This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/B563D708A094B24FC361EDD11C91EE7979AB0471.mft File: B563D708A094B24FC361EDD11C91EE7979AB0471.mft (raw, json) Hash identifier: tM5tCnuxqSpgX2MzD0Ezgy/zpAOtnTCkrfZM+kXOBIs= Subject key identifier: 3B:B2:13:F6:44:0C:72:35:D4:00:6A:D8:38:F9:D1:FC:F8:E6:3C:60 Authority key identifier: B5:63:D7:08:A0:94:B2:4F:C3:61:ED:D1:1C:91:EE:79:79:AB:04:71 Certificate issuer: /CN=B563D708A094B24FC361EDD11C91EE7979AB0471 Certificate serial: 77B0F3F918FBDD31A09245A255116BB7864418A5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B563D708A094B24FC361EDD11C91EE7979AB0471.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/B563D708A094B24FC361EDD11C91EE7979AB0471.mft Manifest number: 04B5 Signing time: Wed 17 Dec 2025 02:01:13 +0000 Manifest this update: Wed 17 Dec 2025 01:56:13 +0000 Manifest next update: Sat 20 Dec 2025 12:15:13 +0000 Files and hashes: 1: 3130332e3135382e3233352e302f32342d3234203d3e20313431313332.roa (hash: kpMxQvSYLU76Gm9LQAAGgZvfd3otWzRiAJhO9y4zBsk=) 2: B563D708A094B24FC361EDD11C91EE7979AB0471.crl (hash: xIBxV6Ro9aZnV4vvZitFSM2jhxzDldWaplhyn5veup4=) 3: 3130332e3135382e3233352e302f32342d3234203d3e20313431383938.roa (hash: 1oRmxMWEmNWfiObwNq2iDBD7Utfj4IUiGgv5WjZ9wmA=) 4: 3130332e3135382e3233342e302f32332d3233203d3e20313431383938.roa (hash: Fqgr+r9WG3m7zmpO3rSwg44QNE4blwlf0zSotQ3DNUo=) 5: 3130332e3135382e3233342e302f32332d3233203d3e20313431313332.roa (hash: VerBshfKSbDiG4ilBKzo2++FEnDv7+7VU/P4UtUMaSI=) 6: 3130332e3135382e3233342e302f32342d3234203d3e20313431383938.roa (hash: DC1WzlYzoLRsGjbVoxuqgztNqkwtiD8GKj7bCCztmOc=) 7: 3130332e3135382e3233342e302f32342d3234203d3e20313431313332.roa (hash: LFN1lWDxbZdPzNeB6sbVhDvJLLQcsJmGzjZZihSsn1w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/B563D708A094B24FC361EDD11C91EE7979AB0471.crl rsync://repo-rpki.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/B563D708A094B24FC361EDD11C91EE7979AB0471.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B563D708A094B24FC361EDD11C91EE7979AB0471.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 12:15:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:b0:f3:f9:18:fb:dd:31:a0:92:45:a2:55:11:6b:b7:86:44:18:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B563D708A094B24FC361EDD11C91EE7979AB0471 Validity Not Before: Dec 17 01:56:13 2025 GMT Not After : Dec 20 12:15:13 2025 GMT Subject: CN=3BB213F6440C7235D4006AD838F9D1FCF8E63C60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:bc:ec:05:07:68:ac:9f:2d:ea:bf:38:32:7c: f2:0f:49:14:84:85:77:cb:56:b1:86:14:92:ac:2e: d2:3c:cf:23:56:65:bb:e0:f7:34:b2:4e:84:ac:81: de:a7:7f:0e:a9:f9:68:70:ab:37:84:7f:b8:4f:cb: 77:51:08:dc:40:51:20:c3:d4:d6:fc:32:7b:d7:24: 5a:90:85:67:e0:c7:89:53:90:6e:dd:62:55:57:fd: 83:ef:1b:88:a8:c5:19:28:39:69:9f:cf:09:79:24: 88:c3:6d:94:15:6a:37:d9:9d:b5:b3:cd:95:00:91: ee:45:61:2d:35:a6:a0:5c:a6:e1:9d:e7:d9:07:1f: 65:2f:7e:17:1d:c1:03:c6:fd:94:96:7d:a2:9b:96: 1e:8c:68:f6:ce:ef:90:14:a4:65:ca:ad:33:cc:dd: 9e:49:6a:c4:9d:70:e1:43:92:88:2f:50:78:ba:1e: 61:f2:9e:b3:92:8f:d2:50:3a:bd:15:ca:98:e5:c7: 51:b8:4d:11:24:c8:ac:92:93:45:dc:97:d6:1e:8f: 6b:0f:bb:fc:bd:9a:f0:04:30:7b:28:71:85:ab:a2: fd:3a:4f:df:98:f2:f9:f5:fc:42:59:56:ed:14:0f: 15:85:e7:13:7f:98:0f:ef:48:a7:29:91:bc:96:59: 20:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:B2:13:F6:44:0C:72:35:D4:00:6A:D8:38:F9:D1:FC:F8:E6:3C:60 X509v3 Authority Key Identifier: keyid:B5:63:D7:08:A0:94:B2:4F:C3:61:ED:D1:1C:91:EE:79:79:AB:04:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/B563D708A094B24FC361EDD11C91EE7979AB0471.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B563D708A094B24FC361EDD11C91EE7979AB0471.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/B563D708A094B24FC361EDD11C91EE7979AB0471.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:f1:80:95:80:68:89:a7:93:58:33:41:a8:60:94:b4:a0:2a: e5:09:3c:2f:1c:86:eb:ba:49:54:96:ae:37:49:5e:45:f5:fd: 36:ea:e9:07:80:91:a7:ce:cd:f2:c3:c1:fe:01:30:28:51:e4: d7:25:82:a7:c2:60:30:4c:56:4d:2e:ca:03:77:1b:19:6f:bb: cb:e5:06:bc:35:c8:4b:5f:d8:56:76:43:ab:f0:5d:62:d0:16: 7b:29:5f:ff:9e:e5:b1:71:1e:ba:46:8a:1d:05:6d:e3:62:dc: 9d:09:85:f1:d9:5a:be:5a:30:8f:6a:1a:93:b9:d0:61:08:aa: d5:ff:e3:06:1e:02:b2:11:41:1a:91:19:1d:4c:dd:04:3e:f0: 5e:2b:33:b8:b8:da:cb:e7:a0:63:1c:78:bd:60:4c:13:5b:df: c2:85:74:8c:51:10:f4:3e:f3:29:c1:f4:76:11:15:e4:c1:50: 1b:49:0c:79:a4:0d:cd:38:7e:ef:96:75:df:64:14:9e:a1:b7: 44:72:b1:74:68:2a:65:0e:62:69:13:51:3a:30:72:22:ec:cf: 36:c5:68:fc:64:5a:1e:03:38:fa:25:75:05:59:6a:e2:b5:00: 81:ca:6f:d3:50:d7:3d:0c:ca:ce:20:01:bc:97:a3:28:a4:2f: c3:cc:c6:48 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUd7Dz+Rj73TGgkkWiVRFrt4ZEGKUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjU2M0Q3MDhBMDk0QjI0RkMzNjFFREQxMUM5MUVFNzk3 OUFCMDQ3MTAeFw0yNTEyMTcwMTU2MTNaFw0yNTEyMjAxMjE1MTNaMDMxMTAvBgNV BAMTKDNCQjIxM0Y2NDQwQzcyMzVENDAwNkFEODM4RjlEMUZDRjhFNjNDNjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvvOwFB2isny3qvzgyfPIPSRSE hXfLVrGGFJKsLtI8zyNWZbvg9zSyToSsgd6nfw6p+WhwqzeEf7hPy3dRCNxAUSDD 1Nb8MnvXJFqQhWfgx4lTkG7dYlVX/YPvG4ioxRkoOWmfzwl5JIjDbZQVajfZnbWz zZUAke5FYS01pqBcpuGd59kHH2UvfhcdwQPG/ZSWfaKblh6MaPbO75AUpGXKrTPM 3Z5JasSdcOFDkogvUHi6HmHynrOSj9JQOr0Vypjlx1G4TREkyKySk0Xcl9Yej2sP u/y9mvAEMHsocYWrov06T9+Y8vn1/EJZVu0UDxWF5xN/mA/vSKcpkbyWWSC9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUO7IT9kQMcjXUAGrYOPnR/PjmPGAwHwYDVR0j BBgwFoAUtWPXCKCUsk/DYe3RHJHueXmrBHEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MDM2ZTA3Yy04MjgzLTQzZDMtOTE2NC0zZTBlNmNhY2Y0OTkvMC9CNTYzRDcwOEEw OTRCMjRGQzM2MUVERDExQzkxRUU3OTc5QUIwNDcxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjU2M0Q3MDhBMDk0QjI0RkMzNjFFREQxMUM5MUVFNzk3OUFC MDQ3MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTAzNmUwN2MtODI4My00M2QzLTkx NjQtM2UwZTZjYWNmNDk5LzAvQjU2M0Q3MDhBMDk0QjI0RkMzNjFFREQxMUM5MUVF Nzk3OUFCMDQ3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADLxgJWAaImnk1gzQahglLSgKuUJPC8chuu6 SVSWrjdJXkX1/Tbq6QeAkafOzfLDwf4BMChR5NclgqfCYDBMVk0uygN3Gxlvu8vl Brw1yEtf2FZ2Q6vwXWLQFnspX/+e5bFxHrpGih0FbeNi3J0JhfHZWr5aMI9qGpO5 0GEIqtX/4wYeArIRQRqRGR1M3QQ+8F4rM7i42svnoGMceL1gTBNb38KFdIxREPQ+ 8ynB9HYRFeTBUBtJDHmkDc04fu+Wdd9kFJ6ht0RysXRoKmUOYmkTUTowciLszzbF aPxkWh4DOPoldQVZauK1AIHKb9NQ1z0Mys4gAbyXoyikL8PMxkg= -----END CERTIFICATE-----Generated at Fri Dec 19 11:20:36 2025 by rpki-client