/T77ww9EESyIianE7iGYeeVXpCzw45a8BVwVt5p4hg7ji surFUhSBuhIKUSV9e6Yu29Jh4tRdPDz8Wz5sRcqip3imExBr/rRA9eTNKSxmfjxv YxHGVMzVm6Od3KGPxVwHGdKNVpIWe5cj/rvDtxKyh9bzN1Sjiun6JcZWhj78xE9v nNNOna7OrLLF1UfH80B/Kd5ERmdTP74tZwEUg8LpzppLvH36Fbtg/mPb0N4CR47A 3bsjSkS+QwOGtNcQzPF1lWAbTu5FHoFDGv/xGFot8R7//0xoDfk= -----END CERTIFICATE-----Generated at Fri Dec 19 18:50:40 2025 by rpki-client